Package io.jmix.oidc.resourceserver

Class OidcResourceServerLastSecurityFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.springframework.web.filter.OncePerRequestFilter

io.jmix.oidc.resourceserver.OidcResourceServerLastSecurityFilter

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.core.env.EnvironmentCapable, org.springframework.web.context.ServletContextAware

public class OidcResourceServerLastSecurityFilter
extends org.springframework.web.filter.OncePerRequestFilter

A copy of io.jmix.securityoauth2.impl.LastSecurityFilter. It's purpose is to throw before- and after- events for resource server API invocations. These events are used for checking security constraints and preventing API access for users with insufficient permissions. TODO get rid of code duplication

Field Summary

Fields

Modifier and Type	Field	Description
protected org.springframework.context.ApplicationEventPublisher	applicationEventPublisher

Fields inherited from class org.springframework.web.filter.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor	Description
OidcResourceServerLastSecurityFilter(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

Method Summary

Modifier and Type	Method	Description
protected void	doFilterInternal(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, javax.servlet.FilterChain filterChain)

Methods inherited from class org.springframework.web.filter.OncePerRequestFilter

doFilter, doFilterNestedErrorDispatch, getAlreadyFilteredAttributeName, isAsyncDispatch, isAsyncStarted, shouldNotFilter, shouldNotFilterAsyncDispatch, shouldNotFilterErrorDispatch

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

applicationEventPublisher

protected org.springframework.context.ApplicationEventPublisher applicationEventPublisher

Constructor Details

OidcResourceServerLastSecurityFilter

public OidcResourceServerLastSecurityFilter(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

Method Details

doFilterInternal

protected void doFilterInternal(javax.servlet.http.HttpServletRequest request,
 javax.servlet.http.HttpServletResponse response,
 javax.servlet.FilterChain filterChain)
                         throws javax.servlet.ServletException,
IOException

Specified by:

doFilterInternal in class org.springframework.web.filter.OncePerRequestFilter

Throws:

javax.servlet.ServletException

IOException