dekoh.portal.password
Class SecurePasswordStore

java.lang.Object
  PasswordStore
      dekoh.portal.password.SecurePasswordStore

public class SecurePasswordStore
extends PasswordStore

SecurePasswordStore is a PasswordStore which requires a Dekoh network identity and a master password to open. To obtain an instance of the SecurePasswordStore the getter method should be called. Passwords are stored per applicaiton, meaning passwords stored in the password store of one application cannot be retrieved by another application's password store.

Another option for Applications that manage their user base (want to plugin their own ways of logging in & detecting the logged in user) would be to instatiate SecurePasswordStore using the exposed constructor. The lifecyle of so instance is expected to be managed by the Application.

Since:

Oct 12, 2007

Nested Class Summary

static class

SecurePasswordStore.MasterPasswordPolicy

Constructor Summary

SecurePasswordStore(File passwordStoreFile, String userName, String masterPassword)

Method Summary

protected PasswordEntry	createPasswordEntry(String password)
static void	setMasterPasswordPolicy(HttpServletRequest request, SecurePasswordStore.MasterPasswordPolicy policy) Changes currently logged in Dekoh user's preference on how the Master password to his password store should be obtained.
protected void	validateAccess(PasswordEntry passwordEntry)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurePasswordStore

public SecurePasswordStore(File passwordStoreFile,
                           String userName,
                           String masterPassword)

Method Detail

createPasswordEntry

protected PasswordEntry createPasswordEntry(String password)

validateAccess

protected void validateAccess(PasswordEntry passwordEntry)
                       throws PasswordStoreException

Throws:

PasswordStoreException

setMasterPasswordPolicy

public static void setMasterPasswordPolicy(HttpServletRequest request,
                                           SecurePasswordStore.MasterPasswordPolicy policy)
                                    throws IOException

Changes currently logged in Dekoh user's preference on how the Master password to his password store should be obtained.

There would be no reason for Dekoh applications to call this method. Only the Dekoh Portal application can change this setting on behalf of the user.

Parameters:

request -

policy -

Throws:

IOException

AccessDeniedException - if Dekoh application calls this method.