@Singleton @Replaces(value=HttpStatusCodeRejectionHandler.class) public class SessionSecurityfilterRejectionHandler extends Object implements RejectionHandler
RejectionHandler implementation for Session-based Authentication.| Modifier and Type | Field and Description |
|---|---|
protected SecuritySessionConfiguration |
securitySessionConfiguration |
| Constructor and Description |
|---|
SessionSecurityfilterRejectionHandler(SecuritySessionConfiguration securitySessionConfiguration)
Constructor.
|
| Modifier and Type | Method and Description |
|---|---|
Publisher<MutableHttpResponse<?>> |
reject(HttpRequest<?> request,
boolean forbidden)
If request is HTML then do a 303 Redirect, if not respond with correspondent HTTP Status code.
|
protected final SecuritySessionConfiguration securitySessionConfiguration
public SessionSecurityfilterRejectionHandler(SecuritySessionConfiguration securitySessionConfiguration)
securitySessionConfiguration - Security Session Configuration session storepublic Publisher<MutableHttpResponse<?>> reject(HttpRequest<?> request, boolean forbidden)
reject in interface RejectionHandlerrequest - HttpRequest being processedforbidden - if true indicates that although the user was authenticated he did not had the necessary access priviledges.