Package org.apache.cassandra.auth
package org.apache.cassandra.auth
-
ClassDescriptionAbstract CIDR authorizer, contains code common to all implementations of ICIDRAuthorizerAllowAllCIDRAuthorizer allows any user to access from any CIDR i.e, disables CIDR authorizationAuthCache<K,
V> AuthCache.BulkLoader<K,V> Only purpose is to Initialize authentication/authorization viaAuthConfig.applyAuth().Returned from IAuthenticator#authenticate(), represents an authenticated user everywhere internally.SchemaChangeListener implementation that cleans up permissions on dropped resources.CacheRefresher<K,V> CassandraAuthorizer is an IAuthorizer implementation that keeps user permissions internally in C* using the system_auth.role_permissions table.CassandraCIDRAuthorizer is backend for CIDR authorization checks 1, Provides functionality to populate Role to CIDR permisssions cache and 2, Uses CIDR groups mapping cache as backend to lookup CIDR groups of an IPLoginModule which authenticates a user towards the Cassandra database using the internal authentication mechanism.This class implements thePrincipalinterface and represents a user.Responsible for the creation, maintenance and deletion of roles for the purposes of authentication and authorization.CIDR groups mapping cache.This class implements CIDR Interval tree and the ability to find longest matching CIDR for the given IP.Reads the tableAuthKeyspace.CIDR_GROUPSand populates CIDR groups mapping data structures.This class provides utility functions to list/update/drop CIDR groups mappings.This interface defines functionality to be provided by algorithm(s) implementing CIDR to CIDR groups mappings, to facilitate the efficient way to find the longest matching CIDR for a given IPBuilder to add CIDR to CIDR groups mappings and construct a mapping table with themContains CIDR permissions of a roleBuilder to generate CIDR PermissionsProvides functionality to list/update/drop CIDR permissions of a role Backend to build Role to CIDR permissions cacheJMX functions related to CIDR permissions cache and tableThe primary type of resource in Cassandra.IResource implementation representing functions.Performs the actual SASL negotiation for a single authentication attempt.Primary Cassandra authorization interface.Backend for CIDR authorization featureSupported modes by CIDR authorizerEnum that represents connection type of internode connection.The interface at the core of Cassandra authorization.Responsible for managing roles (which also includes what used to be known as users), including creation, deletion, alteration and the granting and revoking of roles to other roles.Supported options for CREATE ROLE/ALTER ROLE (and CREATE USER/ALTER USER, which are aliases provided for backwards compatibility).Interface for certificate validation and authorization for mTLS authenticators.This authenticator can be used in optional mTLS mode, If the client doesn't make an mTLS connection this fallbacks to password authentication.PasswordAuthenticator is an IAuthenticator implementation that keeps credentials (rolenames and bcrypt-hashed passwords) internally in C* - in system_auth.roles CQL3 table.An enum encapsulating the set of possible permissions that an authenticated user can have on a resource.Sets of instances of this class are returned by IAuthorizer.listPermissions() method for LIST PERMISSIONS query.IResource implementation representing database roles.This class assumes that the identity of a certificate is SPIFFE which is a URI that is present as part of the SAN of the client certificate.