org.springframework.security.securechannel
Class SecureChannelProcessor

java.lang.Object
  org.springframework.security.securechannel.SecureChannelProcessor

All Implemented Interfaces:

InitializingBean, ChannelProcessor

public class SecureChannelProcessor
extends Object
implements InitializingBean, ChannelProcessor

Ensures channel security is active by review of HttpServletRequest.isSecure() responses.

The class responds to one case-sensitive keyword, getSecureKeyword(). If this keyword is detected, HttpServletRequest.isSecure() is used to determine the channel security offered. If channel security is not present, the configured ChannelEntryPoint is called. By default the entry point is RetryWithHttpsEntryPoint.

The default secureKeyword is REQUIRES_SECURE_CHANNEL.

Version:

$Id$

Author:

Ben Alex

Constructor Summary

SecureChannelProcessor()

Method Summary

void	afterPropertiesSet()
void	decide(FilterInvocation invocation, ConfigAttributeDefinition config) Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested ConfigAttributeDefinition.
ChannelEntryPoint	getEntryPoint()
String	getSecureKeyword()
void	setEntryPoint(ChannelEntryPoint entryPoint)
void	setSecureKeyword(String secureKeyword)
boolean	supports(ConfigAttribute attribute) Indicates whether this ChannelProcessor is able to process the passed ConfigAttribute.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecureChannelProcessor

public SecureChannelProcessor()

Method Detail

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception

Specified by:

afterPropertiesSet in interface InitializingBean

Throws:

Exception

decide

public void decide(FilterInvocation invocation,
                   ConfigAttributeDefinition config)
            throws IOException,
                   ServletException

Description copied from interface: ChannelProcessor

Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested ConfigAttributeDefinition.

Specified by:

decide in interface ChannelProcessor

Parameters:

invocation - DOCUMENT ME!

config - DOCUMENT ME!

Throws:

IOException - DOCUMENT ME!

ServletException - DOCUMENT ME!

getEntryPoint

public ChannelEntryPoint getEntryPoint()

getSecureKeyword

public String getSecureKeyword()

setEntryPoint

public void setEntryPoint(ChannelEntryPoint entryPoint)

setSecureKeyword

public void setSecureKeyword(String secureKeyword)

supports

public boolean supports(ConfigAttribute attribute)

Description copied from interface: ChannelProcessor

Indicates whether this ChannelProcessor is able to process the passed ConfigAttribute.

This allows the ChannelProcessingFilter to check every configuration attribute can be consumed by the configured ChannelDecisionManager.

Specified by:

supports in interface ChannelProcessor

Parameters:

attribute - a configuration attribute that has been configured against the ChannelProcessingFilter

Returns:

true if this ChannelProcessor can support the passed configuration attribute