com.communote.server.web.security

Class CommunoteRememberMeServices

java.lang.Object

org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

com.communote.server.web.security.CommunoteRememberMeServices

All Implemented Interfaces:

org.springframework.beans.factory.InitializingBean, org.springframework.security.web.authentication.logout.LogoutHandler, org.springframework.security.web.authentication.RememberMeServices

public class CommunoteRememberMeServices
extends org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

This is a custom RememberMe service, which provides enhanced functionality, to enable remember me independent of the used plattform.

Author:

Communote GmbH - http://www.communote.com/

Field Summary

Fields inherited from class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

DEFAULT_PARAMETER, logger, messages, SPRING_SECURITY_REMEMBER_ME_COOKIE_KEY, TWO_WEEKS_S

Constructor Summary

Constructors

Constructor and Description
CommunoteRememberMeServices(String key, org.springframework.security.core.userdetails.UserDetailsService userDetailsService) Constructor.

Method Summary

Modifier and Type	Method and Description
protected String	makeTokenSignature(long tokenExpiryTime, String username, String password) Returns a specific authentication token for the user, instead of a combination of time and password.
void	onLoginSuccess(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.security.core.Authentication successfulAuthentication) This implementation skips the password check, as we don't work with the password.
protected String	retrieveUserName(org.springframework.security.core.Authentication authentication)

Methods inherited from class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

calculateLoginLifetime, isTokenExpired, processAutoLoginCookie, retrievePassword

Methods inherited from class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

afterPropertiesSet, autoLogin, cancelCookie, createSuccessfulAuthentication, decodeCookie, encodeCookie, extractRememberMeCookie, getAuthenticationDetailsSource, getCookieName, getKey, getParameter, getTokenValiditySeconds, getUserDetailsService, loginFail, loginSuccess, logout, onLoginFail, rememberMeRequested, setAlwaysRemember, setAuthenticationDetailsSource, setAuthoritiesMapper, setCookie, setCookieName, setKey, setParameter, setTokenValiditySeconds, setUserDetailsChecker, setUserDetailsService, setUseSecureCookie

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CommunoteRememberMeServices

public CommunoteRememberMeServices(String key,
                                   org.springframework.security.core.userdetails.UserDetailsService userDetailsService)

Constructor.

Parameters:

key - An key.

userDetailsService - The UserDetailsService for getting users.

Method Detail

makeTokenSignature

protected String makeTokenSignature(long tokenExpiryTime,
                                    String username,
                                    String password)

Returns a specific authentication token for the user, instead of a combination of time and password. The username is expected to be the user ID.

Overrides:

makeTokenSignature in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

onLoginSuccess

public void onLoginSuccess(javax.servlet.http.HttpServletRequest request,
                           javax.servlet.http.HttpServletResponse response,
                           org.springframework.security.core.Authentication successfulAuthentication)

This implementation skips the password check, as we don't work with the password.

Overrides:

onLoginSuccess in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

retrieveUserName

protected String retrieveUserName(org.springframework.security.core.Authentication authentication)

Overrides:

retrieveUserName in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices