Show / Hide Table of Contents

Namespace Azos.Security

Classes

AccessLevel

A level of access granted to user for certain permission, i.e. if (level.Denied).....

AdHocPermission

Represents a permission check instance which is a-typical and is based on string arguments

AuthorizationException

Thrown by Azos security to indicate the authorization problems, such as permission access denial

BlankCredentials

Represents credentials that are absent. This is a singleton class

ConfigSecurityManager

Provides security manager implementation that authenticates and authorizes users from configuration

Credentials

User credentials base class. A credentials may be as simple as user+password, access card codes, door key, Twitter account token etc...

DefaultPasswordManager

Provides default implementation for password management functionality based on injectable algorithms and default password strength calculation

GDIDCredentials

Represents credentials based on Global Distributed ID

HashedPassword

Represents abstraction of a hashed password, the concrete password algorithm provide implementation (i.e. bytebuffer, dictionary, string)

IDPasswordCredentials

Represents simple ID/password textual credentials. Note: The password is stored as plain text

NOPSecurityManager

Provides security manager implementation that does nothing and always returns fake user instance

PasswordHashingAlgorithm

Represents an abstraction of password algorithm that performs hashing and verification of passwords supplied as SecureBuffer

PasswordHashingAlgorithm<TOptions>

PasswordRepresentation

Provides password representation content, i.e. an image with drawn password which is understandable by humans

Represents a general permission abstraction - where permission type represents the path/name of the permission in User's rights and .ctor takes specific parameters to check while authorizing user. Permission-derived class represents a certain permission type, whereas its instance is a check for particular desired level. To authorize certain actions, one creates an instance of Permission-derived class passing in its .ctor required access levels, then calls a Check() method that returns true if action is authorized.

This scheme provides a great deal of flexibility, i.e. for very complex security cases developers may inherit leaf-level permissions from intermediate ones that have logic tied to session-level variables, this way user's access may vary by permission/session state, i.e. a user may have "Patient.Master" level 4 access in database "A", while having access denied to the same named permission in database "B". User's database, or system instance is a flag in user-session context

Rights

User rights contains data about access levels to permissions in the system. Use Configuration internally to keep the data organized in hierarchical navigable structure. Configuration also allows to cross-link permission levels using vars and make acess level dependent on settings on a particular machine using environmental vars

SecureBuffer

This class is used for storing passwords and other security-sensitive tokens. Stores a verbatim byte buffer which is formed by Push(byte). Once buffer is formed, it gets sealed via Seal() to obtain its content. The Dispose()/Forget() methods invalidate the secure data in-place, leaving no copies in memory.

SecurityException

Base exception thrown by the Azos Security framework

SocialNetTokenCredentials

Represents credentials supplied from/to Social Net site (i.e. Facebook, Twitter etc.)

TypedPermission

A general ancestor for all typed permissions - the ones declared in code

User

Provides base user functionality. Particular security manager implementations may return users derived from this class

Structs

AuthenticationToken

Represents security provider-internal ID that SecurityManager assigns into User object on authentication. These tokens can be used in place of Credentials to re-authenticate users or to re-query user rights (e.g. upon re/authorization). External parties should never be supplied with this struct as it is system backend internal token used inside the system

Namespace Azos.Security

Classes

Structs

Interfaces

Enums

Delegates