Package de.hybris.platform.servicelayer.security.spring
-
Interface Summary Interface Description UserToAuthenticationConverter Converts a hybrisUserModel
to a Spring SecurityAuthentication
object. -
Class Summary Class Description DefaultUserToAuthenticationConverter This implementation copies username and password, converts all user groups toGrantedAuthority
s and puts them into aUsernamePasswordAuthenticationToken
.HybrisAuthenticationProvider Deprecated. since agesHybrisGroupBasedAuthenticationProvider Deprecated. since ages - see PLA-10801 -- validates 'best practice pattern' of seperating 'authentication' from 'authorization' and isn't flexible enough.HybrisSessionFixationProtectionStrategy Session fixation attacks are a potential risk where it is possible for a malicious attacker to create a session by accessing a site, then persuade another user to log in with the same session (by sending them a link containing the session identifier as a parameter, for example).