Spring Security custom filter registration with Java config -


i trying setup pre-authentication authorisation using spring security, similar site minder external system authentication , saves login information in cookie. happen need redirect external url.

i tried doing implementation of abstractpreauthenticatedprocessingfilter doesn't work because httpservletresponse object not available.

a more appropriate way seems to add custom filter checks cookie , redirection , once cookies available passes control forward spring security filter. how can register custom filter in java configuration based spring security application? appreciated.

the common way redirect user external authentication interface using authenticationentrypoint, example loginurlauthenticationentrypoint. entry point automatically invoked spring security whenever determines user needs authenticated.

once user returns application, should hit custom filter extends abstractpreauthenticatedprocessingfilter , extracts username cookie/header/token (after perhaps validity , integrity checks) in method getpreauthenticatedprincipal.

the spring configuration similar to:

<security:http entry-point-ref="externalauthentication">     <security:custom-filter after="basic_auth_filter" ref="cookieauthentication"/>     <security:intercept-url pattern="/**" access="is_authenticated_fully"/> </security:http>  <bean id="externalauthentication" class="org.springframework.security.web.authentication.loginurlauthenticationentrypoint">     <constructor-arg value="http://server.local/authenticationservice"/> </bean>  <bean id="cookieauthentication" class="custom class extending org.springframework.security.web.authentication.preauth.abstractpreauthenticatedprocessingfilter">     ... </bean>

Comments

Post a Comment

Popular posts from this blog

javascript - RequestAnimationFrame not working when exiting fullscreen switching space on Safari -

request animation frame stops working when exiting fullscreen clicking on original space's safari window. fine if fullscreen mode canceled escape key or calling cancelfullscreen(). steps reproduce: open https://dl.dropboxusercontent.com/u/769042/prezi/safari-fullscreen.html click "draw raf", kittie appears click "fullscreen", go fullscreen click "draw raf", kittie appears go space original safari was, showing "click exit fullscreen mode", click anywhere, out fullscreen click "draw raf", nothing happens what handling click calling: window.requestanimationframe(draw); which draws on canvas context: function draw() { ctx.drawimage(img, math.random()*500|0, math.random()*400|0, 100, 100); } i checked .hidden , .visibilitystate, updated correctly. tested on osx 10.9.3, safari 7.0.4 (9537.76.4). has workaround/solution other switching old settimeout? this sounds webkit bug 88940 : using reque
Read more

Python ctypes access violation with const pointer arguments -

i have api i'm trying wrap in python (2.7.6 on win7) code using ctypes. here's api: client_dllfunc bool clientapi search_exporttoclipcopy(clienthsearch handle, int channel, lpctstr filename, const time_t& from, const time_t& to, const bool* cameras, int length, bool usepassword, lpctstr password, bool includetextin = false, bool excludeplayer = false); the issue i'm having cameras argument; , i've had issue other const pointer arguments well. here's how i'm wrapping api: def search_exporttoclipcopy(self, hsearch, csearch, filename, tfrom, tto, cameras, length, usepassword, password, includetextin=true, excludeplayer=false): exporttoclipcopy = self.sdkdll.search_exporttoclipcopy exporttoclipcopy.argtypes = [c_int, c_int, c_wchar_p, c_long, c_long, pointer(c_bool), c_int, c_bool, c_wchar_p, c_bool, c_bool] exporttoclipcopy.restype = c_bool exporttoclipcopy(hsearch, csearch, filename, tfrom, tto, cameras, length, usepassword, pass
Read more