X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=security%2Fruntime%2Forg.argeo.security.core%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2FArgeoSecurityDao.java;h=de2664851a648143fd630569f9208170f496d7b3;hb=ab4dcfd6237c3f2064e63b3e6bb1a740f0a56e2c;hp=c49b4ccbc437919a633eaa49dd47eec5e28c49a4;hpb=00a5c6cc0b5ed08afba5b34567acd5a4fec4826f;p=lgpl%2Fargeo-commons.git

diff --git a/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/ArgeoSecurityDao.java b/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/ArgeoSecurityDao.java
index c49b4ccbc..de2664851 100644
--- a/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/ArgeoSecurityDao.java
+++ b/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/ArgeoSecurityDao.java
@@ -1,20 +1,50 @@
+/*
+ * Copyright (C) 2010 Mathieu Baudier <mbaudier@argeo.org>
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *         http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
 package org.argeo.security;
 
 import java.util.List;
 
+/**
+ * Access to the users and roles referential (dependent from the underlying
+ * storage, e.g. LDAP).
+ */
 public interface ArgeoSecurityDao {
-	public ArgeoUser getCurrentUser();
+	// public ArgeoUser getCurrentUser();
 
+	/** List all users */
 	public List<ArgeoUser> listUsers();
 
+	/** List roles that can be modified */
 	public List<String> listEditableRoles();
 
+	/**
+	 * Creates a new user in the underlying storage. <b>DO NOT CALL DIRECTLY</b>
+	 * use {@link ArgeoSecurityService#newUser(ArgeoUser)} instead.
+	 */
 	public void create(ArgeoUser user);
 
 	public void update(ArgeoUser user);
 
 	public void delete(String username);
 
+	/**
+	 * Creates a new role in the underlying storage. <b>DO NOT CALL DIRECTLY</b>
+	 * use {@link ArgeoSecurityService#newRole(String)} instead.
+	 */
 	public void createRole(String role, String superuserName);
 
 	public void deleteRole(String role);
@@ -24,4 +54,12 @@ public interface ArgeoSecurityDao {
 	public ArgeoUser getUser(String username);
 
 	public ArgeoUser getUserWithPassword(String username);
+
+	public String getDefaultRole();
+
+	/** Validates a raw password against an encoded one. */
+	public Boolean isPasswordValid(String encoded, String raw);
+
+	/** Encodes a raw password. */
+	public String encodePassword(String raw);
 }