com.sap.security.api
Interface IAuthentication

All Superinterfaces:

IConfigurable

All Known Subinterfaces:

ILogonAuthentication

public interface IAuthentication
extends IConfigurable

This interface retrieves the user information of currently logged-in user. Please see also ILogonAuthentication

Method Summary

IUser	forceLoggedInUser(HttpServletRequest req, HttpServletResponse resp) Checks whether the user is currently logged in and returns an implementation of IUser
void	forceLogoffUser(HttpServletRequest req, HttpServletResponse resp, String url) Logoff user by invalidate the user session and deleting the authentication cookies.
IUser	getLoggedInUser() Checks whether the user is currently logged in and returns an implementation of IUser.
IUser	getLoggedInUser(HttpServletRequest req, HttpServletResponse resp) Deprecated. Use getLoggedInUser() instead.
void	logout(HttpServletRequest req, HttpServletResponse resp) Logouts current user.

Methods inherited from interface com.sap.security.api.IConfigurable

initialize

Method Detail

forceLoggedInUser

IUser forceLoggedInUser(HttpServletRequest req,
                        HttpServletResponse resp)

Checks whether the user is currently logged in and returns an implementation of IUser

If the user is not yet logged in, a respective logon page is written as ServletResponse. In that case (i.e. null is returned) the calling servlet can simply end their doGet or doPost method with return.

Example:

 IUser uid = forceLoggedInUser(req,res);
 if (uid == null) return;
 

Parameters:

req - HttpServletRequest

resp - HttpServletResponse

Returns:

The currently logged in IUser object or null otherwise.

getLoggedInUser

IUser getLoggedInUser()

Checks whether the user is currently logged in and returns an implementation of IUser. If no user is currently logged in, the default guest user is returned (defined in property ume.login.guest_user.uniqueids).

Returns:

The currently logged in IUser object or the default guest user otherwise.

getLoggedInUser

IUser getLoggedInUser(HttpServletRequest req,
                      HttpServletResponse resp)

Deprecated. Use getLoggedInUser() instead.

Checks whether the user is currently logged in and returns an implementation of IUser If no user is currently logged in null is returned.

Parameters:

req - HttpServletRequest

resp - HttpServletResponse

Returns:

The currently logged in IUser object or null otherwise.

logout

void logout(HttpServletRequest req,
            HttpServletResponse resp)

Logouts current user.

Some cookies will be deleted in the HttpServletResponse.

Parameters:

req - HttpServletRequest

resp - HttpServletResponse

forceLogoffUser

void forceLogoffUser(HttpServletRequest req,
                     HttpServletResponse resp,
                     String url)

Logoff user by invalidate the user session and deleting the authentication cookies.

The user will also be sent to a logoff page which acknowledges that a logoff has taken place with a link for the user to logon again.

Example:

 forceLogoffUser(req, res, returnURL);
 

Parameters:

req - HttpServletRequest

resp - HttpServletResponse

url - url to use to logon again.