org.vaadin.spring.security.managed

Class DefaultVaadinManagedSecurity

java.lang.Object

org.vaadin.spring.security.AbstractVaadinSecurity

org.vaadin.spring.security.managed.DefaultVaadinManagedSecurity

All Implemented Interfaces:

Aware, InitializingBean, ApplicationContextAware, VaadinManagedSecurity, VaadinSecurity, VaadinSecurityContext

public class DefaultVaadinManagedSecurity
extends AbstractVaadinSecurity
implements VaadinManagedSecurity

Default implementation of VaadinManagedSecurity.

Author:

Petter Holmström (petter@vaadin.com)

Field Summary

Fields

Modifier and Type	Field and Description
static String	REINITIALIZE_SESSION_AFTER_LOGIN_PROPERTY

Constructor Summary

Constructors

Constructor and Description
DefaultVaadinManagedSecurity()

Method Summary

Modifier and Type	Method and Description
protected void	clearAndReinitializeSession() Clears the session of all attributes except some internal Vaadin attributes and reinitializes it.
Authentication	getAuthentication() Gets the authentication token of the current user.
protected boolean	isReinitializeSessionAfterLogin() Returns whether the current session should be reinitialized after a successful login.
Authentication	login(Authentication authentication) Tries to login using the specified authentication object.
void	logout() Logs the user out.
void	logout(String logoutUrl) Logs the user out and redirects to the specified URL.

Methods inherited from class org.vaadin.spring.security.AbstractVaadinSecurity

afterPropertiesSet, getAccessDecisionManager, getApplicationContext, getAuthenticationManager, getRememberMeServices, hasAccessDecisionManager, hasAccessToObject, hasAccessToSecuredMethod, hasAccessToSecuredObject, hasAnyAuthority, hasAuthenticationManager, hasAuthorities, hasAuthority, isAuthenticated, isAuthenticatedAnonymously, isFullyAuthenticated, isRememberMeAuthenticated, login, setApplicationContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.vaadin.spring.security.VaadinSecurity

hasAccessToObject, hasAccessToSecuredMethod, hasAccessToSecuredObject, hasAnyAuthority, hasAuthorities, hasAuthority, isAuthenticated, isAuthenticatedAnonymously, isFullyAuthenticated, isRememberMeAuthenticated, login

Methods inherited from interface org.vaadin.spring.security.VaadinSecurityContext

getAccessDecisionManager, getApplicationContext, getAuthenticationManager, getRememberMeServices, hasAccessDecisionManager, hasAuthenticationManager

Field Detail

REINITIALIZE_SESSION_AFTER_LOGIN_PROPERTY

public static final String REINITIALIZE_SESSION_AFTER_LOGIN_PROPERTY

See Also:

Constant Field Values

Constructor Detail

DefaultVaadinManagedSecurity

public DefaultVaadinManagedSecurity()

Method Detail

isReinitializeSessionAfterLogin

protected boolean isReinitializeSessionAfterLogin()

Returns whether the current session should be reinitialized after a successful login. Default is true. Can be disabled by setting the ""vaadin.spring.security.managed.reinitialize-session-after-login"" environment property to false. If Websocket Push is used, the session will never be reinitialized since this throws errors on at least Tomcat 8.

login

public Authentication login(Authentication authentication)
                     throws AuthenticationException

Description copied from interface: VaadinSecurity

Tries to login using the specified authentication object. If authentication succeeds, this method will return without exceptions.

Specified by:

login in interface VaadinSecurity

Parameters:

authentication - the authentication object to authenticate, must not be null.

Returns:

the authenticated Authentication token.

Throws:

AuthenticationException - if authentication fails.

clearAndReinitializeSession

protected void clearAndReinitializeSession()

Clears the session of all attributes except some internal Vaadin attributes and reinitializes it. If Websocket Push is used, the session will never be reinitialized since this throws errors on at least Tomcat 8.

logout

public void logout()

Description copied from interface: VaadinSecurity

Logs the user out.

Specified by:

logout in interface VaadinSecurity

logout

public void logout(String logoutUrl)

Description copied from interface: VaadinManagedSecurity

Logs the user out and redirects to the specified URL.

Specified by:

logout in interface VaadinManagedSecurity

getAuthentication

public Authentication getAuthentication()

Description copied from interface: VaadinSecurity

Gets the authentication token of the current user.

Specified by:

getAuthentication in interface VaadinSecurity

Returns:

the Authentication token stored in the current SecurityContext, or null.