Java Reference
In-Depth Information
as user identity and roles. It then invokes the next filter in the chain. Once the control
returns, SCIF puts the security context back on to the HTTP session and clears the tem-
porary placeholder. Listing 6-4 shows the SCIF configuration.
Listing 6-4.
applicationContext-security.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN"
<beans>
<!—Other beans -->
<bean id="httpSessionContextIntegrationFilter"
class="org.springframework.security.context.HttpSessionContextIntegrationFilter"/>
</beans>
Authentication Processing Filter (APF)
The primary responsibility of APF is to authenticate a user's identity. Several such filters
are available with Spring, as shown in the class diagram in Figure 6-4.
Figure 6-4.
Class diagram: authentication processing filter
