org.springframework.flex.security
Class SessionFixationProtectionPostProcessor

java.lang.Object
  org.springframework.flex.security.SessionFixationProtectionPostProcessor

All Implemented Interfaces:

java.util.EventListener, org.springframework.beans.factory.config.BeanFactoryPostProcessor, org.springframework.context.ApplicationEventPublisherAware, org.springframework.context.ApplicationListener

public class SessionFixationProtectionPostProcessor
extends java.lang.Object
implements org.springframework.beans.factory.config.BeanFactoryPostProcessor, org.springframework.context.ApplicationEventPublisherAware, org.springframework.context.ApplicationListener

BeanFactoryPostProcessor implementation that inspects the BeanFactory for Spring Security configuration settings and installs the FlexSessionInvalidatingAuthenticationListener if Spring Security is detected and session fixation protection is enabled.

This class will be configured automatically when Spring Security integration is enabled via the xml config namespace.

Author:

Jeremy Grelle

Nested Class Summary

static class

SessionFixationProtectionPostProcessor.PriorityOrderedRequestContextFilter Filter to ensure the request context gets stored before the Spring Security filter chain is invoked so that the FlexSessionInvalidatingAuthenticationListener has access to the request attributes.

Constructor Summary

SessionFixationProtectionPostProcessor()

Method Summary

void	onApplicationEvent(org.springframework.context.ApplicationEvent event)
void	postProcessBeanFactory(org.springframework.beans.factory.config.ConfigurableListableBeanFactory beanFactory)
void	setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionFixationProtectionPostProcessor

public SessionFixationProtectionPostProcessor()

Method Detail

postProcessBeanFactory

public void postProcessBeanFactory(org.springframework.beans.factory.config.ConfigurableListableBeanFactory beanFactory)
                            throws org.springframework.beans.BeansException

Specified by:

postProcessBeanFactory in interface org.springframework.beans.factory.config.BeanFactoryPostProcessor

Throws:

org.springframework.beans.BeansException

setApplicationEventPublisher

public void setApplicationEventPublisher(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

Specified by:

setApplicationEventPublisher in interface org.springframework.context.ApplicationEventPublisherAware

onApplicationEvent

public void onApplicationEvent(org.springframework.context.ApplicationEvent event)

Specified by:

onApplicationEvent in interface org.springframework.context.ApplicationListener