Package org.springframework.security.web.context
Classes which are responsible for maintaining the security context between HTTP requests.
-
Interface Summary Interface Description SecurityContextRepository Strategy used for persisting aSecurityContext
between requests. -
Class Summary Class Description AbstractSecurityWebApplicationInitializer Registers theDelegatingFilterProxy
to use the springSecurityFilterChain before any other registeredFilter
.HttpRequestResponseHolder Used to pass the incoming request toSecurityContextRepository.loadContext(HttpRequestResponseHolder)
, allowing the method to swap the request for a wrapped version, as well as returning the SecurityContext value.HttpSessionSecurityContextRepository ASecurityContextRepository
implementation which stores the security context in theHttpSession
between requests.NullSecurityContextRepository SaveContextOnUpdateOrErrorResponseWrapper Base class for response wrappers which encapsulate the logic for storing a security context and which store theSecurityContext
when asendError()
,sendRedirect
,getOutputStream().close()
,getOutputStream().flush()
,getWriter().close()
, orgetWriter().flush()
happens on the same thread that thisSaveContextOnUpdateOrErrorResponseWrapper
was created.SecurityContextPersistenceFilter Populates theSecurityContextHolder
with information obtained from the configuredSecurityContextRepository
prior to the request and stores it back in the repository once the request has completed and clearing the context holder.