AuthAutoStepup
Introduction and overview
This AuthState is used to finish a stepup request by adding the required security roles. It is used as a replacement for AuthDone if an AuthState, processing the stepup event, does not add one of the required roles. This is usually the case if the security role required is not really an authorization item but an event trigger to invoke some additional processing on nevisAuth.
Description
The following table describes the characteristics of the AuthState.
Topic | Description |
---|---|
Class | ch.nevis.esauth.auth.states.standard.AuthAutoStepup |
Logging | StdStates |
Auditing | none |
Properties | none |
Methods | stepup |
Input | No input arguments; nevisProxy sends the required roles as configured in the SecurityRoleFilter. |
Transitions | none (should only be used as the final AuthState) |
Output | On AUTH_DONE, all the current output arguments from previous states are saved to the authentication session. |
Errors | none |
Notes | none |
Example
<AuthState name="StepupDone"
class="ch.nevis.esauth.auth.states.standard.AuthAutoStepup">
<Response value="AUTH_DONE">
<Gui name="StepupDone" />
</Response>
</AuthState>