org.springframework.security.web.access.channel
Class ChannelDecisionManagerImpl

java.lang.Object
  extended by org.springframework.security.web.access.channel.ChannelDecisionManagerImpl
All Implemented Interfaces:
InitializingBean, ChannelDecisionManager

public class ChannelDecisionManagerImpl
extends Object
implements ChannelDecisionManager, InitializingBean

Implementation of ChannelDecisionManager.

Iterates through each configured ChannelProcessor. If a ChannelProcessor has any issue with the security of the request, it should cause a redirect, exception or whatever other action is appropriate for the ChannelProcessor implementation.

Once any response is committed (ie a redirect is written to the response object), the ChannelDecisionManagerImpl will not iterate through any further ChannelProcessors.

The attribute "ANY_CHANNEL" if applied to a particular URL, the iteration through the channel processors will be skipped (see SEC-494, SEC-335).


Field Summary
static String ANY_CHANNEL
           
 
Constructor Summary
ChannelDecisionManagerImpl()
           
 
Method Summary
 void afterPropertiesSet()
           
 void decide(FilterInvocation invocation, Collection<ConfigAttribute> config)
          Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested list of ConfigAttributes.
protected  List<ChannelProcessor> getChannelProcessors()
           
 void setChannelProcessors(List<?> newList)
           
 boolean supports(ConfigAttribute attribute)
          Indicates whether this ChannelDecisionManager is able to process the passed ConfigAttribute.
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

ANY_CHANNEL

public static final String ANY_CHANNEL
See Also:
Constant Field Values
Constructor Detail

ChannelDecisionManagerImpl

public ChannelDecisionManagerImpl()
Method Detail

afterPropertiesSet

public void afterPropertiesSet()
                        throws Exception
Specified by:
afterPropertiesSet in interface InitializingBean
Throws:
Exception

decide

public void decide(FilterInvocation invocation,
                   Collection<ConfigAttribute> config)
            throws IOException,
                   javax.servlet.ServletException
Description copied from interface: ChannelDecisionManager
Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested list of ConfigAttributes.

Specified by:
decide in interface ChannelDecisionManager
Throws:
IOException
javax.servlet.ServletException

getChannelProcessors

protected List<ChannelProcessor> getChannelProcessors()

setChannelProcessors

public void setChannelProcessors(List<?> newList)

supports

public boolean supports(ConfigAttribute attribute)
Description copied from interface: ChannelDecisionManager
Indicates whether this ChannelDecisionManager is able to process the passed ConfigAttribute.

This allows the ChannelProcessingFilter to check every configuration attribute can be consumed by the configured ChannelDecisionManager.

Specified by:
supports in interface ChannelDecisionManager
Parameters:
attribute - a configuration attribute that has been configured against the ChannelProcessingFilter
Returns:
true if this ChannelDecisionManager can support the passed configuration attribute