com.hortonworks.registries.auth.server

Class AuthTerminatorFilter

java.lang.Object

com.hortonworks.registries.auth.server.AuthenticationFilter

com.hortonworks.registries.auth.server.AuthTerminatorFilter

All Implemented Interfaces:

javax.servlet.Filter

public class AuthTerminatorFilter
extends AuthenticationFilter

When joining multiple auth filters into a composite filter, the last filter needs to be the terminator filter, which terminates the chain. If the preceeding auth filters managed to authenticate the user, the terminator filter will let the request pass. If not, a HTTP Unauthorized will be returned.

Field Summary

Fields inherited from class com.hortonworks.registries.auth.server.AuthenticationFilter

ALLOWED_RESOURCES, AUTH_FAILED, AUTH_TOKEN_VALIDITY, AUTH_TYPE, CONFIG_PREFIX, COOKIE_DOMAIN, COOKIE_PATH, IS_COMPOSITE, SIGNATURE_SECRET, SIGNATURE_SECRET_FILE, SIGNER_SECRET_PROVIDER, SIGNER_SECRET_PROVIDER_ATTRIBUTE

Constructor Summary

Constructors

Constructor and Description
AuthTerminatorFilter()

Method Summary

Modifier and Type	Method and Description
void	destroy() Destroys the filter.
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain) If the request has a valid authentication token it allows the request to continue to the target resource, otherwise it triggers an authentication sequence using the configured AuthenticationHandler.
void	init(javax.servlet.FilterConfig filterConfig) Initializes the authentication filter and signer secret provider.

Methods inherited from class com.hortonworks.registries.auth.server.AuthenticationFilter

constructSecretProvider, createAuthCookie, getAuthenticationHandler, getConfiguration, getConfiguration, getCookieDomain, getCookiePath, getRequestURL, getToken, getValidity, initializeAuthHandler, initializeSecretProvider, isCustomSignerSecretProvider, isRandomSecret, proceedToNextFilter, respondWithUnauthorized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthTerminatorFilter

public AuthTerminatorFilter()

Method Detail

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Description copied from class: AuthenticationFilter

Initializes the authentication filter and signer secret provider.

It instantiates and initializes the specified AuthenticationHandler.

Specified by:

init in interface javax.servlet.Filter

Overrides:

init in class AuthenticationFilter

Parameters:

filterConfig - filter configuration.

Throws:

javax.servlet.ServletException - thrown if the filter or the authentication handler could not be initialized properly.

destroy

public void destroy()

Description copied from class: AuthenticationFilter

Destroys the filter.

It invokes the AuthenticationHandler.destroy() method to release any resources it may hold.

Specified by:

destroy in interface javax.servlet.Filter

Overrides:

destroy in class AuthenticationFilter

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws java.io.IOException,
                     javax.servlet.ServletException

Description copied from class: AuthenticationFilter

If the request has a valid authentication token it allows the request to continue to the target resource, otherwise it triggers an authentication sequence using the configured AuthenticationHandler.

Specified by:

doFilter in interface javax.servlet.Filter

Overrides:

doFilter in class AuthenticationFilter

Parameters:

request - the request object.

response - the response object.

chain - the filter chain object.

Throws:

java.io.IOException - thrown if an IO error occurred.

javax.servlet.ServletException - thrown if a processing error occurred.