org.springframework.security.ui.ntlm
Class NtlmProcessingFilterEntryPoint

java.lang.Object
  org.springframework.security.ui.ntlm.NtlmProcessingFilterEntryPoint

All Implemented Interfaces:

AuthenticationEntryPoint

public class NtlmProcessingFilterEntryPoint
extends Object
implements AuthenticationEntryPoint

Used by ExceptionTranslationFilter to assist with the NTLM negotiation. Also handles redirecting the user to the authentication failure URL if an AuthenticationException that is not a subclass of NtlmBaseException is received.

Version:

$Id$

Author:

Davide Baroncelli, Edward Smith

Constructor Summary

NtlmProcessingFilterEntryPoint()

Method Summary

void	commence(ServletRequest request, ServletResponse response, AuthenticationException authException) Sends an NTLM challenge to the browser requiring authentication.
void	setAuthenticationFailureUrl(String authenticationFailureUrl) Sets the authentication failure URL.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

NtlmProcessingFilterEntryPoint

public NtlmProcessingFilterEntryPoint()

Method Detail

setAuthenticationFailureUrl

public void setAuthenticationFailureUrl(String authenticationFailureUrl)

Sets the authentication failure URL.

Parameters:

authenticationFailureUrl - the authentication failure URL.

commence

public void commence(ServletRequest request,
                     ServletResponse response,
                     AuthenticationException authException)
              throws IOException,
                     ServletException

Sends an NTLM challenge to the browser requiring authentication. The WWW-Authenticate header is populated with the appropriate information during the negotiation lifecycle by calling the getMessage() method from an NTLM-specific subclass of NtlmBaseException:

• NtlmBeginHandshakeException: NTLM
• NtlmType2MessageException: NTLM <base64-encoded type-2-message>

If the AuthenticationException is not a subclass of NtlmBaseException, then redirect the user to the authentication failure URL.

Specified by:

commence in interface AuthenticationEntryPoint

Parameters:

request - The HttpServletRequest object.

response - Then HttpServletResponse object.

authException - Either NtlmBeginHandshakeException, NtlmType2MessageException, or AuthenticationException

Throws:

IOException

ServletException