Package com.atlassian.jira.web.filters.annotations

Class ServletSecurityAnnotationsFilter

java.lang.Object

com.atlassian.core.filters.AbstractHttpFilter

com.atlassian.jira.web.filters.annotations.ServletSecurityAnnotationsFilter

All Implemented Interfaces:

jakarta.servlet.Filter

public class ServletSecurityAnnotationsFilter
extends com.atlassian.core.filters.AbstractHttpFilter

A filter that checks if the current user has access to the endpoint based on the

invalid reference

com.atlassian.annotations.security

annotations. Users without access are redirected to the login screen.

There are a few classes of endpoints that are checked in different ways:

• REST endpoints are checked in AuthenticatedResourceFilter (atlassian-rest library
• Servlets from plugins are checked in ServletModuleContainerServlet
• Webwork actions are checked in SafeActionFactoryProxy
• Jira Core servlets are checked in ServletSecurityAnnotationsFilter (this very class)

Constructor Summary

Constructors

Constructor	Description
ServletSecurityAnnotationsFilter()

Method Summary

Modifier and Type	Method	Description
protected void	doFilter(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.FilterChain filterChain)

Methods inherited from class com.atlassian.core.filters.AbstractHttpFilter

destroy, doFilter, init

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ServletSecurityAnnotationsFilter

public ServletSecurityAnnotationsFilter()

Method Details

doFilter

protected void doFilter(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 jakarta.servlet.FilterChain filterChain)
                 throws IOException,
jakarta.servlet.ServletException

Specified by:

doFilter in class com.atlassian.core.filters.AbstractHttpFilter

Throws:

IOException

jakarta.servlet.ServletException