org.jenkinsci.plugins.cas.spring.security

Class CasSessionFixationProtectionStrategy

java.lang.Object

org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy

org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy

org.jenkinsci.plugins.cas.spring.security.CasSessionFixationProtectionStrategy

All Implemented Interfaces:

org.springframework.beans.factory.Aware, org.springframework.context.ApplicationEventPublisherAware, org.springframework.security.web.authentication.session.SessionAuthenticationStrategy

public class CasSessionFixationProtectionStrategy
extends org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy

Session fixation protection strategy that invalidates the existing session and integrates with the Single Sign-Out session mapping storage.

Author:

Fabien Crespel

Nested Class Summary

Nested classes/interfaces inherited from class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy

org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy.NullEventPublisher

Field Summary

Fields

Modifier and Type	Field and Description
protected org.jasig.cas.client.session.SessionMappingStorage	sessionStorage

Fields inherited from class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy

logger

Constructor Summary

Constructors

Constructor and Description
CasSessionFixationProtectionStrategy()
CasSessionFixationProtectionStrategy(org.jasig.cas.client.session.SessionMappingStorage sessionStorage)

Method Summary

Modifier and Type	Method and Description
org.jasig.cas.client.session.SessionMappingStorage	getSessionStorage()
protected void	onSessionChange(String originalSessionId, javax.servlet.http.HttpSession newSession, org.springframework.security.core.Authentication auth)
void	setSessionStorage(org.jasig.cas.client.session.SessionMappingStorage sessionStorage)

Methods inherited from class org.springframework.security.web.authentication.session.SessionFixationProtectionStrategy

extractAttributes, setMigrateSessionAttributes

Methods inherited from class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy

onAuthentication, setAlwaysCreateSession, setApplicationEventPublisher

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

sessionStorage

protected org.jasig.cas.client.session.SessionMappingStorage sessionStorage

Constructor Detail

CasSessionFixationProtectionStrategy

public CasSessionFixationProtectionStrategy()

CasSessionFixationProtectionStrategy

public CasSessionFixationProtectionStrategy(org.jasig.cas.client.session.SessionMappingStorage sessionStorage)

Method Detail

onSessionChange

protected void onSessionChange(String originalSessionId,
                               javax.servlet.http.HttpSession newSession,
                               org.springframework.security.core.Authentication auth)

Overrides:

onSessionChange in class org.springframework.security.web.authentication.session.AbstractSessionFixationProtectionStrategy

getSessionStorage

public org.jasig.cas.client.session.SessionMappingStorage getSessionStorage()

setSessionStorage

public void setSessionStorage(org.jasig.cas.client.session.SessionMappingStorage sessionStorage)