waffle.servlet.spi

Class BasicSecurityFilterProvider

java.lang.Object

waffle.servlet.spi.BasicSecurityFilterProvider

All Implemented Interfaces:

SecurityFilterProvider

public class BasicSecurityFilterProvider
extends java.lang.Object
implements SecurityFilterProvider

A Basic authentication security filter provider. http://tools.ietf.org/html/rfc2617

Author:

dblock[at]dblock[dot]org

Constructor Summary

Constructors

Constructor and Description
BasicSecurityFilterProvider(IWindowsAuthProvider auth)

Method Summary

Methods

Modifier and Type	Method and Description
IWindowsIdentity	doFilter(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Execute filter.
java.lang.String	getRealm() Protection space.
void	initParameter(java.lang.String parameterName, java.lang.String parameterValue) Init configuration parameters.
boolean	isPrincipalException(javax.servlet.http.HttpServletRequest request) Returns true if despite having a principal authentication needs to happen.
boolean	isSecurityPackageSupported(java.lang.String securityPackage) Tests whether a specific security package is supported.
void	sendUnauthorized(javax.servlet.http.HttpServletResponse response) Add authentication method headers.
void	setRealm(java.lang.String realm) Set the protection space.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BasicSecurityFilterProvider

public BasicSecurityFilterProvider(IWindowsAuthProvider auth)

Method Detail

doFilter

public IWindowsIdentity doFilter(javax.servlet.http.HttpServletRequest request,
                        javax.servlet.http.HttpServletResponse response)
                          throws java.io.IOException

Description copied from interface: SecurityFilterProvider

Execute filter.

Specified by:

doFilter in interface SecurityFilterProvider

Parameters:

request - Http Request

response - Http Response

Returns:

A Windows identity in case authentication completed or NULL if not. Thrown exceptions should be caught and processed as 401 Access Denied.

Throws:

java.io.IOException

isPrincipalException

public boolean isPrincipalException(javax.servlet.http.HttpServletRequest request)

Description copied from interface: SecurityFilterProvider

Returns true if despite having a principal authentication needs to happen.

Specified by:

isPrincipalException in interface SecurityFilterProvider

Parameters:

request - Http Request

Returns:

True if authentication is required.

isSecurityPackageSupported

public boolean isSecurityPackageSupported(java.lang.String securityPackage)

Description copied from interface: SecurityFilterProvider

Tests whether a specific security package is supported.

Specified by:

isSecurityPackageSupported in interface SecurityFilterProvider

Parameters:

securityPackage - Security package.

Returns:

True if the security package is supported, false otherwise.

sendUnauthorized

public void sendUnauthorized(javax.servlet.http.HttpServletResponse response)

Description copied from interface: SecurityFilterProvider

Add authentication method headers.

Specified by:

sendUnauthorized in interface SecurityFilterProvider

Parameters:

response - Http Response

getRealm

public java.lang.String getRealm()

Protection space.

Returns:

Name of the protection space.

setRealm

public void setRealm(java.lang.String realm)

Set the protection space.

Parameters:

realm - Protection space name.

initParameter

public void initParameter(java.lang.String parameterName,
                 java.lang.String parameterValue)

Init configuration parameters.

Specified by:

initParameter in interface SecurityFilterProvider

Parameters:

parameterName - Parameter name.

parameterValue - Parameter value.