org.nuxeo.ecm.platform.ui.web.auth.oauth

Class NuxeoOAuthFilter

java.lang.Object

org.nuxeo.ecm.platform.ui.web.auth.oauth.NuxeoOAuthFilter

All Implemented Interfaces:

NuxeoAuthPreFilter

public class NuxeoOAuthFilter
extends Object
implements NuxeoAuthPreFilter

This Filter is registered as a pre-Filter of NuxeoAuthenticationFilter.

It is used to handle OAuth Authentication :

• 3 legged OAuth negociation
• 2 legged OAuth (Signed fetch)

Author:

tiry

Field Summary

Fields

Modifier and Type	Field and Description
protected static OAuthConsumerRegistry	consumerRegistry
protected static org.apache.commons.logging.Log	log
protected static net.oauth.OAuthValidator	validator

Constructor Summary

Constructors

Constructor and Description
NuxeoOAuthFilter()

Method Summary

Modifier and Type	Method and Description
protected boolean	accept(javax.servlet.ServletRequest request)
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain) Main Filter method Filter.
protected OAuthConsumerRegistry	getOAuthConsumerRegistry()
protected OAuthTokenStore	getOAuthTokenStore()
static String	getRequestURL(javax.servlet.http.HttpServletRequest httpRequest) Get the URL used for this request by checking the X-Forwarded-Proto header used in the request.
protected net.oauth.OAuthValidator	getValidator()
protected boolean	isOAuthSignedRequest(javax.servlet.http.HttpServletRequest httpRequest)
protected void	process(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
protected void	processAccessToken(javax.servlet.http.HttpServletRequest httpRequest, javax.servlet.http.HttpServletResponse httpResponse)
protected void	processAuthorize(javax.servlet.http.HttpServletRequest httpRequest, javax.servlet.http.HttpServletResponse httpResponse)
protected void	processRequestToken(javax.servlet.http.HttpServletRequest httpRequest, javax.servlet.http.HttpServletResponse httpResponse)
protected LoginContext	processSignedRequest(javax.servlet.http.HttpServletRequest httpRequest, javax.servlet.http.HttpServletResponse httpResponse)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

protected static final org.apache.commons.logging.Log log

validator

protected static net.oauth.OAuthValidator validator

consumerRegistry

protected static OAuthConsumerRegistry consumerRegistry

Constructor Detail

NuxeoOAuthFilter

public NuxeoOAuthFilter()

Method Detail

getValidator

protected net.oauth.OAuthValidator getValidator()

getOAuthConsumerRegistry

protected OAuthConsumerRegistry getOAuthConsumerRegistry()

getOAuthTokenStore

protected OAuthTokenStore getOAuthTokenStore()

isOAuthSignedRequest

protected boolean isOAuthSignedRequest(javax.servlet.http.HttpServletRequest httpRequest)

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Description copied from interface: NuxeoAuthPreFilter

Main Filter method Filter. The FilterChain is only composed of the preFilters and the NuxeoAuthenticationFilter

Specified by:

doFilter in interface NuxeoAuthPreFilter

Throws:

IOException

javax.servlet.ServletException

See Also:

FilterChain

accept

protected boolean accept(javax.servlet.ServletRequest request)

process

protected void process(javax.servlet.ServletRequest request,
                       javax.servlet.ServletResponse response,
                       javax.servlet.FilterChain chain)
                throws IOException,
                       javax.servlet.ServletException

Throws:

IOException

javax.servlet.ServletException

processAuthorize

protected void processAuthorize(javax.servlet.http.HttpServletRequest httpRequest,
                                javax.servlet.http.HttpServletResponse httpResponse)
                         throws IOException,
                                javax.servlet.ServletException

Throws:

IOException

javax.servlet.ServletException

processRequestToken

protected void processRequestToken(javax.servlet.http.HttpServletRequest httpRequest,
                                   javax.servlet.http.HttpServletResponse httpResponse)
                            throws IOException,
                                   javax.servlet.ServletException

Throws:

IOException

javax.servlet.ServletException

processAccessToken

protected void processAccessToken(javax.servlet.http.HttpServletRequest httpRequest,
                                  javax.servlet.http.HttpServletResponse httpResponse)
                           throws IOException,
                                  javax.servlet.ServletException

Throws:

IOException

javax.servlet.ServletException

processSignedRequest

protected LoginContext processSignedRequest(javax.servlet.http.HttpServletRequest httpRequest,
                                            javax.servlet.http.HttpServletResponse httpResponse)
                                     throws IOException,
                                            javax.servlet.ServletException

Throws:

IOException

javax.servlet.ServletException

getRequestURL

public static String getRequestURL(javax.servlet.http.HttpServletRequest httpRequest)

Get the URL used for this request by checking the X-Forwarded-Proto header used in the request.

Parameters:

httpRequest -

Returns:

Since:

5.9.5