/* * Licensed to Jasig under one or more contributor license * agreements. See the NOTICE file distributed with this work * for additional information regarding copyright ownership. * Jasig licenses this file to you under the Apache License, * Version 2.0 (the "License"); you may not use this file * except in compliance with the License. You may obtain a * copy of the License at the following location: * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, * software distributed under the License is distributed on an * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY * KIND, either express or implied. See the License for the * specific language governing permissions and limitations * under the License. */ package org.jasig.cas.services; import java.io.Serializable; import java.util.List; import java.util.Set; import org.jasig.cas.authentication.principal.Service; /** * Interface for a service that can be registered by the Services Management * interface. * * @author Scott Battaglia * @since 3.1 */ public interface RegisteredService extends Cloneable, Serializable { /** Initial ID value of newly created (but not persisted) registered service. **/ long INITIAL_IDENTIFIER_VALUE = Long.MAX_VALUE; /** * Is this application currently allowed to use CAS? * * @return true if it can use CAS, false otherwise. */ boolean isEnabled(); /** * Determines whether the service is allowed anonymous or privileged access * to user information. Anonymous access should not return any identifying * information such as user id. * * @return if we should use a pseudo random identifier instead of their real id */ boolean isAnonymousAccess(); /** * Sets whether we should bother to read the attribute list or not. * * @return true if we should read it, false otherwise. */ boolean isIgnoreAttributes(); /** * Returns the list of allowed attributes. * * @return the list of attributes */ List<String> getAllowedAttributes(); /** * Is this application allowed to take part in the proxying capabilities of * CAS? * * @return true if it can, false otherwise. */ boolean isAllowedToProxy(); /** * The unique identifier for this service. * * @return the unique identifier for this service. */ String getServiceId(); /** * The numeric identifier for this service. Implementations * are expected to initialize the id with the value of {@link #INITIAL_IDENTIFIER_VALUE}. * @return the numeric identifier for this service. */ long getId(); /** * Returns the name of the service. * * @return the name of the service. */ String getName(); /** * Returns a short theme name. Services do not need to have unique theme * names. * * @return the theme name associated with this service. */ String getTheme(); /** * Does this application participate in the SSO session? * * @return true if it does, false otherwise. */ boolean isSsoEnabled(); /** * Returns the description of the service. * * @return the description of the service. */ String getDescription(); /** * Gets the relative evaluation order of this service when determining * matches. * @return Evaluation order relative to other registered services. * Services with lower values will be evaluated for a match before others. */ int getEvaluationOrder(); /** * Sets the relative evaluation order of this service when determining * matches. * @param evaluationOrder the service evaluation order */ void setEvaluationOrder(final int evaluationOrder); /** * Get the name of the attribute this service prefers to consume as username. * * @return Either of the following values: * <ul> * <li><code>String</code> representing the name of the attribute to consume as username</li> * <li><code>null</code> indicating the default username</li> * </ul> */ String getUsernameAttribute(); /** * Gets the set of handler names that must successfully authenticate credentials in order to access the service. * An empty set indicates that there are no requirements on particular authentication handlers; any will suffice. * * @return Non-null set of required handler names. */ Set<String> getRequiredHandlers(); /** * Returns whether the service matches the registered service. * <p>Note, as of 3.1.2, matches are case insensitive. * * @param service the service to match. * @return true if they match, false otherwise. */ boolean matches(final Service service); RegisteredService clone() throws CloneNotSupportedException; /** * An instance of the attribute filter that imposes validation rules over * the attribute release policy. * @return An instance of an attribute filter for this service */ RegisteredServiceAttributeFilter getAttributeFilter(); /** * Returns the logout type of the service. * * @return the logout type of the service. */ LogoutType getLogoutType(); }