Module java.base
Package javax.security.auth

Class SubjectDomainCombiner

  • All Implemented Interfaces:
    DomainCombiner

    public class SubjectDomainCombiner
extends Object
implements DomainCombiner
    A SubjectDomainCombiner updates ProtectionDomains with Principals from the Subject associated with this SubjectDomainCombiner.
    Since:
    1.4

    • Constructor Detail

      • SubjectDomainCombiner

        public SubjectDomainCombiner​(Subject subject)
        Associate the provided Subject with this SubjectDomainCombiner.
        Parameters:
        subject - the Subject to be associated with with this SubjectDomainCombiner.

    • Method Detail

      • getSubject

        public Subject getSubject​()
        Get the Subject associated with this SubjectDomainCombiner.
        Returns:
        the Subject associated with this SubjectDomainCombiner, or null if no Subject is associated with this SubjectDomainCombiner.
        Throws:
        SecurityException - if the caller does not have permission to get the Subject associated with this SubjectDomainCombiner.

      • combine

        public ProtectionDomain[] combine​(ProtectionDomain[] currentDomains,
                                  ProtectionDomain[] assignedDomains)
        Update the relevant ProtectionDomains with the Principals from the Subject associated with this SubjectDomainCombiner.

        A new ProtectionDomain instance is created for each non-static ProtectionDomain ( (staticPermissionsOnly() == false) in the currentDomains array. Each new ProtectionDomain instance is created using the CodeSource, Permissions and ClassLoader from the corresponding ProtectionDomain in currentDomains, as well as with the Principals from the Subject associated with this SubjectDomainCombiner. Static ProtectionDomains are combined as-is and no new instance is created.

        All of the ProtectionDomains (static and newly instantiated) are combined into a new array. The ProtectionDomains from the assignedDomains array are appended to this new array, and the result is returned.

        Note that optimizations such as the removal of duplicate ProtectionDomains may have occurred. In addition, caching of ProtectionDomains may be permitted.

        Specified by:
        combine in interface DomainCombiner
        Parameters:
        currentDomains - the ProtectionDomains associated with the current execution Thread, up to the most recent privileged ProtectionDomain. The ProtectionDomains are listed in order of execution, with the most recently executing ProtectionDomain residing at the beginning of the array. This parameter may be null if the current execution Thread has no associated ProtectionDomains.
        assignedDomains - the ProtectionDomains inherited from the parent Thread, or the ProtectionDomains from the privileged context, if a call to AccessController.doPrivileged(..., context) had occurred This parameter may be null if there were no ProtectionDomains inherited from the parent Thread, or from the privileged context.
        Returns:
        a new array consisting of the updated ProtectionDomains, or null.