waffle.util

Class AuthorizationHeader

java.lang.Object

waffle.util.AuthorizationHeader

public class AuthorizationHeader
extends java.lang.Object

Authorization header.

Author:

dblock[at]dblock[dot]org

Constructor Summary

Constructors

Constructor and Description
AuthorizationHeader(javax.servlet.http.HttpServletRequest request)

Method Summary

Methods

Modifier and Type	Method and Description
java.lang.String	getHeader()
java.lang.String	getSecurityPackage() Returns a supported security package string.
java.lang.String	getToken()
byte[]	getTokenBytes()
boolean	isNtlmType1Message()
boolean	isNtlmType1PostAuthorizationHeader() When using NTLM authentication and the browser is making a POST request, it preemptively sends a Type 2 authentication message (without the POSTed data).
boolean	isNull()
java.lang.String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

AuthorizationHeader

public AuthorizationHeader(javax.servlet.http.HttpServletRequest request)

Method Detail

getHeader

public java.lang.String getHeader()

isNull

public boolean isNull()

getSecurityPackage

public java.lang.String getSecurityPackage()

Returns a supported security package string.

Returns:

Negotiate or NTLM.

toString

public java.lang.String toString()

Overrides:

toString in class java.lang.Object

getToken

public java.lang.String getToken()

getTokenBytes

public byte[] getTokenBytes()

isNtlmType1Message

public boolean isNtlmType1Message()

isNtlmType1PostAuthorizationHeader

public boolean isNtlmType1PostAuthorizationHeader()

When using NTLM authentication and the browser is making a POST request, it preemptively sends a Type 2 authentication message (without the POSTed data). The server responds with a 401, and the browser sends a Type 3 request with the POSTed data. This is to avoid the situation where user's credentials might be potentially invalid, and all this data is being POSTed across the wire.

Returns:

True if request is an NTLM POST or PUT with an Authorization header and no data.