提交 5765e4e6 authored 作者: mysinmyc's avatar mysinmyc

docu changes (marked experimental)

上级 3ff0e3ce
...@@ -84,7 +84,7 @@ Features ...@@ -84,7 +84,7 @@ Features
<a href="#cache_settings"> <a href="#cache_settings">
Cache Settings</a><br /> Cache Settings</a><br />
<a href="#external_authentication"> <a href="#external_authentication">
External Authentication</a><br /> External Authentication (Experimental)</a><br />
<h2 id="feature_list">Feature List</h2> <h2 id="feature_list">Feature List</h2>
<h3>Main Features</h3> <h3>Main Features</h3>
...@@ -1828,11 +1828,10 @@ To get information about page reads and writes, and the current caching algorith ...@@ -1828,11 +1828,10 @@ To get information about page reads and writes, and the current caching algorith
call <code>SELECT * FROM INFORMATION_SCHEMA.SETTINGS</code>. The number of pages read / written call <code>SELECT * FROM INFORMATION_SCHEMA.SETTINGS</code>. The number of pages read / written
is listed. is listed.
</p> </p>
<h2 id="external_authentication">External authentication</h2> <h2 id="external_authentication">External authentication (Experimental)</h2>
<p> <p>
External authentication allows to optionally validate user credentials externally (JAAS,LDAP,custom classes). External authentication allows to optionally validate user credentials externally (JAAS,LDAP,custom classes).
Is also possible to temporary assign roles to to externally authenticated users Is also possible to temporary assign roles to to externally authenticated users. <b>This feature is experimental and subject to change</b>
</p> </p>
<p>Master user cannot be externally authenticated</p> <p>Master user cannot be externally authenticated</p>
<p> <p>
...@@ -1896,11 +1895,11 @@ JVM argument <code>-Dh2auth.configurationFile={urlOfH2Auth.xml}</code>. Here an ...@@ -1896,11 +1895,11 @@ JVM argument <code>-Dh2auth.configurationFile={urlOfH2Auth.xml}</code>. Here an
</pre> </pre>
<p> <p>
Custom credentials validators must implement the interface Custom credentials validators must implement the interface
<code>org.h2.security.auth.CredentialsValidator</code> <code>org.h2.api.CredentialsValidator</code>
</p> </p>
<p> <p>
Custom criteria for role assignments must implement the interface Custom criteria for role assignments must implement the interface
<code>org.h2.security.auth.UserToRoleMapper</code> <code>org.h2.api.UserToRoleMapper</code>
</p> </p>
<!-- [close] { --></div></td></tr></table><!-- } --><!-- analytics --></body></html> <!-- [close] { --></div></td></tr></table><!-- } --><!-- analytics --></body></html>
......
...@@ -11,6 +11,9 @@ import org.h2.security.auth.Configurable; ...@@ -11,6 +11,9 @@ import org.h2.security.auth.Configurable;
/** /**
* A class that implement this interface can be used to validate * A class that implement this interface can be used to validate
* credentials provided by client. * credentials provided by client.
* <p>
* <b>This feature is experimental and subject to change</b>
* </p>
*/ */
public interface CredentialsValidator extends Configurable { public interface CredentialsValidator extends Configurable {
......
...@@ -15,6 +15,9 @@ import org.h2.security.auth.Configurable; ...@@ -15,6 +15,9 @@ import org.h2.security.auth.Configurable;
/** /**
* A class that implement this interface can be used during * A class that implement this interface can be used during
* authentication to map external users to database roles. * authentication to map external users to database roles.
* <p>
* <b>This feature is experimental and subject to change</b>
* </p>
*/ */
public interface UserToRolesMapper extends Configurable { public interface UserToRolesMapper extends Configurable {
......
...@@ -34,14 +34,14 @@ import org.h2.util.StringUtils; ...@@ -34,14 +34,14 @@ import org.h2.util.StringUtils;
* <p> * <p>
* When client connectionInfo contains property AUTHREALM={realName} credentials * When client connectionInfo contains property AUTHREALM={realName} credentials
* (typically user id and password) are validated by * (typically user id and password) are validated by
* by {@link org.h2.security.auth.CredentialsValidator} configured for that realm. * by {@link org.h2.api.CredentialsValidator} configured for that realm.
* </p> * </p>
* <p> * <p>
* When client connectionInfo doesn't contains AUTHREALM property credentials * When client connectionInfo doesn't contains AUTHREALM property credentials
* are validated internally on the database * are validated internally on the database
* </p> * </p>
* <p> * <p>
* Rights assignment can be managed through {@link org.h2.security.auth.UserToRolesMapper} * Rights assignment can be managed through {@link org.h2.api.UserToRolesMapper}
* </p> * </p>
* <p> * <p>
* Default configuration has a realm H2 that validate credentials through JAAS api (appName=h2). * Default configuration has a realm H2 that validate credentials through JAAS api (appName=h2).
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论