upload OpenAM docs after deploy 2af597267e6eb9302f75445c2c726f9b84f62966

Author: Open Identity Platform Community

openam/apidocs/allclasses-index.html

@@ -3873,6 +3873,7 @@ <h1 class="bar">All&nbsp;Classes</h1>
 <li><a href="com/sun/identity/setup/MergeProperties.html" title="class in com.sun.identity.setup">MergeProperties</a></li>
 <li><a href="com/sun/identity/liberty/ws/soapbinding/Message.html" title="class in com.sun.identity.liberty.ws.soapbinding">Message</a></li>
 <li><a href="com/sun/identity/wss/security/handler/MessageAuthenticator.html" title="interface in com.sun.identity.wss.security.handler"><span class="interfaceName">MessageAuthenticator</span></a></li>
+<li><a href="org/forgerock/openam/radius/common/MessageAuthenticatorAttribute.html" title="class in org.forgerock.openam.radius.common">MessageAuthenticatorAttribute</a></li>
 <li><a href="com/sun/identity/wss/security/handler/MessageAuthorizer.html" title="interface in com.sun.identity.wss.security.handler"><span class="interfaceName">MessageAuthorizer</span></a></li>
 <li><a href="org/forgerock/openam/services/push/dispatch/MessageDispatcher.html" title="class in org.forgerock.openam.services.push.dispatch">MessageDispatcher</a></li>
 <li><a href="org/forgerock/openam/services/push/dispatch/MessageDispatcherFactory.html" title="class in org.forgerock.openam.services.push.dispatch">MessageDispatcherFactory</a></li>

openam/apidocs/allclasses.html

@@ -148,8 +148,9 @@ <h2 title="Class MSISDN" class="title">Class MSISDN</h2>
  <code>ServletRequest</code>. If the values cannot be retrieved then
  callbacks to get <code>msisdn</code> number and wap gateway are sent back to
  the client. The WAP Gateway is validated against a list of valid gateways in
- the gateway list attribute. If the gateway list attribute is empty then all
- gateways will trusted , if it is "none" then no gateways will be trusted and
+ the gateway list attribute. If the gateway list attribute is empty then no
+ gateways will be trusted, if it is "none" then no gateways will be trusted,
+ if it is "any" then all gateways will be trusted, and
  if specific values are specified only those gateways will be trusted. Once
  the gateway is validated the <code>msisdn</code> number is searched for in
  the repository. This module is written to lookup the <code>msisdn</code>

openam/apidocs/com/sun/identity/authentication/modules/msisdn/MSISDN.html

@@ -148,6 +148,19 @@ <h3>Uses of <a href="../RADIUSServer.html" title="class in com.sun.identity.auth
 </td>
 </tr>
 <tr class="altColor">
+<th class="colSecond" scope="row"><code><span class="memberNameLink"><a href="../client/RadiusConn.html#%3Cinit%3E(java.util.Set,java.util.Set,java.lang.String,int,byte%5B%5D,int,boolean)">RadiusConn</a></span>&#8203;(<a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;primaries,
+          <a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;secondaries,
+          <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;secret,
+          int&nbsp;timeout,
+          byte[]&nbsp;seed,
+          int&nbsp;healthCheckInterval,
+          boolean&nbsp;requireMessageAuthenticator)</code></th>
+<td class="colLast">
+<div class="block">Full-featured constructor that allows the caller to opt-in to the strict RFC 3579 /
+ BlastRADIUS-mitigation profile.</div>
+</td>
+</tr>
+<tr class="rowColor">
 <th class="colSecond" scope="row"><code><span class="memberNameLink"><a href="../client/RadiusConn.html#%3Cinit%3E(java.util.Set,java.util.Set,java.lang.String,int,int)">RadiusConn</a></span>&#8203;(<a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;primaries,
           <a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;secondaries,
           <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;secret,

openam/apidocs/com/sun/identity/authentication/modules/radius/class-use/RADIUSServer.html

@@ -200,6 +200,19 @@ <h3>Constructor Summary</h3>
 </td>
 </tr>
 <tr class="altColor">
+<th class="colConstructorName" scope="row"><code><span class="memberNameLink"><a href="#%3Cinit%3E(java.util.Set,java.util.Set,java.lang.String,int,byte%5B%5D,int,boolean)">RadiusConn</a></span>&#8203;(<a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;primaries,
+          <a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;secondaries,
+          <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;secret,
+          int&nbsp;timeout,
+          byte[]&nbsp;seed,
+          int&nbsp;healthCheckInterval,
+          boolean&nbsp;requireMessageAuthenticator)</code></th>
+<td class="colLast">
+<div class="block">Full-featured constructor that allows the caller to opt-in to the strict RFC 3579 /
+ BlastRADIUS-mitigation profile.</div>
+</td>
+</tr>
+<tr class="rowColor">
 <th class="colConstructorName" scope="row"><code><span class="memberNameLink"><a href="#%3Cinit%3E(java.util.Set,java.util.Set,java.lang.String,int,int)">RadiusConn</a></span>&#8203;(<a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;primaries,
           <a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;secondaries,
           <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;secret,
@@ -239,7 +252,8 @@ <h3>Method Summary</h3>
 <td class="colFirst"><code>void</code></td>
 <th class="colSecond" scope="row"><code><span class="memberNameLink"><a href="#disconnect()">disconnect</a></span>()</code></th>
 <td class="colLast">
-<div class="block">Disconnects the underlying datagram socket.</div>
+<div class="block">Closes the underlying datagram socket, releasing the associated file descriptor and
+ ephemeral UDP port back to the operating system.</div>
 </td>
 </tr>
 <tr id="i2" class="altColor">
@@ -350,7 +364,7 @@ <h4>RadiusConn</h4>
 <a id="&lt;init&gt;(java.util.Set,java.util.Set,java.lang.String,int,byte[],int)">
 <!--   -->
 </a>
-<ul class="blockListLast">
+<ul class="blockList">
 <li class="blockList">
 <h4>RadiusConn</h4>
 <pre>public&nbsp;RadiusConn&#8203;(<a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;primaries,
@@ -374,6 +388,42 @@ <h4>RadiusConn</h4>
 </dl>
 </li>
 </ul>
+<a id="&lt;init&gt;(java.util.Set,java.util.Set,java.lang.String,int,byte[],int,boolean)">
+<!--   -->
+</a>
+<ul class="blockListLast">
+<li class="blockList">
+<h4>RadiusConn</h4>
+<pre>public&nbsp;RadiusConn&#8203;(<a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;primaries,
+                  <a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="../RADIUSServer.html" title="class in com.sun.identity.authentication.modules.radius">RADIUSServer</a>&gt;&nbsp;secondaries,
+                  <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;secret,
+                  int&nbsp;timeout,
+                  byte[]&nbsp;seed,
+                  int&nbsp;healthCheckInterval,
+                  boolean&nbsp;requireMessageAuthenticator)
+           throws <a href="https://docs.oracle.com/javase/8/docs/api/java/net/SocketException.html?is-external=true" title="class or interface in java.net" class="externalLink">SocketException</a></pre>
+<div class="block">Full-featured constructor that allows the caller to opt-in to the strict RFC 3579 /
+ BlastRADIUS-mitigation profile.</div>
+<dl>
+<dt><span class="paramLabel">Parameters:</span></dt>
+<dd><code>primaries</code> - the primary servers to connect to.</dd>
+<dd><code>secondaries</code> - the secondary servers to connect to.</dd>
+<dd><code>secret</code> - the secret shared between this client and the remote servers.</dd>
+<dd><code>timeout</code> - the timeout value, in seconds.</dd>
+<dd><code>seed</code> - optional <a href="https://docs.oracle.com/javase/8/docs/api/java/security/SecureRandom.html?is-external=true" title="class or interface in java.security" class="externalLink"><code>SecureRandom</code></a> seed; <code>null</code> for default entropy.</dd>
+<dd><code>healthCheckInterval</code> - the health check interval, in minutes.</dd>
+<dd><code>requireMessageAuthenticator</code> - when <code>true</code>, every Access-Accept/Reject/Challenge
+                                     received from the server MUST carry a verifiable
+                                     Message-Authenticator (RFC 3579 attribute 80). This is
+                                     the fully protected flow recommended by Cisco's
+                                     BlastRADIUS guidance. When <code>false</code>, the client
+                                     verifies MA only when the server happens to include it,
+                                     remaining interoperable with legacy servers.</dd>
+<dt><span class="throwsLabel">Throws:</span></dt>
+<dd><code><a href="https://docs.oracle.com/javase/8/docs/api/java/net/SocketException.html?is-external=true" title="class or interface in java.net" class="externalLink">SocketException</a></code> - if a socket exception occurs.</dd>
+</dl>
+</li>
+</ul>
 </li>
 </ul>
 </section>
@@ -392,7 +442,16 @@ <h3>Method Detail</h3>
 <h4>disconnect</h4>
 <pre class="methodSignature">public&nbsp;void&nbsp;disconnect()
                 throws <a href="https://docs.oracle.com/javase/8/docs/api/java/io/IOException.html?is-external=true" title="class or interface in java.io" class="externalLink">IOException</a></pre>
-<div class="block">Disconnects the underlying datagram socket.</div>
+<div class="block">Closes the underlying datagram socket, releasing the associated file descriptor and
+ ephemeral UDP port back to the operating system.
+
+ <p>Historically this method only invoked <a href="https://docs.oracle.com/javase/8/docs/api/java/net/DatagramSocket.html?is-external=true#disconnect--" title="class or interface in java.net" class="externalLink"><code>DatagramSocket.disconnect()</code></a>, which merely
+ removes the peer association but keeps the socket (and therefore its file descriptor and
+ ephemeral port) allocated until the JVM finaliser eventually reclaims it. Because
+ <code>RADIUS.shutdown()</code> discards its <code>RadiusConn</code> reference right after calling
+ this method, that behaviour leaked one FD / one ephemeral port per authentication attempt
+ under load. The method is now an idempotent close, which is what every caller in the
+ tree actually wants.</div>
 <dl>
 <dt><span class="throwsLabel">Throws:</span></dt>
 <dd><code><a href="https://docs.oracle.com/javase/8/docs/api/java/io/IOException.html?is-external=true" title="class or interface in java.io" class="externalLink">IOException</a></code> - if an io exception occurs.</dd>

openam/apidocs/com/sun/identity/authentication/modules/radius/client/RadiusConn.html

@@ -1999,11 +1999,10 @@ <h3>Uses of <a href="../AuthLoginException.html" title="class in com.sun.identit
 </tr>
 <tr class="altColor">
 <td class="colFirst"><code>protected void</code></td>
-<th class="colSecond" scope="row"><span class="typeNameLabel">OAuth.</span><code><span class="memberNameLink"><a href="../../../../../../org/forgerock/openam/authentication/modules/oauth2/OAuth.html#updateAccount(org.forgerock.openam.authentication.modules.common.mapping.AccountProvider,java.lang.String,java.util.Map,java.lang.String,java.lang.String,org.forgerock.json.jose.jwt.JwtClaimsSet)">updateAccount</a></span>&#8203;(<a href="../../../../../../org/forgerock/openam/authentication/modules/common/mapping/AccountProvider.html" title="interface in org.forgerock.openam.authentication.modules.common.mapping">AccountProvider</a>&nbsp;accountProvider,
+<th class="colSecond" scope="row"><span class="typeNameLabel">OAuth.</span><code><span class="memberNameLink"><a href="../../../../../../org/forgerock/openam/authentication/modules/oauth2/OAuth.html#updateAccount(org.forgerock.openam.authentication.modules.common.mapping.AccountProvider,java.lang.String,java.util.Map,java.lang.String,org.forgerock.json.jose.jwt.JwtClaimsSet)">updateAccount</a></span>&#8203;(<a href="../../../../../../org/forgerock/openam/authentication/modules/common/mapping/AccountProvider.html" title="interface in org.forgerock.openam.authentication.modules.common.mapping">AccountProvider</a>&nbsp;accountProvider,
              <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;realm,
              <a href="https://docs.oracle.com/javase/8/docs/api/java/util/Map.html?is-external=true" title="class or interface in java.util" class="externalLink">Map</a>&lt;<a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>,&#8203;<a href="https://docs.oracle.com/javase/8/docs/api/java/util/Set.html?is-external=true" title="class or interface in java.util" class="externalLink">Set</a>&lt;<a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&gt;&gt;&nbsp;userNames,
              <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;profileSvcResponse,
-             <a href="https://docs.oracle.com/javase/8/docs/api/java/lang/String.html?is-external=true" title="class or interface in java.lang" class="externalLink">String</a>&nbsp;userPassword,
              org.forgerock.json.jose.jwt.JwtClaimsSet&nbsp;jwtClaims)</code></th>
 <td class="colLast">&nbsp;</td>
 </tr>