Package org.codice.ddf.security.filter.websso

Class WebSSOFilter

java.lang.Object

org.codice.ddf.security.filter.websso.WebSSOFilter

All Implemented Interfaces:

org.codice.ddf.platform.filter.SecurityFilter

public class WebSSOFilter
extends Object
implements org.codice.ddf.platform.filter.SecurityFilter

Serves as the main security filter that works in conjunction with a number of handlers to protect a variety of contexts each using different authentication schemes and policies. The basic premise is that this filter is installed on any registered http context and it handles delegating the authentication to the specified handlers in order to normalize and consolidate a session token.

Constructor Summary

Constructors

Constructor	Description
WebSSOFilter()

Method Summary

Modifier and Type	Method	Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, org.codice.ddf.platform.filter.SecurityFilterChain filterChain)	Provides filtering for every registered http context.
org.codice.ddf.security.policy.context.ContextPolicyManager	getContextPolicyManager()
List<org.codice.ddf.security.handler.api.AuthenticationHandler>	getHandlerList()
void	init()
void	setContextPolicyManager(org.codice.ddf.security.policy.context.ContextPolicyManager contextPolicyManager)
void	setHandlerList(List<org.codice.ddf.security.handler.api.AuthenticationHandler> handlerList)
void	setSecurityLogger(ddf.security.audit.SecurityLogger securityLogger)
void	setSessionFactory(ddf.security.http.SessionFactory sessionFactory)
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

WebSSOFilter

public WebSSOFilter()

Method Details

init

public void init()

Specified by:

init in interface org.codice.ddf.platform.filter.SecurityFilter

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
 javax.servlet.ServletResponse servletResponse,
 org.codice.ddf.platform.filter.SecurityFilterChain filterChain)
              throws IOException,
org.codice.ddf.platform.filter.AuthenticationException

Provides filtering for every registered http context. Checks for an existing session. If it doesn't exist, it then looks up the current context and determines the proper handlers to include in the chain. Each handler is given the opportunity to locate their specific tokens if they exist or to go off and obtain them. Once a token has been received that we know how to process , we attach them to the request and continue down the chain.

Specified by:

doFilter in interface org.codice.ddf.platform.filter.SecurityFilter

Parameters:

servletRequest - incoming http request

servletResponse - response stream for returning the response

filterChain - chain of filters to be invoked following this filter

Throws:

IOException

org.codice.ddf.platform.filter.AuthenticationException

destroy

public void destroy()

Specified by:

destroy in interface org.codice.ddf.platform.filter.SecurityFilter

toString

public String toString()

Overrides:

toString in class Object

getHandlerList

public List<org.codice.ddf.security.handler.api.AuthenticationHandler> getHandlerList()

setHandlerList

public void setHandlerList(List<org.codice.ddf.security.handler.api.AuthenticationHandler> handlerList)

getContextPolicyManager

public org.codice.ddf.security.policy.context.ContextPolicyManager getContextPolicyManager()

setContextPolicyManager

public void setContextPolicyManager(org.codice.ddf.security.policy.context.ContextPolicyManager contextPolicyManager)

setSessionFactory

public void setSessionFactory(ddf.security.http.SessionFactory sessionFactory)

setSecurityLogger

public void setSecurityLogger(ddf.security.audit.SecurityLogger securityLogger)