Module io.helidon.security.providers.httpauth
Package io.helidon.security.providers.httpauth

Class HttpDigestAuthProvider

java.lang.Object
io.helidon.security.providers.httpauth.HttpDigestAuthProvider
All Implemented Interfaces:
AuthenticationProvider, SecurityProvider
@Deprecated(since="4.5.0", forRemoval=true) public final class HttpDigestAuthProvider extends Object implements AuthenticationProvider
Deprecated, for removal: This API element is subject to removal in a future version.
HTTP Digest authentication relies on obsolete MD5-based authentication and will be removed in a future version without replacement
Http authentication security provider. Provides support for HTTP Digest username and password authentication, with support for role mapping.

  • Method Details

    • builder

      public static HttpDigestAuthProvider.Builder builder()
      Deprecated, for removal: This API element is subject to removal in a future version.
      Get a builder instance to construct a new security provider. Alternative approach is create(Config) (or create(Config)).
      Returns:
      builder to fluently construct Basic security provider

    • create

      @Deprecated(since="4.4.0", forRemoval=true) public static HttpDigestAuthProvider create(Config config)
      Deprecated, for removal: This API element is subject to removal in a future version.
      use create(io.helidon.config.Config) instead
      Load this provider from configuration.
      Parameters:
      config - configuration
      Returns:
      instance of provider configured from provided config

    • create

      public static HttpDigestAuthProvider create(Config config)
      Deprecated, for removal: This API element is subject to removal in a future version.
      Load this provider from configuration.
      Parameters:
      config - Configuration located at this provider's configuration (e.g. child is either http-basic-auth or http-digest-auth)
      Returns:
      instance of provider configured from provided config

    • authenticate

      public AuthenticationResponse authenticate(ProviderRequest providerRequest)
      Deprecated, for removal: This API element is subject to removal in a future version.
      Description copied from interface: AuthenticationProvider
      Authenticate a request. This may be just resolving headers (tokens) or full authentication (basic auth). Do not throw exception for normal processing (e.g. invalid credentials; you may throw an exception in case of misconfiguration). This method will be invoked for inbound requests ONLY.

      This method must provide either a Principal or a whole Subject either for a user or for service (or both).

      Specified by:
      authenticate in interface AuthenticationProvider
      Parameters:
      providerRequest - context of this security enforcement/validation
      Returns:
      response that either authenticates the request, fails authentication or abstains from authentication
      See Also: