Class FilterSecurityInterceptor
java.lang.Object
org.springframework.security.access.intercept.AbstractSecurityInterceptor
org.springframework.security.web.access.intercept.FilterSecurityInterceptor
- All Implemented Interfaces:
jakarta.servlet.Filter
,org.springframework.beans.factory.Aware
,org.springframework.beans.factory.InitializingBean
,org.springframework.context.ApplicationEventPublisherAware
,org.springframework.context.MessageSourceAware
@Deprecated
public class FilterSecurityInterceptor
extends AbstractSecurityInterceptor
implements jakarta.servlet.Filter
Deprecated.
Performs security handling of HTTP resources via a filter implementation.
The SecurityMetadataSource
required by this security interceptor is of
type FilterInvocationSecurityMetadataSource
.
Refer to AbstractSecurityInterceptor
for details on the workflow.
-
Field Summary
Fields inherited from class org.springframework.security.access.intercept.AbstractSecurityInterceptor
logger, messages
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionvoid
destroy()
Deprecated.Not used (we rely on IoC container lifecycle services instead)void
doFilter
(jakarta.servlet.ServletRequest request, jakarta.servlet.ServletResponse response, jakarta.servlet.FilterChain chain) Deprecated.Method that is actually called by the filter chain.Class<?>
Deprecated.Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing.Deprecated.void
init
(jakarta.servlet.FilterConfig arg0) Deprecated.Not used (we rely on IoC container lifecycle services instead)void
invoke
(FilterInvocation filterInvocation) Deprecated.boolean
Deprecated.Indicates whether once-per-request handling will be observed.Deprecated.void
setObserveOncePerRequest
(boolean observeOncePerRequest) Deprecated.void
Deprecated.Methods inherited from class org.springframework.security.access.intercept.AbstractSecurityInterceptor
afterInvocation, afterPropertiesSet, beforeInvocation, finallyInvocation, getAccessDecisionManager, getAfterInvocationManager, getAuthenticationManager, getRunAsManager, isAlwaysReauthenticate, isRejectPublicInvocations, isValidateConfigAttributes, setAccessDecisionManager, setAfterInvocationManager, setAlwaysReauthenticate, setApplicationEventPublisher, setAuthenticationManager, setMessageSource, setPublishAuthorizationSuccess, setRejectPublicInvocations, setRunAsManager, setSecurityContextHolderStrategy, setValidateConfigAttributes
-
Constructor Details
-
FilterSecurityInterceptor
public FilterSecurityInterceptor()Deprecated.
-
-
Method Details
-
init
public void init(jakarta.servlet.FilterConfig arg0) Deprecated.Not used (we rely on IoC container lifecycle services instead)- Specified by:
init
in interfacejakarta.servlet.Filter
- Parameters:
arg0
- ignored
-
destroy
public void destroy()Deprecated.Not used (we rely on IoC container lifecycle services instead)- Specified by:
destroy
in interfacejakarta.servlet.Filter
-
doFilter
public void doFilter(jakarta.servlet.ServletRequest request, jakarta.servlet.ServletResponse response, jakarta.servlet.FilterChain chain) throws IOException, jakarta.servlet.ServletException Deprecated.Method that is actually called by the filter chain. Simply delegates to theinvoke(FilterInvocation)
method.- Specified by:
doFilter
in interfacejakarta.servlet.Filter
- Parameters:
request
- the servlet requestresponse
- the servlet responsechain
- the filter chain- Throws:
IOException
- if the filter chain failsjakarta.servlet.ServletException
- if the filter chain fails
-
getSecurityMetadataSource
Deprecated. -
obtainSecurityMetadataSource
Deprecated.- Specified by:
obtainSecurityMetadataSource
in classAbstractSecurityInterceptor
-
setSecurityMetadataSource
Deprecated. -
getSecureObjectClass
Deprecated.Description copied from class:AbstractSecurityInterceptor
Indicates the type of secure objects the subclass will be presenting to the abstract parent for processing. This is used to ensure collaborators wired to theAbstractSecurityInterceptor
all support the indicated secure object class.- Specified by:
getSecureObjectClass
in classAbstractSecurityInterceptor
- Returns:
- the type of secure object the subclass provides services for
-
invoke
public void invoke(FilterInvocation filterInvocation) throws IOException, jakarta.servlet.ServletException Deprecated.- Throws:
IOException
jakarta.servlet.ServletException
-
isObserveOncePerRequest
public boolean isObserveOncePerRequest()Deprecated.Indicates whether once-per-request handling will be observed. By default this istrue
, meaning theFilterSecurityInterceptor
will only execute once-per-request. Sometimes users may wish it to execute more than once per request, such as when JSP forwards are being used and filter security is desired on each included fragment of the HTTP request.- Returns:
true
(the default) if once-per-request is honoured, otherwisefalse
ifFilterSecurityInterceptor
will enforce authorizations for each and every fragment of the HTTP request.
-
setObserveOncePerRequest
public void setObserveOncePerRequest(boolean observeOncePerRequest) Deprecated.
-
AuthorizationFilter
instead