/usr/lib/x86_64-linux-gnu/perl5/5.26/WebAuth/Token/Id.pm is in libwebauth-perl 4.7.0-6build2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 | # Perl representation of a WebAuth id token.
#
# Written by Russ Allbery <eagle@eyrie.org>
# Copyright 2012, 2013
# The Board of Trustees of the Leland Stanford Junior University
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to
# deal in the Software without restriction, including without limitation the
# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
# sell copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
package WebAuth::Token::Id;
require 5.006;
use strict;
use warnings;
use base qw(WebAuth::Token);
our $VERSION;
# This version matches the version of WebAuth with which this module was
# released, but with two digits for the minor and patch versions.
BEGIN {
$VERSION = '4.0700';
}
# Accessor methods.
sub subject { my $t = shift; $t->_attr ('subject', @_) }
sub authz_subject { my $t = shift; $t->_attr ('authz_subject', @_) }
sub auth { my $t = shift; $t->_attr ('auth', @_) }
sub auth_data { my $t = shift; $t->_attr ('auth_data', @_) }
sub initial_factors { my $t = shift; $t->_attr ('initial_factors', @_) }
sub session_factors { my $t = shift; $t->_attr ('session_factors', @_) }
sub loa { my $t = shift; $t->_attr ('loa', @_) }
sub creation { my $t = shift; $t->_attr ('creation', @_) }
sub expiration { my $t = shift; $t->_attr ('expiration', @_) }
1;
__END__
=for stopwords
WebAuth WebKDC KEYRING authenticator auth loa timestamp Allbery
=head1 NAME
WebAuth::Token::Id - WebAuth id tokens
=head1 SYNOPSIS
my $token = WebAuth::Token::Id->new;
$token->subject ('user');
$token->auth ('webkdc');
$token->creation (time);
$token->expiration (time + 3600);
print $token->encode ($keyring), "\n";
=head1 DESCRIPTION
A WebAuth id token, which identifies a user to a WebAuth Authentication
Server. This token is sent from the WebKDC to the WAS following a user
authentication to communicate the authentication information.
=head1 CLASS METHODS
=over 4
=item new ()
Create a new, empty WebAuth::Token::Id. At least some attributes will
have to be set using the accessor methods described below before the token
can be used.
=back
=head1 INSTANCE METHODS
As with WebAuth module functions, failures are signaled by throwing
WebAuth::Exception rather than by return status.
=head1 General Methods
=over 4
=item encode (KEYRING)
Generate the encoded and encrypted form of this token using the provided
KEYRING. The encryption key used will be the one returned by the
best_key() method of WebAuth::Keyring on that KEYRING.
=back
=head1 Accessor Methods
=over 4
=item subject ([SUBJECT])
Get or set the subject, which holds the authenticated identity of the user
holding this token. This is set for tokens of authenticator type
C<webkdc>, but not for tokens of authenticator type C<krb5>.
=item authz_subject ([SUBJECT])
Get or set the authorization subject, which holds the asserted
authorization identity of the user holding this token. The authorization
identity may not match the authenticated identity. It represents a
request to use the authorization identity instead of the authentication
subject when applying ACLs or determining identity in the application.
=item auth ([TYPE])
Get or set the authentication type, which describes what type of
authenticator is included in this token. Currently will be one of the
values C<webkdc>, indicating a bearer token, and C<krb5>, indicating
that the token contains a Kerberos authenticator.
=item auth_data ([DATA])
Get or set the authentication data. If the authenticator type is C<krb5>,
this will hold a Kerberos authenticator such as is created by the
make_auth() function of the WebAuth::Krb5 module. It is raw binary data.
=item initial_factors ([FACTORS])
Get or set a comma-separated list of authentication factors used by the
user during initial authentication (the single sign-on transaction). For
a list of possible factors and their meaning, see the WebAuth protocol
specification.
=item session_factors ([FACTORS])
Get or set a comma-separated list of authentication factors used by the
user to authenticate this session (this particular visit to this WebAuth
Application Server). For a list of possible factors and their meaning,
see the WebAuth protocol specification.
=item loa ([LOA])
Get or set the level of assurance established for this user
authentication. This is a number whose values are site-defined but for
which increasing numbers represent increasing assurance for the
authentication.
=item creation ([TIMESTAMP])
Get or set the creation timestamp for this token in seconds since epoch.
If not set, the encoded token will have a creation time set to the time
of encoding.
=item expiration ([TIMESTAMP])
Get or set the expiration timestamp for this token in seconds since epoch.
=back
=head1 AUTHOR
Russ Allbery <eagle@eyrie.org>
=head1 SEE ALSO
WebAuth(3), WebAuth::Keyring(3), WebAuth::Krb5(3), WebAuth::Token(3)
This module is part of WebAuth. The current version is available from
L<http://webauth.stanford.edu/>.
=cut
|