Example usage for org.springframework.security.web.context HttpRequestResponseHolder getResponse

Introduction

In this page you can find the example usage for org.springframework.security.web.context HttpRequestResponseHolder getResponse.

Prototype

public HttpServletResponse getResponse() 

Source Link

Usage

From source file:au.gov.dto.dibp.appointments.security.context.CookieBasedSecurityContextRepository.java

@Override
public SecurityContext loadContext(HttpRequestResponseHolder requestResponseHolder) {
    SaveToCookieResponseWrapper responseWrapper = new SaveToCookieResponseWrapper(
            requestResponseHolder.getRequest(), requestResponseHolder.getResponse(), true);
    requestResponseHolder.setResponse(responseWrapper);
    return securityContextSerializer.deserialize(requestResponseHolder.getRequest(),
            requestResponseHolder.getResponse());
}

---

From source file:au.gov.dto.springframework.security.web.context.CookieSecurityContextRepository.java

/**
 * Obtains the security context for the supplied request. For an unauthenticated user, an empty context
 * implementation should be returned. This method should not return null.
 * <p>// w ww.j  av  a  2  s  . com
 * The use of the <tt>HttpRequestResponseHolder</tt> parameter allows implementations to return wrapped versions of
 * the request or response (or both), allowing them to access implementation-specific state for the request.
 * The values obtained from the holder will be passed on to the filter chain and also to the <tt>saveContext</tt>
 * method when it is finally called. Implementations may wish to return a subclass of
 * {@link SaveContextOnUpdateOrErrorResponseWrapper} as the response object, which guarantees that the context is
 * persisted when an error or redirect occurs.
 *
 * @param requestResponseHolder holder for the current request and response for which the context should be loaded.
 *
 * @return The security context which should be used for the current request, never null.
 */
@Override
public SecurityContext loadContext(HttpRequestResponseHolder requestResponseHolder) {
    HttpServletRequest request = requestResponseHolder.getRequest();
    HttpServletResponse response = requestResponseHolder.getResponse();
    requestResponseHolder.setResponse(new SaveToCookieResponseWrapper(request, response));
    Cookie authenticationCookie = getAuthenticationCookie(request);
    if (authenticationCookie == null) {
        return SecurityContextHolder.createEmptyContext();
    }
    String serialisedAuthentication = tokenEncryption.decryptAndVerify(authenticationCookie.getValue());
    if (serialisedAuthentication == null) {
        response.addCookie(createExpireAuthenticationCookie(request));
        return SecurityContextHolder.createEmptyContext();
    }
    Authentication authentication = authenticationSerializer.deserialize(serialisedAuthentication);
    SecurityContext securityContext = SecurityContextHolder.createEmptyContext();
    securityContext.setAuthentication(authentication);
    return securityContext;
}

---

From source file:org.carewebframework.security.spring.DesktopSecurityContextRepository.java

/**
 * Gets the security context for the current request (if available) and returns it.
 * <p>/*from w  ww  .  ja v a  2s  . co  m*/
 * If the session is null, the context object is null or the context object stored in the
 * session is not an instance of <tt>SecurityContext</tt>, a new context object will be
 * generated and returned.
 * <p>
 * If <tt>cloneFromHttpSession</tt> is set to true, it will attempt to clone the context object
 * first and return the cloned instance.
 */
@Override
public SecurityContext loadContext(HttpRequestResponseHolder requestResponseHolder) {
    HttpServletRequest request = requestResponseHolder.getRequest();
    HttpServletResponse response = requestResponseHolder.getResponse();
    HttpSession httpSession = request.getSession(false);
    SecurityContext context = readSecurityContextFromRequest(request);

    if (context == null) {
        if (log.isDebugEnabled()) {
            log.debug("No SecurityContext was available from the HttpSession: " + httpSession + ". "
                    + "A new one will be created.");
        }
        context = generateNewContext();

    }

    requestResponseHolder
            .setResponse(new SaveToSessionResponseWrapper(response, request, httpSession != null, context));

    return context;
}

---

From source file:org.springframework.security.web.context.HttpSessionSecurityContextRepository.java

/**
 * Gets the security context for the current request (if available) and returns it.
 * <p>/*from  www .  java  2 s. c  o  m*/
 * If the session is null, the context object is null or the context object stored in
 * the session is not an instance of {@code SecurityContext}, a new context object
 * will be generated and returned.
 */
public SecurityContext loadContext(HttpRequestResponseHolder requestResponseHolder) {
    HttpServletRequest request = requestResponseHolder.getRequest();
    HttpServletResponse response = requestResponseHolder.getResponse();
    HttpSession httpSession = request.getSession(false);

    SecurityContext context = readSecurityContextFromSession(httpSession);

    if (context == null) {
        if (logger.isDebugEnabled()) {
            logger.debug("No SecurityContext was available from the HttpSession: " + httpSession + ". "
                    + "A new one will be created.");
        }
        context = generateNewContext();

    }

    SaveToSessionResponseWrapper wrappedResponse = new SaveToSessionResponseWrapper(response, request,
            httpSession != null, context);
    requestResponseHolder.setResponse(wrappedResponse);

    requestResponseHolder.setRequest(new SaveToSessionRequestWrapper(request, wrappedResponse));

    return context;
}

---