org.jboss.web.tomcat.security
Class SecurityAssociationValve

java.lang.Object
  extended byValveBase
      extended byorg.jboss.web.tomcat.security.SecurityAssociationValve

public class SecurityAssociationValve
extends ValveBase

A Valve that sets/clears the SecurityAssociation information associated with the request thread for identity propagation.

See Also:
Serialized Form

Field Summary
static java.lang.ThreadLocal userPrincipal
           
 
Constructor Summary
SecurityAssociationValve(WebMetaData (src)  metaData, JaasSecurityManagerServiceMBean (src)  secMgrService)
           
 
Method Summary
 void invoke(Request request, Response response)
           
 void setSubjectAttributeName(java.lang.String subjectAttributeName)
          The name of the request attribute under with the authenticated JAAS Subject is stored on successful authentication.
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

userPrincipal

public static java.lang.ThreadLocal userPrincipal
Constructor Detail

SecurityAssociationValve

public SecurityAssociationValve(WebMetaData (src)  metaData,
                                JaasSecurityManagerServiceMBean (src)  secMgrService)
Method Detail

setSubjectAttributeName

public void setSubjectAttributeName(java.lang.String subjectAttributeName)
The name of the request attribute under with the authenticated JAAS Subject is stored on successful authentication. If null or empty then the Subject will not be stored.


invoke

public void invoke(Request request,
                   Response response)
            throws java.io.IOException,
                   ServletException
Throws:
java.io.IOException
ServletException