Package org.springframework.security.web.context
Classes which are responsible for maintaining the security context between HTTP
requests.
-
Interface Summary Interface Description SecurityContextRepository Strategy used for persisting aSecurityContextbetween requests. -
Class Summary Class Description AbstractSecurityWebApplicationInitializer Registers theDelegatingFilterProxyto use the springSecurityFilterChain before any other registeredFilter.HttpRequestResponseHolder Used to pass the incoming request toSecurityContextRepository.loadContext(HttpRequestResponseHolder), allowing the method to swap the request for a wrapped version, as well as returning the SecurityContext value.HttpSessionSecurityContextRepository ASecurityContextRepositoryimplementation which stores the security context in theHttpSessionbetween requests.NullSecurityContextRepository SaveContextOnUpdateOrErrorResponseWrapper Base class for response wrappers which encapsulate the logic for storing a security context and which store theSecurityContextwhen asendError(),sendRedirect,getOutputStream().close(),getOutputStream().flush(),getWriter().close(), orgetWriter().flush()happens on the same thread that thisSaveContextOnUpdateOrErrorResponseWrapperwas created.SecurityContextPersistenceFilter Populates theSecurityContextHolderwith information obtained from the configuredSecurityContextRepositoryprior to the request and stores it back in the repository once the request has completed and clearing the context holder.