Overview

SecSign ID is a real two-factor authentication solution. It was designed to be simple, robust and fast. The reason for the simplicity is that it should be easely integrated in many environments. The SecSign ID Java Api can be used for Java Swing Applications, Java Applets or on server side in application server e.g. Apache Tomcat, Oracle Glassfish in Java Server Pages or in Java Server faces. The idea behind that is to use OSGi (Open Services Gateway Initiative) Most of the application server uses OSGi conform APIs for modularization. So every application server or project using OSGi can use the SecSign Java Api to integrate a secure two factor authentication. Examples for other OSGi projects or application server are JBoss, Atlassian JIRA and Confluence, Oracle Weblogic or OpenEJB.

This Java Api allows a secure login using a private key on a smart phone running SecSign ID by SecSign Technologies Inc.

Usage

• Include the jars SecSignIDApi.jar and SecPKIApi.jar in the classpath

• Import the API classes in the java project

• Request an authentication session

• Show the access pass to user

• Get the authentication session state

• React to the state and have the user logged in

The example SecSignIDApiJavaSwingExample shows how to integrate and use the SecSign ID Java Api. A more complete tutorial is found at https://www.secsign.com/java-api-tutorial/ or just visit https://www.secsign.com for more information.

Files

• SecSignIDApi.jar - contains the SecSign ID Api itself and must be included in the classpath

• SecPKIApi.jar - contains the classes to communicate with the SecSign ID Server via https

• src/com/secsign/secsignid/SecSignIDApi.java - the Java Api class itself

• src/com/secsign/secsignid/AuthenticationSession.java - the AuthenticationSession class which contains information about the authentication session retrieved from ID Server

• src/com/secsign/secsignid/AuthenticationSessionState.java - the AuthenticationSessionState class which contains information about the session state

• src/com/secsign/secsignid/SecSignIDException.java - exception class.

• src/com/secsign/secsignid/SecSignIDApiJavaSwingExample.java - java swing example

Examples

Create an api object and ask the id server for a so called authentication session for a specific SecSign ID

// create the SecSignID-API instance which can send requests to the SecSignID server
SecSignIDApi secSignIdApi = new SecSignIDApi();

AuthenticationSession session = null;
try
{
	session = secSignIdApi.requestAuthenticationSession(secSignIdTextField.getText(), 
														"SecSignID Java integration example", 
														"www.example.com");
}
catch (SecSignIDException exception)
{
	exception.printStackTrace();
	JOptionPane.showMessageDialog(null, exception.getLocalizedMessage());
}
        

Check the authentication session state whether the user has accepted the authentication request.

// Get the State
AuthenticationSessionState state = null;
try
{
	state = secSignIdApi.getAuthenticationSessionState();
} 
catch (SecSignIDException exception)
{
	exception.printStackTrace();
}

React to the authentication session state. In case the state is AuthenticationSessionState.AUTHENTICATED the user can be logged in at the underlying system. The underlying system might be a web application or a java standalone application. The object of type AuthenticationSessionState holds the authenticated SecSign ID. Usually this is the SecSign ID which was used to request an authentication session. But it is possible to log in with a so called priority code

switch (state.getAuthSessionState()) {
	case AuthenticationSessionState.FETCHED:
	case AuthenticationSessionState.PENDING:
	{
		msg = "The session is still pending. Please accept the session in the SecSignApp on your smart phone.";
		break;
	}
	case AuthenticationSessionState.DENIED:
	{
		msg = "The session has been denied on the smart phone.";
		checkForState = false;
		break;
	}
	case AuthenticationSessionState.AUTHENTICATED:
	{
		try
		{
			secSignIdApi.releaseAuthenticationSession();
		} catch (SecSignIDException exception)
		{
			exception.printStackTrace();
		}
		msg = "Successfully Authenticated SecSign ID \""+state.getAuthenticatedSecSignId()+"\"";
		checkForState = false;
		break;
	}
}

If the user whises to cancel the whole authentication process, the process is canceled by using the Method 'SecSignIDApi.cancelAuthSession'

try
{
	secSignIdApi.cancelAuthenticationSession();
}
catch (SecSignIDException exception)
{
	exception.printStackTrace();
}

===============

SecSign Technologies Inc. official site: https://www.secsign.com