com.client.core.security

Class SessionFilter

java.lang.Object

com.client.core.security.SessionFilter

All Implemented Interfaces:

javax.servlet.Filter

public class SessionFilter
extends java.lang.Object
implements javax.servlet.Filter

Filter used to authentication all calls to the web application. Current implementation is only to allow calls that either

1. Have an 'apiKey' parameter on them equal to the apiKey in the application settings file (i.e. the one injected into ApplicationSettings
2. Have an encrypted 'apiKey' in the session. This essentially means that some previous request had an 'apiKey' url parameter and passed the filter.

Constructor Summary

Constructors

Constructor and Description
SessionFilter()

Method Summary

Modifier and Type	Method and Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
java.lang.String	encryptApiKey(java.lang.String apiKey)
java.lang.String	getSessionStoredApiKeyName()
void	init(javax.servlet.FilterConfig config)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionFilter

public SessionFilter()

Method Detail

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws java.io.IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

java.io.IOException

javax.servlet.ServletException

encryptApiKey

public java.lang.String encryptApiKey(java.lang.String apiKey)

getSessionStoredApiKeyName

public java.lang.String getSessionStoredApiKeyName()

init

public void init(javax.servlet.FilterConfig config)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter