lumis.portal.authentication
Class AuthenticationFilter

java.lang.Object
  lumis.portal.authentication.AuthenticationFilter

All Implemented Interfaces:

Filter

public class AuthenticationFilter
extends Object
implements Filter

Filter that do authentication handling on requests done to the portal.

This filter tries to obtain a SessionConfig to the authenticated user and place it available in the current thread. The following rules are applied when trying to obtain a SessionConfig:

1. Tries to recover the current SessionConfig from HttpSession. This session id is verified against the cookie corresponding id, if any.
2. Tries to recreate the SessionConfig using the request cookies.
3. If the SessionConfig has expired, it is discarded.
4. If no suitable SessionConfig was obtained, a guest session is created.

Since:

4.0.7

Constructor Summary

AuthenticationFilter()

Method Summary

void	destroy()
void	doFilter(ServletRequest req, ServletResponse resp, FilterChain chain)
void	init(FilterConfig filterConfig)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthenticationFilter

public AuthenticationFilter()

Method Detail

init

public void init(FilterConfig filterConfig)
          throws ServletException

Specified by:

init in interface Filter

Throws:

ServletException

destroy

public void destroy()

Specified by:

destroy in interface Filter

doFilter

public void doFilter(ServletRequest req,
                     ServletResponse resp,
                     FilterChain chain)
              throws IOException,
                     ServletException

Specified by:

doFilter in interface Filter

Throws:

IOException

ServletException