HttpHandler responsible for setting up the AuthenticatedSessionManager for cached authentications and registering a NotificationReceiver to receive the security notifications. This handler also forces the session to change its session ID on sucessful authentication.

Nested and Inner Type Summary

Modifier and Type	Class and Description
private class	CachedAuthenticatedSessionHandler.SecurityNotificationReceiver
private class	CachedAuthenticatedSessionHandler.ServletAuthenticatedSessionManager

Field Summary

Modifier and Type	Field and Description
public static final String	ATTRIBUTE_NAME
private final HttpHandler	next
public static final String	NO_ID_CHANGE_REQUIRED
private final NotificationReceiver	NOTIFICATION_RECEIVER
private final ServletContextImpl	servletContext
private final AuthenticatedSessionManager	SESSION_MANAGER

Access	Constructor and Description
public	CachedAuthenticatedSessionHandler(final HttpHandler next, final ServletContextImpl servletContext)

Method Summary

Modifier and Type	Method and Description
public void	handleRequest(HttpServerExchange the HTTP request/response exchange exchange) Implements io.undertow.server.HttpHandler.handleRequest. Handle the request.
private boolean	isCacheable(final SecurityNotification notification)
protected Session	underlyingSession(HttpSessionImpl httpSession)

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Field Detail

ATTRIBUTE_NAME	back to summary
public static final String ATTRIBUTE_NAME

next	back to summary
private final HttpHandler next

NO_ID_CHANGE_REQUIRED	back to summary
public static final String NO_ID_CHANGE_REQUIRED

NOTIFICATION_RECEIVER	back to summary
private final NotificationReceiver NOTIFICATION_RECEIVER

servletContext	back to summary
private final ServletContextImpl servletContext

SESSION_MANAGER	back to summary
private final AuthenticatedSessionManager SESSION_MANAGER

CachedAuthenticatedSessionHandler	back to summary
public CachedAuthenticatedSessionHandler(final HttpHandler next, final ServletContextImpl servletContext)

Method Detail

handleRequest	back to summary
public void handleRequest(HttpServerExchange exchange) throws Exception Implements io.undertow.server.HttpHandler.handleRequest. Doc from io.undertow.server.HttpHandler.handleRequest. Handle the request. Parameters exchange:HttpServerExchange the HTTP request/response exchange Annotations @Override

handleRequest

back to summary

public void handleRequest(HttpServerExchange exchange) throws Exception

Implements io.undertow.server.HttpHandler.handleRequest.

Doc from io.undertow.server.HttpHandler.handleRequest.

Handle the request.

Parameters

exchange:HttpServerExchange: the HTTP request/response exchange

Annotations

@Override

isCacheable	back to summary
private boolean isCacheable(final SecurityNotification notification)

underlyingSession	back to summary
protected Session underlyingSession(HttpSessionImpl httpSession)

io.undertow.servlet.handlers.security back to summary

private Class CachedAuthenticatedSessionHandler.SecurityNotificationReceiver

Class Inheritance

extends Object
implements NotificationReceiver

java.lang.Object
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.SecurityNotificationReceiver

All Implemented Interfaces

io.undertow.security.api.NotificationReceiver

Constructor Summary

Access	Constructor and Description
private	SecurityNotificationReceiver()

Method Summary

Modifier and Type	Method and Description
public void	handleNotification(SecurityNotification notification) Implements io.undertow.security.api.NotificationReceiver.handleNotification. Handle a security related notification.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Constructor Detail

SecurityNotificationReceiver	back to summary
private SecurityNotificationReceiver()

Method Detail

handleNotification back to summary

handleNotification	back to summary
public void handleNotification(SecurityNotification notification) Implements io.undertow.security.api.NotificationReceiver.handleNotification. Doc from io.undertow.security.api.NotificationReceiver.handleNotification. Handle a security related notification. The `SecurityNotification` that is sent to be handled is a security event that has occurred, this is not an opportunity for that event to be validated - any Exception thrown by the handler will be logged but will not affect the result of the security event. The notifications are sent on the same thread that is currently processing the request that triggered the notification, if the handling of the notification is likely to be blocking then it should be dispatched to it's own worker thread. The one exception to this may be where the notification must be sure to have been handled before the response continues. Annotations @Override

public void handleNotification(SecurityNotification notification)

Implements io.undertow.security.api.NotificationReceiver.handleNotification.

Doc from io.undertow.security.api.NotificationReceiver.handleNotification.

Handle a security related notification. The SecurityNotification that is sent to be handled is a security event that has occurred, this is not an opportunity for that event to be validated - any Exception thrown by the handler will be logged but will not affect the result of the security event. The notifications are sent on the same thread that is currently processing the request that triggered the notification, if the handling of the notification is likely to be blocking then it should be dispatched to it's own worker thread. The one exception to this may be where the notification must be sure to have been handled before the response continues.

Annotations

@Override

io.undertow.servlet.handlers.security back to summary

private Class CachedAuthenticatedSessionHandler.ServletAuthenticatedSessionManager

Class Inheritance

extends Object
implements AuthenticatedSessionManager

java.lang.Object
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.ServletAuthenticatedSessionManager

All Implemented Interfaces

io.undertow.security.api.AuthenticatedSessionManager

Constructor Summary

Access	Constructor and Description
private	ServletAuthenticatedSessionManager()

Method Summary

Modifier and Type	Method and Description
public void	clearSession(HttpServerExchange exchange) Implements io.undertow.security.api.AuthenticatedSessionManager.clearSession.
public AuthenticatedSessionManager.AuthenticatedSession	lookupSession(HttpServerExchange exchange) Implements io.undertow.security.api.AuthenticatedSessionManager.lookupSession.

Inherited from java.lang.Object:: clone equals finalize getClass hashCode notify notifyAll toString wait wait wait

Constructor Detail

ServletAuthenticatedSessionManager	back to summary
private ServletAuthenticatedSessionManager()

Method Detail

clearSession	back to summary
public void clearSession(HttpServerExchange exchange) Implements io.undertow.security.api.AuthenticatedSessionManager.clearSession. Annotations @Override

clearSession

back to summary

public void clearSession(HttpServerExchange exchange)

Implements io.undertow.security.api.AuthenticatedSessionManager.clearSession.

Annotations

@Override

lookupSession	back to summary
public AuthenticatedSessionManager.AuthenticatedSession lookupSession(HttpServerExchange exchange) Implements io.undertow.security.api.AuthenticatedSessionManager.lookupSession. Annotations @Override

lookupSession

back to summary

public AuthenticatedSessionManager.AuthenticatedSession lookupSession(HttpServerExchange exchange)

Implements io.undertow.security.api.AuthenticatedSessionManager.lookupSession.

Annotations