Package de.hybris.platform.yacceleratorstorefront.security

Class AcceleratorAuthenticationProvider

java.lang.Object

de.hybris.platform.spring.security.CoreAuthenticationProvider

de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider

de.hybris.platform.yacceleratorstorefront.security.AcceleratorAuthenticationProvider

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, org.springframework.security.authentication.AuthenticationProvider

public class AcceleratorAuthenticationProvider
extends AbstractAcceleratorAuthenticationProvider

Derived authentication provider supporting additional authentication checks. See RejectUserPreAuthenticationChecks.

• prevent login without password for users created via CSCockpit
• prevent login as user in group admingroup

any login as admin disables SearchRestrictions and therefore no page can be viewed correctly

Nested Class Summary

Nested classes/interfaces inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

CoreAuthenticationProvider.CoreAuthenticationException

Field Summary

Fields inherited from class de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider

BAD_CREDENTIALS, CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS

Fields inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

messages

Constructor Summary

Constructors

Constructor	Description
AcceleratorAuthenticationProvider()

Method Summary

Modifier and Type	Method	Description
protected void	additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details, org.springframework.security.authentication.AbstractAuthenticationToken authentication)
protected org.springframework.security.core.GrantedAuthority	getAdminAuthority()
void	setAdminGroup(String adminGroup)

Methods inherited from class de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider

authenticate, getBruteForceAttackCounter, getModelService, getUserService, setBruteForceAttackCounter, setModelService, setUserService

Methods inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

afterPropertiesSet, createSuccessAuthentication, getPreAuthenticationChecks, getUserDetailsService, retrieveUser, setMessageSource, setPreAuthenticationChecks, setUserDetailsService, supports

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AcceleratorAuthenticationProvider

public AcceleratorAuthenticationProvider()

Method Details

additionalAuthenticationChecks

protected void additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details,
 org.springframework.security.authentication.AbstractAuthenticationToken authentication)
                                       throws org.springframework.security.core.AuthenticationException

Overrides:

additionalAuthenticationChecks in class AbstractAcceleratorAuthenticationProvider

Throws:

org.springframework.security.core.AuthenticationException

See Also:

• AbstractAcceleratorAuthenticationProvider.additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails, org.springframework.security.authentication.AbstractAuthenticationToken)

setAdminGroup

public void setAdminGroup(String adminGroup)

getAdminAuthority

protected org.springframework.security.core.GrantedAuthority getAdminAuthority()