org.mitre.openid.connect.web

Class AuthenticationTimeStamper

java.lang.Object

org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler

org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

org.mitre.openid.connect.web.AuthenticationTimeStamper

All Implemented Interfaces:

org.springframework.security.web.authentication.AuthenticationSuccessHandler

@Component(value="authenticationTimeStamper")
public class AuthenticationTimeStamper
extends org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

This class sets a timestamp on the current HttpSession when someone successfully authenticates.

Author:

jricher

Field Summary

Fields

Modifier and Type	Field and Description
static String	AUTH_TIMESTAMP

Constructor Summary

Constructors

Constructor and Description
AuthenticationTimeStamper()

Method Summary

Modifier and Type	Method and Description
void	onAuthenticationSuccess(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.security.core.Authentication authentication) Set the timestamp on the session to mark when the authentication happened, useful for calculating authentication age.

Methods inherited from class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

setRequestCache

Methods inherited from class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler

clearAuthenticationAttributes

Methods inherited from class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

determineTargetUrl, getDefaultTargetUrl, getRedirectStrategy, getTargetUrlParameter, handle, isAlwaysUseDefaultTargetUrl, setAlwaysUseDefaultTargetUrl, setDefaultTargetUrl, setRedirectStrategy, setTargetUrlParameter, setUseReferer

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AUTH_TIMESTAMP

public static final String AUTH_TIMESTAMP

See Also:

Constant Field Values

Constructor Detail

AuthenticationTimeStamper

public AuthenticationTimeStamper()

Method Detail

onAuthenticationSuccess

public void onAuthenticationSuccess(javax.servlet.http.HttpServletRequest request,
                                    javax.servlet.http.HttpServletResponse response,
                                    org.springframework.security.core.Authentication authentication)
                             throws IOException,
                                    javax.servlet.ServletException

Set the timestamp on the session to mark when the authentication happened, useful for calculating authentication age. This gets stored in the sesion and can get pulled out by other components.

Specified by:

onAuthenticationSuccess in interface org.springframework.security.web.authentication.AuthenticationSuccessHandler

Overrides:

onAuthenticationSuccess in class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

Throws:

IOException

javax.servlet.ServletException