com.rsmart.rfabric.jasperreports.auth

Class AuthTokenAuthenticationFilter

java.lang.Object

com.rsmart.rfabric.jasperreports.auth.AuthTokenAuthenticationFilter

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.context.ApplicationContextAware

public class AuthTokenAuthenticationFilter
extends Object
implements javax.servlet.Filter, org.springframework.context.ApplicationContextAware

Implements a Servlet filter which extracts an AuthToken from an HTTP header or a CGI parameter. If the AuthToken is found an AuthTokenAuthentication object is constructed and is passed to the Spring Security AuthenticationManager to handle authentication.

Field Summary

Fields

Modifier and Type	Field and Description
static String	AUTH_TOKEN_HEADER
static String	AUTH_TOKEN_PARAM
static String[]	FIELDS

Constructor Summary

Constructors

Constructor and Description
AuthTokenAuthenticationFilter()

Method Summary

Modifier and Type	Method and Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain chain) Intercepts HTTP traffic to look for AuthToken headers.
org.springframework.security.AuthenticationManager	getAuthenticationManager()
com.rsmart.rfabric.auth.tokenauth.AuthToken	getToken(javax.servlet.http.HttpServletRequest request) Simply grab the authentication token from the request.
void	init(javax.servlet.FilterConfig fc)
void	setApplicationContext(org.springframework.context.ApplicationContext ac)
void	setAuthenticationManager(org.springframework.security.AuthenticationManager authenticationManager)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AUTH_TOKEN_HEADER

public static final String AUTH_TOKEN_HEADER

See Also:

Constant Field Values

AUTH_TOKEN_PARAM

public static final String AUTH_TOKEN_PARAM

See Also:

Constant Field Values

FIELDS

public static final String[] FIELDS

Constructor Detail

AuthTokenAuthenticationFilter

public AuthTokenAuthenticationFilter()

Method Detail

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter

getToken

public final com.rsmart.rfabric.auth.tokenauth.AuthToken getToken(javax.servlet.http.HttpServletRequest request)

Simply grab the authentication token from the request. Does not validate results; i.e. raw data retrieval from request.

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
                     javax.servlet.ServletResponse servletResponse,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Intercepts HTTP traffic to look for AuthToken headers. If one exists authentication occurs otherwise the request is passed on.

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

getAuthenticationManager

public org.springframework.security.AuthenticationManager getAuthenticationManager()

setAuthenticationManager

public void setAuthenticationManager(org.springframework.security.AuthenticationManager authenticationManager)

setApplicationContext

public void setApplicationContext(org.springframework.context.ApplicationContext ac)
                           throws org.springframework.beans.BeansException

Specified by:

setApplicationContext in interface org.springframework.context.ApplicationContextAware

Throws:

org.springframework.beans.BeansException

init

public void init(javax.servlet.FilterConfig fc)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException