Package io.undertow.servlet.handlers.security

Class CachedAuthenticatedSessionHandler

java.lang.Object

io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler

All Implemented Interfaces:

HttpHandler

public class CachedAuthenticatedSessionHandler
extends Object
implements HttpHandler

HttpHandler responsible for setting up the AuthenticatedSessionManager for cached authentications and registering a NotificationReceiver to receive the security notifications. This handler also forces the session to change its session ID on sucessful authentication.

Author:

Darran Lofthouse

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ATTRIBUTE_NAME
static final String	NO_ID_CHANGE_REQUIRED

Constructor Summary

Constructors

Constructor	Description
CachedAuthenticatedSessionHandler(HttpHandler next, ServletContextImpl servletContext)

Method Summary

Modifier and Type	Method	Description
void	handleRequest(HttpServerExchange exchange)	Handle the request.
protected Session	underlyingSession(HttpSessionImpl httpSession)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ATTRIBUTE_NAME

public static final String ATTRIBUTE_NAME

NO_ID_CHANGE_REQUIRED

public static final String NO_ID_CHANGE_REQUIRED

Constructor Details

CachedAuthenticatedSessionHandler

public CachedAuthenticatedSessionHandler(HttpHandler next,
 ServletContextImpl servletContext)

Method Details

handleRequest

public void handleRequest(HttpServerExchange exchange)
                   throws Exception

Description copied from interface: HttpHandler

Handle the request.

Specified by:

handleRequest in interface HttpHandler

Parameters:

exchange - the HTTP request/response exchange

Throws:

Exception

underlyingSession

protected Session underlyingSession(HttpSessionImpl httpSession)