org.molgenis.security.session

Class ApiSessionExpirationFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.molgenis.security.session.ApiSessionExpirationFilter

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.web.context.ServletContextAware

public class ApiSessionExpirationFilter
extends org.springframework.web.filter.GenericFilterBean

Check if the requested sessionId is valid for an api call.

If No JSESSIONID is provided it session is valid.

If session is invalid a 401 is returned to the client.

Because the REST api doesn't need authentication this Filter must be used in addition to the AjaxAwareLoginUrlAuthenticationEntryPoint that only works on protected urls.

Field Summary

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor and Description
ApiSessionExpirationFilter()

Method Summary

Modifier and Type	Method and Description
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, destroy, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ApiSessionExpirationFilter

public ApiSessionExpirationFilter()

Method Detail

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Throws:

IOException

javax.servlet.ServletException