Package de.hybris.platform.b2bacceleratoraddon.security

Class B2BAcceleratorAuthenticationProvider

java.lang.Object

de.hybris.platform.spring.security.CoreAuthenticationProvider

de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider

de.hybris.platform.b2bacceleratoraddon.security.B2BAcceleratorAuthenticationProvider

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, org.springframework.security.authentication.AuthenticationProvider

public class B2BAcceleratorAuthenticationProvider
extends AbstractAcceleratorAuthenticationProvider

Derived authentication provider supporting additional authentication checks. See RejectUserPreAuthenticationChecks.

• prevent login without password for users created via CSCockpit
• prevent login as user in group admingroup
• prevent login as user if not authorised for B2B

any login as admin disables SearchRestrictions and therefore no page can be viewed correctly

Nested Class Summary

Nested classes/interfaces inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

CoreAuthenticationProvider.CoreAuthenticationException

Field Summary

Fields inherited from class de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider

BAD_CREDENTIALS, CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS

Fields inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

messages

Constructor Summary

Constructors

Constructor	Description
B2BAcceleratorAuthenticationProvider()

Method Summary

Modifier and Type	Method	Description
protected void	additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details, org.springframework.security.authentication.AbstractAuthenticationToken authentication)
protected B2BUserGroupProvider	getB2bUserGroupProvider()
void	setB2bUserGroupProvider(B2BUserGroupProvider b2bUserGroupProvider)

Methods inherited from class de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider

authenticate, getBruteForceAttackCounter, getModelService, getUserService, setBruteForceAttackCounter, setModelService, setUserService

Methods inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

afterPropertiesSet, createSuccessAuthentication, getPreAuthenticationChecks, getUserDetailsService, retrieveUser, setMessageSource, setPreAuthenticationChecks, setUserDetailsService, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

B2BAcceleratorAuthenticationProvider

public B2BAcceleratorAuthenticationProvider()

Method Details

additionalAuthenticationChecks

protected void additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details,
 org.springframework.security.authentication.AbstractAuthenticationToken authentication)
                                       throws org.springframework.security.core.AuthenticationException

Overrides:

additionalAuthenticationChecks in class AbstractAcceleratorAuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

See Also:

• AbstractAcceleratorAuthenticationProvider.additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails, org.springframework.security.authentication.AbstractAuthenticationToken)

getB2bUserGroupProvider

protected B2BUserGroupProvider getB2bUserGroupProvider()

setB2bUserGroupProvider

public void setB2bUserGroupProvider(B2BUserGroupProvider b2bUserGroupProvider)