net.unicon.cas.mfa.authentication

Interface RequestedAuthenticationMethodRankingStrategy

All Known Implementing Classes:

OrderedMultiFactorMethodRankingStrategy

public interface RequestedAuthenticationMethodRankingStrategy

Strategy interface for ranking requested authentication methods.

Author:

Dmitriy Kopylenko, Unicon inc.

Method Summary

Methods

Modifier and Type	Method and Description
boolean	anyPreviouslyAchievedAuthenticationMethodsStrongerThanRequestedOne(Set<String> previouslyAchievedAuthenticationMethods, String requestedAuthenticationMethod) Determine if provided list of previously achieved authentication methods contains any one method stronger than currently requested one.
MultiFactorAuthenticationSupportingWebApplicationService	computeHighestRankingAuthenticationMethod(MultiFactorAuthenticationTransactionContext mfaTransaction) Calculates the highest ranking possible authentication method from the list of the requested ones.

Method Detail

computeHighestRankingAuthenticationMethod

MultiFactorAuthenticationSupportingWebApplicationService computeHighestRankingAuthenticationMethod(MultiFactorAuthenticationTransactionContext mfaTransaction)

Calculates the highest ranking possible authentication method from the list of the requested ones.

Parameters:

mfaTransaction - mfa transaction encapsulating possible requested authentication methods

Returns:

mfa service representing the highest possible ranking authentication method or null if implementations are unable to perform such calculation

anyPreviouslyAchievedAuthenticationMethodsStrongerThanRequestedOne

boolean anyPreviouslyAchievedAuthenticationMethodsStrongerThanRequestedOne(Set<String> previouslyAchievedAuthenticationMethods,
                                                                         String requestedAuthenticationMethod)

Determine if provided list of previously achieved authentication methods contains any one method stronger than currently requested one. The algorithm and configuration of the ranking strength of the authentication methods should be provided by implementations.

Parameters:

previouslyAchievedAuthenticationMethods - set of previously achieved authentication methods

requestedAuthenticationMethod - requestedAuthenticationMethod

Returns:

true if list contains any methods stronger than requested one, and false otherwise