Package org.apache.syncope.core.logic

Class MfaLogic

java.lang.Object

org.apache.syncope.core.logic.AbstractLogic<EntityTO>

org.apache.syncope.core.logic.MfaLogic

public class MfaLogic
extends AbstractLogic<EntityTO>

Field Summary

Fields

Modifier and Type	Field	Description
protected final DomainOps	domainOps
protected final EncryptorManager	encryptorManager
protected final SecurityProperties	securityProperties
protected final dev.samstevens.totp.code.CodeVerifier	totpCodeVerifier
protected final dev.samstevens.totp.code.HashingAlgorithm	totpHashingAlgorithm
protected final dev.samstevens.totp.qr.QrGenerator	totpQrGenerator
protected final dev.samstevens.totp.recovery.RecoveryCodeGenerator	totpRecoveryCodeGenerator
protected final dev.samstevens.totp.secret.SecretGenerator	totpSecretGenerator
protected final UserDAO	userDAO
protected final UserDataBinder	userDataBinder

Fields inherited from class org.apache.syncope.core.logic.AbstractLogic

LOG

Constructor Summary

Constructors

Constructor

Description

MfaLogic(UserDataBinder userDataBinder, UserDAO userDAO, EncryptorManager encryptorManager, DomainOps domainOps, dev.samstevens.totp.secret.SecretGenerator totpSecretGenerator, dev.samstevens.totp.qr.QrGenerator totpQrGenerator, dev.samstevens.totp.code.HashingAlgorithm totpHashingAlgorithm, dev.samstevens.totp.recovery.RecoveryCodeGenerator totpRecoveryCodeGenerator, dev.samstevens.totp.code.CodeVerifier totpCodeVerifier, SecurityProperties securityProperties)

Method Summary

Modifier and Type	Method	Description
boolean	check(MfaCheck mfaCheck)
void	dismiss()
void	dismiss(String username)
protected void	doDismiss(String username)
void	enroll(Mfa mfa)
boolean	enrolled(String username)
Mfa	generate(String username)
protected EntityTO	resolveReference(Method method, Object... args)

Methods inherited from class org.apache.syncope.core.logic.AbstractLogic

resolveBeanReference

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

userDataBinder

protected final UserDataBinder userDataBinder

userDAO

protected final UserDAO userDAO

encryptorManager

protected final EncryptorManager encryptorManager

domainOps

protected final DomainOps domainOps

totpSecretGenerator

protected final dev.samstevens.totp.secret.SecretGenerator totpSecretGenerator

totpQrGenerator

protected final dev.samstevens.totp.qr.QrGenerator totpQrGenerator

totpHashingAlgorithm

protected final dev.samstevens.totp.code.HashingAlgorithm totpHashingAlgorithm

totpRecoveryCodeGenerator

protected final dev.samstevens.totp.recovery.RecoveryCodeGenerator totpRecoveryCodeGenerator

totpCodeVerifier

protected final dev.samstevens.totp.code.CodeVerifier totpCodeVerifier

securityProperties

protected final SecurityProperties securityProperties

Constructor Details

MfaLogic

public MfaLogic(UserDataBinder userDataBinder,
 UserDAO userDAO,
 EncryptorManager encryptorManager,
 DomainOps domainOps,
 dev.samstevens.totp.secret.SecretGenerator totpSecretGenerator,
 dev.samstevens.totp.qr.QrGenerator totpQrGenerator,
 dev.samstevens.totp.code.HashingAlgorithm totpHashingAlgorithm,
 dev.samstevens.totp.recovery.RecoveryCodeGenerator totpRecoveryCodeGenerator,
 dev.samstevens.totp.code.CodeVerifier totpCodeVerifier,
 SecurityProperties securityProperties)

Method Details

generate

@PreAuthorize("hasRole(\'ANONYMOUS\')")
public Mfa generate(String username)

enroll

@PreAuthorize("hasRole(\'MFA_ENROLL\')or @environment.getProperty(\'security.adminUser\') == authentication.name")
public void enroll(Mfa mfa)

doDismiss

protected void doDismiss(String username)

dismiss

@PreAuthorize("isAuthenticated() and not(hasRole(\'ANONYMOUS\')) and not(hasRole(\'MFA_ENROLL\')) and not(hasRole(\'MUST_CHANGE_PASSWORD\'))")
public void dismiss()

dismiss

@PreAuthorize("hasRole(\'USER_UPDATE\')")
public void dismiss(String username)

enrolled

@PreAuthorize("hasRole(\'ANONYMOUS\')")
public boolean enrolled(String username)

check

@PreAuthorize("hasRole(\'ANONYMOUS\')")
public boolean check(MfaCheck mfaCheck)

resolveReference

protected EntityTO resolveReference(Method method,
 Object... args)
                             throws UnresolvedReferenceException

Specified by:

resolveReference in class AbstractLogic<EntityTO>

Throws:

UnresolvedReferenceException