Access currently authenticated user from custom realm logic

Guiss39 · February 5, 2019, 8:59am

Hi,

I'm building a custom plugin with XPack and I have a custom Realm.
From the token() method (e.g. https://github.com/elastic/elasticsearch/blob/6.4/x-pack/qa/security-example-spi-extension/src/main/java/org/elasticsearch/example/realm/CustomRealm.java#L40) I would like to access the authenticated user like if I would run:

GET _xpack/security/_authenticate

is that possible to do that programmatically there?

Thanks.
Regards.

Yogesh_Gaikwad · February 15, 2019, 3:43am

Hi @Guiss39,

If you look at the documentation for token() you will see that this method is responsible
for extracting the authentication token from the request. So at this point, the authentication
is still in progress and there is no information regarding User and its role.

github.com

elastic/elasticsearch/blob/9723458e3243f93ddd9c708737cb0269f932fc6b/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authc/Realm.java#L96


 */
public abstract boolean supports(AuthenticationToken token);


/**
 * Attempts to extract an authentication token from the given context. If an appropriate token
 * is found it's returned, otherwise {@code null} is returned.
 *
 * @param context The context that will provide information about the incoming request
 * @return The authentication token or {@code null} if not found
 */
public abstract AuthenticationToken token(ThreadContext context);


/**
 * Authenticates the given token in an asynchronous fashion.
 * <p>
 * A successful authentication will call {@link ActionListener#onResponse} with a
 * {@link AuthenticationResult#success successful} result, which includes the user associated with the given token.
 * <br>
 * If the realm does not support, or cannot handle the token, it will call {@link ActionListener#onResponse} with a
 * {@link AuthenticationResult#notHandled not-handled} result.
 * This can include cases where the token identifies as user that is not known by this realm.

Could you please give us some details as to what you are trying to do? so we can help you better.

Regards,
Yogesh Gaikwad

system · March 15, 2019, 3:43am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.