Package com.emc.documentum.rest.context.jc

Class AbstractLogoutWebSecurity

java.lang.Object
com.emc.documentum.rest.context.jc.AbstractWebSecurity
com.emc.documentum.rest.context.jc.AbstractLogoutWebSecurity
All Implemented Interfaces:
org.springframework.beans.factory.InitializingBean
@Configuration public abstract class AbstractLogoutWebSecurity extends AbstractWebSecurity
Provides a convenient base class for creating a customize Documentum REST Services logout authentication scheme. The implementation allows customization by overriding methods. The implementation can be made conditional when it is annotated by AuthSchemeProfile.
See Also:

  • Constructor Details

  • Method Details

    • setLogoutUrl

      protected void setLogoutUrl(String logoutUrl)
      Configures the logout URL. Defaults to DefaultSecurityRuntime.logoutUrl.
      Parameters:
      logoutUrl - the logout URL

    • setLogoutSuccessUrl

      protected void setLogoutSuccessUrl(String logoutSuccessUrl)
      Configures the logout success redirect URL. Defaults to DefaultSecurityRuntime.logoutSuccessUrl.
      Parameters:
      logoutSuccessUrl - the logout success URL

    • afterPropertiesSet

      public void afterPropertiesSet() throws Exception
      Description copied from class: AbstractWebSecurity
      Set properties after the bean initialization. The overriding method in subclasses must call "super.afterPropertiesSet()" before its own properties setting.
      Specified by:
      afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean
      Overrides:
      afterPropertiesSet in class AbstractWebSecurity
      Throws:
      Exception - for properties setting errors

    • authenticationProviders

      protected org.springframework.security.authentication.AuthenticationProvider[] authenticationProviders()
      Return client token authentication provider by default.
      Specified by:
      authenticationProviders in class AbstractWebSecurity
      Returns:
      client token authentication provider

    • entryPoint

      protected org.springframework.security.web.AuthenticationEntryPoint entryPoint()
      No entry point is required by default.
      Specified by:
      entryPoint in class AbstractWebSecurity
      Returns:
      null

    • configure

      public void configure(org.springframework.security.config.annotation.web.builders.WebSecurity web)
      No customization is required for the web security.
      Overrides:
      configure in class AbstractWebSecurity
      Parameters:
      web - the web security

    • configureSecurityFilters

      protected void configureSecurityFilters(org.springframework.security.config.annotation.web.builders.HttpSecurity http) throws Exception
      Configures the HTTP security for the custom logout. Fundamental security configurations are applied to the input HTTP security. The implementation can completely override this method with Spring security guide, but to be noted that all fundamental security configurations provided by Documentum REST Services are lost in the overriding method. So it is not suggested to override this method in a custom authentication unless you are fully aware of the security internals.
      Specified by:
      configureSecurityFilters in class AbstractWebSecurity
      Parameters:
      http - the customized HTTP security
      Throws:
      Exception - when there are configuration errors

    • interceptUrl

      protected org.springframework.security.config.annotation.web.builders.HttpSecurity interceptUrl(org.springframework.security.config.annotation.web.builders.HttpSecurity http) throws Exception
      Configures the URL pattern for the HTTP security from setLogoutUrl(String).
      Overrides:
      interceptUrl in class AbstractWebSecurity
      Parameters:
      http - HTTP security configuration
      Returns:
      the customized HTTP security
      Throws:
      Exception - when there are configuration errors

    • logoutHandlers

      protected List<org.springframework.security.web.authentication.logout.LogoutHandler> logoutHandlers()
      Configures the handlers to implement things while logging out. By overriding this method, subclass can customize its own handlers for logout.
      Returns:
      the list of LogoutHandler