org.jsecurity.web.config
Interface WebConfiguration

All Superinterfaces:

Configuration, SecurityManagerFactory

All Known Implementing Classes:

IniWebConfiguration, SpringIniWebConfiguration

public interface WebConfiguration
extends Configuration

A WebConfiguration configures JSecurity components in a web-enabled application.

In addition to enabling configuration of a SecurityManager, as required by the parent interface, it also allows configuration of arbitrary filter chains to be executed for any given request or URI/URL.

This is incredibly powerful and much more flexible than normal servlet filter definitions or Servlet security: it allows arbitrary filter chains to be defined per URL in a much more concise and easy to read manner, and even allows filter chains to be dynamically resolved or construtected at runtime if the underlying implementation supports it.

Since:

Jun 1, 2008 11:13:32 PM

Author:

Les Hazlewood

Method Summary

FilterChain

getChain(ServletRequest request, ServletResponse response, FilterChain originalChain) Returns the filter chain that should be executed for the given request, or null if the original chain should be used.

Methods inherited from interface org.jsecurity.mgt.SecurityManagerFactory

getSecurityManager

Method Detail

getChain

FilterChain getChain(ServletRequest request,
                     ServletResponse response,
                     FilterChain originalChain)

Returns the filter chain that should be executed for the given request, or null if the original chain should be used.

This method allows a Configuration implementation to define arbitrary security Filter chains for any given request or URL pattern.

Parameters:

request - the incoming ServletRequest

response - the outgoing ServletResponse

originalChain - the original FilterChain intercepted by the JSecurityFilter.

Returns:

the filter chain that should be executed for the given request, or null if the original chain should be used.