de.unkrig.commons.lang.crypto.PasswordAuthenticationStore Maven / Gradle / Ivy

Go to download

/*
 * de.unkrig.commons - A general-purpose Java class library
 *
 * Copyright (c) 2017, Arno Unkrig
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without modification, are permitted provided that the
 * following conditions are met:
 *
 *    1. Redistributions of source code must retain the above copyright notice, this list of conditions and the
 *       following disclaimer.
 *    2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the
 *       following disclaimer in the documentation and/or other materials provided with the distribution.
 *    3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote
 *       products derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
 * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

package de.unkrig.commons.lang.crypto;

import java.io.Closeable;
import java.io.IOException;
import java.net.Authenticator;
import java.net.PasswordAuthentication;

import javax.security.auth.Destroyable;

import de.unkrig.commons.lang.security.DestroyableString;
import de.unkrig.commons.nullanalysis.Nullable;

/**
 * Stores username/password pairs, persistently or not. Suitable for being used with {@link Authenticator} and {@link
 * PasswordAuthentication}.
 */
public
interface PasswordAuthenticationStore extends Destroyable {

    /**
     * @return The least recently {@link #put(String, String, CharSequence) put} userName for the
     *         key, or {@code null} if a user name for the given key is not in this store
     */
    @Nullable String
    getUserName(String key);

    /**
     * @param userName Must equal the userName provided with {@link #put(String, String, CharSequence)}
     * @return         The least recently {@link #put(String, String, CharSequence) put} password for the
     *                 key, or {@code null} if a password for the given key is not in this store;
     *                 the caller is responsible for {@link Closeable#close() closing} the returned secure string
     */
    @Nullable DestroyableString
    getPassword(String key, String userName);

    /**
     * Updates the userName and removes the password for the given key. Depending on whether this
     * store is persistent or not, the new values will not or will be forgotten when the JVM exits.
     */
    void
    put(String key, String userName) throws IOException;

    /**
     * Updates the userName and the password for the given key. Depending on whether
     * this store is persistent or not, the new values will not or will be forgotten when the JVM exits.
     */
    void
    put(String key, String userName, CharSequence password) throws IOException;

    /**
     * Removes both the user name and the password for the given key. Depending on whether this store is
     * persistent or not, the removal will not or will be forgotten when the JVM exits.
     */
    void
    remove(String key) throws IOException;

    /**
     * A password store that discards all data stored in it.
     */
    PasswordAuthenticationStore
    NOP = new PasswordAuthenticationStore() {
        @Override @Nullable public String            getUserName(String key)                                 { return null; }
        @Override @Nullable public DestroyableString getPassword(String key, String userName)                { return null; }
        @Override public void                        put(String key, String userName)                        {}
        @Override public void                        put(String key, String userName, CharSequence password) {}
        @Override public void                        remove(String key)                                      {}

        @Override public void                        destroy()                                               {}
        @Override public boolean                     isDestroyed()                                           { return false; }
    };

}