- All Superinterfaces:
Principal
- All Known Subinterfaces:
IuApiCredentials
,IuBasicAuthCredentials
- All Known Implementing Classes:
PkiPrincipal
Designates an authenticated principal identity.
-
Method Summary
Modifier and TypeMethodDescriptionGets the point in time the principal's credentials were verified by the authentication provider.Gets the point in time after which the principal's authenticated session is expired.Gets the point in time proof of principal identity was issued by an authentication provider.Gets a subject including this principal, related principals, and implied credentials.default boolean
static boolean
verify
(IuPrincipalIdentity id, String realm) Verifies that a principal identity was issued by a registered identity provider for an authentication realm.
-
Method Details
-
verify
Verifies that a principal identity was issued by a registered identity provider for an authentication realm.- Parameters:
id
- principal identityrealm
- authentication realm- Returns:
- true if verification was successful and the authorization module is considered authoritative for the authentication realm; false if verification was successful but based solely on well-known information about the authentication provider.
- Throws:
IuAuthenticationException
- If credentials could not be verified
-
getIssuedAt
Instant getIssuedAt()Gets the point in time proof of principal identity was issued by an authentication provider.- Returns:
Instant
-
getAuthTime
Instant getAuthTime()Gets the point in time the principal's credentials were verified by the authentication provider.- Returns:
Instant
-
getExpires
Instant getExpires()Gets the point in time after which the principal's authenticated session is expired.- Returns:
Instant
-
getSubject
Subject getSubject()Gets a subject including this principal, related principals, and implied credentials.- Returns:
Subject
-
implies
-