Examples of org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

Package org.springframework.security.web.authentication.www

Examples of org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint
Used by the SecurityEnforcementFilter to commence authentication via the {@link DigestAuthenticationFilter}.
The nonce sent back to the user agent will be valid for the period indicated by {@link #setNonceValiditySeconds(int)}. By default this is 300 seconds. Shorter times should be used if replay attacks are a major concern. Larger values can be used if performance is a greater concern. This class correctly presents the stale=true header when the nonce has expired, so properly implemented user agents will automatically renegotiate with a new nonce value (i.e. without presenting a new password dialog box to the user). @author Ben Alex

        return digestAuthenticationFilter;
    }


    @Bean
    public DigestAuthenticationEntryPoint digestEntryPoint() {
        DigestAuthenticationEntryPoint digestAuthenticationEntryPoint = new DigestAuthenticationEntryPoint();
        digestAuthenticationEntryPoint.setKey(env.getProperty("app.security.digest.key", DEFAULT_DIGEST_KEY));
        digestAuthenticationEntryPoint.setRealmName(env.getProperty("app.security.digest.realm", DEFAULT_DIGEST_REALM));
        digestAuthenticationEntryPoint.setNonceValiditySeconds(Integer.valueOf(env.getProperty("app.security.digest.validity", DEFAULT_DIGEST_NONCE_VALIDITY)));
        return digestAuthenticationEntryPoint;
    }

View Full Code Here

    @Before
    public void setup() {
        this.password = "password";
        request = new MockHttpServletRequest();


        entryPoint = new DigestAuthenticationEntryPoint();
        entryPoint.setKey("key");
        entryPoint.setRealmName("Spring Security");
        filter = new DigestAuthenticationFilter();
        filter.setUserDetailsService(new UserDetailsService() {
            public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {

View Full Code Here


        
        DigestAuthenticationFilterConfig authConfig = 
                (DigestAuthenticationFilterConfig) config;


        aep = new DigestAuthenticationEntryPoint();
        aep.setKey(config.getName());
        aep.setNonceValiditySeconds(
                authConfig.getNonceValiditySeconds()<=0 ? 300 : authConfig.getNonceValiditySeconds());
        aep.setRealmName(GeoServerSecurityManager.REALM);
        try {

View Full Code Here

TOP

Related Classes of org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

org.geoserver.security.filter.GeoServerDigestAuthenticationFilter

org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessorsDigestTests

org.vaadin.spring.samples.mvp.security.config.DigestAuthConfig

javax.servlet.http.HttpServletResponse

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.