org.hippoecm.hst.core.container
Class SecurityValve

java.lang.Object
  org.hippoecm.hst.core.container.AbstractValve
      org.hippoecm.hst.core.container.SecurityValve

All Implemented Interfaces:

Valve

public class SecurityValve
extends AbstractValve

SecurityValve

Version:

$Id: SecurityValve.java 31354 2011-11-22 18:56:33Z wko $

Field Summary

protected AuthenticationProvider	authProvider
static String	DESTINATION_ATTR_NAME
static String	SECURITY_EXCEPTION_ATTR_NAME

Fields inherited from class org.hippoecm.hst.core.container.AbstractValve

alwaysRedirectLocationToAbsoluteUrl, componentFactory, componentInvoker, componentWindowFactory, containerConfiguration, defaultPageErrorHandler, hstManager, hstQueryManagerFactory, linkCreator, log, requestContextComponent, siteMapMatcher, siteMenusManager, urlFactory

Constructor Summary

SecurityValve()

Method Summary

protected void	checkAccess(javax.servlet.http.HttpServletRequest servletRequest)
protected Subject	getSubject(javax.servlet.http.HttpServletRequest request)
void	invoke(ValveContext context) Invoke this valve
void	setAuthenticationProvider(AuthenticationProvider authProvider)

Methods inherited from class org.hippoecm.hst.core.container.AbstractValve

destroy, findComponentWindow, findErrorCodeSendingWindow, getComponentFactory, getComponentInvoker, getComponentWindowFactory, getContainerConfiguration, getDefaultPageErrorHandler, getHstManager, getHstQueryManagerFactory, getHstSiteMenusManager, getLinkCreator, getPageErrors, getRequestContextComponent, getSiteMapMatcher, getUrlFactory, handleComponentExceptions, initialize, isAlwaysRedirectLocationToAbsoluteUrl, setAlwaysRedirectLocationToAbsoluteUrl, setComponentFactory, setComponentInvoker, setComponentWindowFactory, setContainerConfiguration, setDefaultPageErrorHandler, setHstManager, setHstQueryManagerFactory, setLinkCreator, setRequestContextComponent, setSiteMapMatcher, setSiteMenusManager, setUrlFactory

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DESTINATION_ATTR_NAME

public static final String DESTINATION_ATTR_NAME

See Also:

Constant Field Values

SECURITY_EXCEPTION_ATTR_NAME

public static final String SECURITY_EXCEPTION_ATTR_NAME

See Also:

Constant Field Values

authProvider

protected AuthenticationProvider authProvider

Constructor Detail

SecurityValve

public SecurityValve()

Method Detail

setAuthenticationProvider

public void setAuthenticationProvider(AuthenticationProvider authProvider)

invoke

public void invoke(ValveContext context)
            throws ContainerException

Description copied from interface: Valve

Invoke this valve

Specified by:

invoke in interface Valve

Specified by:

invoke in class AbstractValve

Throws:

ContainerException

checkAccess

protected void checkAccess(javax.servlet.http.HttpServletRequest servletRequest)
                    throws ContainerSecurityException

Throws:

ContainerSecurityException

getSubject

protected Subject getSubject(javax.servlet.http.HttpServletRequest request)