|
||||||||||
| PREV NEXT | FRAMES NO FRAMES | |||||||||
WWW-Authenticate
AuthenticationFilter that is capable of automatically performing an authentication attempt
based on the incoming request.Authorization
authenticated for the
request to continue, and if they're not, requires the user to login via the HTTP Basic protocol-specific challenge.SecurityInterceptor for use
in security RequestFilter.SecurityFilterChainFactory.createChain(String) for backwards compatibility.
To be removed in 0.5.0
AuthorizingAnnotationHandler
for annotation.
SecurityInterceptor
instances for method.
SecurityInterceptor
instances for method.
AuthorizingAnnotationHandler object.
DefaultSecurityInterceptor.handler field use annotation.
PropertiesRealmAuthenticationStrategy implementation that throws the first exception it gets
and ignores all subsequent realms.loginUrl you configure.GET.
WWW-Authenticate header.
WWW-Authenticate header scheme that this filter will use when sending
the HTTP Basic challenge response.
AUTHORIZATION_HEADER from the specified ServletRequest.
Authorization header value that this filter will respond to as indicating
a login request.
authorizationHeader.
encoded String obtained from
the request's authorization header.
null if a raw HttpServletResponse.SC_UNAUTHORIZED response should be issued (401 Unauthorized).
true if the request is allowed to proceed through the filter normally, or false
if the request should be handled by the
onAccessDenied(request,response,mappedValue)
method instead.
false to always force authentication (user is never considered authenticated by this filter).
true if the request is a
loginRequest or
if the current subject
is not null, false otherwise.
ServletRequest.isSecure().
true if the specified authzHeader
starts with the same (case-insensitive) characters specified by the
authzScheme, false otherwise.
true if the incoming request is a login request, false otherwise.
true if the request is an HTTP POST,
false otherwise.
true if "rememberMe" should be enabled for the login attempt associated with the
current request, false otherwise.
MethodAnnotationCasterVisitor
visitors.MethodAnnotationCasterisAccessAllowed
method, retaining the mappedValue that was used during configuration.
isAccessAllowed
method.
token and logging subject
with this token.
saveRequestAndRedirectToLogin
and then immediately returns false, thereby preventing the chain from continuing so the redirect may
execute.
true if
isAccessAllowed(Request,Response,Object),
otherwise returns the result of
onAccessDenied(Request,Response,Object).
true allowing unchecked access to the underlying path or resource.
POST.
getLoginUrl and redirects
the request to that url.
WebUtils.saveRequest(request) to save the request
state for reuse later.
SecurityFilterChain.SecurityFilterChain(String, org.apache.tapestry5.services.HttpServletRequestHandler, org.apache.shiro.util.PatternMatcher) instead
401 (Unauthorized) status as well as the
response's AUTHENTICATE_HEADER.
WWW-Authenticate header.
WWW-Authenticate header scheme that this filter will use when sending the
HTTP Basic challenge response.
Authorization header value that this filter will respond to as indicating a
login request.
ShiroException and Subject
is not authenticated.
|
||||||||||
| PREV NEXT | FRAMES NO FRAMES | |||||||||