Package de.hybris.platform.servicelayer.security.spring
-
Interface Summary Interface Description UserToAuthenticationConverter Converts a hybrisUserModelto a Spring SecurityAuthenticationobject. -
Class Summary Class Description DefaultUserToAuthenticationConverter This implementation copies username and password, converts all user groups toGrantedAuthoritys and puts them into aUsernamePasswordAuthenticationToken.HybrisAuthenticationProvider Deprecated. since agesHybrisGroupBasedAuthenticationProvider Deprecated. since ages - see PLA-10801 -- validates 'best practice pattern' of seperating 'authentication' from 'authorization' and isn't flexible enough.HybrisSessionFixationProtectionStrategy Session fixation attacks are a potential risk where it is possible for a malicious attacker to create a session by accessing a site, then persuade another user to log in with the same session (by sending them a link containing the session identifier as a parameter, for example).