org.broadleafcommerce.openadmin.web.filter

Class AdminExternalLoginStateFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.broadleafcommerce.openadmin.web.filter.AdminExternalLoginStateFilter

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.web.context.ServletContextAware

public class AdminExternalLoginStateFilter
extends org.springframework.web.filter.GenericFilterBean

This class provides a filter to be used with External Security Providers (e.g. LDAP). When authentication is performed against another system it is important to provision an admin user in Broadleaf and set up the appropriate roles. This class checks to see if a user exists and if not, creates one. It also replaces all roles associated with a user with roles that match their Authentication credentials. DO NOT USE THIS FILTER UNLESS YOU ARE AUTHENTICATING AGAINST AN EXTERNAL SOURCE SUCH AS LDAP.

User: Kelly Tisdell Date: 6/19/12

Field Summary

Fields

Modifier and Type	Field and Description
protected static java.lang.String	BLC_ADMIN_PROVISION_USER_CHECK

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor and Description
AdminExternalLoginStateFilter()

Method Summary

Modifier and Type	Method and Description
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain filterChain)
protected void	saveAdminUser(BroadleafExternalAuthenticationUserDetails broadleafUser, AdminUser user)

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, destroy, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

BLC_ADMIN_PROVISION_USER_CHECK

protected static final java.lang.String BLC_ADMIN_PROVISION_USER_CHECK

See Also:

Constant Field Values

Constructor Detail

AdminExternalLoginStateFilter

public AdminExternalLoginStateFilter()

Method Detail

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
                     javax.servlet.ServletResponse servletResponse,
                     javax.servlet.FilterChain filterChain)
              throws java.io.IOException,
                     javax.servlet.ServletException

Throws:

java.io.IOException

javax.servlet.ServletException

saveAdminUser

protected void saveAdminUser(BroadleafExternalAuthenticationUserDetails broadleafUser,
                             AdminUser user)