A B C D E F G H I J L M N O P R S T U V W X

A

AbstractAuthenticationProcessingFilter - Class in org.springframework.security.web.authentication

Abstract processor of browser-based HTTP-based authentication requests.

AbstractAuthenticationProcessingFilter(String) - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

AbstractAuthenticationProcessingFilter(RequestMatcher) - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Creates a new instance

AbstractAuthenticationTargetUrlRequestHandler - Class in org.springframework.security.web.authentication

Base class containing the logic used by strategies which handle redirection to a URL and are passed an Authentication object as part of the contract.

AbstractAuthenticationTargetUrlRequestHandler() - Constructor for class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

AbstractPreAuthenticatedProcessingFilter - Class in org.springframework.security.web.authentication.preauth

Base class for processing filters that handle pre-authenticated authentication requests, where it is assumed that the principal has already been authenticated by an external system.

AbstractPreAuthenticatedProcessingFilter() - Constructor for class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

AbstractRememberMeServices - Class in org.springframework.security.web.authentication.rememberme

Base class for RememberMeServices implementations.

AbstractRememberMeServices(String, UserDetailsService) - Constructor for class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

AbstractRetryEntryPoint - Class in org.springframework.security.web.access.channel

AbstractRetryEntryPoint(String, int) - Constructor for class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

AbstractSecurityWebApplicationInitializer - Class in org.springframework.security.web.context

Registers the DelegatingFilterProxy to use the springSecurityFilterChain before any other registered Filter.

AbstractSecurityWebApplicationInitializer() - Constructor for class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Creates a new instance that assumes the Spring Security configuration is loaded by some other means than this class.

AbstractSecurityWebApplicationInitializer(Class<?>...) - Constructor for class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Creates a new instance that will instantiate the ContextLoaderListener with the specified classes.

ACCESS_DENIED_403 - Static variable in class org.springframework.security.web.WebAttributes

Used to cache an AccessDeniedException in the request for rendering.

AccessDeniedHandler - Interface in org.springframework.security.web.access

Used by ExceptionTranslationFilter to handle an AccessDeniedException.

AccessDeniedHandlerImpl - Class in org.springframework.security.web.access

Base implementation of AccessDeniedHandler.

AccessDeniedHandlerImpl() - Constructor for class org.springframework.security.web.access.AccessDeniedHandlerImpl

addHeader(String, String) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

addSha256Pins(String...) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

Adds a list of SHA256 hashed pins for the pin- directive of the Public-Key-Pins header.

afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter

afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor

afterPropertiesSet() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor

afterPropertiesSet() - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Check whether all required properties have been set.

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

Check that all required properties have been set.

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever

Loads the web.xml file using the configured ResourceLoader and parses the role-name elements from it, using these as the set of mappableAttributes.

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

Check whether all required properties have been set.

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

afterPropertiesSet() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

afterPropertiesSet() - Method in class org.springframework.security.web.FilterChainProxy

afterPropertiesSet() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

afterPropertiesSet() - Method in class org.springframework.security.web.session.ConcurrentSessionFilter

afterSpringSecurityFilterChain(ServletContext) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Invoked after the springSecurityFilterChain is added.

allowableSessionsExceeded(List<SessionInformation>, int, SessionRegistry) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

Allows subclasses to customise behaviour when too many sessions are detected.

allowed(String) - Method in class org.springframework.security.web.header.writers.frameoptions.RegExpAllowFromStrategy

allowed(String) - Method in class org.springframework.security.web.header.writers.frameoptions.WhiteListedAllowFromStrategy

AllowFromStrategy - Interface in org.springframework.security.web.header.writers.frameoptions

Strategy interfaces used by the FrameOptionsHeaderWriter to determine the actual value to use for the X-Frame-Options header when using the ALLOW-FROM directive.

AndRequestMatcher - Class in org.springframework.security.web.util.matcher

RequestMatcher that will return true if all of the passed in RequestMatcher instances match.

AndRequestMatcher(List<RequestMatcher>) - Constructor for class org.springframework.security.web.util.matcher.AndRequestMatcher

Creates a new instance

AndRequestMatcher(RequestMatcher...) - Constructor for class org.springframework.security.web.util.matcher.AndRequestMatcher

Creates a new instance

AnonymousAuthenticationFilter - Class in org.springframework.security.web.authentication

Detects if there is no Authentication object in the SecurityContextHolder, and populates it with one if needed.

AnonymousAuthenticationFilter(String) - Constructor for class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

Creates a filter with a principal named "anonymousUser" and the single authority "ROLE_ANONYMOUS".

AnonymousAuthenticationFilter(String, Object, List<GrantedAuthority>) - Constructor for class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

AntPathRequestMatcher - Class in org.springframework.security.web.util.matcher

Matcher which compares a pre-defined ant-style pattern against the URL ( servletPath + pathInfo) of an HttpServletRequest.

AntPathRequestMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher

Creates a matcher with the specific pattern which will match all HTTP methods in a case insensitive manner.

AntPathRequestMatcher(String, String) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher

Creates a matcher with the supplied pattern and HTTP method in a case insensitive manner.

AntPathRequestMatcher(String, String, boolean) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher

Creates a matcher with the supplied pattern which will match the specified Http method

AntPathRequestMatcher(String, String, boolean, UrlPathHelper) - Constructor for class org.springframework.security.web.util.matcher.AntPathRequestMatcher

Creates a matcher with the supplied pattern which will match the specified Http method

ANY_CHANNEL - Static variable in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

AnyRequestMatcher - Class in org.springframework.security.web.util.matcher

Matches any supplied request.

appendFilters(ServletContext, Filter...) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Inserts the provided Filters after existing Filters using default generated names, AbstractSecurityWebApplicationInitializer.getSecurityDispatcherTypes(), and AbstractSecurityWebApplicationInitializer.isAsyncSecuritySupported().

attemptAuthentication(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Performs actual authentication.

attemptAuthentication(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

attemptExitUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Attempt to exit from an already switched user.

attemptSwitchUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Attempt to switch to another user.

authenticate(Authentication) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

Authenticate the given PreAuthenticatedAuthenticationToken.

AUTHENTICATION_EXCEPTION - Static variable in class org.springframework.security.web.WebAttributes

Used to cache an authentication-failure exception in the session.

authenticationDetailsSource - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

AuthenticationEntryPoint - Interface in org.springframework.security.web

Used by ExceptionTranslationFilter to commence an authentication scheme.

AuthenticationFailureHandler - Interface in org.springframework.security.web.authentication

Strategy used to handle a failed authentication attempt.

AuthenticationPrincipal - Annotation Type in org.springframework.security.web.bind.annotation

Deprecated.

Use AuthenticationPrincipal instead.

AuthenticationPrincipalArgumentResolver - Class in org.springframework.security.web.bind.support

Deprecated.

Use AuthenticationPrincipalArgumentResolver instead.

AuthenticationPrincipalArgumentResolver() - Constructor for class org.springframework.security.web.bind.support.AuthenticationPrincipalArgumentResolver

Deprecated.

AuthenticationPrincipalArgumentResolver - Class in org.springframework.security.web.method.annotation

Allows resolving the Authentication.getPrincipal() using the AuthenticationPrincipal annotation.

AuthenticationPrincipalArgumentResolver() - Constructor for class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver

AuthenticationSuccessHandler - Interface in org.springframework.security.web.authentication

Strategy used to handle a successful user authentication.

AuthenticationSwitchUserEvent - Class in org.springframework.security.web.authentication.switchuser

Application event which indicates that a user context switch.

AuthenticationSwitchUserEvent(Authentication, UserDetails) - Constructor for class org.springframework.security.web.authentication.switchuser.AuthenticationSwitchUserEvent

Switch user context event constructor

autoLogin(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.NullRememberMeServices

autoLogin(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Template implementation which locates the Spring Security cookie, decodes it into a delimited array of tokens and submits it to subclasses for processing via the processAutoLoginCookie method.

autoLogin(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.authentication.RememberMeServices

This method will be called whenever the SecurityContextHolder does not contain an Authentication object and Spring Security wishes to provide an implementation with an opportunity to authenticate the request using remember-me capabilities.

B

BasicAuthenticationEntryPoint - Class in org.springframework.security.web.authentication.www

Used by the ExceptionTraslationFilter to commence authentication via the BasicAuthenticationFilter.

BasicAuthenticationEntryPoint() - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint

BasicAuthenticationFilter - Class in org.springframework.security.web.authentication.www

Processes a HTTP request's BASIC authorization headers, putting the result into the SecurityContextHolder.

BasicAuthenticationFilter(AuthenticationManager) - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

Creates an instance which will authenticate against the supplied AuthenticationManager and which will ignore failed authentication attempts, allowing the request to proceed down the filter chain.

BasicAuthenticationFilter(AuthenticationManager, AuthenticationEntryPoint) - Constructor for class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

Creates an instance which will authenticate against the supplied AuthenticationManager and use the supplied AuthenticationEntryPoint to handle authentication failures.

beforeConcurrentHandling(NativeWebRequest, Callable<T>) - Method in class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor

beforeSpringSecurityFilterChain(ServletContext) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Invoked before the springSecurityFilterChain is added.

build() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

buildDetails(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

Builds the authentication details object.

buildDetails(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource

buildDetails(HttpServletRequest) - Method in class org.springframework.security.web.authentication.WebAuthenticationDetailsSource

Builder() - Constructor for class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

buildFullRequestUrl(HttpServletRequest) - Static method in class org.springframework.security.web.util.UrlUtils

buildFullRequestUrl(String, String, int, String, String) - Static method in class org.springframework.security.web.util.UrlUtils

Obtains the full URL the client used to make the request.

buildHttpsRedirectUrlForRequest(HttpServletRequest) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

Builds a URL to redirect the supplied request to HTTPS.

buildRedirectUrlToLoginPage(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

buildRequestUrl(HttpServletRequest) - Static method in class org.springframework.security.web.util.UrlUtils

Obtains the web application-specific fragment of the request URL.

C

CacheControlHeadersWriter - Class in org.springframework.security.web.header.writers

Inserts headers to prevent caching if no cache control headers have been specified.

CacheControlHeadersWriter() - Constructor for class org.springframework.security.web.header.writers.CacheControlHeadersWriter

Creates a new instance

calculateLoginLifetime(HttpServletRequest, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

Calculates the validity period in seconds for a newly generated remember-me login.

calculateRedirectUrl(String, String) - Method in class org.springframework.security.web.DefaultRedirectStrategy

cancelCookie(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Sets a "cancel cookie" (with maxAge = 0) on the response to disable persistent logins.

ChangeSessionIdAuthenticationStrategy - Class in org.springframework.security.web.authentication.session

Uses HttpServletRequest.changeSessionId() to protect against session fixation attacks.

ChangeSessionIdAuthenticationStrategy() - Constructor for class org.springframework.security.web.authentication.session.ChangeSessionIdAuthenticationStrategy

ChannelDecisionManager - Interface in org.springframework.security.web.access.channel

Decides whether a web channel provides sufficient security.

ChannelDecisionManagerImpl - Class in org.springframework.security.web.access.channel

Implementation of ChannelDecisionManager.

ChannelDecisionManagerImpl() - Constructor for class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

ChannelEntryPoint - Interface in org.springframework.security.web.access.channel

May be used by a ChannelProcessor to launch a web channel.

ChannelProcessingFilter - Class in org.springframework.security.web.access.channel

Ensures a web request is delivered over the required channel.

ChannelProcessingFilter() - Constructor for class org.springframework.security.web.access.channel.ChannelProcessingFilter

ChannelProcessor - Interface in org.springframework.security.web.access.channel

Decides whether a web channel meets a specific security condition.

clearAuthenticationAttributes(HttpServletRequest) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler

Removes temporary authentication-related data which may have been stored in the session during the authentication process.

commence(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

commence(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.access.channel.ChannelEntryPoint

Commences a secure channel.

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

Always returns a 403 error code to the client.

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.HttpStatusEntryPoint

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

Performs the redirect (or forward) to the login form URL.

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

commence(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in interface org.springframework.security.web.AuthenticationEntryPoint

Commences an authentication scheme.

CompositeLogoutHandler - Class in org.springframework.security.web.authentication.logout

Performs a logout through all the LogoutHandler implementations.

CompositeLogoutHandler(LogoutHandler...) - Constructor for class org.springframework.security.web.authentication.logout.CompositeLogoutHandler

CompositeLogoutHandler(List<LogoutHandler>) - Constructor for class org.springframework.security.web.authentication.logout.CompositeLogoutHandler

CompositeSessionAuthenticationStrategy - Class in org.springframework.security.web.authentication.session

A SessionAuthenticationStrategy that accepts multiple SessionAuthenticationStrategy implementations to delegate to.

CompositeSessionAuthenticationStrategy(List<SessionAuthenticationStrategy>) - Constructor for class org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy

ConcurrentSessionControlAuthenticationStrategy - Class in org.springframework.security.web.authentication.session

Strategy which handles concurrent session-control.

ConcurrentSessionControlAuthenticationStrategy(SessionRegistry) - Constructor for class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

ConcurrentSessionFilter - Class in org.springframework.security.web.session

Filter required by concurrent session handling package.

ConcurrentSessionFilter(SessionRegistry) - Constructor for class org.springframework.security.web.session.ConcurrentSessionFilter

ConcurrentSessionFilter(SessionRegistry, String) - Constructor for class org.springframework.security.web.session.ConcurrentSessionFilter

Deprecated.

use ConcurrentSessionFilter.ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy) with SimpleRedirectSessionInformationExpiredStrategy instead.

ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy) - Constructor for class org.springframework.security.web.session.ConcurrentSessionFilter

containsContext(HttpServletRequest) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

containsContext(HttpServletRequest) - Method in class org.springframework.security.web.context.NullSecurityContextRepository

containsContext(HttpServletRequest) - Method in interface org.springframework.security.web.context.SecurityContextRepository

Allows the repository to be queried as to whether it contains a security context for the current request.

ContentSecurityPolicyHeaderWriter - Class in org.springframework.security.web.header.writers

Provides support for Content Security Policy (CSP) Level 2.

ContentSecurityPolicyHeaderWriter(String) - Constructor for class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter

Creates a new instance

CookieClearingLogoutHandler - Class in org.springframework.security.web.authentication.logout

A logout handler which clears a defined list of cookies, using the context path as the cookie path.

CookieClearingLogoutHandler(String...) - Constructor for class org.springframework.security.web.authentication.logout.CookieClearingLogoutHandler

CookieCsrfTokenRepository - Class in org.springframework.security.web.csrf

A CsrfTokenRepository that persists the CSRF token in a cookie named "XSRF-TOKEN" and reads from the header "X-XSRF-TOKEN" following the conventions of AngularJS.

CookieCsrfTokenRepository() - Constructor for class org.springframework.security.web.csrf.CookieCsrfTokenRepository

CookieTheftException - Exception in org.springframework.security.web.authentication.rememberme

CookieTheftException(String) - Constructor for exception org.springframework.security.web.authentication.rememberme.CookieTheftException

CREATE_TABLE_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

Default SQL for creating the database table to store the tokens

createAuthentication(HttpServletRequest) - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

createELContext(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.ELRequestMatcher

Subclasses can override this methode if they want to use a different EL root context

createNewToken(PersistentRememberMeToken) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl

createNewToken(PersistentRememberMeToken) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

createNewToken(PersistentRememberMeToken) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository

createSecurityExpressionRoot(Authentication, FilterInvocation) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler

createSuccessfulAuthentication(HttpServletRequest, UserDetails) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Creates the final Authentication object returned from the autoLogin method.

createUserDetails(Authentication, Collection<? extends GrantedAuthority>) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesUserDetailsService

Creates the final UserDetails object.

CsrfAuthenticationStrategy - Class in org.springframework.security.web.csrf

CsrfAuthenticationStrategy is in charge of removing the CsrfToken upon authenticating.

CsrfAuthenticationStrategy(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.CsrfAuthenticationStrategy

Creates a new instance

CsrfException - Exception in org.springframework.security.web.csrf

Thrown when an invalid or missing CsrfToken is found in the HttpServletRequest

CsrfException(String) - Constructor for exception org.springframework.security.web.csrf.CsrfException

CsrfFilter - Class in org.springframework.security.web.csrf

Applies CSRF protection using a synchronizer token pattern.

CsrfFilter(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.CsrfFilter

CsrfLogoutHandler - Class in org.springframework.security.web.csrf

CsrfLogoutHandler is in charge of removing the CsrfToken upon logout.

CsrfLogoutHandler(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.CsrfLogoutHandler

Creates a new instance

CsrfRequestDataValueProcessor - Class in org.springframework.security.web.servlet.support.csrf

Integration with Spring Web MVC that automatically adds the CsrfToken into forms with hidden inputs when using Spring tag libraries.

CsrfRequestDataValueProcessor() - Constructor for class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

CsrfToken - Interface in org.springframework.security.web.csrf

Provides the information about an expected CSRF token.

CsrfTokenArgumentResolver - Class in org.springframework.security.web.method.annotation

Allows resolving the current CsrfToken.

CsrfTokenArgumentResolver() - Constructor for class org.springframework.security.web.method.annotation.CsrfTokenArgumentResolver

CsrfTokenRepository - Interface in org.springframework.security.web.csrf

An API to allow changing the method in which the expected CsrfToken is associated to the HttpServletRequest.

currentDate - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat

Current formatted date.

currentDateGenerated - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat

Instant on which the currentDate object was generated.

D

DebugFilter - Class in org.springframework.security.web.debug

Spring Security debugging filter.

DebugFilter(FilterChainProxy) - Constructor for class org.springframework.security.web.debug.DebugFilter

decide(FilterInvocation, Collection<ConfigAttribute>) - Method in interface org.springframework.security.web.access.channel.ChannelDecisionManager

Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested list of ConfigAttributes.

decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

decide(FilterInvocation, Collection<ConfigAttribute>) - Method in interface org.springframework.security.web.access.channel.ChannelProcessor

Decided whether the presented FilterInvocation provides the appropriate level of channel security based on the requested list of ConfigAttributes.

decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor

decide(FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor

decodeCookie(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Decodes the cookie and splits it into a set of token strings using the ":" delimiter.

DEF_INSERT_TOKEN_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

The default SQL used by createNewToken

DEF_REMOVE_USER_TOKENS_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

The default SQL used by removeUserTokens

DEF_TOKEN_BY_SERIES_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

The default SQL used by the getTokenBySeries query

DEF_UPDATE_TOKEN_SQL - Static variable in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

The default SQL used by updateToken

DEFAULT_CSRF_MATCHER - Static variable in class org.springframework.security.web.csrf.CsrfFilter

The default RequestMatcher that indicates if CSRF protection is required or not.

DEFAULT_EXTRACTOR - Static variable in class org.springframework.security.web.util.ThrowableAnalyzer

Default extractor for Throwable instances.

DEFAULT_FILTER_NAME - Static variable in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

DEFAULT_LOGIN_PAGE_URL - Static variable in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

DEFAULT_PARAMETER - Static variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

DEFAULT_SERIES_LENGTH - Static variable in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

DEFAULT_TOKEN_LENGTH - Static variable in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

DefaultCsrfToken - Class in org.springframework.security.web.csrf

A CSRF token that is used to protect against CSRF attacks.

DefaultCsrfToken(String, String, String) - Constructor for class org.springframework.security.web.csrf.DefaultCsrfToken

Creates a new instance

DefaultFilterInvocationSecurityMetadataSource - Class in org.springframework.security.web.access.intercept

Default implementation of FilterInvocationDefinitionSource.

DefaultFilterInvocationSecurityMetadataSource(LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>>) - Constructor for class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

Sets the internal request map from the supplied map.

DefaultHttpFirewall - Class in org.springframework.security.web.firewall

User's should consider using StrictHttpFirewall because rather than trying to sanitize a malicious URL it rejects the malicious URL providing better security guarantees.

DefaultHttpFirewall() - Constructor for class org.springframework.security.web.firewall.DefaultHttpFirewall

DefaultLoginPageGeneratingFilter - Class in org.springframework.security.web.authentication.ui

For internal use with namespace configuration in the case where a user doesn't configure a login page.

DefaultLoginPageGeneratingFilter() - Constructor for class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

DefaultLoginPageGeneratingFilter(AbstractAuthenticationProcessingFilter) - Constructor for class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

DefaultLoginPageGeneratingFilter(UsernamePasswordAuthenticationFilter, AbstractAuthenticationProcessingFilter) - Constructor for class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

DefaultRedirectStrategy - Class in org.springframework.security.web

Simple implementation of RedirectStrategy which is the default used throughout the framework.

DefaultRedirectStrategy() - Constructor for class org.springframework.security.web.DefaultRedirectStrategy

DefaultSavedRequest - Class in org.springframework.security.web.savedrequest

Represents central information from a HttpServletRequest.

DefaultSavedRequest(HttpServletRequest, PortResolver) - Constructor for class org.springframework.security.web.savedrequest.DefaultSavedRequest

DefaultSavedRequest.Builder - Class in org.springframework.security.web.savedrequest

DefaultSecurityFilterChain - Class in org.springframework.security.web

Standard implementation of SecurityFilterChain.

DefaultSecurityFilterChain(RequestMatcher, Filter...) - Constructor for class org.springframework.security.web.DefaultSecurityFilterChain

DefaultSecurityFilterChain(RequestMatcher, List<Filter>) - Constructor for class org.springframework.security.web.DefaultSecurityFilterChain

DefaultWebInvocationPrivilegeEvaluator - Class in org.springframework.security.web.access

Allows users to determine whether they have privileges for a given web URI.

DefaultWebInvocationPrivilegeEvaluator(AbstractSecurityInterceptor) - Constructor for class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator

DefaultWebSecurityExpressionHandler - Class in org.springframework.security.web.access.expression

DefaultWebSecurityExpressionHandler() - Constructor for class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler

DelegatingAccessDeniedHandler - Class in org.springframework.security.web.access

An AccessDeniedHandler that delegates to other AccessDeniedHandler instances based upon the type of AccessDeniedException passed into DelegatingAccessDeniedHandler.handle(HttpServletRequest, HttpServletResponse, AccessDeniedException).

DelegatingAccessDeniedHandler(LinkedHashMap<Class<? extends AccessDeniedException>, AccessDeniedHandler>, AccessDeniedHandler) - Constructor for class org.springframework.security.web.access.DelegatingAccessDeniedHandler

Creates a new instance

DelegatingAuthenticationEntryPoint - Class in org.springframework.security.web.authentication

An AuthenticationEntryPoint which selects a concrete AuthenticationEntryPoint based on a RequestMatcher evaluation.

DelegatingAuthenticationEntryPoint(LinkedHashMap<RequestMatcher, AuthenticationEntryPoint>) - Constructor for class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint

DelegatingAuthenticationFailureHandler - Class in org.springframework.security.web.authentication

An AuthenticationFailureHandler that delegates to other AuthenticationFailureHandler instances based upon the type of AuthenticationException passed into DelegatingAuthenticationFailureHandler.onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) .

DelegatingAuthenticationFailureHandler(LinkedHashMap<Class<? extends AuthenticationException>, AuthenticationFailureHandler>, AuthenticationFailureHandler) - Constructor for class org.springframework.security.web.authentication.DelegatingAuthenticationFailureHandler

Creates a new instance

DelegatingLogoutSuccessHandler - Class in org.springframework.security.web.authentication.logout

Delegates to logout handlers based on matched request matchers

DelegatingLogoutSuccessHandler(LinkedHashMap<RequestMatcher, LogoutSuccessHandler>) - Constructor for class org.springframework.security.web.authentication.logout.DelegatingLogoutSuccessHandler

DelegatingRequestMatcherHeaderWriter - Class in org.springframework.security.web.header.writers

Delegates to the provided HeaderWriter when RequestMatcher.matches(HttpServletRequest) returns true.

DelegatingRequestMatcherHeaderWriter(RequestMatcher, HeaderWriter) - Constructor for class org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter

Creates a new instance

destroy() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

Not used (we rely on IoC container lifecycle services instead)

destroy() - Method in class org.springframework.security.web.debug.DebugFilter

determineCauseChain(Throwable) - Method in class org.springframework.security.web.util.ThrowableAnalyzer

Determines the cause chain of the provided Throwable.

determineExpiredUrl(HttpServletRequest, SessionInformation) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter

Deprecated.

Use ConcurrentSessionFilter.ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy) instead.

determineTargetUrl(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

Builds the target URL according to the logic defined in the main class Javadoc.

determineUrlToUseForThisRequest(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

Allows subclasses to modify the login form URL that should be applicable for a given request.

DigestAuthenticationEntryPoint - Class in org.springframework.security.web.authentication.www

Used by the SecurityEnforcementFilter to commence authentication via the DigestAuthenticationFilter.

DigestAuthenticationEntryPoint() - Constructor for class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

DigestAuthenticationFilter - Class in org.springframework.security.web.authentication.www

Processes a HTTP request's Digest authorization headers, putting the result into the SecurityContextHolder.

DigestAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

disableOnResponseCommitted() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Invoke this method to disable invoking OnCommittedResponseWrapper.onResponseCommitted() when the HttpServletResponse is committed.

disableSaveOnResponseCommitted() - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

Invoke this method to disable automatic saving of the SecurityContext when the HttpServletResponse is committed.

doesRequestMatch(HttpServletRequest, PortResolver) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

Determines if the current request matches the DefaultSavedRequest.

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

Method that is actually called by the filter chain.

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Invokes the requiresAuthentication method to determine whether the request is for authentication and should be handled by this filter.

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Try to authenticate a pre-authenticated user with Spring Security if the user has not yet been authenticated.

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.context.SecurityContextPersistenceFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.debug.DebugFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.FilterChainProxy

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter

Attempts to obtain and run as a JAAS Subject using JaasApiIntegrationFilter.obtainSubject(ServletRequest).

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.savedrequest.RequestCacheAwareFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter

doFilter(ServletRequest, ServletResponse, FilterChain) - Method in class org.springframework.security.web.session.SessionManagementFilter

doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter

doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.csrf.CsrfFilter

doFilterInternal(HttpServletRequest, HttpServletResponse, FilterChain) - Method in class org.springframework.security.web.header.HeaderWriterFilter

E

ELRequestMatcher - Class in org.springframework.security.web.util.matcher

A RequestMatcher implementation which uses a SpEL expression

ELRequestMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.ELRequestMatcher

enableHttpSessionEventPublisher() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Override this if HttpSessionEventPublisher should be added as a listener.

encodeCookie(String[]) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Inverse operation of decodeCookie.

encodeRedirectUrl(String) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

encodeRedirectURL(String) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

encodeUrl(String) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

encodeURL(String) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

Enumerator<T> - Class in org.springframework.security.web.savedrequest

Adapter that wraps an Enumeration around a Java 2 collection Iterator.

Enumerator(Collection<T>) - Constructor for class org.springframework.security.web.savedrequest.Enumerator

Return an Enumeration over the values of the specified Collection.

Enumerator(Collection<T>, boolean) - Constructor for class org.springframework.security.web.savedrequest.Enumerator

Return an Enumeration over the values of the specified Collection.

Enumerator(Iterator<T>) - Constructor for class org.springframework.security.web.savedrequest.Enumerator

Return an Enumeration over the values returned by the specified Iterator.

Enumerator(Iterator<T>, boolean) - Constructor for class org.springframework.security.web.savedrequest.Enumerator

Return an Enumeration over the values returned by the specified Iterator.

Enumerator(Map<?, T>) - Constructor for class org.springframework.security.web.savedrequest.Enumerator

Return an Enumeration over the values of the specified Map.

Enumerator(Map<?, T>, boolean) - Constructor for class org.springframework.security.web.savedrequest.Enumerator

Return an Enumeration over the values of the specified Map.

equals(Object) - Method in class org.springframework.security.web.access.intercept.RequestKey

equals(Object) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority

equals(Object) - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails

equals(Object) - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher

equals(Object) - Method in class org.springframework.security.web.util.matcher.AnyRequestMatcher

ERROR_PARAMETER_NAME - Static variable in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

escapeEntities(String) - Static method in class org.springframework.security.web.util.TextEscapeUtils

eventPublisher - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

ExceptionMappingAuthenticationFailureHandler - Class in org.springframework.security.web.authentication

Uses the internal map of exceptions types to URLs to determine the destination on authentication failure.

ExceptionMappingAuthenticationFailureHandler() - Constructor for class org.springframework.security.web.authentication.ExceptionMappingAuthenticationFailureHandler

ExceptionTranslationFilter - Class in org.springframework.security.web.access

Handles any AccessDeniedException and AuthenticationException thrown within the filter chain.

ExceptionTranslationFilter(AuthenticationEntryPoint) - Constructor for class org.springframework.security.web.access.ExceptionTranslationFilter

ExceptionTranslationFilter(AuthenticationEntryPoint, RequestCache) - Constructor for class org.springframework.security.web.access.ExceptionTranslationFilter

ExpressionBasedFilterInvocationSecurityMetadataSource - Class in org.springframework.security.web.access.expression

Expression-based FilterInvocationSecurityMetadataSource.

ExpressionBasedFilterInvocationSecurityMetadataSource(LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>>, SecurityExpressionHandler<FilterInvocation>) - Constructor for class org.springframework.security.web.access.expression.ExpressionBasedFilterInvocationSecurityMetadataSource

extractAttributes(HttpSession) - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy

Called to extract the existing attributes from the session, prior to invalidating it.

extractCause(Throwable) - Method in interface org.springframework.security.web.util.ThrowableCauseExtractor

Extracts the cause from the provided Throwable.

extractPrincipal(X509Certificate) - Method in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor

extractPrincipal(X509Certificate) - Method in interface org.springframework.security.web.authentication.preauth.x509.X509PrincipalExtractor

Returns the principal (usually a String) for the given certificate.

extractRememberMeCookie(HttpServletRequest) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Locates the Spring Security remember me cookie in the request and returns its value.

extractUriTemplateVariables(HttpServletRequest) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher

extractUriTemplateVariables(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher

extractUriTemplateVariables(HttpServletRequest) - Method in interface org.springframework.security.web.util.matcher.RequestVariablesExtractor

Extract URL template variables from the request.

F

FastHttpDateFormat - Class in org.springframework.security.web.savedrequest

Utility class to generate HTTP dates.

FastHttpDateFormat() - Constructor for class org.springframework.security.web.savedrequest.FastHttpDateFormat

FilterChainProxy - Class in org.springframework.security.web

Delegates Filter requests to a list of Spring-managed filter beans.

FilterChainProxy() - Constructor for class org.springframework.security.web.FilterChainProxy

FilterChainProxy(SecurityFilterChain) - Constructor for class org.springframework.security.web.FilterChainProxy

FilterChainProxy(List<SecurityFilterChain>) - Constructor for class org.springframework.security.web.FilterChainProxy

FilterChainProxy.FilterChainValidator - Interface in org.springframework.security.web

FilterInvocation - Class in org.springframework.security.web

Holds objects associated with a HTTP filter.

FilterInvocation(ServletRequest, ServletResponse, FilterChain) - Constructor for class org.springframework.security.web.FilterInvocation

FilterInvocation(String, String) - Constructor for class org.springframework.security.web.FilterInvocation

FilterInvocation(String, String, String) - Constructor for class org.springframework.security.web.FilterInvocation

FilterInvocation(String, String, String, String, String) - Constructor for class org.springframework.security.web.FilterInvocation

FilterInvocationSecurityMetadataSource - Interface in org.springframework.security.web.access.intercept

Marker interface for SecurityMetadataSource implementations that are designed to perform lookups keyed on FilterInvocations.

FilterSecurityInterceptor - Class in org.springframework.security.web.access.intercept

Performs security handling of HTTP resources via a filter implementation.

FilterSecurityInterceptor() - Constructor for class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

findRequiredWebApplicationContext(ServletContext) - Static method in class org.springframework.security.web.context.support.SecurityWebApplicationContextUtils

Find a unique WebApplicationContext for this web app: either the root web app context (preferred) or a unique WebApplicationContext among the registered ServletContext attributes (typically coming from a single DispatcherServlet in the current web application).

FirewalledRequest - Class in org.springframework.security.web.firewall

Request wrapper which is returned by the HttpFirewall interface.

FirewalledRequest(HttpServletRequest) - Constructor for class org.springframework.security.web.firewall.FirewalledRequest

Constructs a request object wrapping the given request.

flushBuffer() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Makes sure OnCommittedResponseWrapper.onResponseCommitted() is invoked before calling the superclass flushBuffer()

format - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat

HTTP date format.

formatCache - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat

Formatter cache.

formatDate(long, DateFormat) - Static method in class org.springframework.security.web.savedrequest.FastHttpDateFormat

Formats a specified date to HTTP format.

formats - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat

The set of SimpleDateFormat formats to use in getDateHeader().

ForwardAuthenticationFailureHandler - Class in org.springframework.security.web.authentication

Forward Authentication Failure Handler

ForwardAuthenticationFailureHandler(String) - Constructor for class org.springframework.security.web.authentication.ForwardAuthenticationFailureHandler

ForwardAuthenticationSuccessHandler - Class in org.springframework.security.web.authentication

Forward Authentication Success Handler

ForwardAuthenticationSuccessHandler(String) - Constructor for class org.springframework.security.web.authentication.ForwardAuthenticationSuccessHandler

G

generateNewContext() - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

By default, calls SecurityContextHolder.createEmptyContext() to obtain a new context (there should be no context present in the holder when this method is called).

generateSeriesData() - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

generateToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

generateToken(HttpServletRequest) - Method in interface org.springframework.security.web.csrf.CsrfTokenRepository

Generates a CsrfToken

generateToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository

generateToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.LazyCsrfTokenRepository

Generates a new token

generateTokenData() - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

get(String) - Static method in enum org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy

getAllConfigAttributes() - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

getAllowFromValue(HttpServletRequest) - Method in interface org.springframework.security.web.header.writers.frameoptions.AllowFromStrategy

Gets the value for ALLOW-FROM excluding the ALLOW-FROM.

getAllowFromValue(HttpServletRequest) - Method in class org.springframework.security.web.header.writers.frameoptions.StaticAllowFromStrategy

getAllowSessionCreation() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

getAttributes(Object) - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

getAuthenticationDetailsSource() - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

getAuthenticationDetailsSource() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

getAuthenticationEntryPoint() - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

getAuthenticationEntryPoint() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

getAuthenticationEntryPoint() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

getAuthenticationManager() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

getAuthenticationManager() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

getAuthenticationTrustResolver() - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

getAuthorities() - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

getAuthority() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority

getChain() - Method in class org.springframework.security.web.FilterInvocation

getChannelDecisionManager() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter

getChannelProcessors() - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

getComment() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getContextPath() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getCookie() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getCookieName() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

getCookiePath() - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

Get the path that the CSRF cookie will be set to.

getCookies() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getCookies() - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getCredentials() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken

Get the credentials

getCredentialsCharset(HttpServletRequest) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

getCurrentDate() - Static method in class org.springframework.security.web.savedrequest.FastHttpDateFormat

Gets the current date in HTTP format.

getDate() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken

getDefaultTargetUrl() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

Supplies the default target Url that will be used if no saved request is found or the alwaysUseDefaultTargetUrl property is set to true.

getDispatcherWebApplicationContextSuffix() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Return the <servlet-name> to use the DispatcherServlet's WebApplicationContext to find the DelegatingFilterProxy or null to use the parent ApplicationContext.

getDomain() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getEntryPoint() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor

getEntryPoint() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor

getExtraHiddenFields(HttpServletRequest) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

getFailureHandler() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

getFilterChains() - Method in class org.springframework.security.web.FilterChainProxy

getFilters() - Method in class org.springframework.security.web.DefaultSecurityFilterChain

getFilters(String) - Method in class org.springframework.security.web.FilterChainProxy

Convenience method, mainly for testing.

getFilters() - Method in interface org.springframework.security.web.SecurityFilterChain

getFirewalledRequest(HttpServletRequest) - Method in class org.springframework.security.web.firewall.DefaultHttpFirewall

getFirewalledRequest(HttpServletRequest) - Method in interface org.springframework.security.web.firewall.HttpFirewall

Provides the request object which will be passed through the filter chain.

getFirewalledRequest(HttpServletRequest) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall

getFirewalledResponse(HttpServletResponse) - Method in class org.springframework.security.web.firewall.DefaultHttpFirewall

getFirewalledResponse(HttpServletResponse) - Method in interface org.springframework.security.web.firewall.HttpFirewall

Provides the response which will be passed through the filter chain.

getFirewalledResponse(HttpServletResponse) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall

getFirstThrowableOfType(Class<? extends Throwable>, Throwable[]) - Method in class org.springframework.security.web.util.ThrowableAnalyzer

Returns the first throwable from the passed in array that is assignable to the provided type.

getFullRequestUrl() - Method in class org.springframework.security.web.FilterInvocation

Indicates the URL that the user agent used for this request.

getGrantedAuthorities() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

getHeaderName() - Method in interface org.springframework.security.web.csrf.CsrfToken

Gets the HTTP header that the CSRF is populated on the response and can be placed on requests instead of the parameter.

getHeaderName() - Method in class org.springframework.security.web.csrf.DefaultCsrfToken

getHeaderNames() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getHeaderNames() - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getHeaderValues(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getHeaderValues(String) - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getHttpRequest() - Method in class org.springframework.security.web.FilterInvocation

getHttpResponse() - Method in class org.springframework.security.web.FilterInvocation

getId() - Method in class org.springframework.security.web.session.HttpSessionDestroyedEvent

getInsecureKeyword() - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor

getKey() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

getKey() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

getLocales() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getLocales() - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getLoginFormUrl() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

getLoginPageUrl() - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

getMappableAttributes() - Method in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever

getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.RetryWithHttpEntryPoint

getMappedPort(Integer) - Method in class org.springframework.security.web.access.channel.RetryWithHttpsEntryPoint

getMatchingRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

getMatchingRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache

getMatchingRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache

Returns a wrapper around the saved request, if it matches the current request.

getMaxAge() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getMaximumSessionsForThisUser(Authentication) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

Method intended for use by subclasses to override the maximum number of sessions that are permitted for a particular authentication.

getMethod() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getMethod() - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getName() - Method in class org.springframework.security.web.header.Header

Gets the name of the header.

getName() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getNewSessionId() - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionEvent

Getter for the session ID after it was changed.

getNonceValiditySeconds() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

getOldSessionId() - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionEvent

Getter for the session ID before it was changed.

getOrder() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

getOrder() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

getOutputStream() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Makes sure OnCommittedResponseWrapper.onResponseCommitted() is invoked before calling the calling getOutputStream().close() or getOutputStream().flush()

getParameter() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

getParameterMap() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getParameterMap() - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getParameterName() - Method in interface org.springframework.security.web.csrf.CsrfToken

Gets the HTTP parameter name that should contain the token.

getParameterName() - Method in class org.springframework.security.web.csrf.DefaultCsrfToken

getParameterNames() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getParameterValues(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getParameterValues(String) - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getPasswordParameter() - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

getPath() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getPathInfo() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getPattern() - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher

getPolicy() - Method in enum org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy

getPortMapper() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

getPortMapper() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

getPortMapper() - Method in class org.springframework.security.web.PortResolverImpl

getPortResolver() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

getPortResolver() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Override to extract the credentials (if applicable) from the current request.

getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eePreAuthenticatedProcessingFilter

For J2EE container-based authentication there is no generic way to retrieve the credentials, as such this method returns a fixed dummy value.

getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter

Credentials aren't usually applicable, but if a credentialsEnvironmentVariable is set, this will be read and used as the credentials value.

getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter

Credentials aren't usually applicable, but if a credentialsRequestHeader is set, this will be read and used as the credentials value.

getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedProcessingFilter

For J2EE container-based authentication there is no generic way to retrieve the credentials, as such this method returns a fixed dummy value.

getPreAuthenticatedCredentials(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter

getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Override to extract the principal information from the current request

getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eePreAuthenticatedProcessingFilter

Return the J2EE user name.

getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter

Read and returns the variable named by principalEnvironmentVariable from the request.

getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter

Read and returns the header named by principalRequestHeader from the request.

getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedProcessingFilter

Return the WebSphere user name.

getPreAuthenticatedPrincipal(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter

getPrincipal() - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

getPrincipal() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken

Get the principal

getQueryString() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getRealmName() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint

getRealmName() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

getRedirectStrategy() - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

getRedirectStrategy() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

getRedirectStrategy() - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

getRedirectUrl() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

Indicates the URL that the user agent used for this request.

getRedirectUrl() - Method in interface org.springframework.security.web.savedrequest.SavedRequest

getRememberMeServices() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

getRememberMeServices() - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

getRemoteAddress() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails

Indicates the TCP/IP address the authentication request was received from.

getRemoteUser() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper

Returns the principal's name, as obtained from the SecurityContextHolder.

getRequest() - Method in class org.springframework.security.web.context.HttpRequestResponseHolder

getRequest() - Method in class org.springframework.security.web.FilterInvocation

getRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

getRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache

getRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache

Returns the saved request, leaving it cached.

getRequest() - Method in class org.springframework.security.web.session.SessionInformationExpiredEvent

getRequestMatcher() - Method in class org.springframework.security.web.DefaultSecurityFilterChain

getRequestURI() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getRequestUrl() - Method in class org.springframework.security.web.FilterInvocation

Obtains the web application-specific fragment of the URL.

getRequestURL() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getResponse() - Method in class org.springframework.security.web.context.HttpRequestResponseHolder

getResponse() - Method in class org.springframework.security.web.FilterInvocation

getResponse() - Method in class org.springframework.security.web.session.SessionInformationExpiredEvent

getScheme() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getSecureKeyword() - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor

getSecureObjectClass() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

getSecurityContexts() - Method in class org.springframework.security.web.session.HttpSessionDestroyedEvent

getSecurityDispatcherTypes() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Get the DispatcherType for the springSecurityFilterChain.

getSecurityMetadataSource() - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter

getSecurityMetadataSource() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

getSeries() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken

getServerName() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getServerPort(ServletRequest) - Method in interface org.springframework.security.web.PortResolver

Indicates the port the ServletRequest was received on.

getServerPort(ServletRequest) - Method in class org.springframework.security.web.PortResolverImpl

getServerPort() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getServletPath() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

getServletPath() - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher

getSession() - Method in class org.springframework.security.web.session.HttpSessionCreatedEvent

getSession() - Method in class org.springframework.security.web.session.HttpSessionDestroyedEvent

getSessionId() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails

Indicates the HttpSession id the authentication request was received from.

getSessionInformation() - Method in class org.springframework.security.web.session.SessionInformationExpiredEvent

getSessionTrackingModes() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Determines how a session should be tracked.

getSource() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority

Returns the original user associated with a successful user switch.

getSuccessHandler() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

getTargetUrlParameter() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

getTargetUser() - Method in class org.springframework.security.web.authentication.switchuser.AuthenticationSwitchUserEvent

getToken() - Method in interface org.springframework.security.web.csrf.CsrfToken

Gets the token value.

getToken() - Method in class org.springframework.security.web.csrf.DefaultCsrfToken

getTokenForSeries(String) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl

getTokenForSeries(String) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

Loads the token data for the supplied series identifier.

getTokenForSeries(String) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository

getTokenValiditySeconds() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

getTokenValue() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken

getTranslatedPortMappings() - Method in class org.springframework.security.web.PortMapperImpl

Returns the translated (Integer -> Integer) version of the original port mapping specified via setHttpsPortMapping()

getUrl() - Method in class org.springframework.security.web.util.RedirectUrlBuilder

getUserCache() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

getUserDetailsService() - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

getUserDetailsService() - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

getUsername() - Method in class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken

getUsernameParameter() - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

getUserPrincipal() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper

Returns the Authentication (which is a subclass of Principal), or null if unavailable.

getUserRoles(HttpServletRequest) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

Obtains the list of user roles based on the current user's JEE roles.

getValue() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getValues() - Method in class org.springframework.security.web.header.Header

Gets the values of the header.

getVersion() - Method in class org.springframework.security.web.savedrequest.SavedCookie

getWriter() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Makes sure OnCommittedResponseWrapper.onResponseCommitted() is invoked before calling the getWriter().close() or getWriter().flush()

gmtZone - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat

GMT time zone - all HTTP dates are on GMT

H

handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in interface org.springframework.security.web.access.AccessDeniedHandler

Handles an access denied failure.

handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.AccessDeniedHandlerImpl

handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.access.DelegatingAccessDeniedHandler

handle(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

Invokes the configured RedirectStrategy with the URL returned by the determineTargetUrl method.

handle(HttpServletRequest, HttpServletResponse, AccessDeniedException) - Method in class org.springframework.security.web.session.InvalidSessionAccessDeniedHandler

hashCode() - Method in class org.springframework.security.web.access.intercept.RequestKey

hashCode() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority

hashCode() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails

hashCode() - Method in class org.springframework.security.web.header.Header

hashCode() - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher

hashCode() - Method in class org.springframework.security.web.util.matcher.AnyRequestMatcher

hasIpAddress(String) - Method in class org.springframework.security.web.access.expression.WebSecurityExpressionRoot

Takes a specific IP address or a range using the IP/Netmask (e.g.

hasMoreElements() - Method in class org.springframework.security.web.savedrequest.Enumerator

Tests if this enumeration contains more elements.

Header - Class in org.springframework.security.web.header

Represents a Header to be added to the HttpServletResponse

Header(String, String...) - Constructor for class org.springframework.security.web.header.Header

Creates a new instance

HeaderWriter - Interface in org.springframework.security.web.header

Contract for writing headers to a HttpServletResponse

HeaderWriterFilter - Class in org.springframework.security.web.header

Filter implementation to add headers to the current response.

HeaderWriterFilter(List<HeaderWriter>) - Constructor for class org.springframework.security.web.header.HeaderWriterFilter

Creates a new instance.

HpkpHeaderWriter - Class in org.springframework.security.web.header.writers

Provides support for HTTP Public Key Pinning (HPKP).

HpkpHeaderWriter(long, boolean, boolean) - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter

Creates a new instance

HpkpHeaderWriter(long, boolean) - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter

Creates a new instance

HpkpHeaderWriter(long) - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter

Creates a new instance

HpkpHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.HpkpHeaderWriter

Creates a new instance

HstsHeaderWriter - Class in org.springframework.security.web.header.writers

Provides support for HTTP Strict Transport Security (HSTS).

HstsHeaderWriter(RequestMatcher, long, boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter

Creates a new instance

HstsHeaderWriter(long, boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter

Creates a new instance

HstsHeaderWriter(long) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter

Creates a new instance

HstsHeaderWriter(boolean) - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter

Creates a new instance

HstsHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.HstsHeaderWriter

Creates a new instance

Http403ForbiddenEntryPoint - Class in org.springframework.security.web.authentication

In the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked.

Http403ForbiddenEntryPoint() - Constructor for class org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

HttpFirewall - Interface in org.springframework.security.web.firewall

Interface which can be used to reject potentially dangerous requests and/or wrap them to control their behaviour.

HttpRequestResponseHolder - Class in org.springframework.security.web.context

Used to pass the incoming request to SecurityContextRepository.loadContext(HttpRequestResponseHolder), allowing the method to swap the request for a wrapped version, as well as returning the SecurityContext value.

HttpRequestResponseHolder(HttpServletRequest, HttpServletResponse) - Constructor for class org.springframework.security.web.context.HttpRequestResponseHolder

HttpSessionCreatedEvent - Class in org.springframework.security.web.session

Published by the HttpSessionEventPublisher when an HttpSession is created by the container

HttpSessionCreatedEvent(HttpSession) - Constructor for class org.springframework.security.web.session.HttpSessionCreatedEvent

HttpSessionCsrfTokenRepository - Class in org.springframework.security.web.csrf

A CsrfTokenRepository that stores the CsrfToken in the HttpSession.

HttpSessionCsrfTokenRepository() - Constructor for class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository

HttpSessionDestroyedEvent - Class in org.springframework.security.web.session

Published by the HttpSessionEventPublisher when a HttpSession is created in the container

HttpSessionDestroyedEvent(HttpSession) - Constructor for class org.springframework.security.web.session.HttpSessionDestroyedEvent

HttpSessionEventPublisher - Class in org.springframework.security.web.session

Declared in web.xml as

HttpSessionEventPublisher() - Constructor for class org.springframework.security.web.session.HttpSessionEventPublisher

HttpSessionRequestCache - Class in org.springframework.security.web.savedrequest

RequestCache which stores the SavedRequest in the HttpSession.

HttpSessionRequestCache() - Constructor for class org.springframework.security.web.savedrequest.HttpSessionRequestCache

HttpSessionSecurityContextRepository - Class in org.springframework.security.web.context

A SecurityContextRepository implementation which stores the security context in the HttpSession between requests.

HttpSessionSecurityContextRepository() - Constructor for class org.springframework.security.web.context.HttpSessionSecurityContextRepository

HttpStatusEntryPoint - Class in org.springframework.security.web.authentication

An AuthenticationEntryPoint that sends a generic HttpStatus as a response.

HttpStatusEntryPoint(HttpStatus) - Constructor for class org.springframework.security.web.authentication.HttpStatusEntryPoint

Creates a new instance.

HttpStatusReturningLogoutSuccessHandler - Class in org.springframework.security.web.authentication.logout

Implementation of the LogoutSuccessHandler.

HttpStatusReturningLogoutSuccessHandler(HttpStatus) - Constructor for class org.springframework.security.web.authentication.logout.HttpStatusReturningLogoutSuccessHandler

Initialize the HttpStatusLogoutSuccessHandler with a user-defined HttpStatus.

HttpStatusReturningLogoutSuccessHandler() - Constructor for class org.springframework.security.web.authentication.logout.HttpStatusReturningLogoutSuccessHandler

Initialize the HttpStatusLogoutSuccessHandler with the default HttpStatus.OK.

I

init(FilterConfig) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

Not used (we rely on IoC container lifecycle services instead)

init(FilterConfig) - Method in class org.springframework.security.web.debug.DebugFilter

initDao() - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

initExtractorMap() - Method in class org.springframework.security.web.util.ThrowableAnalyzer

Initializes associations between Throwables and ThrowableCauseExtractors.

InMemoryTokenRepositoryImpl - Class in org.springframework.security.web.authentication.rememberme

Simple PersistentTokenRepository implementation backed by a Map.

InMemoryTokenRepositoryImpl() - Constructor for class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl

InsecureChannelProcessor - Class in org.springframework.security.web.access.channel

Ensures channel security is inactive by review of HttpServletRequest.isSecure() responses.

InsecureChannelProcessor() - Constructor for class org.springframework.security.web.access.channel.InsecureChannelProcessor

insertFilters(ServletContext, Filter...) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Inserts the provided Filters before existing Filters using default generated names, AbstractSecurityWebApplicationInitializer.getSecurityDispatcherTypes(), and AbstractSecurityWebApplicationInitializer.isAsyncSecuritySupported().

INSTANCE - Static variable in class org.springframework.security.web.util.matcher.AnyRequestMatcher

InvalidCookieException - Exception in org.springframework.security.web.authentication.rememberme

Exception thrown by a RememberMeServices implementation to indicate that a submitted cookie is of an invalid format or has expired.

InvalidCookieException(String) - Constructor for exception org.springframework.security.web.authentication.rememberme.InvalidCookieException

InvalidCsrfTokenException - Exception in org.springframework.security.web.csrf

Thrown when an expected CsrfToken exists, but it does not match the value present on the HttpServletRequest

InvalidCsrfTokenException(CsrfToken, String) - Constructor for exception org.springframework.security.web.csrf.InvalidCsrfTokenException

InvalidSessionAccessDeniedHandler - Class in org.springframework.security.web.session

An adapter of InvalidSessionStrategy to AccessDeniedHandler

InvalidSessionAccessDeniedHandler(InvalidSessionStrategy) - Constructor for class org.springframework.security.web.session.InvalidSessionAccessDeniedHandler

Creates a new instance

InvalidSessionStrategy - Interface in org.springframework.security.web.session

Determines the behaviour of the SessionManagementFilter when an invalid session Id is submitted and detected in the SessionManagementFilter.

INVOCATIONTARGET_EXTRACTOR - Static variable in class org.springframework.security.web.util.ThrowableAnalyzer

Default extractor for InvocationTargetException instances.

invoke(FilterInvocation) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

IpAddressMatcher - Class in org.springframework.security.web.util.matcher

Matches a request based on IP Address or subnet mask matching against the remote address.

IpAddressMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.IpAddressMatcher

Takes a specific IP address or a range specified using the IP/Netmask (e.g.

isAbsoluteUrl(String) - Static method in class org.springframework.security.web.util.UrlUtils

Decides if a URL is absolute based on whether it contains a valid scheme name, as defined in RFC 1738.

isAllowed(String, Authentication) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator

Determines whether the user represented by the supplied Authentication object is allowed to invoke the supplied URI.

isAllowed(String, String, String, Authentication) - Method in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator

Determines whether the user represented by the supplied Authentication object is allowed to invoke the supplied URI, with the given .

isAllowed(String, Authentication) - Method in interface org.springframework.security.web.access.WebInvocationPrivilegeEvaluator

Determines whether the user represented by the supplied Authentication object is allowed to invoke the supplied URI.

isAllowed(String, String, String, Authentication) - Method in interface org.springframework.security.web.access.WebInvocationPrivilegeEvaluator

Determines whether the user represented by the supplied Authentication object is allowed to invoke the supplied URI, with the given .

isAllowSessionCreation() - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

isAlwaysUseDefaultTargetUrl() - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

isAsyncSecuritySupported() - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

Determine if the springSecurityFilterChain should be marked as supporting asynch.

isContextRelative() - Method in class org.springframework.security.web.DefaultRedirectStrategy

Returns true, if the redirection URL should be calculated minus the protocol and context path (defaults to false).

isContextSaved() - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

Tells if the response wrapper has called saveContext() because of this wrapper.

isDisableOnResponseCommitted() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Returns true if OnCommittedResponseWrapper.onResponseCommitted() will be invoked when the response is committed, else false.

isEnabled() - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

isForceHttps() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

isIgnoreFailure() - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

isInvalidateHttpSession() - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler

isObserveOncePerRequest() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

Indicates whether once-per-request handling will be observed.

isSecure() - Method in class org.springframework.security.web.savedrequest.SavedCookie

isTokenExpired(long) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

isUseForward() - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

isUseForward() - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

isUserInRole(String) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper

Simple searches for an exactly matching GrantedAuthority.getAuthority().

isValidRedirectUrl(String) - Static method in class org.springframework.security.web.util.UrlUtils

Returns true if the supplied URL starts with a "/" or is absolute.

J

J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource - Class in org.springframework.security.web.authentication.preauth.j2ee

Implementation of AuthenticationDetailsSource which converts the user's J2EE roles (as obtained by calling HttpServletRequest.isUserInRole(String)) into GrantedAuthoritys and stores these in the authentication details object.

J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource() - Constructor for class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

j2eeMappableRoles - Variable in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

The role attributes returned by the configured MappableAttributesRetriever

J2eePreAuthenticatedProcessingFilter - Class in org.springframework.security.web.authentication.preauth.j2ee

This AbstractPreAuthenticatedProcessingFilter implementation is based on the J2EE container-based authentication mechanism.

J2eePreAuthenticatedProcessingFilter() - Constructor for class org.springframework.security.web.authentication.preauth.j2ee.J2eePreAuthenticatedProcessingFilter

j2eeUserRoles2GrantedAuthoritiesMapper - Variable in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

JaasApiIntegrationFilter - Class in org.springframework.security.web.jaasapi

A Filter which attempts to obtain a JAAS Subject and continue the FilterChain running as that Subject.

JaasApiIntegrationFilter() - Constructor for class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter

JdbcTokenRepositoryImpl - Class in org.springframework.security.web.authentication.rememberme

JDBC based persistent login token repository implementation.

JdbcTokenRepositoryImpl() - Constructor for class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

L

LazyCsrfTokenRepository - Class in org.springframework.security.web.csrf

A CsrfTokenRepository that delays saving new CsrfToken until the attributes of the CsrfToken that were generated are accessed.

LazyCsrfTokenRepository(CsrfTokenRepository) - Constructor for class org.springframework.security.web.csrf.LazyCsrfTokenRepository

Creates a new instance

loadContext(HttpRequestResponseHolder) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

Gets the security context for the current request (if available) and returns it.

loadContext(HttpRequestResponseHolder) - Method in class org.springframework.security.web.context.NullSecurityContextRepository

loadContext(HttpRequestResponseHolder) - Method in interface org.springframework.security.web.context.SecurityContextRepository

Obtains the security context for the supplied request.

loadToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

loadToken(HttpServletRequest) - Method in interface org.springframework.security.web.csrf.CsrfTokenRepository

Loads the expected CsrfToken from the HttpServletRequest

loadToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository

loadToken(HttpServletRequest) - Method in class org.springframework.security.web.csrf.LazyCsrfTokenRepository

Delegates to the injected CsrfTokenRepository

loadUserDetails(PreAuthenticatedAuthenticationToken) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesUserDetailsService

Get a UserDetails object based on the user name contained in the given token, and the GrantedAuthorities as returned by the GrantedAuthoritiesContainer implementation as returned by the token.getDetails() method.

logger - Static variable in class org.springframework.security.web.access.AccessDeniedHandlerImpl

logger - Variable in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

logger - Static variable in class org.springframework.security.web.access.DefaultWebInvocationPrivilegeEvaluator

logger - Variable in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

logger - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

logger - Variable in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler

logger - Variable in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

logger - Variable in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever

logger - Variable in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor

logger - Variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

logger - Variable in class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

logger - Variable in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

logger - Variable in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

logger - Variable in class org.springframework.security.web.DefaultRedirectStrategy

logger - Static variable in class org.springframework.security.web.savedrequest.DefaultSavedRequest

logger - Variable in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

loginFail(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.NullRememberMeServices

loginFail(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

loginFail(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.authentication.RememberMeServices

Called whenever an interactive authentication attempt was made, but the credentials supplied by the user were missing or otherwise invalid.

loginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.NullRememberMeServices

loginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Called whenever an interactive authentication attempt is successful.

loginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.RememberMeServices

Called whenever an interactive authentication attempt is successful.

LoginUrlAuthenticationEntryPoint - Class in org.springframework.security.web.authentication

Used by the ExceptionTranslationFilter to commence a form login authentication via the UsernamePasswordAuthenticationFilter.

LoginUrlAuthenticationEntryPoint(String) - Constructor for class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.CompositeLogoutHandler

logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.CookieClearingLogoutHandler

logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.logout.LogoutHandler

Causes a logout to be completed.

logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler

Requires the request to be passed in.

logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Implementation of LogoutHandler.

logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

logout(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.csrf.CsrfLogoutHandler

Clears the CsrfToken

LogoutFilter - Class in org.springframework.security.web.authentication.logout

Logs a principal out.

LogoutFilter(LogoutSuccessHandler, LogoutHandler...) - Constructor for class org.springframework.security.web.authentication.logout.LogoutFilter

Constructor which takes a LogoutSuccessHandler instance to determine the target destination after logging out.

LogoutFilter(String, LogoutHandler...) - Constructor for class org.springframework.security.web.authentication.logout.LogoutFilter

LogoutHandler - Interface in org.springframework.security.web.authentication.logout

Indicates a class that is able to participate in logout handling.

LogoutSuccessHandler - Interface in org.springframework.security.web.authentication.logout

Strategy that is called after a successful logout by the LogoutFilter, to handle redirection or forwarding to the appropriate destination.

lookupHttpPort(Integer) - Method in interface org.springframework.security.web.PortMapper

Locates the HTTP port associated with the specified HTTPS port.

lookupHttpPort(Integer) - Method in class org.springframework.security.web.PortMapperImpl

lookupHttpsPort(Integer) - Method in interface org.springframework.security.web.PortMapper

Locates the HTTPS port associated with the specified HTTP port.

lookupHttpsPort(Integer) - Method in class org.springframework.security.web.PortMapperImpl

M

makeTokenSignature(long, String, String) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

Calculates the digital signature to be put in the cookie.

matches(HttpServletRequest) - Method in class org.springframework.security.web.DefaultSecurityFilterChain

matches(HttpServletRequest) - Method in interface org.springframework.security.web.SecurityFilterChain

matches(HttpServletRequest) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AndRequestMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher

Returns true if the configured pattern (and HTTP-Method) match those of the supplied request.

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.AnyRequestMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.ELRequestMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.IpAddressMatcher

matches(String) - Method in class org.springframework.security.web.util.matcher.IpAddressMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.NegatedRequestMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.OrRequestMatcher

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.RegexRequestMatcher

Performs the match of the request URL (servletPath + pathInfo + queryString ) against the compiled pattern.

matches(HttpServletRequest) - Method in class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher

matches(HttpServletRequest) - Method in interface org.springframework.security.web.util.matcher.RequestMatcher

Decides whether the rule implemented by the strategy matches the supplied request.

MediaTypeRequestMatcher - Class in org.springframework.security.web.util.matcher

Allows matching HttpServletRequest based upon the MediaType's resolved from a ContentNegotiationStrategy.

MediaTypeRequestMatcher(ContentNegotiationStrategy, MediaType...) - Constructor for class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher

Creates an instance

MediaTypeRequestMatcher(ContentNegotiationStrategy, Collection<MediaType>) - Constructor for class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher

Creates an instance

messages - Variable in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

messages - Variable in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor

messages - Variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

messages - Variable in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

messages - Variable in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

messages - Variable in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

MissingCsrfTokenException - Exception in org.springframework.security.web.csrf

Thrown when no expected CsrfToken is found but is required.

MissingCsrfTokenException(String) - Constructor for exception org.springframework.security.web.csrf.MissingCsrfTokenException

modifyGrantedAuthorities(UserDetails, Authentication, Collection<? extends GrantedAuthority>) - Method in interface org.springframework.security.web.authentication.switchuser.SwitchUserAuthorityChanger

Allow subclasses to add or remove authorities that will be granted when in switch user mode.

MvcRequestMatcher - Class in org.springframework.security.web.servlet.util.matcher

A RequestMatcher that uses Spring MVC's HandlerMappingIntrospector to match the path and extract variables.

MvcRequestMatcher(HandlerMappingIntrospector, String) - Constructor for class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher

N

NegatedRequestMatcher - Class in org.springframework.security.web.util.matcher

A RequestMatcher that will negate the RequestMatcher passed in.

NegatedRequestMatcher(RequestMatcher) - Constructor for class org.springframework.security.web.util.matcher.NegatedRequestMatcher

Creates a new instance

nextElement() - Method in class org.springframework.security.web.savedrequest.Enumerator

Returns the next element of this enumeration if this enumeration has at least one more element to provide.

NonceExpiredException - Exception in org.springframework.security.web.authentication.www

Thrown if an authentication request is rejected because the digest nonce has expired.

NonceExpiredException(String) - Constructor for exception org.springframework.security.web.authentication.www.NonceExpiredException

Constructs a NonceExpiredException with the specified message.

NonceExpiredException(String, Throwable) - Constructor for exception org.springframework.security.web.authentication.www.NonceExpiredException

Constructs a NonceExpiredException with the specified message and root cause.

NullAuthenticatedSessionStrategy - Class in org.springframework.security.web.authentication.session

NullAuthenticatedSessionStrategy() - Constructor for class org.springframework.security.web.authentication.session.NullAuthenticatedSessionStrategy

NullRememberMeServices - Class in org.springframework.security.web.authentication

Implementation of NullRememberMeServices that does nothing.

NullRememberMeServices() - Constructor for class org.springframework.security.web.authentication.NullRememberMeServices

NullRequestCache - Class in org.springframework.security.web.savedrequest

Null implementation of RequestCache.

NullRequestCache() - Constructor for class org.springframework.security.web.savedrequest.NullRequestCache

NullSecurityContextRepository - Class in org.springframework.security.web.context

NullSecurityContextRepository() - Constructor for class org.springframework.security.web.context.NullSecurityContextRepository

O

obtainPassword(HttpServletRequest) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

Enables subclasses to override the composition of the password, such as by including additional values and a separator.

obtainSecurityMetadataSource() - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

obtainSubject(ServletRequest) - Method in class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter

Obtains the Subject to run as or null if no Subject is available.

obtainUsername(HttpServletRequest) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

Enables subclasses to override the composition of the username, such as by including additional values and a separator.

onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy

onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

In addition to the steps from the superclass, the sessionRegistry will be updated with the new session information.

onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.NullAuthenticatedSessionStrategy

onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy

In addition to the steps from the superclass, the sessionRegistry will be updated with the new session information.

onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.authentication.session.SessionAuthenticationStrategy

Performs Http session-related functionality when a new authentication occurs.

onAuthentication(Authentication, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.CsrfAuthenticationStrategy

onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in interface org.springframework.security.web.authentication.AuthenticationFailureHandler

Called when an authentication attempt fails.

onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationFailureHandler

Called when an authentication attempt fails.

onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.ExceptionMappingAuthenticationFailureHandler

onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.ForwardAuthenticationFailureHandler

onAuthenticationFailure(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

Performs the redirect or forward to the defaultFailureUrl if set, otherwise returns a 401 error code.

onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.AuthenticationSuccessHandler

Called when a user has been successfully authenticated.

onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.ForwardAuthenticationSuccessHandler

onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

onAuthenticationSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler

Calls the parent class handle() method to forward or redirect to the target URL, and then calls clearAuthenticationAttributes() to remove any leftover session data.

OnCommittedResponseWrapper - Class in org.springframework.security.web.util

Base class for response wrappers which encapsulate the logic for handling an event when the HttpServletResponse is committed.

OnCommittedResponseWrapper(HttpServletResponse) - Constructor for class org.springframework.security.web.util.OnCommittedResponseWrapper

onExpiredSessionDetected(SessionInformationExpiredEvent) - Method in interface org.springframework.security.web.session.SessionInformationExpiredStrategy

onExpiredSessionDetected(SessionInformationExpiredEvent) - Method in class org.springframework.security.web.session.SimpleRedirectSessionInformationExpiredStrategy

onInvalidSessionDetected(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.session.InvalidSessionStrategy

onInvalidSessionDetected(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.session.SimpleRedirectInvalidSessionStrategy

onLoginFail(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

onLoginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Called from loginSuccess when a remember-me login has been requested.

onLoginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

Creates a new persistent login token with a new series number, stores the data in the persistent token repository and adds the corresponding cookie to the response.

onLoginSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.DelegatingLogoutSuccessHandler

onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.HttpStatusReturningLogoutSuccessHandler

Implementation of LogoutSuccessHandler.onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) .

onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in interface org.springframework.security.web.authentication.logout.LogoutSuccessHandler

onLogoutSuccess(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler

onResponseCommitted() - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

Calls saveContext() with the current contents of the SecurityContextHolder as long as () was not invoked.

onResponseCommitted() - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Implement the logic for handling the HttpServletResponse being committed

onStartup(ServletContext) - Method in class org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer

onSuccessfulAuthentication(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

Called if a remember-me token is presented and successfully authenticated by the RememberMeServices autoLogin method and the AuthenticationManager.

onSuccessfulAuthentication(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

onUnsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

Called if the AuthenticationManager rejects the authentication object returned from the RememberMeServices autoLogin method.

onUnsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

org.springframework.security.web - package org.springframework.security.web

Spring Security's web security module.

org.springframework.security.web.access - package org.springframework.security.web.access

Access-control related classes and packages.

org.springframework.security.web.access.channel - package org.springframework.security.web.access.channel

Classes that ensure web requests are received over required transport channels.

org.springframework.security.web.access.expression - package org.springframework.security.web.access.expression

Implementation of web security expressions.

org.springframework.security.web.access.intercept - package org.springframework.security.web.access.intercept

Enforcement of security for HTTP requests, typically by the URL requested.

org.springframework.security.web.authentication - package org.springframework.security.web.authentication

Authentication processing mechanisms, which respond to the submission of authentication credentials using various protocols (eg BASIC, CAS, form login etc).

org.springframework.security.web.authentication.logout - package org.springframework.security.web.authentication.logout

Logout functionality based around a filter which handles a specific logout URL.

org.springframework.security.web.authentication.preauth - package org.springframework.security.web.authentication.preauth

Support for "pre-authenticated" scenarios, where Spring Security assumes the incoming request has already been authenticated by some externally configured system.

org.springframework.security.web.authentication.preauth.j2ee - package org.springframework.security.web.authentication.preauth.j2ee

Pre-authentication support for container-authenticated requests.

org.springframework.security.web.authentication.preauth.websphere - package org.springframework.security.web.authentication.preauth.websphere

Websphere-specific pre-authentication classes.

org.springframework.security.web.authentication.preauth.x509 - package org.springframework.security.web.authentication.preauth.x509

X.509 client certificate authentication support.

org.springframework.security.web.authentication.rememberme - package org.springframework.security.web.authentication.rememberme

Support for remembering a user between different web sessions.

org.springframework.security.web.authentication.session - package org.springframework.security.web.authentication.session

Strategy interface and implementations for handling session-related behaviour for a newly authenticated user.

org.springframework.security.web.authentication.switchuser - package org.springframework.security.web.authentication.switchuser

Provides HTTP-based "switch user" (su) capabilities.

org.springframework.security.web.authentication.ui - package org.springframework.security.web.authentication.ui

Authentication user-interface rendering code.

org.springframework.security.web.authentication.www - package org.springframework.security.web.authentication.www

WWW-Authenticate based authentication mechanism implementations: Basic and Digest authentication.

org.springframework.security.web.bind.annotation - package org.springframework.security.web.bind.annotation

org.springframework.security.web.bind.support - package org.springframework.security.web.bind.support

org.springframework.security.web.context - package org.springframework.security.web.context

Classes which are responsible for maintaining the security context between HTTP requests.

org.springframework.security.web.context.request.async - package org.springframework.security.web.context.request.async

org.springframework.security.web.context.support - package org.springframework.security.web.context.support

org.springframework.security.web.csrf - package org.springframework.security.web.csrf

org.springframework.security.web.debug - package org.springframework.security.web.debug

org.springframework.security.web.firewall - package org.springframework.security.web.firewall

org.springframework.security.web.header - package org.springframework.security.web.header

org.springframework.security.web.header.writers - package org.springframework.security.web.header.writers

org.springframework.security.web.header.writers.frameoptions - package org.springframework.security.web.header.writers.frameoptions

org.springframework.security.web.jaasapi - package org.springframework.security.web.jaasapi

Makes a JAAS Subject available as the current Subject.

org.springframework.security.web.jackson2 - package org.springframework.security.web.jackson2

Mix-in classes to provide Jackson serialization support.

org.springframework.security.web.method.annotation - package org.springframework.security.web.method.annotation

org.springframework.security.web.savedrequest - package org.springframework.security.web.savedrequest

Classes related to the caching of an HttpServletRequest which requires authentication.

org.springframework.security.web.servlet.support.csrf - package org.springframework.security.web.servlet.support.csrf

org.springframework.security.web.servlet.util.matcher - package org.springframework.security.web.servlet.util.matcher

org.springframework.security.web.servletapi - package org.springframework.security.web.servletapi

Populates a Servlet request with a new Spring Security compliant HttpServletRequestWrapper.

org.springframework.security.web.session - package org.springframework.security.web.session

Session management filters, HttpSession events and publisher classes.

org.springframework.security.web.util - package org.springframework.security.web.util

Web utility classes.

org.springframework.security.web.util.matcher - package org.springframework.security.web.util.matcher

OrRequestMatcher - Class in org.springframework.security.web.util.matcher

RequestMatcher that will return true if any of the passed in RequestMatcher instances match.

OrRequestMatcher(List<RequestMatcher>) - Constructor for class org.springframework.security.web.util.matcher.OrRequestMatcher

Creates a new instance

OrRequestMatcher(RequestMatcher...) - Constructor for class org.springframework.security.web.util.matcher.OrRequestMatcher

Creates a new instance

P

parseCache - Static variable in class org.springframework.security.web.savedrequest.FastHttpDateFormat

Parser cache.

parseDate(String, DateFormat[]) - Static method in class org.springframework.security.web.savedrequest.FastHttpDateFormat

Tries to parse the given date as an HTTP date.

PersistentRememberMeToken - Class in org.springframework.security.web.authentication.rememberme

PersistentRememberMeToken(String, String, String, Date) - Constructor for class org.springframework.security.web.authentication.rememberme.PersistentRememberMeToken

PersistentTokenBasedRememberMeServices - Class in org.springframework.security.web.authentication.rememberme

RememberMeServices implementation based on Barry Jaspan's Improved Persistent Login Cookie Best Practice.

PersistentTokenBasedRememberMeServices(String, UserDetailsService, PersistentTokenRepository) - Constructor for class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

PersistentTokenRepository - Interface in org.springframework.security.web.authentication.rememberme

The abstraction used by PersistentTokenBasedRememberMeServices to store the persistent login tokens for a user.

PortMapper - Interface in org.springframework.security.web

PortMapper implementations provide callers with information about which HTTP ports are associated with which HTTPS ports on the system, and vice versa.

PortMapperImpl - Class in org.springframework.security.web

Concrete implementation of PortMapper that obtains HTTP:HTTPS pairs from the application context.

PortMapperImpl() - Constructor for class org.springframework.security.web.PortMapperImpl

PortResolver - Interface in org.springframework.security.web

A PortResolver determines the port a web request was received on.

PortResolverImpl - Class in org.springframework.security.web

Concrete implementation of PortResolver that obtains the port from ServletRequest.getServerPort().

PortResolverImpl() - Constructor for class org.springframework.security.web.PortResolverImpl

postProcess(NativeWebRequest, Callable<T>, Object) - Method in class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor

PreAuthenticatedAuthenticationProvider - Class in org.springframework.security.web.authentication.preauth

Processes a pre-authenticated authentication request.

PreAuthenticatedAuthenticationProvider() - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

PreAuthenticatedAuthenticationToken - Class in org.springframework.security.web.authentication.preauth

Authentication implementation for pre-authenticated authentication.

PreAuthenticatedAuthenticationToken(Object, Object) - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken

Constructor used for an authentication request.

PreAuthenticatedAuthenticationToken(Object, Object, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken

Constructor used for an authentication response.

PreAuthenticatedCredentialsNotFoundException - Exception in org.springframework.security.web.authentication.preauth

PreAuthenticatedCredentialsNotFoundException(String) - Constructor for exception org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException

PreAuthenticatedCredentialsNotFoundException(String, Throwable) - Constructor for exception org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException

PreAuthenticatedGrantedAuthoritiesUserDetailsService - Class in org.springframework.security.web.authentication.preauth

This AuthenticationUserDetailsService implementation creates a UserDetails object based solely on the information contained in the given PreAuthenticatedAuthenticationToken.

PreAuthenticatedGrantedAuthoritiesUserDetailsService() - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesUserDetailsService

PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails - Class in org.springframework.security.web.authentication.preauth

This WebAuthenticationDetails implementation allows for storing a list of pre-authenticated Granted Authorities.

PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(HttpServletRequest, Collection<? extends GrantedAuthority>) - Constructor for class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

preProcess(NativeWebRequest, Callable<T>) - Method in class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor

principalChanged(HttpServletRequest, Authentication) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Determines if the current principal has changed.

processAction(HttpServletRequest, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

processAction(HttpServletRequest, String, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

processAutoLoginCookie(String[], HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Called from autoLogin to process the submitted persistent login cookie.

processAutoLoginCookie(String[], HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

Locates the presented cookie data in the token repository, using the series id.

processAutoLoginCookie(String[], HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

processFormFieldValue(HttpServletRequest, String, String, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

processUrl(HttpServletRequest, String) - Method in class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor

R

RedirectStrategy - Interface in org.springframework.security.web

Encapsulates the redirection logic for all classes in the framework which perform redirects.

RedirectUrlBuilder - Class in org.springframework.security.web.util

Internal class for building redirect URLs.

RedirectUrlBuilder() - Constructor for class org.springframework.security.web.util.RedirectUrlBuilder

ReferrerPolicyHeaderWriter - Class in org.springframework.security.web.header.writers

Provides support for Referrer Policy.

ReferrerPolicyHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter

Creates a new instance.

ReferrerPolicyHeaderWriter(ReferrerPolicyHeaderWriter.ReferrerPolicy) - Constructor for class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter

Creates a new instance.

ReferrerPolicyHeaderWriter.ReferrerPolicy - Enum in org.springframework.security.web.header.writers

RegExpAllowFromStrategy - Class in org.springframework.security.web.header.writers.frameoptions

Implementation which uses a regular expression to validate the supplied origin.

RegExpAllowFromStrategy(String) - Constructor for class org.springframework.security.web.header.writers.frameoptions.RegExpAllowFromStrategy

Creates a new instance

RegexRequestMatcher - Class in org.springframework.security.web.util.matcher

Uses a regular expression to decide whether a supplied the URL of a supplied HttpServletRequest.

RegexRequestMatcher(String, String) - Constructor for class org.springframework.security.web.util.matcher.RegexRequestMatcher

Creates a case-sensitive Pattern instance to match against the request.

RegexRequestMatcher(String, String, boolean) - Constructor for class org.springframework.security.web.util.matcher.RegexRequestMatcher

As above, but allows setting of whether case-insensitive matching should be used.

registerExtractor(Class<? extends Throwable>, ThrowableCauseExtractor) - Method in class org.springframework.security.web.util.ThrowableAnalyzer

Registers a ThrowableCauseExtractor for the specified type.

RegisterSessionAuthenticationStrategy - Class in org.springframework.security.web.authentication.session

Strategy used to register a user with the SessionRegistry after successful Authentication.

RegisterSessionAuthenticationStrategy(SessionRegistry) - Constructor for class org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy

RememberMeAuthenticationException - Exception in org.springframework.security.web.authentication.rememberme

This exception is thrown when an Authentication exception occurs while using the remember-me authentication.

RememberMeAuthenticationException(String, Throwable) - Constructor for exception org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException

Constructs a RememberMeAuthenticationException with the specified message and root cause.

RememberMeAuthenticationException(String) - Constructor for exception org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException

Constructs an RememberMeAuthenticationException with the specified message and no root cause.

RememberMeAuthenticationFilter - Class in org.springframework.security.web.authentication.rememberme

Detects if there is no Authentication object in the SecurityContext, and populates the context with a remember-me authentication token if a RememberMeServices implementation so requests.

RememberMeAuthenticationFilter(AuthenticationManager, RememberMeServices) - Constructor for class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

rememberMeRequested(HttpServletRequest, String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Allows customization of whether a remember-me login has been requested.

RememberMeServices - Interface in org.springframework.security.web.authentication

Implement by a class that is capable of providing a remember-me service.

removeRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

removeRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache

removeRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache

Removes the cached request.

removeUserTokens(String) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl

removeUserTokens(String) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

removeUserTokens(String) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository

request - Variable in class org.springframework.security.web.access.expression.WebSecurityExpressionRoot

Allows direct access to the request object

RequestAttributeAuthenticationFilter - Class in org.springframework.security.web.authentication.preauth

A simple pre-authenticated filter which obtains the username from request attributes, for use with SSO systems such as Stanford WebAuth or Shibboleth.

RequestAttributeAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter

RequestCache - Interface in org.springframework.security.web.savedrequest

Implements "saved request" logic, allowing a single request to be retrieved and restarted after redirecting to an authentication mechanism.

RequestCacheAwareFilter - Class in org.springframework.security.web.savedrequest

Responsible for reconstituting the saved request if one is cached and it matches the current request.

RequestCacheAwareFilter() - Constructor for class org.springframework.security.web.savedrequest.RequestCacheAwareFilter

RequestCacheAwareFilter(RequestCache) - Constructor for class org.springframework.security.web.savedrequest.RequestCacheAwareFilter

RequestHeaderAuthenticationFilter - Class in org.springframework.security.web.authentication.preauth

A simple pre-authenticated filter which obtains the username from a request header, for use with systems such as CA Siteminder.

RequestHeaderAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter

RequestHeaderRequestMatcher - Class in org.springframework.security.web.util.matcher

A RequestMatcher that can be used to match request that contain a header with an expected header name and an expected value.

RequestHeaderRequestMatcher(String) - Constructor for class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher

Creates a new instance that will match if a header by the name of RequestHeaderRequestMatcher.expectedHeaderName is present.

RequestHeaderRequestMatcher(String, String) - Constructor for class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher

Creates a new instance that will match if a header by the name of RequestHeaderRequestMatcher.expectedHeaderName is present and if the RequestHeaderRequestMatcher.expectedHeaderValue is non-null the first value is the same.

RequestKey - Class in org.springframework.security.web.access.intercept

RequestKey(String) - Constructor for class org.springframework.security.web.access.intercept.RequestKey

RequestKey(String, String) - Constructor for class org.springframework.security.web.access.intercept.RequestKey

RequestMatcher - Interface in org.springframework.security.web.util.matcher

Simple strategy to match an HttpServletRequest.

RequestMatcherEditor - Class in org.springframework.security.web.util.matcher

PropertyEditor which creates ELRequestMatcher instances from Strings This allows to use a String in a BeanDefinition instead of an (inner) bean if a RequestMatcher is required, e.g.

RequestMatcherEditor() - Constructor for class org.springframework.security.web.util.matcher.RequestMatcherEditor

RequestRejectedException - Exception in org.springframework.security.web.firewall

RequestRejectedException(String) - Constructor for exception org.springframework.security.web.firewall.RequestRejectedException

RequestVariablesExtractor - Interface in org.springframework.security.web.util.matcher

An interface for extracting URI variables from the HttpServletRequest.

requiresAuthentication(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Indicates whether this filter should attempt to process a login request for the current invocation.

requiresExitUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Checks the request URI for the presence of exitUserUrl.

requiresLogout(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter

Allow subclasses to modify when a logout should take place.

requiresSwitchUser(HttpServletRequest) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Checks the request URI for the presence of switchUserUrl.

reset() - Method in class org.springframework.security.web.firewall.FirewalledRequest

This method will be called once the request has passed through the security filter chain, when it is about to proceed to the application proper.

resolveArgument(MethodParameter, ModelAndViewContainer, NativeWebRequest, WebDataBinderFactory) - Method in class org.springframework.security.web.bind.support.AuthenticationPrincipalArgumentResolver

Deprecated.

resolveArgument(MethodParameter, ModelAndViewContainer, NativeWebRequest, WebDataBinderFactory) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver

resolveArgument(MethodParameter, ModelAndViewContainer, NativeWebRequest, WebDataBinderFactory) - Method in class org.springframework.security.web.method.annotation.CsrfTokenArgumentResolver

retrievePassword(Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

retrieveUserName(Authentication) - Method in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

RetryWithHttpEntryPoint - Class in org.springframework.security.web.access.channel

Commences an insecure channel by retrying the original request using HTTP.

RetryWithHttpEntryPoint() - Constructor for class org.springframework.security.web.access.channel.RetryWithHttpEntryPoint

RetryWithHttpsEntryPoint - Class in org.springframework.security.web.access.channel

Commences a secure channel by retrying the original request using HTTPS.

RetryWithHttpsEntryPoint() - Constructor for class org.springframework.security.web.access.channel.RetryWithHttpsEntryPoint

ROLE_PREVIOUS_ADMINISTRATOR - Static variable in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

S

saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.context.NullSecurityContextRepository

saveContext(SecurityContext) - Method in class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

Implements the logic for storing the security context.

saveContext(SecurityContext, HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.context.SecurityContextRepository

Stores the security context on completion of a request.

SaveContextOnUpdateOrErrorResponseWrapper - Class in org.springframework.security.web.context

Base class for response wrappers which encapsulate the logic for storing a security context and which store the SecurityContext when a sendError(), sendRedirect, getOutputStream().close(), getOutputStream().flush(), getWriter().close(), or getWriter().flush() happens on the same thread that this SaveContextOnUpdateOrErrorResponseWrapper was created.

SaveContextOnUpdateOrErrorResponseWrapper(HttpServletResponse, boolean) - Constructor for class org.springframework.security.web.context.SaveContextOnUpdateOrErrorResponseWrapper

SavedCookie - Class in org.springframework.security.web.savedrequest

Stores off the values of a cookie in a serializable holder

SavedCookie(String, String, String, String, int, String, boolean, int) - Constructor for class org.springframework.security.web.savedrequest.SavedCookie

SavedCookie(Cookie) - Constructor for class org.springframework.security.web.savedrequest.SavedCookie

SavedRequest - Interface in org.springframework.security.web.savedrequest

Encapsulates the functionality required of a cached request for both an authentication mechanism (typically form-based login) to redirect to the original URL and for a RequestCache to build a wrapped request, reproducing the original request data.

SavedRequestAwareAuthenticationSuccessHandler - Class in org.springframework.security.web.authentication

An authentication success strategy which can make use of the DefaultSavedRequest which may have been stored in the session by the ExceptionTranslationFilter.

SavedRequestAwareAuthenticationSuccessHandler() - Constructor for class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

saveException(HttpServletRequest, AuthenticationException) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

Caches the AuthenticationException for use in view rendering.

saveRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

Stores the current request, provided the configuration properties allow it.

saveRequest(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.savedrequest.NullRequestCache

saveRequest(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.savedrequest.RequestCache

Caches the current request for later retrieval, once authentication has taken place.

saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.csrf.CsrfTokenRepository

Saves the CsrfToken using the HttpServletRequest and HttpServletResponse.

saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository

saveToken(CsrfToken, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.csrf.LazyCsrfTokenRepository

Does nothing if the CsrfToken is not null.

SecureChannelProcessor - Class in org.springframework.security.web.access.channel

Ensures channel security is active by review of HttpServletRequest.isSecure() responses.

SecureChannelProcessor() - Constructor for class org.springframework.security.web.access.channel.SecureChannelProcessor

SecurityContextCallableProcessingInterceptor - Class in org.springframework.security.web.context.request.async

Allows for integration with Spring MVC's Callable support.

SecurityContextCallableProcessingInterceptor() - Constructor for class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor

Create a new SecurityContextCallableProcessingInterceptor that uses the SecurityContext from the SecurityContextHolder at the time SecurityContextCallableProcessingInterceptor.beforeConcurrentHandling(NativeWebRequest, Callable) is invoked.

SecurityContextCallableProcessingInterceptor(SecurityContext) - Constructor for class org.springframework.security.web.context.request.async.SecurityContextCallableProcessingInterceptor

Creates a new SecurityContextCallableProcessingInterceptor with the specified SecurityContext.

SecurityContextHolderAwareRequestFilter - Class in org.springframework.security.web.servletapi

A Filter which populates the ServletRequest with a request wrapper which implements the servlet API security methods.

SecurityContextHolderAwareRequestFilter() - Constructor for class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

SecurityContextHolderAwareRequestWrapper - Class in org.springframework.security.web.servletapi

A Spring Security-aware HttpServletRequestWrapper, which uses the SecurityContext-defined Authentication object to implement the servlet API security methods: SecurityContextHolderAwareRequestWrapper.getUserPrincipal() SecurityContextHolderAwareRequestWrapper.isUserInRole(String) HttpServletRequestWrapper.getRemoteUser().

SecurityContextHolderAwareRequestWrapper(HttpServletRequest, String) - Constructor for class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper

Creates a new instance with AuthenticationTrustResolverImpl.

SecurityContextHolderAwareRequestWrapper(HttpServletRequest, AuthenticationTrustResolver, String) - Constructor for class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper

Creates a new instance

SecurityContextLogoutHandler - Class in org.springframework.security.web.authentication.logout

Performs a logout by modifying the SecurityContextHolder.

SecurityContextLogoutHandler() - Constructor for class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler

SecurityContextPersistenceFilter - Class in org.springframework.security.web.context

Populates the SecurityContextHolder with information obtained from the configured SecurityContextRepository prior to the request and stores it back in the repository once the request has completed and clearing the context holder.

SecurityContextPersistenceFilter() - Constructor for class org.springframework.security.web.context.SecurityContextPersistenceFilter

SecurityContextPersistenceFilter(SecurityContextRepository) - Constructor for class org.springframework.security.web.context.SecurityContextPersistenceFilter

SecurityContextRepository - Interface in org.springframework.security.web.context

Strategy used for persisting a SecurityContext between requests.

SecurityFilterChain - Interface in org.springframework.security.web

Defines a filter chain which is capable of being matched against an HttpServletRequest.

SecurityWebApplicationContextUtils - Class in org.springframework.security.web.context.support

Spring Security extension to Spring's WebApplicationContextUtils.

SecurityWebApplicationContextUtils() - Constructor for class org.springframework.security.web.context.support.SecurityWebApplicationContextUtils

sendError(int) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Makes sure OnCommittedResponseWrapper.onResponseCommitted() is invoked before calling the superclass sendError()

sendError(int, String) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Makes sure OnCommittedResponseWrapper.onResponseCommitted() is invoked before calling the superclass sendError()

sendRedirect(HttpServletRequest, HttpServletResponse, String) - Method in class org.springframework.security.web.DefaultRedirectStrategy

Redirects the response to the supplied URL.

sendRedirect(HttpServletRequest, HttpServletResponse, String) - Method in interface org.springframework.security.web.RedirectStrategy

Performs a redirect to the supplied URL

sendRedirect(String) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

Makes sure OnCommittedResponseWrapper.onResponseCommitted() is invoked before calling the superclass sendRedirect()

sendStartAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, AuthenticationException) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

SessionAuthenticationException - Exception in org.springframework.security.web.authentication.session

Thrown by an SessionAuthenticationStrategy to indicate that an authentication object is not valid for the current session, typically because the same user has exceeded the number of sessions they are allowed to have concurrently.

SessionAuthenticationException(String) - Constructor for exception org.springframework.security.web.authentication.session.SessionAuthenticationException

SessionAuthenticationStrategy - Interface in org.springframework.security.web.authentication.session

Allows pluggable support for HttpSession-related behaviour when an authentication occurs.

sessionCreated(HttpSessionEvent) - Method in class org.springframework.security.web.session.HttpSessionEventPublisher

Handles the HttpSessionEvent by publishing a HttpSessionCreatedEvent to the application appContext.

sessionDestroyed(HttpSessionEvent) - Method in class org.springframework.security.web.session.HttpSessionEventPublisher

Handles the HttpSessionEvent by publishing a HttpSessionDestroyedEvent to the application appContext.

SessionFixationProtectionEvent - Class in org.springframework.security.web.authentication.session

Indicates a session ID was changed for the purposes of session fixation protection.

SessionFixationProtectionEvent(Authentication, String, String) - Constructor for class org.springframework.security.web.authentication.session.SessionFixationProtectionEvent

Constructs a new session fixation protection event.

SessionFixationProtectionStrategy - Class in org.springframework.security.web.authentication.session

The default implementation of SessionAuthenticationStrategy when using < Servlet 3.1.

SessionFixationProtectionStrategy() - Constructor for class org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy

SessionInformationExpiredEvent - Class in org.springframework.security.web.session

An event for when a SessionInformation is expired.

SessionInformationExpiredEvent(SessionInformation, HttpServletRequest, HttpServletResponse) - Constructor for class org.springframework.security.web.session.SessionInformationExpiredEvent

Creates a new instance

SessionInformationExpiredStrategy - Interface in org.springframework.security.web.session

Determines the behaviour of the ConcurrentSessionFilter when an expired session is detected in the ConcurrentSessionFilter.

SessionManagementFilter - Class in org.springframework.security.web.session

Detects that a user has been authenticated since the start of the request and, if they have, calls the configured SessionAuthenticationStrategy to perform any session-related activity such as activating session-fixation protection mechanisms or checking for multiple concurrent logins.

SessionManagementFilter(SecurityContextRepository) - Constructor for class org.springframework.security.web.session.SessionManagementFilter

SessionManagementFilter(SecurityContextRepository, SessionAuthenticationStrategy) - Constructor for class org.springframework.security.web.session.SessionManagementFilter

setAccessDeniedHandler(AccessDeniedHandler) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

setAccessDeniedHandler(AccessDeniedHandler) - Method in class org.springframework.security.web.csrf.CsrfFilter

Specifies a AccessDeniedHandler that should be used when CSRF protection fails.

setAllowBackSlash(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall

Determines if a backslash "\" or a URL encoded backslash "%5C" should be allowed in the path or not.

setAllowSemicolon(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall

Determines if semicolon is allowed in the URL (i.e.

setAllowSessionCreation(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setAllowSessionCreation(boolean) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

setAllowSessionCreation(boolean) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

If set to true (the default), a session will be created (if required) to store the security context if it is determined that its contents are different from the default empty context value.

setAllowUrlEncodedPercent(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall

Determines if a percent "%" that is URL encoded "%25" should be allowed in the path or not.

setAllowUrlEncodedPeriod(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall

Determines if a period "." that is URL encoded "%2E" should be allowed in the path or not.

setAllowUrlEncodedSlash(boolean) - Method in class org.springframework.security.web.firewall.DefaultHttpFirewall

Sets if the application should allow a URL encoded slash character.

setAllowUrlEncodedSlash(boolean) - Method in class org.springframework.security.web.firewall.StrictHttpFirewall

Determines if a slash "/" that is URL encoded "%2F" should be allowed in the path or not.

setAlwaysRemember(boolean) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

setAlwaysUseDefaultTargetUrl(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

If true, will always redirect to the value of defaultTargetUrl (defaults to false).

setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

setApplicationEventPublisher(ApplicationEventPublisher) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

setAsText(String) - Method in class org.springframework.security.web.util.matcher.RequestMatcherEditor

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.AnonymousAuthenticationFilter

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?>) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

setAuthenticationEntryPoint(DigestAuthenticationEntryPoint) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

setAuthenticationEntryPoint(AuthenticationEntryPoint) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

Sets the AuthenticationEntryPoint used when integrating HttpServletRequest with Servlet 3 APIs.

setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Sets the strategy used to handle a failed authentication.

setAuthenticationFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.session.SessionManagementFilter

The handler which will be invoked if the AuthenticatedSessionStrategy raises a SessionAuthenticationException, indicating that the user is not allowed to be authenticated for this session (typically because they already have too many sessions open).

setAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

setAuthenticationManager(AuthenticationManager) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

Sets the AuthenticationManager used when integrating HttpServletRequest with Servlet 3 APIs.

setAuthenticationSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Sets the strategy used to handle a successful authentication.

setAuthenticationSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Sets the strategy used to handle a successful authentication.

setAuthenticationSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter

Allows control over the destination a remembered user is sent to when they are successfully authenticated.

setAuthenticationTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

setAuthenticationUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setAuthoritiesMapper(GrantedAuthoritiesMapper) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

setBeanResolver(BeanResolver) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver

Sets the BeanResolver to be used on the expressions

setBlock(boolean) - Method in class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter

If false, will not specify the mode as blocked.

setChannelDecisionManager(ChannelDecisionManager) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter

setChannelProcessors(List<?>) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

setCheckForPrincipalChanges(boolean) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

If set, the pre-authenticated principal will be checked on each request and compared against the name of the current Authentication object.

setClearAuthentication(boolean) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler

If true, removes the Authentication from the SecurityContext to prevent issues with concurrent requests.

setContentLength(int) - Method in class org.springframework.security.web.util.OnCommittedResponseWrapper

setContextPath(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setContextPath(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder

setContextRelative(boolean) - Method in class org.springframework.security.web.DefaultRedirectStrategy

If true, causes any redirection URLs to be calculated minus the protocol and context path (defaults to false).

setContinueChainBeforeSuccessfulAuthentication(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Indicates if the filter chain should be continued prior to delegation to AbstractAuthenticationProcessingFilter.successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication) , which may be useful in certain environment (such as Tapestry applications).

setContinueFilterChainOnUnsuccessfulAuthentication(boolean) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

If set to true, any AuthenticationException raised by the AuthenticationManager will be swallowed, and the request will be allowed to proceed, potentially using alternative authentication mechanisms.

setCookie(String[], int, HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Sets the cookie on the response.

setCookieDomain(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

setCookieHttpOnly(boolean) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

Sets the HttpOnly attribute on the cookie containing the CSRF token.

setCookieName(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

setCookieName(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

Sets the name of the cookie that the expected CSRF token is saved to and read from.

setCookiePath(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

Set the path that the Cookie will be created with.

setCookies(List<SavedCookie>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setCreateAuthenticatedToken(boolean) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

If you set this property, the Authentication object, which is created after the successful digest authentication will be marked as authenticated and filled with the authorities loaded by the UserDetailsService.

setCreateEmptySubject(boolean) - Method in class org.springframework.security.web.jaasapi.JaasApiIntegrationFilter

Sets createEmptySubject.

setCreateNewSession(boolean) - Method in class org.springframework.security.web.session.SimpleRedirectInvalidSessionStrategy

Determines whether a new session should be created before redirecting (to avoid possible looping issues where the same session ID is sent with the redirected request).

setCreateSessionAllowed(boolean) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

If true, indicates that it is permitted to store the target URL and exception information in a new HttpSession (the default).

setCreateTableOnStartup(boolean) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

Intended for convenience in debugging.

setCredentialsCharset(String) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

setCredentialsEnvironmentVariable(String) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter

setCredentialsRequestHeader(String) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter

setDefaultEntryPoint(AuthenticationEntryPoint) - Method in class org.springframework.security.web.authentication.DelegatingAuthenticationEntryPoint

EntryPoint which is used when no RequestMatcher returned true

setDefaultFailureUrl(String) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

The URL which will be used as the failure destination.

setDefaultLogoutSuccessHandler(LogoutSuccessHandler) - Method in class org.springframework.security.web.authentication.logout.DelegatingLogoutSuccessHandler

Sets the default LogoutSuccessHandler if no other handlers available

setDefaultRolePrefix(String) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler

Sets the default prefix to be added to SecurityExpressionRoot.hasAnyRole(String...) or SecurityExpressionRoot.hasRole(String).

setDefaultTargetUrl(String) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

Supplies the default target Url that will be used if no saved request is found in the session, or the alwaysUseDefaultTargetUrl property is set to true.

setDetails(HttpServletRequest, UsernamePasswordAuthenticationToken) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

Provided so that subclasses may configure what is put into the authentication request's details property.

setDisableUrlRewriting(boolean) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

Allows the use of session identifiers in URLs to be disabled.

setEnabled(boolean) - Method in class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter

If true, will contain a value of 1.

setEntryPoint(ChannelEntryPoint) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor

setEntryPoint(ChannelEntryPoint) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor

setErrorPage(String) - Method in class org.springframework.security.web.access.AccessDeniedHandlerImpl

The error page to use.

setExceptionIfHeaderMissing(boolean) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter

Defines whether an exception should be raised if the principal header is missing.

setExceptionIfMaximumExceeded(boolean) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

Sets the exceptionIfMaximumExceeded property, which determines whether the user should be prevented from opening more sessions than allowed.

setExceptionIfVariableMissing(boolean) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter

Defines whether an exception should be raised if the principal variable is missing.

setExceptionMappings(Map<?, ?>) - Method in class org.springframework.security.web.authentication.ExceptionMappingAuthenticationFailureHandler

Sets the map of exception types (by name) to URLs.

setExitUserMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Set the matcher to respond to exit user processing.

setExitUserUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Set the URL to respond to exit user processing.

setExpressionHandler(SecurityExpressionHandler<FilterInvocation>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter

setFailureHandler(AuthenticationFailureHandler) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Used to define custom behaviour when a switch fails.

setFailureUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setFilterChainValidator(FilterChainProxy.FilterChainValidator) - Method in class org.springframework.security.web.FilterChainProxy

Used (internally) to specify a validation strategy for the filters in each configured chain.

setFilterProcessesUrl(String) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Sets the URL that determines if authentication is required

setFilterProcessesUrl(String) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter

setFirewall(HttpFirewall) - Method in class org.springframework.security.web.FilterChainProxy

Sets the "firewall" implementation which will be used to validate and wrap (or potentially reject) the incoming requests.

setForceEagerSessionCreation(boolean) - Method in class org.springframework.security.web.context.SecurityContextPersistenceFilter

setForceHttps(boolean) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

Set to true to force login form access to be via https.

setFormLoginEnabled(boolean) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setHeaderName(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

Sets the name of the HTTP header that should be used to provide the token.

setHeaderName(String) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository

Sets the header name that the CsrfToken is expected to appear on and the header that the response will contain the CsrfToken.

setHeaders(Map<String, List<String>>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setIgnoredMediaTypes(Set<MediaType>) - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher

Set the MediaType to ignore from the ContentNegotiationStrategy.

setIncludeSubDomains(boolean) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

If true, the pinning policy applies to this pinned host as well as any subdomains of the host's domain name.

setIncludeSubDomains(boolean) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter

If true, subdomains should be considered HSTS Hosts too.

setInsecureKeyword(String) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor

setInvalidateHttpSession(boolean) - Method in class org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler

Causes the HttpSession to be invalidated when this LogoutHandler is invoked.

setInvalidateSessionOnPrincipalChange(boolean) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

If checkForPrincipalChanges is set, and a change of principal is detected, determines whether any existing session should be invalidated before proceeding to authenticate the new principal.

setInvalidSessionStrategy(InvalidSessionStrategy) - Method in class org.springframework.security.web.session.SessionManagementFilter

Sets the strategy which will be invoked instead of allowing the filter chain to prceed, if the user agent requests an invalid session Id.

setKey(String) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

setLocales(List<Locale>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setLoginPageUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setLogoutHandlers(List<LogoutHandler>) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

Sets the LogoutHandlers used when integrating with HttpServletRequest with Servlet 3 APIs.

setLogoutHandlers(LogoutHandler[]) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter

setLogoutRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.logout.LogoutFilter

setLogoutSuccessUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setMappableRolesRetriever(MappableAttributesRetriever) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

setMaxAgeInSeconds(long) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

Sets the value (in seconds) for the max-age directive of the Public-Key-Pins header.

setMaxAgeInSeconds(long) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter

Sets the value (in seconds) for the max-age directive of the Strict-Transport-Security header.

setMaximumSessions(int) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

Sets the maxSessions property.

setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor

setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.session.ConcurrentSessionControlAuthenticationStrategy

Sets the MessageSource used for reporting errors back to the user when the user has exceeded the maximum number of authentications.

setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

setMessageSource(MessageSource) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

setMethod(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setMethod(HttpMethod) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher

setMigrateSessionAttributes(boolean) - Method in class org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy

Defines whether attributes should be migrated to a new session or not.

setNonceValiditySeconds(int) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

setObserveOncePerRequest(boolean) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

setOpenIDauthenticationUrl(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setOpenIdEnabled(boolean) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setOpenIDusernameParameter(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setOrder(int) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

setOrder(int) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

setParameter(String) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Sets the name of the parameter which should be checked for to see if a remember-me has been requested during a login request.

setParameterName(String) - Method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

Sets the name of the HTTP request parameter that should be used to provide a token.

setParameterName(String) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository

Sets the HttpServletRequest parameter name that the CsrfToken is expected to appear on

setParameters(Map<String, String[]>) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setPasswordAlreadyEncoded(boolean) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

setPasswordParameter(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setPasswordParameter(String) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

Sets the parameter name which will be used to obtain the password from the login request..

setPathInfo(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setPathInfo(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder

setPins(Map<String, String>) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

Sets the value for the pin- directive of the Public-Key-Pins header.

setPolicy(ReferrerPolicyHeaderWriter.ReferrerPolicy) - Method in class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter

Sets the policy to be used in the response header.

setPolicyDirectives(String) - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter

Sets the security policy directive(s) to be used in the response header.

setPort(int) - Method in class org.springframework.security.web.util.RedirectUrlBuilder

setPortMapper(PortMapper) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

setPortMapper(PortMapper) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

setPortMapper(PortMapper) - Method in class org.springframework.security.web.PortResolverImpl

setPortMappings(Map<String, String>) - Method in class org.springframework.security.web.PortMapperImpl

Set to override the default HTTP port to HTTPS port mappings of 80:443, and 8080:8443.

setPortResolver(PortResolver) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

setPortResolver(PortResolver) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

setPortResolver(PortResolver) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

setPostOnly(boolean) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

Defines whether only HTTP POST requests will be allowed by this filter.

setPreAuthenticatedUserDetailsService(AuthenticationUserDetailsService<PreAuthenticatedAuthenticationToken>) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

Set the AuthenticatedUserDetailsService to be used to load the UserDetails for the authenticated user.

setPrincipalEnvironmentVariable(String) - Method in class org.springframework.security.web.authentication.preauth.RequestAttributeAuthenticationFilter

setPrincipalExtractor(X509PrincipalExtractor) - Method in class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter

setPrincipalRequestHeader(String) - Method in class org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter

setQuery(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder

setQueryString(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setRealmName(String) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint

setRealmName(String) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationEntryPoint

setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.access.channel.AbstractRetryEntryPoint

Sets the strategy to be used for redirecting to the required channel URL.

setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

Allows overriding of the behaviour when redirecting to a target URL.

setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

Allows overriding of the behaviour when redirecting to a target URL.

setRedirectStrategy(RedirectStrategy) - Method in class org.springframework.security.web.session.ConcurrentSessionFilter

Deprecated.

use ConcurrentSessionFilter.ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy) instead.

setRememberMeParameter(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setRememberMeServices(RememberMeServices) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setRememberMeServices(RememberMeServices) - Method in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

setReportOnly(boolean) - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter

If true, includes the Content-Security-Policy-Report-Only header in the response, otherwise, defaults to the Content-Security-Policy header.

setReportOnly(boolean) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

To get a Public-Key-Pins header you should set this to false, otherwise the header will be Public-Key-Pins-Report-Only.

setReportUri(URI) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

Sets the URI to which the browser should report pin validation failures.

setReportUri(String) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

Sets the URI to which the browser should report pin validation failures.

setRequest(HttpServletRequest) - Method in class org.springframework.security.web.context.HttpRequestResponseHolder

setRequestCache(RequestCache) - Method in class org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler

setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter

Sets the RequestMatcher used to determine if the "Strict-Transport-Security" should be added.

setRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

Allows selective use of saved requests for a subset of requests.

setRequestURI(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setRequestURL(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setRequireCsrfProtectionMatcher(RequestMatcher) - Method in class org.springframework.security.web.csrf.CsrfFilter

Specifies a RequestMatcher that is used to determine if CSRF protection should be applied.

setRequiresAuthenticationRequestMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

setResourceLoader(ResourceLoader) - Method in class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever

setResponse(HttpServletResponse) - Method in class org.springframework.security.web.context.HttpRequestResponseHolder

setRolePrefix(String) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

setScheme(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setScheme(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder

setSecureKeyword(String) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor

setSecurityMetadataSource(FilterInvocationSecurityMetadataSource) - Method in class org.springframework.security.web.access.channel.ChannelProcessingFilter

setSecurityMetadataSource(FilterInvocationSecurityMetadataSource) - Method in class org.springframework.security.web.access.intercept.FilterSecurityInterceptor

setSeriesLength(int) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

setServerName(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setServerName(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder

setServerPort(int) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setServletPath(String) - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest.Builder

setServletPath(String) - Method in class org.springframework.security.web.servlet.util.matcher.MvcRequestMatcher

The servlet path to match on.

setServletPath(String) - Method in class org.springframework.security.web.util.RedirectUrlBuilder

setSessionAttributeName(String) - Method in class org.springframework.security.web.csrf.HttpSessionCsrfTokenRepository

Sets the HttpSession attribute name that the CsrfToken is stored in

setSessionAttrName(String) - Method in class org.springframework.security.web.savedrequest.HttpSessionRequestCache

If the sessionAttrName property is set, the request is stored in the session using this attribute name.

setSessionAuthenticationStrategy(SessionAuthenticationStrategy) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

The session handling strategy which will be invoked immediately after an authentication request is successfully processed by the AuthenticationManager.

setSpringSecurityContextKey(String) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

Allows the session attribute name to be customized for this repository instance.

setSubjectDnRegex(String) - Method in class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor

Sets the regular expression which will by used to extract the user name from the certificate's Subject DN.

setSuccessHandler(AuthenticationSuccessHandler) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Used to define custom behaviour on a successful switch or exit user.

setSwitchAuthorityRole(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Allows the role of the switchAuthority to be customized.

setSwitchFailureUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Sets the URL to which a user should be redirected if the switch fails.

setSwitchUserAuthorityChanger(SwitchUserAuthorityChanger) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

setSwitchUserMatcher(RequestMatcher) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Set the matcher to respond to switch user processing.

setSwitchUserUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Set the URL to respond to switch user processing.

setTargetUrl(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Sets the URL to go to after a successful switch / exit user request.

setTargetUrlParameter(String) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

If this property is set, the current request will be checked for this a parameter with this name and the value used as the target URL if present.

setThrowableAnalyzer(ThrowableAnalyzer) - Method in class org.springframework.security.web.access.ExceptionTranslationFilter

setThrowExceptionWhenTokenRejected(boolean) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

If true, causes the provider to throw a BadCredentialsException if the presented authentication request is invalid (contains a null principal or credentials).

setTokenLength(int) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

setTokenValiditySeconds(int) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

setTokenValiditySeconds(int) - Method in class org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices

setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.access.expression.DefaultWebSecurityExpressionHandler

Sets the AuthenticationTrustResolver to be used.

setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

Sets the AuthenticationTrustResolver to be used.

setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter

Sets the AuthenticationTrustResolver to be used.

setTrustResolver(AuthenticationTrustResolver) - Method in class org.springframework.security.web.session.SessionManagementFilter

Sets the AuthenticationTrustResolver to be used.

setupModule(Module.SetupContext) - Method in class org.springframework.security.web.jackson2.WebJackson2Module

setUseEquals(boolean) - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher

If set to true, matches on exact MediaType, else uses MediaType.isCompatibleWith(MediaType).

setUseForward(boolean) - Method in class org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint

Tells if we are to do a forward to the loginFormUrl using the RequestDispatcher, instead of a 302 redirect.

setUseForward(boolean) - Method in class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

If set to true, performs a forward to the failure destination URL instead of a redirect.

setUserCache(UserCache) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

setUserDetailsChecker(UserDetailsChecker) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

Sets the strategy which will be used to validate the loaded UserDetails object for the user.

setUserDetailsChecker(UserDetailsChecker) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Sets the strategy to be used to validate the UserDetails object obtained for the user when processing a remember-me cookie to automatically log in a user.

setUserDetailsChecker(UserDetailsChecker) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

setUserDetailsService(UserDetailsService) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Sets the authentication data access object.

setUserDetailsService(UserDetailsService) - Method in class org.springframework.security.web.authentication.www.DigestAuthenticationFilter

setUseReferer(boolean) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationTargetUrlRequestHandler

If set to true the Referer header will be used (if available).

setUsernameParameter(String) - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

Allows the parameter containing the username to be customized.

setUsernameParameter(String) - Method in class org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter

setUsernameParameter(String) - Method in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

Sets the parameter name which will be used to obtain the username from the login request.

setUserRoles2GrantedAuthoritiesMapper(Attributes2GrantedAuthoritiesMapper) - Method in class org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource

setUseSecureCookie(boolean) - Method in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

Whether the cookie should be flagged as secure or not.

setWebSphereGroups2GrantedAuthoritiesMapper(Attributes2GrantedAuthoritiesMapper) - Method in class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource

SimpleRedirectInvalidSessionStrategy - Class in org.springframework.security.web.session

Performs a redirect to a fixed URL when an invalid requested session is detected by the SessionManagementFilter.

SimpleRedirectInvalidSessionStrategy(String) - Constructor for class org.springframework.security.web.session.SimpleRedirectInvalidSessionStrategy

SimpleRedirectSessionInformationExpiredStrategy - Class in org.springframework.security.web.session

Performs a redirect to a fixed URL when an expired session is detected by the ConcurrentSessionFilter.

SimpleRedirectSessionInformationExpiredStrategy(String) - Constructor for class org.springframework.security.web.session.SimpleRedirectSessionInformationExpiredStrategy

SimpleRedirectSessionInformationExpiredStrategy(String, RedirectStrategy) - Constructor for class org.springframework.security.web.session.SimpleRedirectSessionInformationExpiredStrategy

SimpleUrlAuthenticationFailureHandler - Class in org.springframework.security.web.authentication

AuthenticationFailureHandler which performs a redirect to the value of the defaultFailureUrl property when the onAuthenticationFailure method is called.

SimpleUrlAuthenticationFailureHandler() - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

SimpleUrlAuthenticationFailureHandler(String) - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler

SimpleUrlAuthenticationSuccessHandler - Class in org.springframework.security.web.authentication

AuthenticationSuccessHandler which can be configured with a default URL which users should be sent to upon successful authentication.

SimpleUrlAuthenticationSuccessHandler() - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler

SimpleUrlAuthenticationSuccessHandler(String) - Constructor for class org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler

Constructor which sets the defaultTargetUrl property of the base class.

SimpleUrlLogoutSuccessHandler - Class in org.springframework.security.web.authentication.logout

Handles the navigation on logout by delegating to the AbstractAuthenticationTargetUrlRequestHandler base class logic.

SimpleUrlLogoutSuccessHandler() - Constructor for class org.springframework.security.web.authentication.logout.SimpleUrlLogoutSuccessHandler

SPRING_SECURITY_CONTEXT_KEY - Static variable in class org.springframework.security.web.context.HttpSessionSecurityContextRepository

The default key under which the security context will be stored in the session.

SPRING_SECURITY_FORM_PASSWORD_KEY - Static variable in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

SPRING_SECURITY_FORM_USERNAME_KEY - Static variable in class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

SPRING_SECURITY_REMEMBER_ME_COOKIE_KEY - Static variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

SPRING_SECURITY_SWITCH_USERNAME_KEY - Static variable in class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

StaticAllowFromStrategy - Class in org.springframework.security.web.header.writers.frameoptions

Simple implementation of the AllowFromStrategy

StaticAllowFromStrategy(URI) - Constructor for class org.springframework.security.web.header.writers.frameoptions.StaticAllowFromStrategy

StaticHeadersWriter - Class in org.springframework.security.web.header.writers

HeaderWriter implementation which writes the same Header instance.

StaticHeadersWriter(List<Header>) - Constructor for class org.springframework.security.web.header.writers.StaticHeadersWriter

Creates a new instance

StaticHeadersWriter(String, String...) - Constructor for class org.springframework.security.web.header.writers.StaticHeadersWriter

Creates a new instance with a single header

StrictHttpFirewall - Class in org.springframework.security.web.firewall

A strict implementation of HttpFirewall that rejects any suspicious requests with a RequestRejectedException.

StrictHttpFirewall() - Constructor for class org.springframework.security.web.firewall.StrictHttpFirewall

SubjectDnX509PrincipalExtractor - Class in org.springframework.security.web.authentication.preauth.x509

Obtains the principal from a certificate using a regular expression match against the Subject (as returned by a call to X509Certificate.getSubjectDN()).

SubjectDnX509PrincipalExtractor() - Constructor for class org.springframework.security.web.authentication.preauth.x509.SubjectDnX509PrincipalExtractor

successfulAuthentication(HttpServletRequest, HttpServletResponse, FilterChain, Authentication) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Default behaviour for successful authentication.

successfulAuthentication(HttpServletRequest, HttpServletResponse, Authentication) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Puts the Authentication instance returned by the authentication manager into the secure context.

supports(ConfigAttribute) - Method in interface org.springframework.security.web.access.channel.ChannelDecisionManager

Indicates whether this ChannelDecisionManager is able to process the passed ConfigAttribute.

supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.ChannelDecisionManagerImpl

supports(ConfigAttribute) - Method in interface org.springframework.security.web.access.channel.ChannelProcessor

Indicates whether this ChannelProcessor is able to process the passed ConfigAttribute.

supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.InsecureChannelProcessor

supports(ConfigAttribute) - Method in class org.springframework.security.web.access.channel.SecureChannelProcessor

supports(ConfigAttribute) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter

supports(Class<?>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter

supports(Class<?>) - Method in class org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

supports(Class<?>) - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider

Indicate that this provider only supports PreAuthenticatedAuthenticationToken (sub)classes.

supportsParameter(MethodParameter) - Method in class org.springframework.security.web.bind.support.AuthenticationPrincipalArgumentResolver

Deprecated.

supportsParameter(MethodParameter) - Method in class org.springframework.security.web.method.annotation.AuthenticationPrincipalArgumentResolver

supportsParameter(MethodParameter) - Method in class org.springframework.security.web.method.annotation.CsrfTokenArgumentResolver

SwitchUserAuthorityChanger - Interface in org.springframework.security.web.authentication.switchuser

Allows subclasses to modify the GrantedAuthority list that will be assigned to the principal when they assume the identity of a different principal.

SwitchUserFilter - Class in org.springframework.security.web.authentication.switchuser

Switch User processing filter responsible for user context switching.

SwitchUserFilter() - Constructor for class org.springframework.security.web.authentication.switchuser.SwitchUserFilter

SwitchUserGrantedAuthority - Class in org.springframework.security.web.authentication.switchuser

Custom GrantedAuthority used by SwitchUserFilter

SwitchUserGrantedAuthority(String, Authentication) - Constructor for class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority

T

TextEscapeUtils - Class in org.springframework.security.web.util

Internal utility for escaping characters in HTML strings.

TextEscapeUtils() - Constructor for class org.springframework.security.web.util.TextEscapeUtils

ThrowableAnalyzer - Class in org.springframework.security.web.util

Handler for analyzing Throwable instances.

ThrowableAnalyzer() - Constructor for class org.springframework.security.web.util.ThrowableAnalyzer

Creates a new ThrowableAnalyzer instance.

ThrowableCauseExtractor - Interface in org.springframework.security.web.util

Interface for handlers extracting the cause out of a specific Throwable type.

TokenBasedRememberMeServices - Class in org.springframework.security.web.authentication.rememberme

Identifies previously remembered users by a Base-64 encoded cookie.

TokenBasedRememberMeServices(String, UserDetailsService) - Constructor for class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

toString() - Method in class org.springframework.security.web.access.intercept.RequestKey

toString() - Method in class org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

toString() - Method in class org.springframework.security.web.authentication.session.CompositeSessionAuthenticationStrategy

toString() - Method in class org.springframework.security.web.authentication.switchuser.SwitchUserGrantedAuthority

toString() - Method in class org.springframework.security.web.authentication.WebAuthenticationDetails

toString() - Method in class org.springframework.security.web.DefaultSecurityFilterChain

toString() - Method in class org.springframework.security.web.FilterChainProxy

toString() - Method in class org.springframework.security.web.FilterInvocation

toString() - Method in class org.springframework.security.web.firewall.FirewalledRequest

toString() - Method in class org.springframework.security.web.header.Header

toString() - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter

toString() - Method in class org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter

toString() - Method in class org.springframework.security.web.header.writers.StaticHeadersWriter

toString() - Method in class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter

toString() - Method in class org.springframework.security.web.savedrequest.DefaultSavedRequest

toString() - Method in class org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper

toString() - Method in class org.springframework.security.web.util.matcher.AndRequestMatcher

toString() - Method in class org.springframework.security.web.util.matcher.AntPathRequestMatcher

toString() - Method in class org.springframework.security.web.util.matcher.MediaTypeRequestMatcher

toString() - Method in class org.springframework.security.web.util.matcher.NegatedRequestMatcher

toString() - Method in class org.springframework.security.web.util.matcher.OrRequestMatcher

toString() - Method in class org.springframework.security.web.util.matcher.RequestHeaderRequestMatcher

TWO_WEEKS_S - Static variable in class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

U

unsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

Default behaviour for unsuccessful authentication.

unsuccessfulAuthentication(HttpServletRequest, HttpServletResponse, AuthenticationException) - Method in class org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter

Ensures the authentication object in the secure context is set to null when authentication fails.

updateToken(String, String, Date) - Method in class org.springframework.security.web.authentication.rememberme.InMemoryTokenRepositoryImpl

updateToken(String, String, Date) - Method in class org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl

updateToken(String, String, Date) - Method in interface org.springframework.security.web.authentication.rememberme.PersistentTokenRepository

UrlUtils - Class in org.springframework.security.web.util

Provides static methods for composing URLs.

UrlUtils() - Constructor for class org.springframework.security.web.util.UrlUtils

UsernamePasswordAuthenticationFilter - Class in org.springframework.security.web.authentication

Processes an authentication form submission.

UsernamePasswordAuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter

V

validate(FilterChainProxy) - Method in interface org.springframework.security.web.FilterChainProxy.FilterChainValidator

valueOf(String) - Static method in enum org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter.XFrameOptionsMode

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy

Returns the enum constant of this type with the specified name.

values() - Static method in enum org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter.XFrameOptionsMode

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter.ReferrerPolicy

Returns an array containing the constants of this enum type, in the order they are declared.

verifyThrowableHierarchy(Throwable, Class<? extends Throwable>) - Static method in class org.springframework.security.web.util.ThrowableAnalyzer

Verifies that the provided throwable is a valid subclass of the provided type (or of the type itself).

vote(Authentication, FilterInvocation, Collection<ConfigAttribute>) - Method in class org.springframework.security.web.access.expression.WebExpressionVoter

W

WEB_INVOCATION_PRIVILEGE_EVALUATOR_ATTRIBUTE - Static variable in class org.springframework.security.web.WebAttributes

Set as a request attribute to override the default WebInvocationPrivilegeEvaluator

WebAsyncManagerIntegrationFilter - Class in org.springframework.security.web.context.request.async

Provides integration between the SecurityContext and Spring Web's WebAsyncManager by using the SecurityContextCallableProcessingInterceptor.beforeConcurrentHandling(org.springframework.web.context.request.NativeWebRequest, Callable) to populate the SecurityContext on the Callable.

WebAsyncManagerIntegrationFilter() - Constructor for class org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter

WebAttributes - Class in org.springframework.security.web

Well-known keys which are used to store Spring Security information in request or session scope.

WebAttributes() - Constructor for class org.springframework.security.web.WebAttributes

WebAuthenticationDetails - Class in org.springframework.security.web.authentication

A holder of selected HTTP details related to a web authentication request.

WebAuthenticationDetails(HttpServletRequest) - Constructor for class org.springframework.security.web.authentication.WebAuthenticationDetails

Records the remote address and will also set the session Id if a session already exists (it won't create one).

WebAuthenticationDetailsSource - Class in org.springframework.security.web.authentication

Implementation of AuthenticationDetailsSource which builds the details object from an HttpServletRequest object, creating a WebAuthenticationDetails .

WebAuthenticationDetailsSource() - Constructor for class org.springframework.security.web.authentication.WebAuthenticationDetailsSource

WebExpressionVoter - Class in org.springframework.security.web.access.expression

Voter which handles web authorisation decisions.

WebExpressionVoter() - Constructor for class org.springframework.security.web.access.expression.WebExpressionVoter

WebInvocationPrivilegeEvaluator - Interface in org.springframework.security.web.access

Allows users to determine whether they have privileges for a given web URI.

WebJackson2Module - Class in org.springframework.security.web.jackson2

Jackson module for spring-security-web.

WebJackson2Module() - Constructor for class org.springframework.security.web.jackson2.WebJackson2Module

WebSecurityExpressionRoot - Class in org.springframework.security.web.access.expression

WebSecurityExpressionRoot(Authentication, FilterInvocation) - Constructor for class org.springframework.security.web.access.expression.WebSecurityExpressionRoot

WebSpherePreAuthenticatedProcessingFilter - Class in org.springframework.security.web.authentication.preauth.websphere

This AbstractPreAuthenticatedProcessingFilter implementation is based on WebSphere authentication.

WebSpherePreAuthenticatedProcessingFilter() - Constructor for class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedProcessingFilter

Public constructor which overrides the default AuthenticationDetails class to be used.

WebSpherePreAuthenticatedWebAuthenticationDetailsSource - Class in org.springframework.security.web.authentication.preauth.websphere

This AuthenticationDetailsSource implementation will set the pre-authenticated granted authorities based on the WebSphere groups for the current WebSphere user, mapped using the configured Attributes2GrantedAuthoritiesMapper.

WebSpherePreAuthenticatedWebAuthenticationDetailsSource() - Constructor for class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource

WebSpherePreAuthenticatedWebAuthenticationDetailsSource(WASUsernameAndGroupsExtractor) - Constructor for class org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource

WebXmlMappableAttributesRetriever - Class in org.springframework.security.web.authentication.preauth.j2ee

This MappableAttributesRetriever implementation reads the list of defined J2EE roles from a web.xml file and returns these from { WebXmlMappableAttributesRetriever.getMappableAttributes().

WebXmlMappableAttributesRetriever() - Constructor for class org.springframework.security.web.authentication.preauth.j2ee.WebXmlMappableAttributesRetriever

WhiteListedAllowFromStrategy - Class in org.springframework.security.web.header.writers.frameoptions

Implementation which checks the supplied origin against a list of allowed origins.

WhiteListedAllowFromStrategy(Collection<String>) - Constructor for class org.springframework.security.web.header.writers.frameoptions.WhiteListedAllowFromStrategy

Creates a new instance

withHttpOnlyFalse() - Static method in class org.springframework.security.web.csrf.CookieCsrfTokenRepository

Factory method to conveniently create an instance that has CookieCsrfTokenRepository.setCookieHttpOnly(boolean) set to false.

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in interface org.springframework.security.web.header.HeaderWriter

Create a Header instance.

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.CacheControlHeadersWriter

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.ContentSecurityPolicyHeaderWriter

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.DelegatingRequestMatcherHeaderWriter

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

Writes the X-Frame-Options header value, overwritting any previous value.

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.HpkpHeaderWriter

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.HstsHeaderWriter

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.ReferrerPolicyHeaderWriter

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.StaticHeadersWriter

writeHeaders(HttpServletRequest, HttpServletResponse) - Method in class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter

X

X509AuthenticationFilter - Class in org.springframework.security.web.authentication.preauth.x509

X509AuthenticationFilter() - Constructor for class org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter

X509PrincipalExtractor - Interface in org.springframework.security.web.authentication.preauth.x509

Obtains the principal from an X509Certificate for use within the framework.

XContentTypeOptionsHeaderWriter - Class in org.springframework.security.web.header.writers

A StaticHeadersWriter that inserts headers to prevent content sniffing.

XContentTypeOptionsHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.XContentTypeOptionsHeaderWriter

Creates a new instance

XFRAME_OPTIONS_HEADER - Static variable in class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

XFrameOptionsHeaderWriter - Class in org.springframework.security.web.header.writers.frameoptions

HeaderWriter implementation for the X-Frame-Options headers.

XFrameOptionsHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

Creates an instance with XFrameOptionsHeaderWriter.XFrameOptionsMode.DENY

XFrameOptionsHeaderWriter(XFrameOptionsHeaderWriter.XFrameOptionsMode) - Constructor for class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

Creates a new instance

XFrameOptionsHeaderWriter(AllowFromStrategy) - Constructor for class org.springframework.security.web.header.writers.frameoptions.XFrameOptionsHeaderWriter

Creates a new instance with XFrameOptionsHeaderWriter.XFrameOptionsMode.ALLOW_FROM.

XFrameOptionsHeaderWriter.XFrameOptionsMode - Enum in org.springframework.security.web.header.writers.frameoptions

The possible values for the X-Frame-Options header.

XXssProtectionHeaderWriter - Class in org.springframework.security.web.header.writers

Renders the X-XSS-Protection header.

XXssProtectionHeaderWriter() - Constructor for class org.springframework.security.web.header.writers.XXssProtectionHeaderWriter

Create a new instance

A B C D E F G H I J L M N O P R S T U V W X