org.springframework.flex.config
Class SessionFixationProtectionConfigurer

java.lang.Object
  org.springframework.flex.config.SessionFixationProtectionConfigurer

All Implemented Interfaces:

org.springframework.beans.factory.config.BeanFactoryPostProcessor

public class SessionFixationProtectionConfigurer
extends java.lang.Object
implements org.springframework.beans.factory.config.BeanFactoryPostProcessor

BeanFactoryPostProcessor implementation that inspects the BeanFactory for Spring Security configuration settings and installs the FlexSessionInvalidatingAuthenticationListener if Spring Security is detected and session fixation protection is enabled.

This class will be configured automatically when Spring Security integration is enabled via the xml config namespace.

Author:

Jeremy Grelle

Nested Class Summary

static class

SessionFixationProtectionConfigurer.PriorityOrderedRequestContextFilter Filter to ensure the request context gets stored before the Spring Security filter chain is invoked so that the FlexSessionInvalidatingAuthenticationListener has access to the request attributes.

Constructor Summary

SessionFixationProtectionConfigurer()

Method Summary

void	postProcessBeanFactory(org.springframework.beans.factory.config.ConfigurableListableBeanFactory beanFactory)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionFixationProtectionConfigurer

public SessionFixationProtectionConfigurer()

Method Detail

postProcessBeanFactory

public void postProcessBeanFactory(org.springframework.beans.factory.config.ConfigurableListableBeanFactory beanFactory)
                            throws org.springframework.beans.BeansException

Specified by:

postProcessBeanFactory in interface org.springframework.beans.factory.config.BeanFactoryPostProcessor

Throws:

org.springframework.beans.BeansException