org.springframework.security.ui.x509
Class X509ProcessingFilter

java.lang.Object
  org.springframework.security.ui.x509.X509ProcessingFilter

All Implemented Interfaces:

Filter, InitializingBean, ApplicationEventPublisherAware

Deprecated. Use X509PreAuthenticatedProcessingFilter from the preauth.x509 package instead

public class X509ProcessingFilter
extends Object
implements Filter, InitializingBean, ApplicationEventPublisherAware

Processes the X.509 certificate submitted by a client browser when HTTPS is used with client-authentication enabled.

An X509AuthenticationToken is created with the certificate as the credentials.

The configured authentication manager is expected to supply a provider which can handle this token (usually an instance of X509AuthenticationProvider).

If authentication is successful, an InteractiveAuthenticationSuccessEvent will be published to the application context. No events will be published if authentication was unsuccessful, because this would generally be recorded via an AuthenticationManager-specific application event.

Version:

$Id$

Author:

Luke Taylor

Constructor Summary

X509ProcessingFilter()
Deprecated.

Method Summary

void	afterPropertiesSet() Deprecated.
void	destroy() Deprecated.
void	doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain) Deprecated. This method first checks for an existing, non-null authentication in the secure context.
void	init(FilterConfig ignored) Deprecated.
void	setApplicationEventPublisher(ApplicationEventPublisher context) Deprecated.
void	setAuthenticationDetailsSource(AuthenticationDetailsSource authenticationDetailsSource) Deprecated.
void	setAuthenticationManager(AuthenticationManager authenticationManager) Deprecated.
protected void	successfulAuthentication(HttpServletRequest request, HttpServletResponse response, Authentication authResult) Deprecated. Puts the Authentication instance returned by the authentication manager into the secure context.
protected void	unsuccessfulAuthentication(HttpServletRequest request, HttpServletResponse response, AuthenticationException failed) Deprecated. Ensures the authentication object in the secure context is set to null when authentication fails.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

X509ProcessingFilter

public X509ProcessingFilter()

Deprecated.

Method Detail

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception

Deprecated.

Specified by:

afterPropertiesSet in interface InitializingBean

Throws:

Exception

destroy

public void destroy()

Deprecated.

Specified by:

destroy in interface Filter

doFilter

public void doFilter(ServletRequest request,
                     ServletResponse response,
                     FilterChain filterChain)
              throws IOException,
                     ServletException

Deprecated.

This method first checks for an existing, non-null authentication in the secure context. If one is found it does nothing.

If no authentication object exists, it attempts to obtain the client authentication certificate from the request. If there is no certificate present then authentication is skipped. Otherwise a new authentication request containing the certificate will be passed to the configured AuthenticationManager.

If authentication is successful the returned token will be stored in the secure context. Otherwise it will be set to null. In either case, the request proceeds through the filter chain.

Specified by:

doFilter in interface Filter

Parameters:

request - DOCUMENT ME!

response - DOCUMENT ME!

filterChain - DOCUMENT ME!

Throws:

IOException - DOCUMENT ME!

ServletException - DOCUMENT ME!

init

public void init(FilterConfig ignored)
          throws ServletException

Deprecated.

Specified by:

init in interface Filter

Throws:

ServletException

setApplicationEventPublisher

public void setApplicationEventPublisher(ApplicationEventPublisher context)

Deprecated.

Specified by:

setApplicationEventPublisher in interface ApplicationEventPublisherAware

setAuthenticationDetailsSource

public void setAuthenticationDetailsSource(AuthenticationDetailsSource authenticationDetailsSource)

Deprecated.

setAuthenticationManager

public void setAuthenticationManager(AuthenticationManager authenticationManager)

Deprecated.

successfulAuthentication

protected void successfulAuthentication(HttpServletRequest request,
                                        HttpServletResponse response,
                                        Authentication authResult)
                                 throws IOException

Deprecated.

Puts the Authentication instance returned by the authentication manager into the secure context.

Parameters:

request - DOCUMENT ME!

response - DOCUMENT ME!

authResult - DOCUMENT ME!

Throws:

IOException - DOCUMENT ME!

unsuccessfulAuthentication

protected void unsuccessfulAuthentication(HttpServletRequest request,
                                          HttpServletResponse response,
                                          AuthenticationException failed)

Deprecated.

Ensures the authentication object in the secure context is set to null when authentication fails.

Parameters:

request - DOCUMENT ME!

response - DOCUMENT ME!

failed - DOCUMENT ME!