Examples of org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

Package org.springframework.security.web.authentication

Examples of org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler
Base class containing the logic used by strategies which handle redirection to a URL and are passed an {@code Authentication} object as part of the contract.See {@link AuthenticationSuccessHandler} and{@link org.springframework.security.web.authentication.logout.LogoutSuccessHandler LogoutSuccessHandler}, for example.
Uses the following logic sequence to determine how it should handle the forward/redirect
- If the {@code alwaysUseDefaultTargetUrl} property is set to true, the {@code defaultTargetUrl} propertywill be used for the destination.
- If a parameter matching the value of {@code targetUrlParameter} has been set on the request, the value will be usedas the destination. If you are enabling this functionality, then you should ensure that the parameter cannot be used by an attacker to redirect the user to a malicious site (by clicking on a URL with the parameter included, for example). Typically it would be used when the parameter is included in the login form and submitted with the username and password.
- If the {@code useReferer} property is set, the "Referer" HTTP header value will be used, if present.
- As a fallback option, the {@code defaultTargetUrl} value will be used.
@author Luke Taylor @since 3.0

  }


  public void setPostLoginUrl(String postLoginUrl) {
    AuthenticationSuccessHandler successHandler = getSuccessHandler();
    if (successHandler instanceof AbstractAuthenticationTargetUrlRequestHandler) {
      AbstractAuthenticationTargetUrlRequestHandler h = (AbstractAuthenticationTargetUrlRequestHandler) successHandler;
      h.setDefaultTargetUrl(postLoginUrl);
    } else {
      throw new IllegalStateException("can't set postLoginUrl on unknown successHandler, type is " + successHandler.getClass().getName());
    }
  }

View Full Code Here

  }


  public void setAlwaysUsePostLoginUrl(boolean alwaysUsePostLoginUrl) {
    AuthenticationSuccessHandler successHandler = getSuccessHandler();
    if (successHandler instanceof AbstractAuthenticationTargetUrlRequestHandler) {
      AbstractAuthenticationTargetUrlRequestHandler h = (AbstractAuthenticationTargetUrlRequestHandler) successHandler;
      h.setAlwaysUseDefaultTargetUrl(alwaysUsePostLoginUrl);
    } else {
      throw new IllegalStateException("can't set alwaysUsePostLoginUrl on unknown successHandler, type is " + successHandler.getClass().getName());
    }
  }

View Full Code Here

  }


  public void setPostLoginUrl(String postLoginUrl) {
    AuthenticationSuccessHandler successHandler = getSuccessHandler();
    if (successHandler instanceof AbstractAuthenticationTargetUrlRequestHandler) {
      AbstractAuthenticationTargetUrlRequestHandler h = (AbstractAuthenticationTargetUrlRequestHandler) successHandler;
      h.setDefaultTargetUrl(postLoginUrl);
    } else {
      throw new IllegalStateException("can't set postLoginUrl on unknown successHandler, type is " + successHandler.getClass().getName());
    }
  }

View Full Code Here

  }


  public void setAlwaysUsePostLoginUrl(boolean alwaysUsePostLoginUrl) {
    AuthenticationSuccessHandler successHandler = getSuccessHandler();
    if (successHandler instanceof AbstractAuthenticationTargetUrlRequestHandler) {
      AbstractAuthenticationTargetUrlRequestHandler h = (AbstractAuthenticationTargetUrlRequestHandler) successHandler;
      h.setAlwaysUseDefaultTargetUrl(alwaysUsePostLoginUrl);
    } else {
      throw new IllegalStateException("can't set alwaysUsePostLoginUrl on unknown successHandler, type is " + successHandler.getClass().getName());
    }
  }

View Full Code Here

TOP

Related Classes of org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

org.springframework.social.security.SocialAuthenticationFilter

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.