A C D F G I L N O P R S U W X
All Classes All Packages

A

addFilters(String...) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.UrlConfig

addUrl(WebSecurityConfig.UrlConfig) - Method in class org.seedstack.seed.web.security.WebSecurityConfig

AntiXsrfFilter - Class in org.seedstack.seed.web.security.internal

AntiXsrfFilter() - Constructor for class org.seedstack.seed.web.security.internal.AntiXsrfFilter

C

classpathScanRequests() - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

createToken(ServletRequest, ServletResponse) - Method in class org.seedstack.seed.web.security.internal.X509CertificateFilter

D

deleteXsrfCookie(HttpServletResponse) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

dependencies() - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

F

filters() - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

form() - Method in class org.seedstack.seed.web.security.WebSecurityConfig

FormConfig() - Constructor for class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

G

generateRandomToken() - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

getAlgorithm() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getCookieName() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getCookiePath() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getCookieSameSite() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getFailureAttribute() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

getFilters() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.UrlConfig

getHeaderName() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getIgnoreHttpMethods() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getLength() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getLoginUrl() - Method in class org.seedstack.seed.web.security.WebSecurityConfig

getLogoutUrl() - Method in class org.seedstack.seed.web.security.WebSecurityConfig

getParamName() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

getPasswordParameter() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

getPattern() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.UrlConfig

getRememberMeParameter() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

getSuccessUrl() - Method in class org.seedstack.seed.web.security.WebSecurityConfig

getTokenFromCookie(HttpServletRequest) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

getTokenFromHeader(HttpServletRequest) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

getTokenFromParameter(HttpServletRequest) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

getUrls() - Method in class org.seedstack.seed.web.security.WebSecurityConfig

getUsernameParameter() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

I

initialize(InitContext) - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

isAccessAllowed(ServletRequest, ServletResponse, Object) - Method in class org.seedstack.seed.web.security.internal.X509CertificateFilter

isCookieHttpOnly() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

isPerRequestToken() - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

isRequestIgnored(HttpServletRequest) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

L

listeners() - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

N

name() - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

O

onAccessDenied(ServletRequest, ServletResponse) - Method in class org.seedstack.seed.web.security.internal.X509CertificateFilter

onLoginFailure(AuthenticationToken, AuthenticationException, ServletRequest, ServletResponse) - Method in class org.seedstack.seed.web.security.internal.X509CertificateFilter

onLoginSuccess(AuthenticationToken, Subject, ServletRequest, ServletResponse) - Method in class org.apache.shiro.web.filter.authc.SeedBasicHttpAuthenticationFilter

onLoginSuccess(AuthenticationToken, Subject, ServletRequest, ServletResponse) - Method in class org.apache.shiro.web.filter.authc.SeedFormAuthenticationFilter

onPreHandle(ServletRequest, ServletResponse, Object) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

org.apache.shiro.web.filter.authc - package org.apache.shiro.web.filter.authc

org.seedstack.seed.web.security - package org.seedstack.seed.web.security

org.seedstack.seed.web.security.internal - package org.seedstack.seed.web.security.internal

P

postHandle(ServletRequest, ServletResponse) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

provideAdditionalSecurityModule() - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

provideMainSecurityModule(SecurityGuiceConfigurer) - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

R

regenerateSession(Subject) - Method in interface org.seedstack.seed.web.security.SessionRegeneratingFilter

Regenerate the session if any.

S

SeedBasicHttpAuthenticationFilter - Class in org.apache.shiro.web.filter.authc

This override of BasicHttpAuthenticationFilter ensures that the subject session is regenerated on login success, avoiding potential session fixation vulnerability.

SeedBasicHttpAuthenticationFilter() - Constructor for class org.apache.shiro.web.filter.authc.SeedBasicHttpAuthenticationFilter

SeedFormAuthenticationFilter - Class in org.apache.shiro.web.filter.authc

This override of FormAuthenticationFilter ensures that the subject session is regenerated on login success, avoiding potential session fixation vulnerability.

SeedFormAuthenticationFilter() - Constructor for class org.apache.shiro.web.filter.authc.SeedFormAuthenticationFilter

servlets() - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

SessionRegeneratingFilter - Interface in org.seedstack.seed.web.security

This interface can be implemented in any authenticating Shiro filter to add subject session regeneration capability.

setAlgorithm(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setCookieHttpOnly(boolean) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setCookieName(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setCookiePath(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setCookieSameSite(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setFailureAttribute(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

setHeaderName(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setIgnoreHttpMethods(List<String>) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setLength(int) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setLoginUrl(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig

setLogoutUrl(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig

setParamName(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setPasswordParameter(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

setPattern(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.UrlConfig

setPerRequestToken(boolean) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

setRememberMeParameter(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

setSuccessUrl(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig

setup(SeedRuntime) - Method in class org.seedstack.seed.web.security.internal.WebSecurityPlugin

setUsernameParameter(String) - Method in class org.seedstack.seed.web.security.WebSecurityConfig.FormConfig

setXsrfCookie(HttpServletResponse) - Method in class org.seedstack.seed.web.security.internal.AntiXsrfFilter

U

UrlConfig() - Constructor for class org.seedstack.seed.web.security.WebSecurityConfig.UrlConfig

W

WebSecurityConfig - Class in org.seedstack.seed.web.security

WebSecurityConfig() - Constructor for class org.seedstack.seed.web.security.WebSecurityConfig

WebSecurityConfig.FormConfig - Class in org.seedstack.seed.web.security

WebSecurityConfig.UrlConfig - Class in org.seedstack.seed.web.security

WebSecurityConfig.XSRFConfig - Class in org.seedstack.seed.web.security

WebSecurityPlugin - Class in org.seedstack.seed.web.security.internal

This plugins adds web security.

WebSecurityPlugin() - Constructor for class org.seedstack.seed.web.security.internal.WebSecurityPlugin

X

X509CertificateFilter - Class in org.seedstack.seed.web.security.internal

A security filter that extracts the certificate from the request for later use

X509CertificateFilter() - Constructor for class org.seedstack.seed.web.security.internal.X509CertificateFilter

xsrf() - Method in class org.seedstack.seed.web.security.WebSecurityConfig

XSRFConfig() - Constructor for class org.seedstack.seed.web.security.WebSecurityConfig.XSRFConfig

A C D F G I L N O P R S U W X
All Classes All Packages