public class SslFilter extends PortFilter
port and the
request.isSecure(). If either condition is false,
the filter chain will not continue.
The port property defaults to 443 and also additionally guarantees that the
request scheme is always 'https' (except for port 80, which retains the 'http' scheme).
Example config:
[urls] /secure/path/** = ssl
| Modifier and Type | Field and Description |
|---|---|
static int |
DEFAULT_HTTPS_PORT |
static String |
HTTPS_SCHEME |
DEFAULT_HTTP_PORT, HTTP_SCHEMEDEFAULT_LOGIN_URL, GET_METHOD, POST_METHODappliedPaths, pathMatcherALREADY_FILTERED_SUFFIXfilterConfig| Constructor and Description |
|---|
SslFilter() |
| Modifier and Type | Method and Description |
|---|---|
protected String |
getScheme(String requestScheme,
int port) |
protected boolean |
isAccessAllowed(javax.servlet.ServletRequest request,
javax.servlet.ServletResponse response,
Object mappedValue)
Retains the parent method's port-matching behavior but additionally guarantees that the
ServletRequest. |
getPort, onAccessDenied, setPort, toPortgetUnauthorizedUrl, onAccessDenied, setUnauthorizedUrlgetLoginUrl, getSubject, isLoginRequest, onPreHandle, redirectToLogin, saveRequest, saveRequestAndRedirectToLogin, setLoginUrlgetPathWithinApplication, isEnabled, pathsMatch, pathsMatch, preHandle, processPathConfigafterCompletion, cleanup, doFilterInternal, executeChain, postHandledoFilter, getAlreadyFilteredAttributeName, isEnabled, isEnabled, setEnabled, shouldNotFiltergetName, setName, toStringBuilderdestroy, getFilterConfig, getInitParam, init, onFilterConfigSet, setFilterConfiggetContextAttribute, getContextInitParam, getServletContext, removeContextAttribute, setContextAttribute, setServletContext, toStringpublic static final int DEFAULT_HTTPS_PORT
public static final String HTTPS_SCHEME
public SslFilter()
protected String getScheme(String requestScheme, int port)
getScheme in class PortFilterprotected boolean isAccessAllowed(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, Object mappedValue) throws Exception
ServletRequest.isSecure(). If the port does not match or
the request is not secure, access is denied.isAccessAllowed in class PortFilterrequest - the incoming ServletRequestresponse - the outgoing ServletResponse - ignored in this implementationmappedValue - the filter-specific config value mapped to this filter in the URL rules mappings - ignored by this implementation.true if the request is received on an expected SSL port and the
request.isSecure(), false otherwise.Exception - if the call to super.isAccessAllowed throws an exception.Copyright © 2004–2019 The Apache Software Foundation. All rights reserved.