Package org.springframework.security.web.authentication
package org.springframework.security.web.authentication
Authentication processing mechanisms, which respond to the submission of authentication
credentials using various protocols (eg BASIC, CAS, form login etc).
-
ClassDescriptionAbstract processor of browser-based HTTP-based authentication requests.Base class containing the logic used by strategies which handle redirection to a URL and are passed an
Authenticationobject as part of the contract.Detects if there is noAuthenticationobject in theSecurityContextHolder, and populates it with one if needed.A strategy used for converting from aHttpServletRequestto anAuthenticationof particular type.Adapts aAuthenticationEntryPointinto aAuthenticationFailureHandlerStrategy used to handle a failed authentication attempt.AFilterthat performs authentication of a particular request.Strategy used to handle a successful user authentication.AAuthenticationConverter, that iterates over multipleAuthenticationConverter.AnAuthenticationEntryPointwhich selects a concreteAuthenticationEntryPointbased on aRequestMatcherevaluation.AnAuthenticationFailureHandlerthat delegates to otherAuthenticationFailureHandlerinstances based upon the type ofAuthenticationExceptionpassed intoDelegatingAuthenticationFailureHandler.onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException).Uses the internal map of exceptions types to URLs to determine the destination on authentication failure.Forward Authentication Failure HandlerForward Authentication Success HandlerIn the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked.AnAuthenticationEntryPointthat sends a genericHttpStatusas a response.Used by theExceptionTranslationFilterto commence a form login authentication via theUsernamePasswordAuthenticationFilter.AnAuthenticationEntryPointimplementation that does nothing.Implementation ofNullRememberMeServicesthat does nothing.Implement by a class that is capable of providing a remember-me service.AnAuthenticationManagerResolverthat returns aAuthenticationManagerinstances based upon the type ofHttpServletRequestpassed intoRequestMatcherDelegatingAuthenticationManagerResolver.resolve(HttpServletRequest).A builder forRequestMatcherDelegatingAuthenticationManagerResolver.An authentication success strategy which can make use of theDefaultSavedRequestwhich may have been stored in the session by theExceptionTranslationFilter.AuthenticationFailureHandler which performs a redirect to the value of thedefaultFailureUrlproperty when the onAuthenticationFailure method is called.AuthenticationSuccessHandler which can be configured with a default URL which users should be sent to upon successful authentication.Processes an authentication form submission.A holder of selected HTTP details related to a web authentication request.Implementation ofAuthenticationDetailsSourcewhich builds the details object from an HttpServletRequest object, creating aWebAuthenticationDetails.