com.atlassian.sal.core.auth
Class SeraphAuthenticationListener

java.lang.Object
  com.atlassian.sal.core.auth.SeraphAuthenticationListener

All Implemented Interfaces:

AuthenticationListener

public class SeraphAuthenticationListener
extends Object
implements AuthenticationListener

Constructor Summary

SeraphAuthenticationListener()

Method Summary

void	authenticationError(Authenticator.Result result, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Called when there is a failure in trying to process the request, such as an IO failure.
void	authenticationFailure(Authenticator.Result result, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Called when the signature cannot be validated or the user cannot be resolved or does not have permission to access the resource.
void	authenticationNotAttempted(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Called if it was determined that authentication should not be attempted, usually because the AuthenticationController.shouldAttemptAuthentication(HttpServletRequest) returned false.
void	authenticationSuccess(Authenticator.Result result, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response) Called when the signature is validated and the user is resolved and permissions are verified.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SeraphAuthenticationListener

public SeraphAuthenticationListener()

Method Detail

authenticationSuccess

public void authenticationSuccess(Authenticator.Result result,
                                  javax.servlet.http.HttpServletRequest request,
                                  javax.servlet.http.HttpServletResponse response)

Description copied from interface: AuthenticationListener

Called when the signature is validated and the user is resolved and permissions are verified. Responsible for preparing the HTTP request or session such that the application sees the user as logged in for the rest of this request.

Will also be called in the event of a "verified" request - where the request has been verified to come from a remote system that is trusted due to 2LO but where an impersonating user is not configured.

Specified by:

authenticationSuccess in interface AuthenticationListener

Parameters:

result - Authentication result containing the user

request - Current HTTP request being processed

response - HTTP response for the current request, provided so the application can set any headers it might need set

authenticationError

public void authenticationError(Authenticator.Result result,
                                javax.servlet.http.HttpServletRequest request,
                                javax.servlet.http.HttpServletResponse response)

Description copied from interface: AuthenticationListener

Called when there is a failure in trying to process the request, such as an IO failure.

Specified by:

authenticationError in interface AuthenticationListener

Parameters:

result - Authentication result containing the details of the error

request - Current HTTP request being processed

response - HTTP response for the current request, provided so the application can set any headers it might need set

authenticationFailure

public void authenticationFailure(Authenticator.Result result,
                                  javax.servlet.http.HttpServletRequest request,
                                  javax.servlet.http.HttpServletResponse response)

Description copied from interface: AuthenticationListener

Called when the signature cannot be validated or the user cannot be resolved or does not have permission to access the resource.

Specified by:

authenticationFailure in interface AuthenticationListener

Parameters:

result - Authentication result containing the details of the failure

request - Current HTTP request being processed

response - HTTP response for the current request, provided so the application can set any headers it might need set

authenticationNotAttempted

public void authenticationNotAttempted(javax.servlet.http.HttpServletRequest request,
                                       javax.servlet.http.HttpServletResponse response)

Description copied from interface: AuthenticationListener

Called if it was determined that authentication should not be attempted, usually because the AuthenticationController.shouldAttemptAuthentication(HttpServletRequest) returned false.

Specified by:

authenticationNotAttempted in interface AuthenticationListener

Parameters:

request - Current HTTP request being processed

response - HTTP response for the current request, provided so the application can set any headers it might need set