Package de.hybris.platform.acceleratorstorefrontcommons.security

Class AbstractAcceleratorAuthenticationProvider

java.lang.Object
de.hybris.platform.spring.security.CoreAuthenticationProvider
de.hybris.platform.acceleratorstorefrontcommons.security.AbstractAcceleratorAuthenticationProvider
All Implemented Interfaces:
org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, org.springframework.security.authentication.AuthenticationProvider
public abstract class AbstractAcceleratorAuthenticationProvider extends de.hybris.platform.spring.security.CoreAuthenticationProvider
Derived authentication provider supporting additional authentication checks. See RejectUserPreAuthenticationChecks.
  • prevent login without password for users created via CSCockpit
  • prevent login as user in group admingroup
any login as admin disables SearchRestrictions and therefore no page can be viewed correctly

  • Nested Class Summary

    Nested classes/interfaces inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

    de.hybris.platform.spring.security.CoreAuthenticationProvider.CoreAuthenticationException

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    BAD_CREDENTIALS
     
    static final String
    CORE_AUTHENTICATION_PROVIDER_BAD_CREDENTIALS
     

    Fields inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

    messages

  • Constructor Summary

    Constructors
    Constructor
    Description
    AbstractAcceleratorAuthenticationProvider()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    protected void
    additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details, org.springframework.security.authentication.AbstractAuthenticationToken authentication)
     
    org.springframework.security.core.Authentication
    authenticate(org.springframework.security.core.Authentication authentication)
     
    protected void
    checkSiteConsistency(org.springframework.security.authentication.AbstractAuthenticationToken authentication)
     
    protected de.hybris.platform.site.BaseSiteService
    getBaseSiteService()
     
    protected BruteForceAttackCounter
    getBruteForceAttackCounter()
     
    protected de.hybris.platform.servicelayer.model.ModelService
    getModelService()
     
    protected de.hybris.platform.servicelayer.user.UserService
    getUserService()
     
    void
    setBaseSiteService(de.hybris.platform.site.BaseSiteService baseSiteService)
     
    void
    setBruteForceAttackCounter(BruteForceAttackCounter bruteForceAttackCounter)
     
    void
    setModelService(de.hybris.platform.servicelayer.model.ModelService modelService)
     
    void
    setUserService(de.hybris.platform.servicelayer.user.UserService userService)
     

    Methods inherited from class de.hybris.platform.spring.security.CoreAuthenticationProvider

    afterPropertiesSet, createSuccessAuthentication, createUser, getPKFromUserDetails, getPreAuthenticationChecks, getUserByLogin, getUserByPK, getUserDetailsService, retrieveUser, setMessageSource, setPreAuthenticationChecks, setUserDetailsService, supports, validateUserDetails

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

  • Constructor Details

    • AbstractAcceleratorAuthenticationProvider

      public AbstractAcceleratorAuthenticationProvider()

  • Method Details

    • authenticate

      public org.springframework.security.core.Authentication authenticate(org.springframework.security.core.Authentication authentication) throws org.springframework.security.core.AuthenticationException
      Specified by:
      authenticate in interface org.springframework.security.authentication.AuthenticationProvider
      Overrides:
      authenticate in class de.hybris.platform.spring.security.CoreAuthenticationProvider
      Throws:
      org.springframework.security.core.AuthenticationException

    • additionalAuthenticationChecks

      protected void additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails details, org.springframework.security.authentication.AbstractAuthenticationToken authentication) throws org.springframework.security.core.AuthenticationException
      Overrides:
      additionalAuthenticationChecks in class de.hybris.platform.spring.security.CoreAuthenticationProvider
      Throws:
      org.springframework.security.core.AuthenticationException
      See Also:
      • CoreAuthenticationProvider.additionalAuthenticationChecks(org.springframework.security.core.userdetails.UserDetails, org.springframework.security.authentication.AbstractAuthenticationToken)

    • checkSiteConsistency

      protected void checkSiteConsistency(org.springframework.security.authentication.AbstractAuthenticationToken authentication)

    • getBruteForceAttackCounter

      protected BruteForceAttackCounter getBruteForceAttackCounter()

    • setBruteForceAttackCounter

      public void setBruteForceAttackCounter(BruteForceAttackCounter bruteForceAttackCounter)

    • getUserService

      protected de.hybris.platform.servicelayer.user.UserService getUserService()

    • setUserService

      public void setUserService(de.hybris.platform.servicelayer.user.UserService userService)

    • getModelService

      protected de.hybris.platform.servicelayer.model.ModelService getModelService()

    • setModelService

      public void setModelService(de.hybris.platform.servicelayer.model.ModelService modelService)

    • getBaseSiteService

      protected de.hybris.platform.site.BaseSiteService getBaseSiteService()

    • setBaseSiteService

      public void setBaseSiteService(de.hybris.platform.site.BaseSiteService baseSiteService)