waffle.util

Class AuthorizationHeader

java.lang.Object

waffle.util.AuthorizationHeader

public class AuthorizationHeader
extends Object

Authorization header.

Author:

dblock[at]dblock[dot]org

Constructor Summary

Constructors

Constructor and Description
AuthorizationHeader(javax.servlet.http.HttpServletRequest request)

Method Summary

Methods

Modifier and Type	Method and Description
String	getHeader()
String	getSecurityPackage() Returns a supported security package string.
String	getToken()
byte[]	getTokenBytes()
boolean	isNtlmType1Message()
boolean	isNtlmType1PostAuthorizationHeader() When using NTLM authentication and the browser is making a POST request, it preemptively sends a Type 2 authentication message (without the POSTed data).
boolean	isNull()
boolean	isSPNegoMessage()
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

AuthorizationHeader

public AuthorizationHeader(javax.servlet.http.HttpServletRequest request)

Method Detail

getHeader

public String getHeader()

isNull

public boolean isNull()

getSecurityPackage

public String getSecurityPackage()

Returns a supported security package string.

Returns:

Negotiate or NTLM.

toString

public String toString()

Overrides:

toString in class Object

getToken

public String getToken()

getTokenBytes

public byte[] getTokenBytes()

isNtlmType1Message

public boolean isNtlmType1Message()

isSPNegoMessage

public boolean isSPNegoMessage()

isNtlmType1PostAuthorizationHeader

public boolean isNtlmType1PostAuthorizationHeader()

When using NTLM authentication and the browser is making a POST request, it preemptively sends a Type 2 authentication message (without the POSTed data). The server responds with a 401, and the browser sends a Type 3 request with the POSTed data. This is to avoid the situation where user's credentials might be potentially invalid, and all this data is being POSTed across the wire.

Returns:

True if request is an NTLM POST or PUT with an Authorization header and no data.