org.springframework.security.web.authentication

Interface AuthenticationFailureHandler

All Known Implementing Classes:

DelegatingAuthenticationFailureHandler, ExceptionMappingAuthenticationFailureHandler, ForwardAuthenticationFailureHandler, SimpleUrlAuthenticationFailureHandler

public interface AuthenticationFailureHandler

Strategy used to handle a failed authentication attempt.

Typical behaviour might be to redirect the user to the authentication page (in the case of a form login) to allow them to try again. More sophisticated logic might be implemented depending on the type of the exception. For example, a CredentialsExpiredException might cause a redirect to a web controller which allowed the user to change their password.

Since:

3.0

Method Summary

Modifier and Type	Method and Description
void	onAuthenticationFailure(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, AuthenticationException exception) Called when an authentication attempt fails.

Method Detail

onAuthenticationFailure

void onAuthenticationFailure(javax.servlet.http.HttpServletRequest request,
                             javax.servlet.http.HttpServletResponse response,
                             AuthenticationException exception)
                      throws java.io.IOException,
                             javax.servlet.ServletException

Called when an authentication attempt fails.

Parameters:

request - the request during which the authentication attempt occurred.

response - the response.

exception - the exception which was thrown to reject the authentication request.

Throws:

java.io.IOException

javax.servlet.ServletException