## EAuthenticationSession EAuthenticationSession — Centralized authentication management |

## Synopsis

    #include <libebackend/libebackend.h>

    struct              EAuthenticationSession;
    enum                EAuthenticationSessionResult;
    struct _ESourceRegistryServer * e_authentication_session_get_server
                                                            (EAuthenticationSession *session);
    ESourceAuthenticator * e_authentication_session_get_authenticator
                                                            (EAuthenticationSession *session);
    const gchar *       e_authentication_session_get_source_uid
                                                            (EAuthenticationSession *session);
    const gchar *       e_authentication_session_get_prompt_title
                                                            (EAuthenticationSession *session);
    gchar *             e_authentication_session_dup_prompt_title
                                                            (EAuthenticationSession *session);
    void                e_authentication_session_set_prompt_title
                                                            (EAuthenticationSession *session,
                                                             const gchar *prompt_title);
    const gchar *       e_authentication_session_get_prompt_message
                                                            (EAuthenticationSession *session);
    gchar *             e_authentication_session_dup_prompt_message
                                                            (EAuthenticationSession *session);
    void                e_authentication_session_set_prompt_message
                                                            (EAuthenticationSession *session,
                                                             const gchar *prompt_message);
    const gchar *       e_authentication_session_get_prompt_description
                                                            (EAuthenticationSession *session);
    gchar *             e_authentication_session_dup_prompt_description
                                                            (EAuthenticationSession *session);
    void                e_authentication_session_set_prompt_description
                                                            (EAuthenticationSession *session,
                                                             const gchar *prompt_description);
    EAuthenticationSessionResult e_authentication_session_execute_sync
                                                            (EAuthenticationSession *session,
                                                             GCancellable *cancellable,
                                                             GError **error);
    void                e_authentication_session_execute    (EAuthenticationSession *session,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);
    EAuthenticationSessionResult e_authentication_session_execute_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             GError **error);
    gboolean            e_authentication_session_store_password_sync
                                                            (EAuthenticationSession *session,
                                                             const gchar *password,
                                                             gboolean permanently,
                                                             GCancellable *cancellable,
                                                             GError **error);
    void                e_authentication_session_store_password
                                                            (EAuthenticationSession *session,
                                                             const gchar *password,
                                                             gboolean permanently,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);
    gboolean            e_authentication_session_store_password_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             GError **error);
    gboolean            e_authentication_session_lookup_password_sync
                                                            (EAuthenticationSession *session,
                                                             GCancellable *cancellable,
                                                             gchar **password,
                                                             GError **error);
    void                e_authentication_session_lookup_password
                                                            (EAuthenticationSession *session,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);
    gboolean            e_authentication_session_lookup_password_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             gchar **password,
                                                             GError **error);
    gboolean            e_authentication_session_delete_password_sync
                                                            (EAuthenticationSession *session,
                                                             GCancellable *cancellable,
                                                             GError **error);
    void                e_authentication_session_delete_password
                                                            (EAuthenticationSession *session,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);
    gboolean            e_authentication_session_delete_password_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             GError **error);

    #define             E_AUTHENTICATION_SESSION_KEYRING_ERROR
    EAuthenticationSession * e_authentication_session_new   (struct _ESourceRegistryServer *server,
                                                             ESourceAuthenticator *authenticator,
                                                             const gchar *source_uid);

## Object Hierarchy

      GObject
       +----EAuthenticationSession

## Properties

      "authenticator"            ESourceAuthenticator*  : Read / Write / Construct Only
      "prompt-description"       gchar*                : Read / Write
      "prompt-message"           gchar*                : Read / Write
      "prompt-title"             gchar*                : Read / Write
      "server"                   ESourceRegistryServer*  : Read / Write / Construct Only
      "source-uid"               gchar*                : Read / Write / Construct Only

## Description

EAuthenticationSession provides centralized password management and password prompting for all clients of the registry D-Bus service.

An EAuthenticationSession is created within the registry D-Bus service when the service receives a request to authenticate some data source. Clients can issue requests by calling `e_source_registry_authenticate()`. Requests can also come from any ECollectionBackend running within the service itself.

An EAuthenticationSession requires some object implementing the ESourceAuthenticator interface to verify stored or user-provided passwords. EAuthenticationMediator is used for client-issued authentication requests. Custom collection backends derived from ECollectionBackend usually implement the ESourceAuthenticator interface themselves.

The EAuthenticationSession is then handed to ESourceRegistryServer through `e_source_registry_server_authenticate()` where it waits in line behind other previously added authentication sessions. When its turn comes, the server calls `e_authentication_session_execute()` to begin the interactive authentication session.

## Details

### struct EAuthenticationSession

    struct EAuthenticationSession;

Contains only private data that should be read and manipulated using the functions below.

Since 3.6

### enum EAuthenticationSessionResult

    typedef enum {
    	E_AUTHENTICATION_SESSION_ERROR,
    	E_AUTHENTICATION_SESSION_SUCCESS,
    	E_AUTHENTICATION_SESSION_DISMISSED
    } EAuthenticationSessionResult;

Completion codes used by EAuthenticationSession.

`E_AUTHENTICATION_SESSION_ERROR` | An error occurred while authenticating.
`E_AUTHENTICATION_SESSION_SUCCESS` | Client reported successful authentication.
`E_AUTHENTICATION_SESSION_DISMISSED` | User dismissed the authentication prompt.

Since 3.6

### e_authentication_session_get_server ()

    struct _ESourceRegistryServer * e_authentication_session_get_server
                                                            (EAuthenticationSession *session);

Returns the ESourceRegistryServer to which `session` belongs.

`session` : | an EAuthenticationSession
Returns : | the ESourceRegistryServer for `session`

Since 3.6

### e_authentication_session_get_authenticator ()

    ESourceAuthenticator * e_authentication_session_get_authenticator
                                                            (EAuthenticationSession *session);

Returns the ESourceAuthenticator handling authentication attempts for `session`. This is usually an EAuthenticationMediator but can also be a custom collection backend derived from ECollectionBackend.

`session` : | an EAuthenticationSession
Returns : | the ESourceAuthenticator for `session`

Since 3.6

### e_authentication_session_get_source_uid ()

    const gchar *       e_authentication_session_get_source_uid
                                                            (EAuthenticationSession *session);

Returns the "uid" of the authenticating data source. The data source may or may not be known to the "server".

`session` : | an EAuthenticationSession
Returns : | the UID of the authenticating data source

Since 3.6

### e_authentication_session_get_prompt_title ()

    const gchar *       e_authentication_session_get_prompt_title
                                                            (EAuthenticationSession *session);

Returns the text used for the password prompt title should prompting be necessary. See GcrPrompt for more details about password prompts.

`session` : | an EAuthenticationSession
Returns : | the password prompt title

Since 3.6

### e_authentication_session_dup_prompt_title ()

    gchar *             e_authentication_session_dup_prompt_title
                                                            (EAuthenticationSession *session);

Thread-safe variation of `e_authentication_session_get_prompt_title()`. Use this function when accessing `session` from multiple threads.

The returned string should be freed with `g_free()` when no longer needed.

`session` : | an EAuthenticationSession
Returns : | a newly-allocated copy of "prompt-title"

Since 3.6

### e_authentication_session_set_prompt_title ()

    void                e_authentication_session_set_prompt_title
                                                            (EAuthenticationSession *session,
                                                             const gchar *prompt_title);

Sets the text used for the password prompt title should prompting be necessary. See GcrPrompt for more details about password prompts.

`session` : | an EAuthenticationSession
`prompt_title` : | the password prompt title, or `NULL`

Since 3.6

### e_authentication_session_get_prompt_message ()

    const gchar *       e_authentication_session_get_prompt_message
                                                            (EAuthenticationSession *session);

Returns the text used for the password prompt message should prompting be necessary. See GcrPrompt for more details about password prompts.

`session` : | an EAuthenticationSession
Returns : | the password prompt message

Since 3.6

### e_authentication_session_dup_prompt_message ()

    gchar *             e_authentication_session_dup_prompt_message
                                                            (EAuthenticationSession *session);

Thread-safe variation of `e_authentication_session_get_prompt_message()`. Use this function when accessing `session` from multiple threads.

The returned string should be freed with `g_free()` when no longer needed.

`session` : | an EAuthenticationSession
Returns : | a newly-allocated copy of "prompt-message"

Since 3.6

### e_authentication_session_set_prompt_message ()

    void                e_authentication_session_set_prompt_message
                                                            (EAuthenticationSession *session,
                                                             const gchar *prompt_message);

Sets the text used for the password prompt message should prompting be necessary. See GcrPrompt for more details about password prompts.

`session` : | an EAuthenticationSession
`prompt_message` : | the password prompt message, or `NULL`

Since 3.6

### e_authentication_session_get_prompt_description ()

    const gchar *       e_authentication_session_get_prompt_description
                                                            (EAuthenticationSession *session);

Returns the text used for the password prompt description should prompting be necessary. See GcrPrompt for more details about password prompts.

`session` : | an EAuthenticationSession
Returns : | the password prompt description

Since 3.6

### e_authentication_session_dup_prompt_description ()

    gchar *             e_authentication_session_dup_prompt_description
                                                            (EAuthenticationSession *session);

Thread-safe variation of `e_authentication_session_get_prompt_description()`. Use this function when accessing `session` from multiple threads.

The returned string should be freed with `g_free()` when no longer needed.

`session` : | an EAuthenticationSession
Returns : | a newly-allocated copy of "prompt-description"

Since 3.6

### e_authentication_session_set_prompt_description ()

    void                e_authentication_session_set_prompt_description
                                                            (EAuthenticationSession *session,
                                                             const gchar *prompt_description);

Sets the text used for the password prompt description should prompting be necessary. See GcrPrompt for more details about password prompts.

`session` : | an EAuthenticationSession
`prompt_description` : | the password prompt description

Since 3.6

### e_authentication_session_execute_sync ()

    EAuthenticationSessionResult e_authentication_session_execute_sync
                                                            (EAuthenticationSession *session,
                                                             GCancellable *cancellable,
                                                             GError **error);

Executes an authentication session.

First the secret service is queried for a stored password. If found, an authentication attempt is made without disturbing the user. If no stored password is found, or if the stored password is rejected, the user is shown a system-modal dialog requesting a password. Further authentication attempts are repeated with user-provided passwords until authentication is verified or the user dismisses the prompt. The returned EAuthenticationSessionResult indicates the outcome.

If an error occurs while interacting with the secret service, or while prompting the user for a password, or while attempting authentication, the function sets `error` and returns E_AUTHENTICATION_SESSION_ERROR.

`session` : | an EAuthenticationSession
`cancellable` : | optional GCancellable object, or `NULL`
`error` : | return location for a GError, or `NULL`
Returns : | the result of the authentication session

Since 3.6

### e_authentication_session_execute ()

    void                e_authentication_session_execute    (EAuthenticationSession *session,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);

See `e_authentication_session_execute_sync()` for details.

When the operation is finished, `callback` will be called. You can then call `e_authentication_session_execute_finish()` to get the result of the operation.

`session` : | an EAuthenticationSession
`io_priority` : | the I/O priority of the request
`cancellable` : | optional GCancellable object, or `NULL`
`callback` : | a GAsyncReadyCallback to call when the request is satisfied
`user_data` : | data to pass to the callback function

Since 3.6

### e_authentication_session_execute_finish ()

    EAuthenticationSessionResult e_authentication_session_execute_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             GError **error);

Finishes the operation started with `e_authentication_session_execute()`.

If an error occurs while interacting with the secret service, or while prompting the user for a password, or while attempting authentication, the function sets `error` and returns E_AUTHENTICATION_SESSION_ERROR.

`session` : | an EAuthenticationSession
`result` : | a GAsyncResult
`error` : | return location for a GError, or `NULL`
Returns : | the result of the authentication session

Since 3.6

### e_authentication_session_store_password_sync ()

    gboolean            e_authentication_session_store_password_sync
                                                            (EAuthenticationSession *session,
                                                             const gchar *password,
                                                             gboolean permanently,
                                                             GCancellable *cancellable,
                                                             GError **error);

Store a password for the data source that `session` is representing. If `permanently` is `TRUE`, the password is stored in the default keyring. Otherwise the password is stored in the memory-only session keyring. If an error occurs, the function sets `error` and returns `FALSE`.

`session` : | an EAuthenticationSession
`password` : | the password to store
`permanently` : | store permanently or just for the session
`cancellable` : | optional GCancellable object, or `NULL`
`error` : | return location for a GError, or `NULL`
Returns : | `TRUE` on success, `FALSE` on error

Since 3.6

### e_authentication_session_store_password ()

    void                e_authentication_session_store_password
                                                            (EAuthenticationSession *session,
                                                             const gchar *password,
                                                             gboolean permanently,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);

Asynchronously stores a password for the data source that `session` is representing. If `permanently` is `TRUE`, the password is stored in the default keyring. Otherwise the password is stored in the memory-only session keyring.

When the operation is finished, `callback` will be called. You can then call `e_authentication_session_store_password_finish()` to get the result of the operation.

`session` : | an EAuthenticationSession
`password` : | the password to store
`permanently` : | store permanently or just for the session
`io_priority` : | the I/O priority of the request
`cancellable` : | optional GCancellable object, or `NULL`
`callback` : | a GAsyncReadyCallback to call when the request is satisfied
`user_data` : | data to pass to the callback function

Since 3.6

### e_authentication_session_store_password_finish ()

    gboolean            e_authentication_session_store_password_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             GError **error);

Finished the operation started with `e_authentication_session_store_password()`.

`session` : | an EAuthenticationSession
`result` : | a GAsyncResult
`error` : | return location for a GError, or `NULL`
Returns : | `TRUE` on success, `FALSE` on error

Since 3.6

### e_authentication_session_lookup_password_sync ()

    gboolean            e_authentication_session_lookup_password_sync
                                                            (EAuthenticationSession *session,
                                                             GCancellable *cancellable,
                                                             gchar **password,
                                                             GError **error);

Looks up a password for the data source that `session` is representing. Both the default and session keyrings are queried.

Note the boolean return value indicates whether the lookup operation itself completed successfully, not whether a password was found. If no password was found, the function will set `password` to `NULL` but still return `TRUE`. If an error occurs, the function sets `error` and returns `FALSE`.

`session` : | an EAuthenticationSession
`cancellable` : | optional GCancellable object, or `NULL`
`password` : | return location for the password, or `NULL`
`error` : | return location for a GError, or `NULL`
Returns : | `TRUE` on success, `FALSE` on error

Since 3.6

### e_authentication_session_lookup_password ()

    void                e_authentication_session_lookup_password
                                                            (EAuthenticationSession *session,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);

Asynchronously looks up a password for the data source that `session` is representing. Both the default and session keyrings are queried.

When the operation is finished, `callback` will be called. You can then call `e_authentication_session_lookup_password_finish()` to get the result of the operation.

`session` : | an EAuthenticationSession
`io_priority` : | the I/O priority of the request
`cancellable` : | optional GCancellable object, or `NULL`
`callback` : | a GAsyncReadyCallback to call when the request is satisfied
`user_data` : | data to pass to the callback function

Since 3.6

### e_authentication_session_lookup_password_finish ()

    gboolean            e_authentication_session_lookup_password_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             gchar **password,
                                                             GError **error);

Finishes the operation started with `e_authentication_session_lookup_password()`.

Note the boolean return value indicates whether the lookup operation itself completed successfully, not whether a password was found. If no password was found, the function will set `password` to `NULL` but still return `TRUE`. If an error occurs, the function sets `error` and returns `FALSE`.

`session` : | an EAuthenticationSession
`result` : | a GAsyncResult
`password` : | return location for the password, or `NULL`
`error` : | return location for a GError, or `NULL`
Returns : | `TRUE` on success, `FALSE` on error

Since 3.6

### e_authentication_session_delete_password_sync ()

    gboolean            e_authentication_session_delete_password_sync
                                                            (EAuthenticationSession *session,
                                                             GCancellable *cancellable,
                                                             GError **error);

Deletes the password for the data source that `session` is representing from either the default keyring or session keyring.

Note the boolean return value indicates whether the delete operation itself completed successfully, not whether a password was found and deleted. If no password was found, the function will still return `TRUE`. If an error occurs, the function sets `error` and returns `FALSE`.

`session` : | an EAuthenticationSession
`cancellable` : | optional GCancellable object, or `NULL`
`error` : | return location for a GError, or `NULL`
Returns : | `TRUE` on success, `FALSE` on error

Since 3.6

### e_authentication_session_delete_password ()

    void                e_authentication_session_delete_password
                                                            (EAuthenticationSession *session,
                                                             gint io_priority,
                                                             GCancellable *cancellable,
                                                             GAsyncReadyCallback callback,
                                                             gpointer user_data);

Asyncronously deletes the password for the data source that `session` is representing from either the default keyring or session keyring.

When the operation is finished, `callback` will be called. You can then call `e_authentication_session_delete_password_finish()` to get the result of the operation.

`session` : | an EAuthenticationSession
`io_priority` : | the I/O priority of the request
`cancellable` : | optional GCancellable object, or `NULL`
`callback` : | a GAsyncReadyCallback to call when the request is satisfied
`user_data` : | data to pass to the callback function

Since 3.6

### e_authentication_session_delete_password_finish ()

    gboolean            e_authentication_session_delete_password_finish
                                                            (EAuthenticationSession *session,
                                                             GAsyncResult *result,
                                                             GError **error);

Finishes the operation started with `e_authentication_session_delete_password()`.

Note the boolean return value indicates whether the delete operation itself completed successfully, not whether a password was found and deleted. If no password was found, the function will still return `TRUE`. If an error occurs, the function sets `error` and returns `FALSE`.

`session` : | an EAuthenticationSession
`result` : | a GAsyncResult
`error` : | return location for a GError, or `NULL`
Returns : | `TRUE` on success, `FALSE` on error

Since 3.6

### E_AUTHENTICATION_SESSION_KEYRING_ERROR

    #define             E_AUTHENTICATION_SESSION_KEYRING_ERROR

### Warning

`E_AUTHENTICATION_SESSION_KEYRING_ERROR` has been deprecated since version 3.8 and should not be used in newly-written code. The SECRET_ERROR domain is now used instead.

Error domain for password storage and retrieval.

No longer used.

Since 3.6

### e_authentication_session_new ()

    EAuthenticationSession * e_authentication_session_new   (struct _ESourceRegistryServer *server,
                                                             ESourceAuthenticator *authenticator,
                                                             const gchar *source_uid);

### Warning

`e_authentication_session_new` has been deprecated since version 3.8 and should not be used in newly-written code. Use `e_source_registry_server_new_auth_session()` instead.

Creates a new EAuthenticationSession instance for `server` using `authenticator` to handle authentication attempts.

Note that `source_uid` does not necessarily have to be known to the `server`, as in the case when configuring a new data source, but it still has to be unique.

`server` : | an ESourceRegistryServer
`authenticator` : | an ESourceAuthenticator
`source_uid` : | a data source identifier
Returns : | a newly-created EAuthenticationSession

Since 3.6

## Property Details

### The `"authenticator"` property

      "authenticator"            ESourceAuthenticator*  : Read / Write / Construct Only

Handles authentication attempts.

### The `"prompt-description"` property

      "prompt-description"       gchar*                : Read / Write

The detailed description of the prompt.

Default value: NULL

### The `"prompt-message"` property

      "prompt-message"           gchar*                : Read / Write

The prompt message for the user.

Default value: NULL

### The `"prompt-title"` property

      "prompt-title"             gchar*                : Read / Write

The title of the prompt.

Default value: NULL

### The `"server"` property

      "server"                   ESourceRegistryServer*  : Read / Write / Construct Only

The server to which the session belongs.

### The `"source-uid"` property

      "source-uid"               gchar*                : Read / Write / Construct Only

Unique ID of the data source being authenticated.

Default value: NULL