io.inversion.jdbc

Class JdbcDbUserDao

java.lang.Object

io.inversion.action.security.AuthAction.JwtUserDao

io.inversion.jdbc.JdbcDbUserDao

All Implemented Interfaces:

io.inversion.action.security.AuthAction.UserDao

public class JdbcDbUserDao
extends io.inversion.action.security.AuthAction.JwtUserDao

Looks up a User from the configured JdbcDb supporting user/group/role permissioning.

Usage requires a password encryption "salt" value be configured either explicitly or via a $name.salt environment var or system prop.

In this model, Users, Groups, and Roles can all be assigned Permissions. Users can Groups can both be assigned Roles and Users can be assigned to Groups. This means users can be assigned permissions through any one of the following relationship paths.

1. user-to-permission
2. user-to-group-to-permission
3. user-to-role-to-permission
4. user-to-group-to-role-to-permission

See users-h2.ddl for full underlying schema

Nested Class Summary

Nested classes/interfaces inherited from class io.inversion.action.security.AuthAction.JwtUserDao

io.inversion.action.security.AuthAction.JwtUserDao.RevokedTokenCache

Field Summary

Fields

Modifier and Type	Field and Description
protected JdbcDb	db
protected java.lang.String	name Optional name param that is used for $name.salt parameter configuration.
protected java.lang.String	salt

Constructor Summary

Constructors

Constructor and Description
JdbcDbUserDao()
JdbcDbUserDao(JdbcDb db)

Method Summary

Modifier and Type	Method and Description
protected boolean	checkPassword(java.lang.String actual, java.lang.String supplied)
protected io.inversion.utils.Rows	findGRP(java.sql.Connection conn, int userId, java.lang.String api, java.lang.String tenant)
JdbcDb	getDb()
java.lang.String	getName()
java.lang.String	getSalt()
io.inversion.User	getUser(io.inversion.action.security.AuthAction action, java.lang.String username, java.lang.String suppliedPassword, java.lang.String apiName, java.lang.String tenant)
void	setDb(JdbcDb db)
void	setName(java.lang.String name)
static java.lang.String	strongHash(java.lang.Object salt, java.lang.String password)
static java.lang.String	weakHash(java.lang.String password)
JdbcDbUserDao	withDb(JdbcDb db)
JdbcDbUserDao	withSalt(java.lang.String salt)

Methods inherited from class io.inversion.action.security.AuthAction.JwtUserDao

addPermsToUser, createUserFromValidJwt, getJwtSecrets, getRevokedTokenCache, getUser, signJwt, withRevokedTokenCache

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.inversion.action.security.AuthAction.UserDao

getGuest

Field Detail

name

protected java.lang.String name

Optional name param that is used for $name.salt parameter configuration.

db

protected JdbcDb db

salt

protected java.lang.String salt

Constructor Detail

JdbcDbUserDao

public JdbcDbUserDao()

JdbcDbUserDao

public JdbcDbUserDao(JdbcDb db)

Method Detail

strongHash

public static java.lang.String strongHash(java.lang.Object salt,
                                          java.lang.String password)
                                   throws io.inversion.ApiException

Throws:

io.inversion.ApiException

weakHash

public static java.lang.String weakHash(java.lang.String password)

checkPassword

protected boolean checkPassword(java.lang.String actual,
                                java.lang.String supplied)

getUser

public io.inversion.User getUser(io.inversion.action.security.AuthAction action,
                                 java.lang.String username,
                                 java.lang.String suppliedPassword,
                                 java.lang.String apiName,
                                 java.lang.String tenant)
                          throws io.inversion.ApiException

Specified by:

getUser in interface io.inversion.action.security.AuthAction.UserDao

Overrides:

getUser in class io.inversion.action.security.AuthAction.JwtUserDao

Throws:

io.inversion.ApiException

findGRP

protected io.inversion.utils.Rows findGRP(java.sql.Connection conn,
                                          int userId,
                                          java.lang.String api,
                                          java.lang.String tenant)
                                   throws java.lang.Exception

Throws:

java.lang.Exception

withDb

public JdbcDbUserDao withDb(JdbcDb db)

getDb

public JdbcDb getDb()

setDb

public void setDb(JdbcDb db)

withSalt

public JdbcDbUserDao withSalt(java.lang.String salt)

getSalt

public java.lang.String getSalt()

getName

public java.lang.String getName()

setName

public void setName(java.lang.String name)