Package com.mindstore.backend.security

Class JwtAuthenticationFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

org.springframework.web.filter.OncePerRequestFilter

com.mindstore.backend.security.JwtAuthenticationFilter

All Implemented Interfaces:

jakarta.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.core.env.EnvironmentCapable, org.springframework.web.context.ServletContextAware

@Component
public class JwtAuthenticationFilter
extends org.springframework.web.filter.OncePerRequestFilter

Jwt Authentication Filter component

Field Summary

Fields inherited from class org.springframework.web.filter.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor	Description
JwtAuthenticationFilter(JwtService jwtService, org.springframework.security.core.userdetails.UserDetailsService userDetailsService)	Jwt main filter component

Method Summary

Modifier and Type	Method	Description
protected void	doFilterInternal(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.FilterChain filterChain)	function: checks the paths that need to be filtered for spring security, then checks if some kind of authorization is present - token, cookie if a username can be found, their authority is checked if a token is found, the token validity is checked if those checks pass, the authentication is "passed"

Methods inherited from class org.springframework.web.filter.OncePerRequestFilter

doFilter, doFilterNestedErrorDispatch, getAlreadyFilteredAttributeName, isAsyncDispatch, isAsyncStarted, shouldNotFilter, shouldNotFilterAsyncDispatch, shouldNotFilterErrorDispatch

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, afterPropertiesSet, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JwtAuthenticationFilter

public JwtAuthenticationFilter(JwtService jwtService,
 org.springframework.security.core.userdetails.UserDetailsService userDetailsService)

Jwt main filter component

Parameters:

jwtService - holds functions for jwt

userDetailsService - lets you manipulate user details

Method Details

doFilterInternal

protected void doFilterInternal(@NonNull
 jakarta.servlet.http.HttpServletRequest request,
 @NonNull
 jakarta.servlet.http.HttpServletResponse response,
 @NonNull
 jakarta.servlet.FilterChain filterChain)
                         throws jakarta.servlet.ServletException,
IOException

function: checks the paths that need to be filtered for spring security, then checks if some kind of authorization is present - token, cookie if a username can be found, their authority is checked if a token is found, the token validity is checked if those checks pass, the authentication is "passed"

Specified by:

doFilterInternal in class org.springframework.web.filter.OncePerRequestFilter

Parameters:

request - the path requested

response - the extended response

filterChain - the jakarta filter chain

Throws:

jakarta.servlet.ServletException - on filterChain error

IOException - when the request is unauthorized