Package org.pentaho.platform.web.http.security
package org.pentaho.platform.web.http.security
-
ClassDescriptionDetects when an HTTP session which contains a logged-in user (as indicated by
request.getRemoteUser()
) is attempting to authenticate again without logging out.PentahoBasicPostProcessingFilter is used to invalidate a browsers cached Basic-Auth credentials.This class's sole purpose is to defeat the persistence of Basic-Auth credentials in the browser.Hitachi Vantara behavior that should be invoked when a web user logs out.This filter handles the assignment of IPentahoSession and Authentication based on a previously stored in the IPreAuthenticatedSessionHolder.Processes Request Parameter authorization, putting the result into theSecurityContextHolder
.Used by theSecurityEnforcementFilter
to commence authentication via thePentahoBasicProcessingFilter
.Specialization ofJ2eePreAuthenticatedProcessingFilter
whereUsernameSubstringPreAuthenticatedProcessingFilter.getPreAuthenticatedPrincipal(HttpServletRequest)
optionally extracts a substring of the user principal to use as the return value.