com.ibm.websphere.objectgrid.security.plugins
Interface SubjectValidation

All Known Implementing Classes:

WSSubjectValidationImpl

public interface SubjectValidation

This plugin can be used to validate that a Subject passed to the ObjectGrid is a valid Subject which has not been tampered with.

An implementation of this plugin will need support from the Subject object creator, since only the creator knows whether the Subject object has been tampered with or not. However, a subject creator may not know whether the Subject has been tamperted with or not. In this case, this plug-in should not be used.

This plugin can only be used in a secure domain, such as in a application server. Do not put this plugin on the client side, it will be ignored.

Since:

WAS XD 6.0

See Also:

ObjectGrid.getSession(Subject), ObjectGrid.setSubjectValidation(SubjectValidation)

Method Summary

Subject

validateSubject(Subject subject) Validates the Subject has not been tampered with.

Method Detail

validateSubject

Subject validateSubject(Subject subject)
                        throws InvalidSubjectException

Validates the Subject has not been tampered with.

Parameters:

subject - a Subject to be validated

Returns:

the validated Subject object

Throws:

InvalidSubjectException - if the subject is invalid