| Java Source Code / Java Documentation » Security » spring security 3.0.1 » org.springframework.security.web.authentication |
| org.springframework.security.web.authentication | ||
| Authentication processing mechanisms, which respond to the submission of authentication credentials using various protocols (eg BASIC, CAS, form login etc). | ||
| Java Source File Name | Type | Comment |
| AbstractAuthenticationProcessingFilter.java | Class | Abstract processor of browser-based HTTP-based authentication requests.
Authentication ProcessThe filter requires that you set the authenticationManager property. |
| AbstractAuthenticationTargetUrlRequestHandler.java | Class | Base class containing the logic used by strategies which handle redirection to a URL and are passed an Authentication object as part of the contract. |
| AbstractProcessingFilter.java | Class | Renamed class, retained for backwards compatibility. |
| AnonymousAuthenticationFilter.java | Class | Detects if there is no Authentication object in the SecurityContextHolder , and populates it with one if needed. |
| AuthenticationFailureHandler.java | Interface | Strategy used to handle a failed authentication attempt.
Typical behaviour might be to redirect the user to the authentication page (in the case of a form login) to allow them to try again. |
| AuthenticationProcessingFilter.java | Class | Renamed class, retained for backwards compatibility. |
| AuthenticationProcessingFilterEntryPoint.java | Class | Renamed class, retained for backwards compatibility. |
| AuthenticationSuccessHandler.java | Interface | Strategy used to handle a successful user authentication.
Implementations can do whatever they want but typical behaviour would be to control the navigation to the subsequent destination (using a redirect or a forward). |
| ExceptionMappingAuthenticationFailureHandler.java | Class | Uses the internal map of exceptions types to URLs to determine the destination on authentication failure. |
| Http403ForbiddenEntryPoint.java | Class | In the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked. Therefore this class isn't actually responsible for the commencement of authentication, as it is in the case of other providers. |
| LoginUrlAuthenticationEntryPoint.java | Class | Used by the ExceptionTranslationFilter to commence a form login authentication via the UsernamePasswordAuthenticationFilter . |
| NullRememberMeServices.java | Class | |
| RememberMeServices.java | Interface | Implement by a class that is capable of providing a remember-me service.
Spring Security filters (namely org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter and RememberMeAuthenticationFilter will call the methods provided by an implementation of this interface. Implementations may implement any type of remember-me capability they wish. Rolling cookies (as per http://fishbowl.pastiche.org/2004/01/19/persistent_login_cookie_best_practice) can be used, as can simple implementations that don't require a persistent store. |
| SavedRequestAwareAuthenticationSuccessHandler.java | Class | An authentication success strategy which can make use of the DefaultSavedRequest which may have been stored in the session by the ExceptionTranslationFilter . |
| SimpleUrlAuthenticationFailureHandler.java | Class | AuthenticationFailureHandler which performs a redirect to the value of the SimpleUrlAuthenticationFailureHandler.setDefaultFailureUrldefaultFailureUrl property when the onAuthenticationFailure method is called. |
| SimpleUrlAuthenticationSuccessHandler.java | Class | AuthenticationSuccessHandler which can be configured with a default URL which users should be sent to upon successful authentication. |
| UsernamePasswordAuthenticationFilter.java | Class | Processes an authentication form submission. |
| WebAuthenticationDetails.java | Class | A holder of selected HTTP details related to a web authentication request. |
| WebAuthenticationDetailsSource.java | Class | Implementation of
AuthenticationDetailsSource which builds the details object from
an HttpServletRequest object.
By default will create an instance of |