bap.pp.strongbox.security.oauth2.filter

Class CustomBasicAuthenticationFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.springframework.web.filter.OncePerRequestFilter

org.springframework.security.web.authentication.www.BasicAuthenticationFilter

bap.pp.strongbox.security.oauth2.filter.CustomBasicAuthenticationFilter

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.web.context.ServletContextAware

public class CustomBasicAuthenticationFilter
extends org.springframework.security.web.authentication.www.BasicAuthenticationFilter

Field Summary

Fields inherited from class org.springframework.web.filter.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

Constructor Summary

Constructors

Constructor and Description
CustomBasicAuthenticationFilter(org.springframework.security.authentication.AuthenticationManager authenticationManager)
CustomBasicAuthenticationFilter(org.springframework.security.authentication.AuthenticationManager authenticationManager, org.springframework.security.web.AuthenticationEntryPoint authenticationEntryPoint, org.springframework.security.oauth2.provider.token.TokenStore tokenStore)

Method Summary

Modifier and Type	Method and Description
void	afterPropertiesSet()
boolean	checkRefreshToken(java.lang.String refreshTokenValue, java.lang.String clientId, org.springframework.security.oauth2.provider.token.TokenStore tokenStore)
static boolean	ipMatch(java.lang.String regList, java.lang.String ipAddress) 判断某个地址，是否包含在IP白名单或黑名单
void	setAuthenticationDetailsSource(org.springframework.security.authentication.AuthenticationDetailsSource<javax.servlet.http.HttpServletRequest,?> authenticationDetailsSource)
void	setCredentialsCharset(java.lang.String credentialsCharset)
void	setRememberMeServices(org.springframework.security.web.authentication.RememberMeServices rememberMeServices)

Methods inherited from class org.springframework.web.filter.OncePerRequestFilter

doFilter

Methods inherited from class org.springframework.web.filter.GenericFilterBean

destroy, getFilterConfig, init, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CustomBasicAuthenticationFilter

public CustomBasicAuthenticationFilter(org.springframework.security.authentication.AuthenticationManager authenticationManager)

CustomBasicAuthenticationFilter

public CustomBasicAuthenticationFilter(org.springframework.security.authentication.AuthenticationManager authenticationManager,
                                       org.springframework.security.web.AuthenticationEntryPoint authenticationEntryPoint,
                                       org.springframework.security.oauth2.provider.token.TokenStore tokenStore)

Method Detail

afterPropertiesSet

public void afterPropertiesSet()

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

Overrides:

afterPropertiesSet in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

checkRefreshToken

public boolean checkRefreshToken(java.lang.String refreshTokenValue,
                                 java.lang.String clientId,
                                 org.springframework.security.oauth2.provider.token.TokenStore tokenStore)

Parameters:

refreshTokenValue - 刷新token值

clientId - 客户端id

tokenStore - 客户端存储方式

Returns:

setAuthenticationDetailsSource

public void setAuthenticationDetailsSource(org.springframework.security.authentication.AuthenticationDetailsSource<javax.servlet.http.HttpServletRequest,?> authenticationDetailsSource)

Overrides:

setAuthenticationDetailsSource in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

setRememberMeServices

public void setRememberMeServices(org.springframework.security.web.authentication.RememberMeServices rememberMeServices)

Overrides:

setRememberMeServices in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

setCredentialsCharset

public void setCredentialsCharset(java.lang.String credentialsCharset)

Overrides:

setCredentialsCharset in class org.springframework.security.web.authentication.www.BasicAuthenticationFilter

ipMatch

public static boolean ipMatch(java.lang.String regList,
                              java.lang.String ipAddress)

判断某个地址，是否包含在IP白名单或黑名单

Parameters:

regList - ip名单，各个ip逗号分隔，ip段用/分开。 如 String regList = "192.168.100.2,192.168.10.10/12"; 表示 192.168.100.2,192.168.10.10,192.168.10.11,192.168.10.12

ipAddress - 需要验证的IP地址

Returns: