SEC-974: Made getExceptionMappings() protected.

This commit is contained in:
Luke Taylor 2008-10-01 16:25:20 +00:00
parent af3c77f56f
commit 97381fb448

View File

@ -228,7 +228,7 @@ public abstract class AbstractProcessingFilter extends SpringSecurityFilter impl
Assert.notNull(targetUrlResolver, "targetUrlResolver cannot be null"); Assert.notNull(targetUrlResolver, "targetUrlResolver cannot be null");
if (rememberMeServices == null) { if (rememberMeServices == null) {
rememberMeServices = new NullRememberMeServices(); rememberMeServices = new NullRememberMeServices();
} }
} }
@ -279,7 +279,7 @@ public abstract class AbstractProcessingFilter extends SpringSecurityFilter impl
} }
public static String obtainFullSavedRequestUrl(HttpServletRequest request) { public static String obtainFullSavedRequestUrl(HttpServletRequest request) {
SavedRequest savedRequest = getSavedRequest(request); SavedRequest savedRequest = getSavedRequest(request);
return savedRequest == null ? null : savedRequest.getFullRequestUrl(); return savedRequest == null ? null : savedRequest.getFullRequestUrl();
} }
@ -293,8 +293,8 @@ public abstract class AbstractProcessingFilter extends SpringSecurityFilter impl
SavedRequest savedRequest = (SavedRequest) session.getAttribute(SPRING_SECURITY_SAVED_REQUEST_KEY); SavedRequest savedRequest = (SavedRequest) session.getAttribute(SPRING_SECURITY_SAVED_REQUEST_KEY);
return savedRequest; return savedRequest;
} }
protected void onPreAuthentication(HttpServletRequest request, HttpServletResponse response) protected void onPreAuthentication(HttpServletRequest request, HttpServletResponse response)
throws AuthenticationException, IOException { throws AuthenticationException, IOException {
@ -388,8 +388,8 @@ public abstract class AbstractProcessingFilter extends SpringSecurityFilter impl
protected String determineTargetUrl(HttpServletRequest request) { protected String determineTargetUrl(HttpServletRequest request) {
// Don't attempt to obtain the url from the saved request if alwaysUsedefaultTargetUrl is set // Don't attempt to obtain the url from the saved request if alwaysUsedefaultTargetUrl is set
String targetUrl = alwaysUseDefaultTargetUrl ? null : String targetUrl = alwaysUseDefaultTargetUrl ? null :
targetUrlResolver.determineTargetUrl(getSavedRequest(request), request, SecurityContextHolder.getContext().getAuthentication()); targetUrlResolver.determineTargetUrl(getSavedRequest(request), request, SecurityContextHolder.getContext().getAuthentication());
if (targetUrl == null) { if (targetUrl == null) {
targetUrl = getDefaultTargetUrl(); targetUrl = getDefaultTargetUrl();
@ -427,11 +427,11 @@ public abstract class AbstractProcessingFilter extends SpringSecurityFilter impl
rememberMeServices.loginFail(request, response); rememberMeServices.loginFail(request, response);
if (failureUrl == null) { if (failureUrl == null) {
response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Authentication Failed:" + failed.getMessage()); response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Authentication Failed:" + failed.getMessage());
} else if (serverSideRedirect){ } else if (serverSideRedirect){
request.getRequestDispatcher(failureUrl).forward(request, response); request.getRequestDispatcher(failureUrl).forward(request, response);
} else { } else {
sendRedirect(request, response, failureUrl); sendRedirect(request, response, failureUrl);
} }
} }
@ -482,7 +482,7 @@ public abstract class AbstractProcessingFilter extends SpringSecurityFilter impl
this.defaultTargetUrl = defaultTargetUrl; this.defaultTargetUrl = defaultTargetUrl;
} }
Properties getExceptionMappings() { protected Properties getExceptionMappings() {
return new Properties(exceptionMappings); return new Properties(exceptionMappings);
} }
@ -556,33 +556,33 @@ public abstract class AbstractProcessingFilter extends SpringSecurityFilter impl
this.allowSessionCreation = allowSessionCreation; this.allowSessionCreation = allowSessionCreation;
} }
/** /**
* @return the targetUrlResolver * @return the targetUrlResolver
*/ */
protected TargetUrlResolver getTargetUrlResolver() { protected TargetUrlResolver getTargetUrlResolver() {
return targetUrlResolver; return targetUrlResolver;
} }
/** /**
* @param targetUrlResolver the targetUrlResolver to set * @param targetUrlResolver the targetUrlResolver to set
*/ */
public void setTargetUrlResolver(TargetUrlResolver targetUrlResolver) { public void setTargetUrlResolver(TargetUrlResolver targetUrlResolver) {
this.targetUrlResolver = targetUrlResolver; this.targetUrlResolver = targetUrlResolver;
} }
/** /**
* Tells if we are to do a server side include of the error URL instead of a 302 redirect. * Tells if we are to do a server side include of the error URL instead of a 302 redirect.
* *
* @param serverSideRedirect * @param serverSideRedirect
*/ */
public void setServerSideRedirect(boolean serverSideRedirect) { public void setServerSideRedirect(boolean serverSideRedirect) {
this.serverSideRedirect = serverSideRedirect; this.serverSideRedirect = serverSideRedirect;
} }
/** /**
* The session registry needs to be set if session fixation attack protection is in use (and concurrent * The session registry needs to be set if session fixation attack protection is in use (and concurrent
* session control is enabled). * session control is enabled).
*/ */
public void setSessionRegistry(SessionRegistry sessionRegistry) { public void setSessionRegistry(SessionRegistry sessionRegistry) {
this.sessionRegistry = sessionRegistry; this.sessionRegistry = sessionRegistry;
} }