public class HttpAuthFilter extends PasswordBasedLoginFilter
If authentication is successful, the user will be redirected by the filter to the URL given by the session attribute at SecurityFilter.ORIGINAL_URL_KEY.
If this URL doesn't exist, it will look for a parameter 'os_destination' to use as the redirected URL instead.
If neither is found, it is assumed that the page will check the authorisation status and handle redirection itself.
From the any other filter in the request, or the servlet/JSP/action which processes the request, you can look up the status of the authorisation attempt. The status is a String request attribute, with the key 'os_authstatus'.
The possible statuses are:
PasswordBasedLoginFilter.UserPasswordPairAUTHENTICATION_ERROR_TYPE, LOGIN_ERROR, LOGIN_FAILED, LOGIN_NOATTEMPT, LOGIN_SUCCESS, OS_AUTHSTATUS_KEY| Constructor and Description |
|---|
HttpAuthFilter() |
| Modifier and Type | Method and Description |
|---|---|
protected PasswordBasedLoginFilter.UserPasswordPair |
extractUserPasswordPair(javax.servlet.http.HttpServletRequest request)
Returns a username password pair for this request.
|
logindestroy, doFilter, getAuthenticationContext, getAuthenticator, getElevatedSecurityGuard, getSecurityConfig, init, isAbsoluteUrl, redirectToOriginalDestinationprotected PasswordBasedLoginFilter.UserPasswordPair extractUserPasswordPair(javax.servlet.http.HttpServletRequest request)
PasswordBasedLoginFilterextractUserPasswordPair in class PasswordBasedLoginFilterrequest - the HTTP request in playCopyright © 2018 Atlassian. All rights reserved.