org.apache.jetspeed.security.impl
Class SecurityValveImpl

java.lang.Object
  org.apache.jetspeed.pipeline.valve.AbstractValve
      org.apache.jetspeed.security.impl.AbstractSecurityValve
          org.apache.jetspeed.security.impl.SecurityValveImpl

All Implemented Interfaces:

SecurityValve, org.apache.jetspeed.pipeline.valve.Valve

public class SecurityValveImpl
extends AbstractSecurityValve
implements SecurityValve

SecurityValve

Version:

$Id: SecurityValveImpl.java 544250 2007-06-04 20:30:43Z taylor $

Author:

David Sean Taylor , Randy Walter , Scott T. Weaver

Field Summary

private org.apache.jetspeed.statistics.PortalStatistics	statistics
private org.apache.jetspeed.security.UserManager	userMgr

Fields inherited from class org.apache.jetspeed.security.impl.AbstractSecurityValve

authenticationConfiguration

Fields inherited from interface org.apache.jetspeed.pipeline.valve.SecurityValve

IP_ADDRESS

Constructor Summary

SecurityValveImpl(org.apache.jetspeed.profiler.Profiler profiler, org.apache.jetspeed.security.UserManager userMgr)

SecurityValveImpl(org.apache.jetspeed.profiler.Profiler profiler, org.apache.jetspeed.security.UserManager userMgr, org.apache.jetspeed.statistics.PortalStatistics statistics)

SecurityValveImpl(org.apache.jetspeed.profiler.Profiler profiler, org.apache.jetspeed.security.UserManager userMgr, org.apache.jetspeed.statistics.PortalStatistics statistics, org.apache.jetspeed.administration.PortalAuthenticationConfiguration authenticationConfiguration)

Method Summary

protected Subject	getSubject(org.apache.jetspeed.request.RequestContext request) getSubject
protected Principal	getUserPrincipal(org.apache.jetspeed.request.RequestContext request) getUserPrincipal
String	toString()

Methods inherited from class org.apache.jetspeed.security.impl.AbstractSecurityValve

getSubjectFromSession, invoke, isSessionExpired

Methods inherited from class org.apache.jetspeed.pipeline.valve.AbstractValve

initialize

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.apache.jetspeed.pipeline.valve.Valve

initialize, invoke

Field Detail

userMgr

private org.apache.jetspeed.security.UserManager userMgr

statistics

private org.apache.jetspeed.statistics.PortalStatistics statistics

Constructor Detail

SecurityValveImpl

public SecurityValveImpl(org.apache.jetspeed.profiler.Profiler profiler,
                         org.apache.jetspeed.security.UserManager userMgr,
                         org.apache.jetspeed.statistics.PortalStatistics statistics,
                         org.apache.jetspeed.administration.PortalAuthenticationConfiguration authenticationConfiguration)

SecurityValveImpl

public SecurityValveImpl(org.apache.jetspeed.profiler.Profiler profiler,
                         org.apache.jetspeed.security.UserManager userMgr,
                         org.apache.jetspeed.statistics.PortalStatistics statistics)

SecurityValveImpl

public SecurityValveImpl(org.apache.jetspeed.profiler.Profiler profiler,
                         org.apache.jetspeed.security.UserManager userMgr)

Method Detail

toString

public String toString()

Overrides:

toString in class Object

getSubject

protected final Subject getSubject(org.apache.jetspeed.request.RequestContext request)
                            throws Exception

getSubject

Check for previously established session subject and invalidate if subject and current user principals do not match

Specified by:

getSubject in class AbstractSecurityValve

Parameters:

request -

Returns:

Throws:

Exception

getUserPrincipal

protected Principal getUserPrincipal(org.apache.jetspeed.request.RequestContext request)
                              throws Exception

getUserPrincipal

Aaccess request user principal if defined or default to profiler anonymous user

Specified by:

getUserPrincipal in class AbstractSecurityValve

Parameters:

request -

Returns:

Throws:

Exception