org.jasig.schedassist.web.security
Class RemoteUserAuthenticationProcessingFilterImpl

java.lang.Object
  org.springframework.web.filter.GenericFilterBean
      org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter
          org.jasig.schedassist.web.security.RemoteUserAuthenticationProcessingFilterImpl

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.ApplicationEventPublisherAware, org.springframework.context.MessageSourceAware, org.springframework.web.context.ServletContextAware

public class RemoteUserAuthenticationProcessingFilterImpl
extends org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

AbstractAuthenticationProcessingFilter implemented to inspect the REMOTE_USER environment variable as the source for authentication. This was developed against Pubcookie and will work for Shibboleth or cas You need to add protection around the url: web application context + "/security_check" Where web application context is the location of your app ("/scheduling-assistant" by default).

Version:

$Id: RemoteUserAuthenticationProcessingFilterImpl.java $

Author:

Nicholas Blair

Field Summary

protected static String

DEFAULT_FILTER_PROCESSES_URL

Fields inherited from class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

authenticationDetailsSource, eventPublisher, messages, SPRING_SECURITY_LAST_EXCEPTION_KEY

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

protected	RemoteUserAuthenticationProcessingFilterImpl()
protected	RemoteUserAuthenticationProcessingFilterImpl(String defaultFilterProcessesUrl)

Method Summary

org.springframework.security.core.Authentication	attemptAuthentication(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)
int	getOrder()

Methods inherited from class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

afterPropertiesSet, doFilter, getAllowSessionCreation, getAuthenticationDetailsSource, getAuthenticationManager, getFilterProcessesUrl, getRememberMeServices, requiresAuthentication, setAllowSessionCreation, setApplicationEventPublisher, setAuthenticationDetailsSource, setAuthenticationFailureHandler, setAuthenticationManager, setAuthenticationSuccessHandler, setContinueChainBeforeSuccessfulAuthentication, setFilterProcessesUrl, setMessageSource, setRememberMeServices, setSessionAuthenticationStrategy, successfulAuthentication, unsuccessfulAuthentication

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, destroy, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_FILTER_PROCESSES_URL

protected static final String DEFAULT_FILTER_PROCESSES_URL

See Also:

Constant Field Values

Constructor Detail

RemoteUserAuthenticationProcessingFilterImpl

protected RemoteUserAuthenticationProcessingFilterImpl()

RemoteUserAuthenticationProcessingFilterImpl

protected RemoteUserAuthenticationProcessingFilterImpl(String defaultFilterProcessesUrl)

Method Detail

attemptAuthentication

public org.springframework.security.core.Authentication attemptAuthentication(javax.servlet.http.HttpServletRequest request,
                                                                              javax.servlet.http.HttpServletResponse response)
                                                                       throws org.springframework.security.core.AuthenticationException

Specified by:

attemptAuthentication in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Throws:

org.springframework.security.core.AuthenticationException

getOrder

public int getOrder()