org.springframework.security.web.firewall

Class FirewalledRequest

java.lang.Object

javax.servlet.ServletRequestWrapper

javax.servlet.http.HttpServletRequestWrapper

org.springframework.security.web.firewall.FirewalledRequest

All Implemented Interfaces:

javax.servlet.http.HttpServletRequest, javax.servlet.ServletRequest

public abstract class FirewalledRequest
extends javax.servlet.http.HttpServletRequestWrapper

Request wrapper which is returned by the HttpFirewall interface.

The only difference is the reset method which allows some or all of the state to be reset by the FilterChainProxy when the request leaves the security filter chain.

Author:

Luke Taylor

Field Summary

Fields inherited from interface javax.servlet.http.HttpServletRequest

BASIC_AUTH, CLIENT_CERT_AUTH, DIGEST_AUTH, FORM_AUTH

Constructor Summary

Constructors

Constructor and Description
FirewalledRequest(javax.servlet.http.HttpServletRequest request) Constructs a request object wrapping the given request.

Method Summary

Modifier and Type	Method and Description
abstract void	reset() This method will be called once the request has passed through the security filter chain, when it is about to proceed to the application proper.
java.lang.String	toString()

Methods inherited from class javax.servlet.http.HttpServletRequestWrapper

authenticate, changeSessionId, getAuthType, getContextPath, getCookies, getDateHeader, getHeader, getHeaderNames, getHeaders, getIntHeader, getMethod, getPart, getParts, getPathInfo, getPathTranslated, getQueryString, getRemoteUser, getRequestedSessionId, getRequestURI, getRequestURL, getServletPath, getSession, getSession, getUserPrincipal, isRequestedSessionIdFromCookie, isRequestedSessionIdFromUrl, isRequestedSessionIdFromURL, isRequestedSessionIdValid, isUserInRole, login, logout, upgrade

Methods inherited from class javax.servlet.ServletRequestWrapper

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameter, getParameterMap, getParameterNames, getParameterValues, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequest, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, isWrapperFor, isWrapperFor, removeAttribute, setAttribute, setCharacterEncoding, setRequest, startAsync, startAsync

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface javax.servlet.ServletRequest

getAsyncContext, getAttribute, getAttributeNames, getCharacterEncoding, getContentLength, getContentLengthLong, getContentType, getDispatcherType, getInputStream, getLocalAddr, getLocale, getLocales, getLocalName, getLocalPort, getParameter, getParameterMap, getParameterNames, getParameterValues, getProtocol, getReader, getRealPath, getRemoteAddr, getRemoteHost, getRemotePort, getRequestDispatcher, getScheme, getServerName, getServerPort, getServletContext, isAsyncStarted, isAsyncSupported, isSecure, removeAttribute, setAttribute, setCharacterEncoding, startAsync, startAsync

Constructor Detail

FirewalledRequest

public FirewalledRequest(javax.servlet.http.HttpServletRequest request)

Constructs a request object wrapping the given request.

Throws:

java.lang.IllegalArgumentException - if the request is null

Method Detail

reset

public abstract void reset()

This method will be called once the request has passed through the security filter chain, when it is about to proceed to the application proper.

An implementation can thus choose to modify the state of the request for the security infrastructure, while still maintaining the original HttpServletRequest.

toString

public java.lang.String toString()

Overrides:

toString in class java.lang.Object