Examples of com.force.sdk.oauth.AuthFilter

com.force.sdk.oauth.AuthFilter

Filter to enable you to add Force.com OAuth Authentication to any web application. When configuring web.xml, all requests that need to be authenticated should be sent through {@code AuthFilter}. The OAuth callback (usually _auth) must also be sent through {@code AuthFilter}. To use the connector, add the following servlet filter to your application's web.xml file:

{@code AuthFilter com.force.sdk.oauth.AuthFilter connectionName nameOfConnectionToUse AuthFilter /* }

The OAuth Connector uses the Force.com API Connector to access the Force.com APIs. The connectionName is used to look up OAuth properties defined in an environment variable, or a Java system property, or in a properties file on the classpath. See @doclink connection-url for more information. Other init parameters that can be set are:

securityContextStorageMethod - valid values are "cookie" or "session". Defaults to "cookie". See @doclink oauth-auth for more information on session management and security
secure-key-file - specify the location of the file where your AES secure key is stored.

@author Fiaz Hossain @author John Simone

        // Add session id and endpoint cookies to the request
        Cookie sidCookie = new Cookie(SecurityContextUtil.FORCE_FORCE_SESSION,  SESSION_ID);
        Cookie endpointCookie = new Cookie(SecurityContextUtil.FORCE_FORCE_ENDPOINT, ENDPOINT);
        request.setCookies(sidCookie, endpointCookie);
        
        AuthFilter filter = new AuthFilter();
        MockFilterConfig filterConfig = new MockFilterConfig();
        
        // Add good OAuth info
        filterConfig.addInitParameter("customDataRetriever", TestUserDataRetriever.class.getName());
        filterConfig.addInitParameter("endpoint", ENDPOINT);
        filterConfig.addInitParameter("oauthKey", "key");
        filterConfig.addInitParameter("oauthSecret", "secret");
        filterConfig.addInitParameter("securityContextStorageMethod", "session");
        
        filter.init(filterConfig);
        
        VerificationFilterChain filterChain = new VerificationFilterChain();
        mockDataRetriever.assertRefreshToken = false;
        try {
            filter.doFilter(request, response, filterChain);
        } finally {
            mockDataRetriever.assertRefreshToken = true;
        }
        
        HttpSession session = request.getSession();

Examples of com.force.sdk.oauth.AuthFilter

Related Classes of com.force.sdk.oauth.AuthFilter