Interface RequestSecurityManager
- All Known Implementing Classes:
RequestSecurityManagerImpl
public interface RequestSecurityManager
Used to manage the relationship between the security of a request and the security of a page. By secure, we mean
whether a request uses HTTPS and whether a page demands the use of HTTPS.
- See Also:
-
Method Summary
Modifier and TypeMethodDescriptionboolean
Checks the target page of the component event request to see if it is secure; if so, and the request is not secure, then a redirect to the page is generated and sent, preserving the original component event request.boolean
Checks the page to see if it is secure; if so, and the request is not secure, then a redirect to the page is generated and sent.checkPageSecurity
(String pageName) Determines if the page security does not match the request's security.
-
Method Details
-
checkForInsecurePageRenderRequest
boolean checkForInsecurePageRenderRequest(PageRenderRequestParameters parameters) throws IOException Checks the page to see if it is secure; if so, and the request is not secure, then a redirect to the page is generated and sent.- Parameters:
parameters
- parameters for the current request- Returns:
- true if a redirect was sent, false if normal processing should continue
- Throws:
IOException
-
checkForInsecureComponentEventRequest
boolean checkForInsecureComponentEventRequest(ComponentEventRequestParameters parameters) throws IOException Checks the target page of the component event request to see if it is secure; if so, and the request is not secure, then a redirect to the page is generated and sent, preserving the original component event request.- Parameters:
parameters
- parameters for the current request- Returns:
- true if a redirect was sent, false if normal processing should continue
- Throws:
IOException
- Since:
- 5.2.0.0
-
checkPageSecurity
Determines if the page security does not match the request's security. ReturnsLinkSecurity.SECURE
orLinkSecurity.INSECURE
if the request security matches the pages. Otherwise, returnsLinkSecurity.FORCE_SECURE
orLinkSecurity.FORCE_INSECURE
(which will force fully qualified URLs to be generated when rendering).- Parameters:
pageName
- for the security check- Returns:
- security for this request, as applied to indicated page
-