]> git.argeo.org Git - lgpl/argeo-commons.git/blobdiff - org.argeo.cms/src/org/argeo/cms/auth/AuthConstants.java
Make CMS production ready
[lgpl/argeo-commons.git] / org.argeo.cms / src / org / argeo / cms / auth / AuthConstants.java
index 26b96d43c842a66bf63d94ffa3d433a6d50a3e2b..baf093b8a32415ed4e5dca5b11b5988eec0fcd98 100644 (file)
@@ -1,22 +1,30 @@
 package org.argeo.cms.auth;
 
+import org.osgi.service.http.HttpContext;
+
 /** Public properties of the CMS Kernel */
 public interface AuthConstants {
        // LOGIN CONTEXTS
        final static String LOGIN_CONTEXT_USER = "USER";
        final static String LOGIN_CONTEXT_ANONYMOUS = "ANONYMOUS";
-       final static String LOGIN_CONTEXT_SYSTEM = "SYSTEM";
+       final static String LOGIN_CONTEXT_DATA_ADMIN = "DATA_ADMIN";
        final static String LOGIN_CONTEXT_SINGLE_USER = "SINGLE_USER";
 
        // RESERVED ROLES
        public final static String ROLE_KERNEL = "OU=node";
        public final static String ROLES_BASEDN = "ou=roles,ou=node";
        public final static String ROLE_ADMIN = "cn=admin," + ROLES_BASEDN;
-       public final static String ROLE_GROUP_ADMIN = "cn=groupAdmin,"
-                       + ROLES_BASEDN;
+       public final static String ROLE_GROUP_ADMIN = "cn=groupAdmin," + ROLES_BASEDN;
        public final static String ROLE_USER_ADMIN = "cn=userAdmin," + ROLES_BASEDN;
        // Special system groups that cannot be edited:
        // user U anonymous = everyone
        public final static String ROLE_USER = "cn=user," + ROLES_BASEDN;
        public final static String ROLE_ANONYMOUS = "cn=anonymous," + ROLES_BASEDN;
+
+       // SHARED STATE KEYS
+       // compatible with com.sun.security.auth.module.*LoginModule
+       public static final String SHARED_STATE_USERNAME = "javax.security.auth.login.name";
+       public static final String SHARED_STATE_PASSWORD = "javax.security.auth.login.password";
+       public static final String SHARED_STATE_AUTHORIZATION = HttpContext.AUTHORIZATION;
+
 }