Examples of org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

Implementation of {@link ChannelDecisionManager}.

Iterates through each configured {@link ChannelProcessor}. If a ChannelProcessor has any issue with the security of the request, it should cause a redirect, exception or whatever other action is appropriate for the ChannelProcessor implementation.

Once any response is committed (ie a redirect is written to the response object), the ChannelDecisionManagerImpl will not iterate through any further ChannelProcessors.

The attribute "ANY_CHANNEL" if applied to a particular URL, the iteration through the channel processors will be skipped (see SEC-494, SEC-335). @author Ben Alex


    @Override
    public Object postProcessBeforeInitialization(Object bean, String beanName) throws BeansException {
        if (bean instanceof ChannelDecisionManagerImpl) {
            try {
                ChannelDecisionManagerImpl manager = (ChannelDecisionManagerImpl) bean;
                Field channelProcessors = manager.getClass().getDeclaredField("channelProcessors");
                channelProcessors.setAccessible(true);
                List<ChannelProcessor> list = (List<ChannelProcessor>) channelProcessors.get(manager);
                list.clear();
                manager.setChannelProcessors(channelProcessorOverrides);
                LOG.info("Replacing the standard Spring Security channel processors with custom processors that look for a " +
                    "'X-Forwarded-Proto' request header. This allows Spring Security to sit behind a load balancer with SSL termination.");
            } catch (Exception e) {
                throw new RuntimeException(e);
            }

    public ChannelSecurityConfigurer() {
    }


    @Override
    public void configure(H http) throws Exception {
        ChannelDecisionManagerImpl channelDecisionManager = new ChannelDecisionManagerImpl();
        channelDecisionManager.setChannelProcessors(getChannelProcessors(http));
        channelDecisionManager = postProcess(channelDecisionManager);


        channelFilter.setChannelDecisionManager(channelDecisionManager);


        DefaultFilterInvocationSecurityMetadataSource filterInvocationSecurityMetadataSource =

Examples of org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

Related Classes of org.springframework.security.web.access.channel.ChannelDecisionManagerImpl