Package de.hybris.platform.acceleratorstorefrontcommons.security

Class AbstractAcceleratorAuthenticationProvider

  • All Implemented Interfaces:
    org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, org.springframework.security.authentication.AuthenticationProvider
    public abstract class AbstractAcceleratorAuthenticationProvider
extends de.hybris.platform.spring.security.CoreAuthenticationProvider
    Derived authentication provider supporting additional authentication checks. See RejectUserPreAuthenticationChecks.
    • prevent login without password for users created via CSCockpit
    • prevent login as user in group admingroup
    any login as admin disables SearchRestrictions and therefore no page can be viewed correctly

    • Nested Class Summary

      • Nested classes/interfaces inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

        de.hybris.platform.spring.security.CoreAuthenticationProvider.CoreAuthenticationException

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      protected void additionalAuthenticationChecks​(org.springframework.security.core.userdetails.UserDetails details, org.springframework.security.authentication.AbstractAuthenticationToken authentication)  
      org.springframework.security.core.Authentication authenticate​(org.springframework.security.core.Authentication authentication)  
      protected BruteForceAttackCounter getBruteForceAttackCounter()  
      protected de.hybris.platform.servicelayer.model.ModelService getModelService()  
      protected de.hybris.platform.servicelayer.user.UserService getUserService()  
      void setBruteForceAttackCounter​(BruteForceAttackCounter bruteForceAttackCounter)  
      void setModelService​(de.hybris.platform.servicelayer.model.ModelService modelService)  
      void setUserService​(de.hybris.platform.servicelayer.user.UserService userService)  

      • Methods inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

        afterPropertiesSet, createSuccessAuthentication, getPreAuthenticationChecks, getUserDetailsService, retrieveUser, setMessageSource, setPreAuthenticationChecks, setUserDetailsService, supports

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Field Detail

      • CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS

        public static final java.lang.String CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS
        See Also:
        Constant Field Values

    • Constructor Detail

      • AbstractAcceleratorAuthenticationProvider

        public AbstractAcceleratorAuthenticationProvider()

    • Method Detail

      • authenticate

        public org.springframework.security.core.Authentication authenticate​(org.springframework.security.core.Authentication authentication)
                                                              throws org.springframework.security.core.AuthenticationException
        Specified by:
        authenticate in interface org.springframework.security.authentication.AuthenticationProvider
        Overrides:
        authenticate in class de.hybris.platform.spring.security.CoreAuthenticationProvider
        Throws:
        org.springframework.security.core.AuthenticationException

      • additionalAuthenticationChecks

        protected void additionalAuthenticationChecks​(org.springframework.security.core.userdetails.UserDetails details,
                                              org.springframework.security.authentication.AbstractAuthenticationToken authentication)
                                       throws org.springframework.security.core.AuthenticationException
        Overrides:
        additionalAuthenticationChecks in class de.hybris.platform.spring.security.CoreAuthenticationProvider
        Throws:
        org.springframework.security.core.AuthenticationException
        See Also:
        CoreAuthenticationProvider.additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails, org.springframework.security.authentication.AbstractAuthenticationToken)

      • setBruteForceAttackCounter

        public void setBruteForceAttackCounter​(BruteForceAttackCounter bruteForceAttackCounter)

      • getUserService

        protected de.hybris.platform.servicelayer.user.UserService getUserService()

      • setUserService

        public void setUserService​(de.hybris.platform.servicelayer.user.UserService userService)

      • getModelService

        protected de.hybris.platform.servicelayer.model.ModelService getModelService()

      • setModelService

        public void setModelService​(de.hybris.platform.servicelayer.model.ModelService modelService)