org.springframework.security.ui.preauth
Class PreAuthenticatedProcessingFilterEntryPoint

java.lang.Object
  org.springframework.security.ui.preauth.PreAuthenticatedProcessingFilterEntryPoint

All Implemented Interfaces:

Ordered, AuthenticationEntryPoint

public class PreAuthenticatedProcessingFilterEntryPoint
extends Object
implements AuthenticationEntryPoint, Ordered

In the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked.

Therefore this class isn't actually responsible for the commencement of authentication, as it is in the case of other providers. It will be called if the user is rejected by the AbstractPreAuthenticatedProcessingFilter, resulting in a null authentication.

The commence method will always return an HttpServletResponse.SC_FORBIDDEN (403 error).

This code is based on X509ProcessingFilterEntryPoint.

Since:

2.0

Author:

Luke Taylor, Ruud Senden

See Also:

ExceptionTranslationFilter

Field Summary

Fields inherited from interface org.springframework.core.Ordered

HIGHEST_PRECEDENCE, LOWEST_PRECEDENCE

Constructor Summary

PreAuthenticatedProcessingFilterEntryPoint()

Method Summary

void	commence(ServletRequest request, ServletResponse response, AuthenticationException arg2) Always returns a 403 error code to the client.
int	getOrder()
void	setOrder(int i)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PreAuthenticatedProcessingFilterEntryPoint

public PreAuthenticatedProcessingFilterEntryPoint()

Method Detail

commence

public void commence(ServletRequest request,
                     ServletResponse response,
                     AuthenticationException arg2)
              throws IOException,
                     ServletException

Always returns a 403 error code to the client.

Specified by:

commence in interface AuthenticationEntryPoint

Parameters:

request - that resulted in an AuthenticationException

response - so that the user agent can begin authentication

arg2 - that caused the invocation

Throws:

IOException

ServletException

getOrder

public int getOrder()

Specified by:

getOrder in interface Ordered

setOrder

public void setOrder(int i)