com.hfg.webapp.filter.auth

Class AuthenticationFilter

java.lang.Object

com.hfg.webapp.filter.auth.AuthenticationFilter

All Implemented Interfaces:

javax.servlet.Filter

Direct Known Subclasses:

LDAP_AuthenticationFilter

public abstract class AuthenticationFilter
extends Object
implements javax.servlet.Filter

Base class for LDAP_AuthenticationFilter and GooglePlusAuthenticationFilter.

Field Summary

Fields

Modifier and Type	Field and Description
static String	AUTH_FILTER
static String	AUTH_USERNAME_COOKIE_NAME
static String	BROWSER_SESSION_AUTH_COOKIE_NAME
protected static String	DOMAIN
protected static String	PASSWORD
static String	REDIRECT_URL
protected static String	REMEMBER_USERNAME
static String	SESSION_USER
static String	STATE
protected static String	TIMEZONE_OFFSET
protected static String	USERNAME

Constructor Summary

Constructors

Constructor and Description
AuthenticationFilter()

Method Summary

Modifier and Type	Method and Description
protected boolean	browserSessionCookieIsValid(HfgCookie inSessionCookie)
protected static UserImpl	createUserObjFromBrowserSessionCookie(HfgCookie inSessionCookie)
void	doFilter(javax.servlet.ServletRequest inRequest, javax.servlet.ServletResponse inResponse, javax.servlet.FilterChain inFilterChain)
protected HfgCookie	generateAuthUsernameCookie(String inUsername, String inDomain)
protected HfgCookie	generateBrowserSessionCookie(UserImpl inUser)
Set<String>	getAllowedUserDomains()
String	getAppName()
static HfgCookie	getAuthUsernameCookie(javax.servlet.http.HttpServletRequest inRequest)
protected static LoginCredentials	getAuthUsernameCookieValue(HfgCookie inCookie)
static HfgCookie	getBrowserSessionCookie(javax.servlet.http.HttpServletRequest inRequest)
Pattern	getBypassPattern()
KeyPair	getECKeyPair()
protected static KeyPair	getECKeyPair(File inKeyDir)
javax.servlet.FilterConfig	getFilterConfig()
String	getInitialURL()
boolean	getPreserveRequestedURL()
static UserImpl	getUser(javax.servlet.http.HttpServletRequest inRequest)
static UserImpl	getUser(javax.servlet.http.HttpSession inSession)
boolean	getUseSessionCookie()
void	init(javax.servlet.FilterConfig inFilterConfig)
protected abstract void	innerDoFilter(javax.servlet.ServletRequest inRequest, javax.servlet.ServletResponse inResponse, javax.servlet.FilterChain inFilterChain)
boolean	isAllowedUserDomain(String inValue)
void	logout(javax.servlet.http.HttpServletRequest inServletRequest, javax.servlet.http.HttpServletResponse inServletResponse)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.Filter

destroy

Field Detail

SESSION_USER

public static final String SESSION_USER

See Also:

Constant Field Values

STATE

public static final String STATE

See Also:

Constant Field Values

REDIRECT_URL

public static final String REDIRECT_URL

See Also:

Constant Field Values

AUTH_FILTER

public static final String AUTH_FILTER

See Also:

Constant Field Values

BROWSER_SESSION_AUTH_COOKIE_NAME

public static final String BROWSER_SESSION_AUTH_COOKIE_NAME

See Also:

Constant Field Values

AUTH_USERNAME_COOKIE_NAME

public static final String AUTH_USERNAME_COOKIE_NAME

See Also:

Constant Field Values

USERNAME

protected static final String USERNAME

See Also:

Constant Field Values

PASSWORD

protected static final String PASSWORD

See Also:

Constant Field Values

DOMAIN

protected static final String DOMAIN

See Also:

Constant Field Values

TIMEZONE_OFFSET

protected static final String TIMEZONE_OFFSET

See Also:

Constant Field Values

REMEMBER_USERNAME

protected static final String REMEMBER_USERNAME

See Also:

Constant Field Values

Constructor Detail

AuthenticationFilter

public AuthenticationFilter()

Method Detail

getUser

public static UserImpl getUser(javax.servlet.http.HttpServletRequest inRequest)

getUser

public static UserImpl getUser(javax.servlet.http.HttpSession inSession)

init

public void init(javax.servlet.FilterConfig inFilterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

doFilter

public void doFilter(javax.servlet.ServletRequest inRequest,
                     javax.servlet.ServletResponse inResponse,
                     javax.servlet.FilterChain inFilterChain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

logout

public void logout(javax.servlet.http.HttpServletRequest inServletRequest,
                   javax.servlet.http.HttpServletResponse inServletResponse)
            throws Exception

Throws:

Exception

getBrowserSessionCookie

public static HfgCookie getBrowserSessionCookie(javax.servlet.http.HttpServletRequest inRequest)

getFilterConfig

public javax.servlet.FilterConfig getFilterConfig()

getInitialURL

public String getInitialURL()

getPreserveRequestedURL

public boolean getPreserveRequestedURL()

getAppName

public String getAppName()

getUseSessionCookie

public boolean getUseSessionCookie()

getECKeyPair

public KeyPair getECKeyPair()

getBypassPattern

public Pattern getBypassPattern()

getAllowedUserDomains

public Set<String> getAllowedUserDomains()

isAllowedUserDomain

public boolean isAllowedUserDomain(String inValue)

innerDoFilter

protected abstract void innerDoFilter(javax.servlet.ServletRequest inRequest,
                                      javax.servlet.ServletResponse inResponse,
                                      javax.servlet.FilterChain inFilterChain)
                               throws Exception

Throws:

Exception

getECKeyPair

protected static KeyPair getECKeyPair(File inKeyDir)

browserSessionCookieIsValid

protected boolean browserSessionCookieIsValid(HfgCookie inSessionCookie)
                                       throws Exception

Throws:

Exception

generateBrowserSessionCookie

protected HfgCookie generateBrowserSessionCookie(UserImpl inUser)
                                          throws Exception

Throws:

Exception

createUserObjFromBrowserSessionCookie

protected static UserImpl createUserObjFromBrowserSessionCookie(HfgCookie inSessionCookie)
                                                         throws XMLException,
                                                                IOException

Throws:

XMLException

IOException

generateAuthUsernameCookie

protected HfgCookie generateAuthUsernameCookie(String inUsername,
                                               String inDomain)
                                        throws Exception

Throws:

Exception

getAuthUsernameCookie

public static HfgCookie getAuthUsernameCookie(javax.servlet.http.HttpServletRequest inRequest)

getAuthUsernameCookieValue

protected static LoginCredentials getAuthUsernameCookieValue(HfgCookie inCookie)