com.xpert.security.filter

Class AbstractSecurityFilter

java.lang.Object

com.xpert.security.filter.AbstractSecurityFilter

All Implemented Interfaces:

javax.servlet.Filter

public abstract class AbstractSecurityFilter
extends Object
implements javax.servlet.Filter

Author:

ayslan

Constructor Summary

Constructors

Constructor and Description
AbstractSecurityFilter()

Method Summary

Methods

Modifier and Type	Method and Description
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
Object	getFromSession(javax.servlet.ServletRequest request, String attribute)
abstract String	getHomePage() Page to redirect if autentication fails
abstract String[]	getIgnoredUrls() URLs the are ignored on requests after user authenticated
boolean	getMoreAuthentication(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response) Custom autentication.
AbstractUserSession	getSessionBean(javax.servlet.ServletRequest request) Return a AbstractUserSession.
abstract String	getUserSessionName() Name of session bean to get from HttpSession
boolean	hasUrl(javax.servlet.http.HttpServletRequest request) Return true if the current session contains the current URL
boolean	isAuthenticated(AbstractUserSession userSession) Return true if userSession has a user authenticated calling method AbstractUserSession.isAuthenticated
boolean	isDebug() Log events on filter
void	onError() Define a logic to error.
void	redirectHome(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.Filter

destroy, init

Constructor Detail

AbstractSecurityFilter

public AbstractSecurityFilter()

Method Detail

getUserSessionName

public abstract String getUserSessionName()

Name of session bean to get from HttpSession

Returns:

getMoreAuthentication

public boolean getMoreAuthentication(javax.servlet.ServletRequest request,
                            javax.servlet.ServletResponse response)

Custom autentication. Define here more authetication logic

Parameters:

request -

response -

Returns:

getHomePage

public abstract String getHomePage()

Page to redirect if autentication fails

Returns:

onError

public void onError()

Define a logic to error. Called on exception in method "chain.doFilter(request, response);"

getIgnoredUrls

public abstract String[] getIgnoredUrls()

URLs the are ignored on requests after user authenticated

Returns:

getSessionBean

public AbstractUserSession getSessionBean(javax.servlet.ServletRequest request)

Return a AbstractUserSession. This method can be override a custom way to obtain a AbstractUserSession instance.

Parameters:

request - a ServletRequest from filter method "doFilter

Returns:

AbstractUserSession from session usually a Session Scoped

doFilter

public void doFilter(javax.servlet.ServletRequest request,
            javax.servlet.ServletResponse response,
            javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

getFromSession

public Object getFromSession(javax.servlet.ServletRequest request,
                    String attribute)

Parameters:

request -

attribute - Attribute name of the object in session

Returns:

a Object from session

hasUrl

public boolean hasUrl(javax.servlet.http.HttpServletRequest request)

Return true if the current session contains the current URL

Parameters:

request -

Returns:

redirectHome

public void redirectHome(javax.servlet.ServletRequest request,
                javax.servlet.ServletResponse response)

isDebug

public boolean isDebug()

Log events on filter

Returns:

isAuthenticated

public boolean isAuthenticated(AbstractUserSession userSession)

Return true if userSession has a user authenticated calling method AbstractUserSession.isAuthenticated

Parameters:

userSession -

Returns: