Package org.pentaho.platform.web.http.security

Class Summary

Class	Description
CsrfGateFilter
CsrfProtectionSystemListener
CsrfToken
CsrfTokenResponseHeaderFilter	Binds a CsrfToken to the HttpServletResponse headers if the Spring CsrfFilter has placed one in the HttpServletRequest.
CsrfUtil
HttpSessionReuseDetectionFilter	Detects when an HTTP session which contains a logged-in user (as indicated by request.getRemoteUser()) is attempting to authenticate again without logging out.
PentahoBasicAuthenticationEntryPoint
PentahoBasicPostProcessingFilter	PentahoBasicPostProcessingFilter is used to invalidate a browsers cached Basic-Auth credentials.
PentahoBasicProcessingFilter	This class's sole purpose is to defeat the persistence of Basic-Auth credentials in the browser.
PentahoLogoutHandler	Hitachi Vantara behavior that should be invoked when a web user logs out.
PreAuthenticatedFilter	This filter handles the assignment of IPentahoSession and Authentication based on a previously stored in the IPreAuthenticatedSessionHolder.
RequestParameterAuthenticationFilter	Processes Request Parameter authorization, putting the result into the SecurityContextHolder.
RequestParameterFilterEntryPoint	Used by the SecurityEnforcementFilter to commence authentication via the PentahoBasicProcessingFilter.
UsernameSubstringPreAuthenticatedProcessingFilter	Specialization of J2eePreAuthenticatedProcessingFilter where UsernameSubstringPreAuthenticatedProcessingFilter.getPreAuthenticatedPrincipal(HttpServletRequest) optionally extracts a substring of the user principal to use as the return value.