jenkins.security

Class QueueItemAuthenticator

java.lang.Object

hudson.model.AbstractDescribableImpl<QueueItemAuthenticator>

jenkins.security.QueueItemAuthenticator

All Implemented Interfaces:

ExtensionPoint, Describable<QueueItemAuthenticator>

public abstract class QueueItemAuthenticator
extends AbstractDescribableImpl<QueueItemAuthenticator>
implements ExtensionPoint

Extension point to run Queue.Executables under a specific identity for better access control. You must override either authenticate(hudson.model.Queue.Item), or authenticate(hudson.model.Queue.Task), or both.

Since:

1.520

Author:

Kohsuke Kawaguchi

See Also:

QueueItemAuthenticatorConfiguration, Queue.Item.authenticate(), Queue.Task.getDefaultAuthentication()

Nested Class Summary

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

ExtensionPoint.LegacyInstancesAreScopedToHudson

Constructor Summary

Constructors

Constructor and Description
QueueItemAuthenticator()

Method Summary

Modifier and Type	Method and Description
org.acegisecurity.Authentication	authenticate(Queue.Item item) Determines the identity in which the Queue.Executable will run as.
org.acegisecurity.Authentication	authenticate(Queue.Task task) Determines the identity in which the Queue.Executable will run as.
QueueItemAuthenticatorDescriptor	getDescriptor() By default looks for a nested class (conventionally named DescriptorImpl) implementing Descriptor and marked with Extension.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

QueueItemAuthenticator

public QueueItemAuthenticator()

Method Detail

authenticate

@CheckForNull
public org.acegisecurity.Authentication authenticate(Queue.Item item)

Determines the identity in which the Queue.Executable will run as. The default implementation delegates to authenticate(hudson.model.Queue.Task).

Parameters:

item - The contextual information to assist the authentication. The primary interest is likely Queue.Item.task, which is often AbstractProject. Actions associated with the item is also likely of interest, such as CauseAction.

Returns:

returning non-null will determine the identity. If null is returned, the next configured QueueItemAuthenticator will be given a chance to authenticate the executor. If everything fails, fall back to Queue.Task.getDefaultAuthentication().

authenticate

@CheckForNull
public org.acegisecurity.Authentication authenticate(Queue.Task task)

Determines the identity in which the Queue.Executable will run as. The default implementation delegates to authenticate(hudson.model.Queue.Item) (there will be no associated actions).

Parameters:

task - Often AbstractProject.

Returns:

returning non-null will determine the identity. If null is returned, the next configured QueueItemAuthenticator will be given a chance to authenticate the executor. If everything fails, fall back to Queue.Task.getDefaultAuthentication().

Since:

1.560

getDescriptor

public QueueItemAuthenticatorDescriptor getDescriptor()

Description copied from class: AbstractDescribableImpl

By default looks for a nested class (conventionally named DescriptorImpl) implementing Descriptor and marked with Extension.

Gets the descriptor for this instance.

Descriptor is a singleton for every concrete Describable implementation, so if a.getClass() == b.getClass() then by default a.getDescriptor() == b.getDescriptor() as well. (In rare cases a single implementation class may be used for instances with distinct descriptors.)

Specified by:

getDescriptor in interface Describable<QueueItemAuthenticator>

Overrides:

getDescriptor in class AbstractDescribableImpl<QueueItemAuthenticator>