Class OAuth2ClientAuthenticationFilter
java.lang.Object
org.springframework.web.filter.GenericFilterBean
org.springframework.web.filter.OncePerRequestFilter
org.springframework.security.oauth2.server.authorization.web.OAuth2ClientAuthenticationFilter
- All Implemented Interfaces:
jakarta.servlet.Filter,org.springframework.beans.factory.Aware,org.springframework.beans.factory.BeanNameAware,org.springframework.beans.factory.DisposableBean,org.springframework.beans.factory.InitializingBean,org.springframework.context.EnvironmentAware,org.springframework.core.env.EnvironmentCapable,org.springframework.web.context.ServletContextAware
public final class OAuth2ClientAuthenticationFilter
extends org.springframework.web.filter.OncePerRequestFilter
A
Filter that processes an authentication request for an OAuth 2.0 Client.- Since:
- 0.0.1
- See Also:
-
AuthenticationManagerJwtClientAssertionAuthenticationConverterJwtClientAssertionAuthenticationProviderX509ClientCertificateAuthenticationConverterX509ClientCertificateAuthenticationProviderClientSecretBasicAuthenticationConverterClientSecretPostAuthenticationConverterClientSecretAuthenticationProviderPublicClientAuthenticationConverterPublicClientAuthenticationProvider- Section 2.3 Client Authentication
- Section 3.2.1 Token Endpoint Client Authentication
-
Field Summary
Fields inherited from class org.springframework.web.filter.OncePerRequestFilter
ALREADY_FILTERED_SUFFIXFields inherited from class org.springframework.web.filter.GenericFilterBean
logger -
Constructor Summary
ConstructorsConstructorDescriptionOAuth2ClientAuthenticationFilter(org.springframework.security.authentication.AuthenticationManager authenticationManager, org.springframework.security.web.util.matcher.RequestMatcher requestMatcher) Constructs anOAuth2ClientAuthenticationFilterusing the provided parameters. -
Method Summary
Modifier and TypeMethodDescriptionprotected voiddoFilterInternal(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.FilterChain filterChain) voidsetAuthenticationConverter(org.springframework.security.web.authentication.AuthenticationConverter authenticationConverter) Sets theAuthenticationConverterused when attempting to extract client credentials fromHttpServletRequestto an instance ofOAuth2ClientAuthenticationTokenused for authenticating the client.voidsetAuthenticationFailureHandler(org.springframework.security.web.authentication.AuthenticationFailureHandler authenticationFailureHandler) Sets theAuthenticationFailureHandlerused for handling a failed client authentication and returning theError Response.voidsetAuthenticationSuccessHandler(org.springframework.security.web.authentication.AuthenticationSuccessHandler authenticationSuccessHandler) Sets theAuthenticationSuccessHandlerused for handling a successful client authentication and associating theOAuth2ClientAuthenticationTokento theSecurityContext.Methods inherited from class org.springframework.web.filter.OncePerRequestFilter
doFilter, doFilterNestedErrorDispatch, getAlreadyFilteredAttributeName, isAsyncDispatch, isAsyncStarted, shouldNotFilter, shouldNotFilterAsyncDispatch, shouldNotFilterErrorDispatchMethods inherited from class org.springframework.web.filter.GenericFilterBean
addRequiredProperty, afterPropertiesSet, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext
-
Constructor Details
-
OAuth2ClientAuthenticationFilter
public OAuth2ClientAuthenticationFilter(org.springframework.security.authentication.AuthenticationManager authenticationManager, org.springframework.security.web.util.matcher.RequestMatcher requestMatcher) Constructs anOAuth2ClientAuthenticationFilterusing the provided parameters.- Parameters:
authenticationManager- theAuthenticationManagerused for authenticating the clientrequestMatcher- theRequestMatcherused for matching against theHttpServletRequest
-
-
Method Details
-
doFilterInternal
protected void doFilterInternal(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.FilterChain filterChain) throws jakarta.servlet.ServletException, IOException - Specified by:
doFilterInternalin classorg.springframework.web.filter.OncePerRequestFilter- Throws:
jakarta.servlet.ServletExceptionIOException
-
setAuthenticationConverter
public void setAuthenticationConverter(org.springframework.security.web.authentication.AuthenticationConverter authenticationConverter) Sets theAuthenticationConverterused when attempting to extract client credentials fromHttpServletRequestto an instance ofOAuth2ClientAuthenticationTokenused for authenticating the client.- Parameters:
authenticationConverter- theAuthenticationConverterused when attempting to extract client credentials fromHttpServletRequest
-
setAuthenticationSuccessHandler
public void setAuthenticationSuccessHandler(org.springframework.security.web.authentication.AuthenticationSuccessHandler authenticationSuccessHandler) Sets theAuthenticationSuccessHandlerused for handling a successful client authentication and associating theOAuth2ClientAuthenticationTokento theSecurityContext.- Parameters:
authenticationSuccessHandler- theAuthenticationSuccessHandlerused for handling a successful client authentication
-
setAuthenticationFailureHandler
public void setAuthenticationFailureHandler(org.springframework.security.web.authentication.AuthenticationFailureHandler authenticationFailureHandler) Sets theAuthenticationFailureHandlerused for handling a failed client authentication and returning theError Response.- Parameters:
authenticationFailureHandler- theAuthenticationFailureHandlerused for handling a failed client authentication
-