/usr/lib/perl5/WebAuth/Token/Cred.pm is in libwebauth-perl 4.5.5-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 | # Perl representation of a WebAuth cred token.
#
# Written by Russ Allbery <rra@stanford.edu>
# Copyright 2012, 2013
# The Board of Trustees of the Leland Stanford Junior University
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to
# deal in the Software without restriction, including without limitation the
# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
# sell copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
package WebAuth::Token::Cred;
require 5.006;
use strict;
use warnings;
use base qw(WebAuth::Token);
our $VERSION;
# This version matches the version of WebAuth with which this module was
# released, but with two digits for the minor and patch versions.
BEGIN {
$VERSION = '4.0505';
}
# Accessor methods.
sub subject { my $t = shift; $t->_attr ('subject', @_) }
sub type { my $t = shift; $t->_attr ('type', @_) }
sub service { my $t = shift; $t->_attr ('service', @_) }
sub data { my $t = shift; $t->_attr ('data', @_) }
sub creation { my $t = shift; $t->_attr ('creation', @_) }
sub expiration { my $t = shift; $t->_attr ('expiration', @_) }
1;
__END__
=for stopwords
WebAuth WebKDC KEYRING timestamp Allbery
=head1 NAME
WebAuth::Token::Cred - WebAuth cred tokens
=head1 SYNOPSIS
my $token = WebAuth::Token::Cred->new;
$token->subject ('user');
$token->type ('krb5');
$token->service ('service/foo@EXAMPLE.COM');
$token->data ($ticket);
$token->creation (time);
$token->expiration (time + 3600);
print $token->encode ($keyring), "\n";
=head1 DESCRIPTION
A WebAuth cred token, which holds a credential for some other service,
usually a Kerberos service ticket. It is sent back by the WebKDC to a
WebAuth Application Server when requested using a proxy token, and the WAS
also uses it to store the credentials in cookies.
=head1 CLASS METHODS
=over 4
=item new ()
Create a new, empty WebAuth::Token::Cred. At least some attributes will
have to be set using the accessor methods described below before the token
can be used.
=back
=head1 INSTANCE METHODS
As with WebAuth module functions, failures are signaled by throwing
WebAuth::Exception rather than by return status.
=head1 General Methods
=over 4
=item encode (KEYRING)
Generate the encoded and encrypted form of this token using the provided
KEYRING. The encryption key used will be the one returned by the
best_key() method of WebAuth::Keyring on that KEYRING.
=back
=head1 Accessor Methods
=over 4
=item subject ([SUBJECT])
Get or set the subject, which holds the identity of the user for which
this token contains credentials.
=item type ([TYPE])
Get or set the type of credential stored in this token. Currently, this
is always C<krb5> (but still must be explicitly set if creating a new
token).
=item service ([SERVICE])
Get or set the service for which this token stores a credential. For
tokens of type C<krb5>, this is the fully-qualified principal name of
the service ticket stored in this token.
=item data ([CREDENTIAL])
Get or set the credential stored in this token. This is currently always
a Kerberos ticket in the form created by the export_cred() method of the
WebAuth::Krb5 module.
=item creation ([TIMESTAMP])
Get or set the creation timestamp for this token in seconds since epoch.
If not set, the encoded token will have a creation time set to the time of
encoding.
=item expiration ([TIMESTAMP])
Get or set the expiration timestamp for this token in seconds since epoch.
=back
=head1 AUTHOR
Russ Allbery <rra@stanford.edu>
=head1 SEE ALSO
WebAuth(3), WebAuth::Keyring(3), WebAuth::Krb5(3), WebAuth::Token(3)
This module is part of WebAuth. The current version is available from
L<http://webauth.stanford.edu/>.
=cut
|