org.springframework.flex.security3
Class SessionFixationProtectionPostProcessor

java.lang.Object
  extended by org.springframework.flex.security3.SessionFixationProtectionPostProcessor
All Implemented Interfaces:
org.springframework.beans.factory.config.BeanFactoryPostProcessor, org.springframework.context.ApplicationEventPublisherAware

public class SessionFixationProtectionPostProcessor
extends java.lang.Object
implements org.springframework.beans.factory.config.BeanFactoryPostProcessor, org.springframework.context.ApplicationEventPublisherAware

BeanFactoryPostProcessor implementation that inspects the BeanFactory for Spring Security configuration settings and installs the FlexSessionInvalidatingAuthenticationListener if Spring Security is detected and session fixation protection is enabled.

This class will be configured automatically when Spring Security integration is enabled via the xml config namespace.

Author:
Jeremy Grelle

Nested Class Summary
static class SessionFixationProtectionPostProcessor.PriorityOrderedRequestContextFilter
          Filter to ensure the request context gets stored before the Spring Security filter chain is invoked so that the FlexSessionInvalidatingAuthenticationListener has access to the request attributes.
 
Constructor Summary
SessionFixationProtectionPostProcessor()
           
 
Method Summary
 void onApplicationEvent(org.springframework.context.event.ContextRefreshedEvent event)
           
 void postProcessBeanFactory(org.springframework.beans.factory.config.ConfigurableListableBeanFactory beanFactory)
          
 void setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)
          
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Constructor Detail

SessionFixationProtectionPostProcessor

public SessionFixationProtectionPostProcessor()
Method Detail

postProcessBeanFactory

public void postProcessBeanFactory(org.springframework.beans.factory.config.ConfigurableListableBeanFactory beanFactory)
                            throws org.springframework.beans.BeansException

Specified by:
postProcessBeanFactory in interface org.springframework.beans.factory.config.BeanFactoryPostProcessor
Throws:
org.springframework.beans.BeansException

setApplicationEventPublisher

public void setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

Specified by:
setApplicationEventPublisher in interface org.springframework.context.ApplicationEventPublisherAware

onApplicationEvent

public void onApplicationEvent(org.springframework.context.event.ContextRefreshedEvent event)