Examples of org.springframework.security.web.context.SecurityContextPersistenceFilter

Package org.springframework.security.web.context

Examples of org.springframework.security.web.context.SecurityContextPersistenceFilter

org.springframework.security.web.context.SecurityContextPersistenceFilter
Populates the {@link SecurityContextHolder} with information obtained fromthe configured {@link SecurityContextRepository} prior to the request and stores it back in the repositoryonce the request has completed and clearing the context holder. By default it uses an {@link HttpSessionSecurityContextRepository}. See this class for information HttpSession related configuration options.
This filter will only execute once per request, to resolve servlet container (specifically Weblogic) incompatibilities.
This filter MUST be executed BEFORE any authentication processing mechanisms. Authentication processing mechanisms (e.g. BASIC, CAS processing filters etc) expect the SecurityContextHolder to contain a valid SecurityContext by the time they execute.
This is essentially a refactoring of the old HttpSessionContextIntegrationFilter to delegate the storage issues to a separate strategy, allowing for more customization in the way the security context is maintained between requests.
The forceEagerSessionCreation property can be used to ensure that a session is always available before the filter chain executes (the default is false, as this is resource intensive and not recommended). @author Luke Taylor @since 3.0

    }


    @Marker( SpringSecurityServices.class )
    public static HttpServletRequestFilter buildHttpSessionContextIntegrationFilter() throws Exception {


      SecurityContextPersistenceFilter filter = new SecurityContextPersistenceFilter();
        filter.setForceEagerSessionCreation( false );
        filter.afterPropertiesSet();
        return new HttpServletRequestFilterWrapper( filter );
    }

View Full Code Here

    }


    @Marker( SpringSecurityServices.class )
    public static HttpServletRequestFilter buildHttpSessionContextIntegrationFilter() throws Exception {


      SecurityContextPersistenceFilter filter = new SecurityContextPersistenceFilter();
        filter.setForceEagerSessionCreation( false );
        filter.afterPropertiesSet();
        return new HttpServletRequestFilterWrapper( filter );
    }

View Full Code Here

    @Override
    @SuppressWarnings("unchecked")
    public void configure(H http) throws Exception {


        SecurityContextRepository securityContextRepository = http.getSharedObject(SecurityContextRepository.class);
        SecurityContextPersistenceFilter securityContextFilter = new SecurityContextPersistenceFilter(
                securityContextRepository);
        SessionManagementConfigurer<?> sessionManagement = http.getConfigurer(SessionManagementConfigurer.class);
        SessionCreationPolicy sessionCreationPolicy = sessionManagement == null ? null
                : sessionManagement.getSessionCreationPolicy();
        if (SessionCreationPolicy.ALWAYS == sessionCreationPolicy) {
            securityContextFilter.setForceEagerSessionCreation(true);
        }
        securityContextFilter = postProcess(securityContextFilter);
        http.addFilter(securityContextFilter);
    }

View Full Code Here

     *            {@link SecurityContextRepository}
     * @return the {@link SecurityContextRepository} for the specified
     *         {@link HttpServletRequest}
     */
    public static SecurityContextRepository getSecurityContextRepository(HttpServletRequest request) {
        SecurityContextPersistenceFilter filter = findFilter(request, SecurityContextPersistenceFilter.class);
        if(filter == null) {
            return DEFAULT_CONTEXT_REPO;
        }
        return (SecurityContextRepository) ReflectionTestUtils.getField(filter, "repo");
    }

View Full Code Here

     *            the {@link SecurityContextRepository} to set
     * @return the {@link SecurityContextRepository} for the specified
     *         {@link HttpServletRequest}
     */
    public static void setSecurityContextRepository(HttpServletRequest request, SecurityContextRepository securityContextRepository) {
        SecurityContextPersistenceFilter filter = findFilter(request, SecurityContextPersistenceFilter.class);
        if(filter != null) {
            ReflectionTestUtils.setField(filter, "repo", securityContextRepository);
        }
    }

View Full Code Here

    @Override
    @SuppressWarnings("unchecked")
    public void configure(H http) throws Exception {


        SecurityContextRepository securityContextRepository = http.getSharedObject(SecurityContextRepository.class);
        SecurityContextPersistenceFilter securityContextFilter = new SecurityContextPersistenceFilter(
                securityContextRepository);
        SessionManagementConfigurer<?> sessionManagement = http.getConfigurer(SessionManagementConfigurer.class);
        SessionCreationPolicy sessionCreationPolicy = sessionManagement == null ? null
                : sessionManagement.getSessionCreationPolicy();
        if (SessionCreationPolicy.always == sessionCreationPolicy) {
            securityContextFilter.setForceEagerSessionCreation(true);
        }
        securityContextFilter = postProcess(securityContextFilter);
        http.addFilter(securityContextFilter);
    }

View Full Code Here

        
        SecurityContextPersistenceFilterConfig pConfig = 
                (SecurityContextPersistenceFilterConfig) config;
                
        HttpSessionSecurityContextRepository repo = new HttpSessionSecurityContextRepository();
        SecurityContextPersistenceFilter filter = new SecurityContextPersistenceFilter(repo) {
          @Override
        public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
                throws IOException, ServletException {
                 // set the hint for authentcation servlets
                 req.setAttribute(ALLOWSESSIONCREATION_ATTR, isAllowSessionCreation);
                 if (isAllowSessionCreation)
                     ((HttpServletRequest)req).getSession(); // create session if allowed
                 // set the hint for other components
                 req.setAttribute(GeoServerSecurityFilterChainProxy.SECURITY_ENABLED_ATTRIBUTE,Boolean.TRUE);
                 super.doFilter(req, res, chain);
        }  
        };
        isAllowSessionCreation=pConfig.isAllowSessionCreation();
        repo.setAllowSessionCreation(pConfig.isAllowSessionCreation());        
        filter.setForceEagerSessionCreation(false);


        try {
            filter.afterPropertiesSet();
        } catch (ServletException e) {
            throw new RuntimeException(e);
        }
        getNestedFilters().add(filter);        
    }

View Full Code Here


    @Bean
    public Filter securityContextPersistenceFilter() {
        HttpSessionSecurityContextRepository repo = new HttpSessionSecurityContextRepository();
        repo.setSpringSecurityContextKey(keyWithNamespace(HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY));
        return new SecurityContextPersistenceFilter(repo);
    }

View Full Code Here

TOP

Related Classes of org.springframework.security.web.context.SecurityContextPersistenceFilter

nu.localhost.tapestry5.springsecurity.services.SecurityModule

org.geoserver.security.filter.GeoServerSecurityContextPersistenceFilter

org.lightadmin.core.config.context.LightAdminSecurityConfiguration

org.springframework.security.config.annotation.web.configurers.SecurityContextConfigurer

org.springframework.security.core.context.SecurityContext

org.springframework.security.test.web.support.WebTestUtils

javax.servlet.http.HttpServletResponse

javax.servlet.http.HttpServletRequest

javax.servlet.http.HttpSession

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.