Package de.hybris.platform.acceleratorstorefrontcommons.security

Class AbstractAcceleratorAuthenticationProvider

java.lang.Object

de.hybris.platform.spring.security.CoreAuthenticationProvider

de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, org.springframework.security.authentication.AuthenticationProvider

Direct Known Subclasses:

AcceleratorAuthenticationProvider, B2BAcceleratorAuthenticationProvider

public abstract class AbstractAcceleratorAuthenticationProvider
extends CoreAuthenticationProvider

Derived authentication provider supporting additional authentication checks. See RejectUserPreAuthenticationChecks.

• prevent login without password for users created via CSCockpit
• prevent login as user in group admingroup

any login as admin disables SearchRestrictions and therefore no page can be viewed correctly

Nested Class Summary

Nested classes/interfaces inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

CoreAuthenticationProvider.CoreAuthenticationException

Field Summary

Fields

Modifier and Type	Field	Description
static java.lang.String	BAD_CREDENTIALS
static java.lang.String	CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS

Fields inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

messages

Constructor Summary

Constructors

Constructor	Description
AbstractAcceleratorAuthenticationProvider()

Method Summary

Modifier and Type	Method	Description
protected void	additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details, org.springframework.security.authentication.AbstractAuthenticationToken authentication)
org.springframework.security.core.Authentication	authenticate(org.springframework.security.core.Authentication authentication)
protected BruteForceAttackCounter	getBruteForceAttackCounter()
protected ModelService	getModelService()
protected UserService	getUserService()
void	setBruteForceAttackCounter(BruteForceAttackCounter bruteForceAttackCounter)
void	setModelService(ModelService modelService)
void	setUserService(UserService userService)

Methods inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

afterPropertiesSet, createSuccessAuthentication, getPreAuthenticationChecks, getUserDetailsService, retrieveUser, setMessageSource, setPreAuthenticationChecks, setUserDetailsService, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS

public static final java.lang.String CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS

See Also:

Constant Field Values

BAD_CREDENTIALS

public static final java.lang.String BAD_CREDENTIALS

See Also:

Constant Field Values

Constructor Detail

AbstractAcceleratorAuthenticationProvider

public AbstractAcceleratorAuthenticationProvider()

Method Detail

authenticate

public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication)
                                                              throws org.springframework.security.core.AuthenticationException

Specified by:

authenticate in interface org.springframework.security.authentication.AuthenticationProvider

Overrides:

authenticate in class CoreAuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

additionalAuthenticationChecks

protected void additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details,
                                              org.springframework.security.authentication.AbstractAuthenticationToken authentication)
                                       throws org.springframework.security.core.AuthenticationException

Overrides:

additionalAuthenticationChecks in class CoreAuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

See Also:

CoreAuthenticationProvider.additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails, org.springframework.security.authentication.AbstractAuthenticationToken)

getBruteForceAttackCounter

protected BruteForceAttackCounter getBruteForceAttackCounter()

setBruteForceAttackCounter

public void setBruteForceAttackCounter(BruteForceAttackCounter bruteForceAttackCounter)

getUserService

protected UserService getUserService()

setUserService

public void setUserService(UserService userService)

getModelService

protected ModelService getModelService()

setModelService

public void setModelService(ModelService modelService)