Used by the SecurityEnforcementFilter
to commence authentication via the {@link AuthenticationProcessingFilter}. This object holds the location of the login form, relative to the web app context path, and is used to commence a redirect to that form.
By setting the forceHttps property to true, you may configure the class to force the protocol used for the login form to be HTTPS
, even if the original intercepted request for a resource used the HTTP
protocol. When this happens, after a successful login (via HTTPS), the original resource will still be accessed as HTTP, via the original request URL. For the forced HTTPS feature to work, the {@link PortMapper} is consulted to determine the HTTP:HTTPS pairs.
@author Ben Alex
@author colin sampaleanu
@author Omri Spector
@version $Id: AuthenticationProcessingFilterEntryPoint.java 1873 2007-05-2503:21:17Z benalex $