cloud.altemista.fwk.web.security

Class ForwardSecurityCredentialsFilterBean

java.lang.Object

org.springframework.web.filter.GenericFilterBean

cloud.altemista.fwk.web.security.ForwardSecurityCredentialsFilterBean

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.core.env.EnvironmentCapable, org.springframework.web.context.ServletContextAware

Deprecated.

This functionality, although useful in development stages, is quite limited; and will be removed in future versions if a Single sign-on or OAuth/OAuth 2.0 module becomes available

@Deprecated
public class ForwardSecurityCredentialsFilterBean
extends org.springframework.web.filter.GenericFilterBean

Filter class to forward the Spring Security Credentials to external systems (e.g.: via REST, web services, etc.).
Spring Security removes the password from the authentication object, but this password may be needed to consume external services forwarding the authentication (e.g.: in the RestTemplate used to to consume REST services).
Include the in the proper <security:http> element, before FORM_LOGIN_FILTER, that MUST have form-login based authentication (i.e.: <security:form-login>):

<security:http ...>
     ...
     <security:custom-filter ref="forwardSecurityCredentialsFilter" before="FORM_LOGIN_FILTER" />
     <security:form-login />
 </security:http>

Author:

NTT DATA

Field Summary

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor and Description
ForwardSecurityCredentialsFilterBean() Deprecated.

Method Summary

Modifier and Type	Method and Description
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain) Deprecated.
protected void	initFilterBean() Deprecated.
void	setPasswordParameter(String passwordParameter) Deprecated.

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ForwardSecurityCredentialsFilterBean

public ForwardSecurityCredentialsFilterBean()

Deprecated.

Method Detail

initFilterBean

protected void initFilterBean()
                       throws javax.servlet.ServletException

Deprecated.

Overrides:

initFilterBean in class org.springframework.web.filter.GenericFilterBean

Throws:

javax.servlet.ServletException

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Deprecated.

Throws:

IOException

javax.servlet.ServletException

setPasswordParameter

public void setPasswordParameter(String passwordParameter)

Deprecated.

Parameters:

passwordParameter - the passwordParameter to set