be.atbash.ee.security.sso.server.filter

Class SSOAuthenticatingFilter

java.lang.Object

be.atbash.ee.security.octopus.web.servlet.AbstractFilter

be.atbash.ee.security.octopus.web.servlet.NameableFilter

be.atbash.ee.security.octopus.web.servlet.OncePerRequestFilter

be.atbash.ee.security.octopus.filter.AdviceFilter

be.atbash.ee.security.octopus.filter.PathMatchingFilter

be.atbash.ee.security.octopus.filter.AccessControlFilter

be.atbash.ee.security.octopus.filter.authc.AuthenticationFilter

be.atbash.ee.security.octopus.filter.authc.AuthenticatingFilter

be.atbash.ee.security.sso.server.filter.SSOAuthenticatingFilter

All Implemented Interfaces:

be.atbash.ee.security.octopus.util.Nameable, javax.servlet.Filter

@ApplicationScoped
public class SSOAuthenticatingFilter
extends AuthenticatingFilter

TODO User endpoint must use https. Config parameter to disable this check (as sometime OIDC based server used purely internally.) But when disabled, put a warning message in the log.

Field Summary

Fields inherited from class be.atbash.ee.security.octopus.filter.authc.AuthenticatingFilter

PERMISSIVE

Fields inherited from class be.atbash.ee.security.octopus.filter.authc.AuthenticationFilter

DEFAULT_SUCCESS_URL

Fields inherited from class be.atbash.ee.security.octopus.filter.AccessControlFilter

GET_METHOD, POST_METHOD

Fields inherited from class be.atbash.ee.security.octopus.filter.PathMatchingFilter

appliedPaths

Constructor Summary

Constructors

Constructor and Description
SSOAuthenticatingFilter()

Method Summary

Modifier and Type	Method and Description
protected be.atbash.ee.security.octopus.token.AuthenticationToken	createToken(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response)
void	init()
protected boolean	onAccessDenied(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response)

Methods inherited from class be.atbash.ee.security.octopus.filter.authc.AuthenticatingFilter

cleanup, createToken, createToken, executeLogin, getHost, isAccessAllowed, isPermissive, isRememberMe, onLoginFailure, onLoginSuccess

Methods inherited from class be.atbash.ee.security.octopus.filter.authc.AuthenticationFilter

getSuccessUrl, issueSuccessRedirect, setSuccessUrl

Methods inherited from class be.atbash.ee.security.octopus.filter.AccessControlFilter

getLoginUrl, getSubject, isLoginRequest, onPreHandle, redirectToLogin, saveRequestAndRedirectToLogin, setLoginUrl

Methods inherited from class be.atbash.ee.security.octopus.filter.PathMatchingFilter

getPathConfig, getPathWithinApplication, isEnabled, pathsMatch, pathsMatch, preHandle, processPathConfig, requiresPathConfiguration

Methods inherited from class be.atbash.ee.security.octopus.filter.AdviceFilter

afterCompletion, doFilterInternal, executeChain, postHandle

Methods inherited from class be.atbash.ee.security.octopus.web.servlet.OncePerRequestFilter

disableFilterForRequest, doFilter, getAlreadyFilteredAttributeName, getDisabledForRequestAttributeName, isEnabled

Methods inherited from class be.atbash.ee.security.octopus.web.servlet.NameableFilter

getName, getNames, setName, toStringBuilder

Methods inherited from class be.atbash.ee.security.octopus.web.servlet.AbstractFilter

destroy, init, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

SSOAuthenticatingFilter

public SSOAuthenticatingFilter()

Method Detail

init

@PostConstruct
public void init()

createToken

protected be.atbash.ee.security.octopus.token.AuthenticationToken createToken(javax.servlet.ServletRequest request,
                                                                              javax.servlet.ServletResponse response)

Specified by:

createToken in class AuthenticatingFilter

onAccessDenied

protected boolean onAccessDenied(javax.servlet.ServletRequest request,
                                 javax.servlet.ServletResponse response)
                          throws Exception

Specified by:

onAccessDenied in class AccessControlFilter

Throws:

Exception