org.nuxeo.ecm.platform.ui.web.auth

Class NuxeoAuthenticationFilter

java.lang.Object

org.nuxeo.ecm.platform.ui.web.auth.NuxeoAuthenticationFilter

All Implemented Interfaces:

javax.servlet.Filter

Direct Known Subclasses:

NuxeoLauncher

public class NuxeoAuthenticationFilter
extends Object
implements javax.servlet.Filter

Servlet filter handling Nuxeo authentication (JAAS + EJB).

Also handles logout and identity switch.

Author:

Thierry Delprat, Bogdan Stefanescu, Anahide Tchertchian, Florent Guillaume

Field Summary

Fields

Modifier and Type	Field and Description
static String	DEFAULT_START_PAGE
static String	LOGIN_DOMAIN LoginContext domain name in use by default in Nuxeo.

Constructor Summary

Constructors

Constructor and Description
NuxeoAuthenticationFilter()

Method Summary

Methods

Modifier and Type	Method and Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
void	doFilterInternal(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
NuxeoAuthenticationPlugin	getAuthenticator(CachableUserIdentificationInfo ci)
static String	getRequestedPage(javax.servlet.ServletRequest request)
static String	getRequestedUrl(javax.servlet.http.HttpServletRequest httpRequest)
void	init(javax.servlet.FilterConfig config)
static LoginContext	loginAs(String username) Does a forced login as the given user.
boolean	saveRequestedURLBeforeRedirect(javax.servlet.http.HttpServletRequest httpRequest, javax.servlet.http.HttpServletResponse httpResponse) Save requested URL before redirecting to login form.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_START_PAGE

public static final String DEFAULT_START_PAGE

See Also:

Constant Field Values

LOGIN_DOMAIN

public static final String LOGIN_DOMAIN

LoginContext domain name in use by default in Nuxeo.

See Also:

Constant Field Values

Constructor Detail

NuxeoAuthenticationFilter

public NuxeoAuthenticationFilter()

Method Detail

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter

doFilter

public void doFilter(javax.servlet.ServletRequest request,
            javax.servlet.ServletResponse response,
            javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

doFilterInternal

public void doFilterInternal(javax.servlet.ServletRequest request,
                    javax.servlet.ServletResponse response,
                    javax.servlet.FilterChain chain)
                      throws IOException,
                             javax.servlet.ServletException

Throws:

IOException

javax.servlet.ServletException

getAuthenticator

public NuxeoAuthenticationPlugin getAuthenticator(CachableUserIdentificationInfo ci)

init

public void init(javax.servlet.FilterConfig config)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

saveRequestedURLBeforeRedirect

public boolean saveRequestedURLBeforeRedirect(javax.servlet.http.HttpServletRequest httpRequest,
                                     javax.servlet.http.HttpServletResponse httpResponse)

Save requested URL before redirecting to login form.

Returns true if target url is a valid startup page.

getRequestedUrl

public static String getRequestedUrl(javax.servlet.http.HttpServletRequest httpRequest)

getRequestedPage

public static String getRequestedPage(javax.servlet.ServletRequest request)

loginAs

public static LoginContext loginAs(String username)
                            throws LoginException

Does a forced login as the given user. Bypasses all authentication checks.

Parameters:

username - the user name

Returns:

the login context, which MUST be used for logout in a finally block

Throws:

LoginException