com.atlassian.crowd.integration.xwork

Class CrowdAuthenticationInterceptor

java.lang.Object

com.atlassian.crowd.integration.xwork.CrowdAuthenticationInterceptor

All Implemented Interfaces:

com.opensymphony.xwork2.interceptor.Interceptor, Serializable

public class CrowdAuthenticationInterceptor
extends Object
implements com.opensymphony.xwork2.interceptor.Interceptor

This interceptor manages protecting a web.xml url-pattern. If the requesting principal does not have a valid token, they will be redirected to the authentication path specified in the crowd.properties configuration file. Additional values are stored to the principal's session such as their originally requested URL should their authentication be found invalid.

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static String	ORIGINAL_URL The session key stored as a String, is the requested secure url before redirect to the authentication page.

Constructor Summary

Constructors

Constructor and Description
CrowdAuthenticationInterceptor() Use this default constructor if you are not using an IoC managed HttpAuthenticator/SecurityServerClient.
CrowdAuthenticationInterceptor(HttpAuthenticator httpAuthenticator) Use this constructor to provide an externally managed singleton instance of the HttpAuthenticator.

Method Summary

Modifier and Type	Method and Description
void	destroy()
void	init()
String	intercept(com.opensymphony.xwork2.ActionInvocation actionInvocation)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ORIGINAL_URL

public static final String ORIGINAL_URL

The session key stored as a String, is the requested secure url before redirect to the authentication page.

Constructor Detail

CrowdAuthenticationInterceptor

public CrowdAuthenticationInterceptor()

Use this default constructor if you are not using an IoC managed HttpAuthenticator/SecurityServerClient. This will delegate calls to HttpAuthenticatorFactory when an instance of the HttpAuthenticator is required.

CrowdAuthenticationInterceptor

public CrowdAuthenticationInterceptor(HttpAuthenticator httpAuthenticator)

Use this constructor to provide an externally managed singleton instance of the HttpAuthenticator.

This should be used if you are using an IoC container to manage the HttpAuthenticator/SecurityServerClient instances. This should NOT be used if you are using the HttpAuthenticatorFactory or SecurityServerClientFactory anywhere in your application.

Parameters:

httpAuthenticator - externally managed singleton.

Method Detail

destroy

public void destroy()

Specified by:

destroy in interface com.opensymphony.xwork2.interceptor.Interceptor

init

public void init()

Specified by:

init in interface com.opensymphony.xwork2.interceptor.Interceptor

intercept

public String intercept(com.opensymphony.xwork2.ActionInvocation actionInvocation)
                 throws Exception

Specified by:

intercept in interface com.opensymphony.xwork2.interceptor.Interceptor

Throws:

Exception