Class WebScriptSSOAuthenticationFilter

  • All Implemented Interfaces:
    org.alfresco.repo.management.subsystems.ActivateableBean, DependencyInjectedFilter

    public class WebScriptSSOAuthenticationFilter
    extends BaseAuthenticationFilter
    implements DependencyInjectedFilter, org.alfresco.repo.management.subsystems.ActivateableBean
    WebScript aware Authentication Filter Class. Takes into account the authentication setting in the descriptor for the webscript before chaining to the downstream authentication filters. If authentication is not required then chains with the NO_AUTH_REQUIRED request attribute set, which should cause any downstream authentication filter to bypass authentication checks.
    Author:
    Kevin Roast, dward
    • Constructor Detail

      • WebScriptSSOAuthenticationFilter

        public WebScriptSSOAuthenticationFilter()
    • Method Detail

      • setContainer

        public void setContainer​(org.springframework.extensions.webscripts.RuntimeContainer container)
        Parameters:
        container - the container to set
      • setActive

        public final void setActive​(boolean active)
        Activates or deactivates the bean
        Parameters:
        active - true if the bean is active and initialization should complete
      • isActive

        public final boolean isActive()
        Specified by:
        isActive in interface org.alfresco.repo.management.subsystems.ActivateableBean
      • doFilter

        public void doFilter​(javax.servlet.ServletContext context,
                             javax.servlet.ServletRequest sreq,
                             javax.servlet.ServletResponse sresp,
                             javax.servlet.FilterChain chain)
                      throws java.io.IOException,
                             javax.servlet.ServletException
        Description copied from interface: DependencyInjectedFilter
        The doFilter method of the Filter is called by the container each time a request/response pair is passed through the chain due to a client request for a resource at the end of the chain. The FilterChain passed in to this method allows the Filter to pass on the request and response to the next entity in the chain.

        A typical implementation of this method would follow the following pattern:-
        1. Examine the request
        2. Optionally wrap the request object with a custom implementation to filter content or headers for input filtering
        3. Optionally wrap the response object with a custom implementation to filter content or headers for output filtering
        4. a) Either invoke the next entity in the chain using the FilterChain object ( chain.doFilter()),
        4. b) or not pass on the request/response pair to the next entity in the filter chain to block the request processing
        5. Directly set headers on the response after invocation of the next entity in the filter chain.

        Specified by:
        doFilter in interface DependencyInjectedFilter
        Throws:
        java.io.IOException
        javax.servlet.ServletException