net.unicon.cas.mfa.web.flow

Class ValidateInitialMultiFactorAuthenticationRequestAction

java.lang.Object

org.springframework.webflow.action.AbstractAction

net.unicon.cas.mfa.web.flow.ValidateInitialMultiFactorAuthenticationRequestAction

All Implemented Interfaces:

org.springframework.beans.factory.InitializingBean, org.springframework.webflow.execution.Action

public final class ValidateInitialMultiFactorAuthenticationRequestAction
extends org.springframework.webflow.action.AbstractAction

Determines whether the login flow needs to branch *now* to honor the authentication method requirements of If the Service expresses a requirement for how the user must authenticate, and there's an existing single sign-on session, and there is not a record in the user's single sign-on session of having already fulfilled that requirement, then fires the `requireMfa` event indicating that exceptional handling is required. Otherwise (i.e., if no exceptional authentication method is required, or there is no existing single sign-on session, or the required exceptional authentication method is already fulfilled) then fire the `requireTgt` event indicating that the login flow should proceed as per normal. More explicitly:

1. If an authentication context does not exist (i.e., the user does not have an existing single sign-on session with a record of a prior authentication), continue the login flow as usual by firing the `requireTgt` event.
2. If an authentication context exists without any authentication method decoration, fire the `requireMfa` event indicating that an exceptional flow is required to fulfill the service's authentication requirements
3. If an authentication context exists with an authentication method decoration indicating an authentication method other than that required by the service, fire the `requireMfa` event indicating that an exceptional flow is required to fulfill the service's authentication requirements.
4. Otherwise, fire the `requireTgt` event to continue the login flow as per usual.

This means that in the case where there is not an existing single sign-on session, this Action will continue the login flow as per normal even though additional authentication will be required later in the flow to fulfill the authentication requirements of the CAS-using service.

Author:

Misagh Moayyed

Field Summary

Fields

Modifier and Type	Field and Description
static String	EVENT_ID_REQUIRE_TGT The Constant EVENT_ID_REQUIRE_TGT.

Constructor Summary

Constructors

Constructor and Description
ValidateInitialMultiFactorAuthenticationRequestAction(net.unicon.cas.addons.authentication.AuthenticationSupport authSupport, RequestedAuthenticationMethodRankingStrategy authenticationMethodRankingStrategy) Instantiates a new validate initial multifactor authentication request action.

Method Summary

Methods

Modifier and Type	Method and Description
protected org.springframework.webflow.execution.Event	doExecute(org.springframework.webflow.execution.RequestContext context)

Methods inherited from class org.springframework.webflow.action.AbstractAction

afterPropertiesSet, doPostExecute, doPreExecute, error, error, execute, getActionNameForLogging, getEventFactorySupport, initAction, no, result, result, result, result, success, success, yes

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

EVENT_ID_REQUIRE_TGT

public static final String EVENT_ID_REQUIRE_TGT

The Constant EVENT_ID_REQUIRE_TGT.

See Also:

Constant Field Values

Constructor Detail

ValidateInitialMultiFactorAuthenticationRequestAction

public ValidateInitialMultiFactorAuthenticationRequestAction(net.unicon.cas.addons.authentication.AuthenticationSupport authSupport,
                                                     RequestedAuthenticationMethodRankingStrategy authenticationMethodRankingStrategy)

Instantiates a new validate initial multifactor authentication request action.

Parameters:

authSupport - the authN support

authenticationMethodRankingStrategy - authenticationMethodRankingStrategy

Method Detail

doExecute

protected org.springframework.webflow.execution.Event doExecute(org.springframework.webflow.execution.RequestContext context)
                                                         throws Exception

Specified by:

doExecute in class org.springframework.webflow.action.AbstractAction

Throws:

Exception