Package jetbrains.buildServer.controllers.interceptors.auth

Interface HttpAuthenticationManager

All Known Implementing Classes:

HttpAuthenticationManagerImpl

public interface HttpAuthenticationManager

Author:

Maxim.Manuylov Date: 4/11/12

Method Summary

Modifier and Type	Method	Description
HttpAuthenticationResult	processAuthenticationRequest(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, boolean canRedirect)	Contract: if canRedirect is false, then <return value>.getRedirectUrl() is null.
void	processUnauthenticatedRequest(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, String reason, boolean canRedirect)
boolean	shouldNotTryToReauthenticate(javax.servlet.http.HttpServletRequest request)	TW-35022 Skip authentication of request if there's no session or no user in session.

Method Detail

processAuthenticationRequest

@NotNull
HttpAuthenticationResult processAuthenticationRequest(@NotNull
                                                      javax.servlet.http.HttpServletRequest request,
                                                      @NotNull
                                                      javax.servlet.http.HttpServletResponse response,
                                                      boolean canRedirect)
                                               throws IOException

Contract: if canRedirect is false, then <return value>.getRedirectUrl() is null.

Throws:

IOException

processUnauthenticatedRequest

void processUnauthenticatedRequest(@NotNull
                                   javax.servlet.http.HttpServletRequest request,
                                   @NotNull
                                   javax.servlet.http.HttpServletResponse response,
                                   @Nullable
                                   String reason,
                                   boolean canRedirect)
                            throws IOException

Throws:

IOException

shouldNotTryToReauthenticate

boolean shouldNotTryToReauthenticate(@NotNull
                                     javax.servlet.http.HttpServletRequest request)

TW-35022 Skip authentication of request if there's no session or no user in session. Generally we don't reauthenticate ajax and websocket upgrade requests. Some authentication schemes however have specific behaviour and may allow to try to reauthenticate ajax requests.

Parameters:

request - HttpServletRequest

Returns:

true when server should respond with unauthorized without trying to reauthenticate