au.org.ala.cas.client

Class AlaHttpServletRequestWrapperFilter

java.lang.Object

org.jasig.cas.client.util.AbstractConfigurationFilter

au.org.ala.cas.client.AlaHttpServletRequestWrapperFilter

All Implemented Interfaces:

javax.servlet.Filter

public class AlaHttpServletRequestWrapperFilter
extends org.jasig.cas.client.util.AbstractConfigurationFilter

Implementation of a filter that wraps the normal HttpServletRequest with a wrapper that overrides the following methods to provide data from the CAS Assertion:

• HttpServletRequest.getUserPrincipal()
• HttpServletRequest.getRemoteUser()
• HttpServletRequest.isUserInRole(String)

This filter needs to be configured in the chain so that it executes after both the authentication and the validation filters.

This code has been shamelessly copied from HttpServletRequestWrapperFilter since that class is final and cannot be extended.

Only the isUserInRole() needed to be overridden to accommodate a csv list of roles in the returned user attributes. This wrapper also supports a list of roles.

Author:

peter.flemming@csiro.au, simon.bear@csiro.au

Field Summary

Fields inherited from class org.jasig.cas.client.util.AbstractConfigurationFilter

logger

Constructor Summary

Constructors

Constructor and Description
AlaHttpServletRequestWrapperFilter()

Method Summary

Methods

Modifier and Type	Method and Description
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain filterChain) Wraps the HttpServletRequest in a wrapper class that delegates request.getRemoteUser to the underlying Assertion object stored in the user session.
void	init(javax.servlet.FilterConfig filterConfig)
protected org.jasig.cas.client.authentication.AttributePrincipal	retrievePrincipalFromSessionOrRequest(javax.servlet.ServletRequest servletRequest)

Methods inherited from class org.jasig.cas.client.util.AbstractConfigurationFilter

getBoolean, getClass, getInt, getLong, getString, isIgnoreInitConfiguration, setIgnoreInitConfiguration

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AlaHttpServletRequestWrapperFilter

public AlaHttpServletRequestWrapperFilter()

Method Detail

destroy

public void destroy()

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
            javax.servlet.ServletResponse servletResponse,
            javax.servlet.FilterChain filterChain)
              throws IOException,
                     javax.servlet.ServletException

Wraps the HttpServletRequest in a wrapper class that delegates request.getRemoteUser to the underlying Assertion object stored in the user session.

Throws:

IOException

javax.servlet.ServletException

retrievePrincipalFromSessionOrRequest

protected org.jasig.cas.client.authentication.AttributePrincipal retrievePrincipalFromSessionOrRequest(javax.servlet.ServletRequest servletRequest)

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Overrides:

init in class org.jasig.cas.client.util.AbstractConfigurationFilter

Throws:

javax.servlet.ServletException