Package org.pentaho.platform.web.http.security

Class Summary

Class	Description
CsrfGateFilter
CsrfProtectionSystemListener
CsrfToken
CsrfTokenResponseHeaderFilter	Binds a CsrfToken to the HttpServletResponse headers if the Spring CsrfFilter has placed one in the HttpServletRequest.
CsrfUtil
HttpSessionReuseDetectionFilter	Detects when an HTTP session which contains a logged-in user (as indicated by request.getRemoteUser()) is attempting to authenticate again without logging out.
PentahoBasicAuthenticationEntryPoint
PentahoBasicPostProcessingFilter	PentahoBasicPostProcessingFilter is used to invalidate a browsers cached Basic-Auth credentials.
PentahoBasicProcessingFilter	This class's sole purpose is to defeat the persistence of Basic-Auth credentials in the browser.
PentahoLogoutHandler	Hitachi Vantara behavior that should be invoked when a web user logs out.
PreAuthenticatedFilter	This filter handles the assignment of IPentahoSession and Authentication based on a previously stored in the IPreAuthenticatedSessionHolder.
PreventBruteForceAuthenticationFailureListener
PreventBruteForceSavedRequestAwareAuthenticationSuccessHandler
PreventBruteForceUsernamePasswordAuthenticationFilter
RequestParameterAuthenticationFilter	Processes Request Parameter authorization, putting the result into the SecurityContextHolder.
RequestParameterFilterEntryPoint	Used by the SecurityEnforcementFilter to commence authentication via the PentahoBasicProcessingFilter.
UsernameSubstringPreAuthenticatedProcessingFilter	Specialization of J2eePreAuthenticatedProcessingFilter where UsernameSubstringPreAuthenticatedProcessingFilter.getPreAuthenticatedPrincipal(HttpServletRequest) optionally extracts a substring of the user principal to use as the return value.

Exception Summary

Exception	Description
PreventBruteForceException