Package org.opencastproject.kernel.security

Class SystemTokenBasedRememberMeService

java.lang.Object
org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices
org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
org.opencastproject.kernel.security.SystemTokenBasedRememberMeService
All Implemented Interfaces:
org.springframework.beans.factory.Aware, org.springframework.beans.factory.InitializingBean, org.springframework.context.MessageSourceAware, org.springframework.security.web.authentication.logout.LogoutHandler, org.springframework.security.web.authentication.RememberMeServices
public class SystemTokenBasedRememberMeService extends org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices
This implements a zero-configuration version Spring Security's token based remember-me service. While the key can still be augmented by configuration, it is generally generated based on seldom changing but unique system properties like hostname, IP address, file system information and Linux kernel.

  • Field Summary

    Fields inherited from class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

    DEFAULT_PARAMETER, messages, SPRING_SECURITY_REMEMBER_ME_COOKIE_KEY, TWO_WEEKS_S

  • Constructor Summary

    Constructors
    Constructor
    Description
    SystemTokenBasedRememberMeService(String key, org.springframework.security.core.userdetails.UserDetailsService userDetailsService)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    protected String
    makeTokenSignature(long tokenExpiryTime, String username, String password)
    Calculates the digital signature to be put in the cookie.

    Methods inherited from class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices

    calculateLoginLifetime, isTokenExpired, onLoginSuccess, processAutoLoginCookie, retrievePassword, retrieveUserName

    Methods inherited from class org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices

    afterPropertiesSet, autoLogin, cancelCookie, createSuccessfulAuthentication, decodeCookie, encodeCookie, extractRememberMeCookie, getAuthenticationDetailsSource, getCookieName, getKey, getParameter, getTokenValiditySeconds, getUserDetailsService, loginFail, loginSuccess, logout, onLoginFail, rememberMeRequested, setAlwaysRemember, setAuthenticationDetailsSource, setAuthoritiesMapper, setCookie, setCookieDomain, setCookieName, setMessageSource, setParameter, setTokenValiditySeconds, setUserDetailsChecker, setUseSecureCookie

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • SystemTokenBasedRememberMeService

      public SystemTokenBasedRememberMeService(String key, org.springframework.security.core.userdetails.UserDetailsService userDetailsService)

  • Method Details

    • makeTokenSignature

      protected String makeTokenSignature(long tokenExpiryTime, String username, String password)
      Calculates the digital signature to be put in the cookie. Default value is SHA-512 ("username:tokenExpiryTime:password:key")
      Overrides:
      makeTokenSignature in class org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices