Package io.jmix.oidc.resourceserver

Class OidcResourceServerEventSecurityFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.springframework.web.filter.OncePerRequestFilter

io.jmix.oidc.resourceserver.OidcResourceServerEventSecurityFilter

All Implemented Interfaces:

jakarta.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.core.env.EnvironmentCapable, org.springframework.web.context.ServletContextAware

public class OidcResourceServerEventSecurityFilter
extends org.springframework.web.filter.OncePerRequestFilter

A copy of io.jmix.authserver.filter.AsResourceServerEventSecurityFilter. The purpose of the filter is to throw before- and after- events for resource server API invocations. These events are used for checking security constraints and preventing API access for users with insufficient permissions. TODO get rid of code duplication

Field Summary

Fields

Modifier and Type	Field	Description
protected org.springframework.context.ApplicationEventPublisher	applicationEventPublisher

Fields inherited from class org.springframework.web.filter.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor	Description
OidcResourceServerEventSecurityFilter(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

Method Summary

Modifier and Type	Method	Description
protected void	doFilterInternal(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.FilterChain filterChain)

Methods inherited from class org.springframework.web.filter.OncePerRequestFilter

doFilter, doFilterNestedErrorDispatch, getAlreadyFilteredAttributeName, isAsyncDispatch, isAsyncStarted, shouldNotFilter, shouldNotFilterAsyncDispatch, shouldNotFilterErrorDispatch

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

applicationEventPublisher

protected org.springframework.context.ApplicationEventPublisher applicationEventPublisher

Constructor Details

OidcResourceServerEventSecurityFilter

public OidcResourceServerEventSecurityFilter(org.springframework.context.ApplicationEventPublisher applicationEventPublisher)

Method Details

doFilterInternal

protected void doFilterInternal(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 jakarta.servlet.FilterChain filterChain)
                         throws jakarta.servlet.ServletException,
IOException

Specified by:

doFilterInternal in class org.springframework.web.filter.OncePerRequestFilter

Throws:

jakarta.servlet.ServletException

IOException