Package org.springframework.security.web.context
package org.springframework.security.web.context
Classes which are responsible for maintaining the security context between HTTP
requests.
-
ClassDescriptionRegisters the
DelegatingFilterProxyto use the springSecurityFilterChain before any other registeredFilter.Used to pass the incoming request toSecurityContextRepository.loadContext(HttpRequestResponseHolder), allowing the method to swap the request for a wrapped version, as well as returning the SecurityContext value.ASecurityContextRepositoryimplementation which stores the security context in theHttpSessionbetween requests.Stores theSecurityContexton aServletRequest.setAttribute(String, Object)so that it can be restored when different dispatch types occur.Base class for response wrappers which encapsulate the logic for storing a security context and which store theSecurityContextwhen asendError(),sendRedirect,getOutputStream().close(),getOutputStream().flush(),getWriter().close(), orgetWriter().flush()happens on the same thread that thisSaveContextOnUpdateOrErrorResponseWrapperwas created.AFilterthat uses theSecurityContextRepositoryto obtain theSecurityContextand set it on theSecurityContextHolder.Populates theSecurityContextHolderwith information obtained from the configuredSecurityContextRepositoryprior to the request and stores it back in the repository once the request has completed and clearing the context holder.Strategy used for persisting aSecurityContextbetween requests.