Class AuthenticationFilter

  • All Implemented Interfaces:
    Filter

    public class AuthenticationFilter
    extends Object
    implements Filter
    Filter that do authentication handling on requests done to the portal.

    This filter tries to obtain a SessionConfig to the authenticated user and place it available in the current thread. The following rules are applied when trying to obtain a SessionConfig:

    1. Tries to recover the current SessionConfig from HttpSession. This session id is verified against the cookie corresponding id, if any.
    2. Tries to recreate the SessionConfig using the request cookies.
    3. If the SessionConfig has expired, it is discarded.
    4. If no suitable SessionConfig was obtained, a guest session is created.
    Since:
    4.0.7
    Version:
    $Revision: 24202 $ $Date: 2020-10-26 12:33:52 -0300 (Mon, 26 Oct 2020) $