Package org.apache.ofbiz.base.util

Class CacheFilter

  • All Implemented Interfaces:
    javax.servlet.Filter
    public class CacheFilter
extends java.lang.Object
implements javax.servlet.Filter

    • Constructor Summary

      Constructors 
      Constructor Description
      CacheFilter()  

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      void destroy()
      Called by the web container to indicate to a filter that it is being taken out of service.
      void doFilter​(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
      The doFilter method of the Filter is called by the container each time a request/response pair is passed through the chain due to a client request for a resource at the end of the chain.
      javax.servlet.FilterConfig getFilterConfig()  
      void init​(javax.servlet.FilterConfig filterConfiguration)
      Called by the web container to indicate to a filter that it is being placed into service.
      void setFilterConfig​(javax.servlet.FilterConfig filterConfig)  

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • CacheFilter

        public CacheFilter()

    • Method Detail

      • doFilter

        public void doFilter​(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws java.io.IOException,
                     javax.servlet.ServletException
        The doFilter method of the Filter is called by the container each time a request/response pair is passed through the chain due to a client request for a resource at the end of the chain. The FilterChain passed in to this method allows the Filter to pass on the request and response to the next entity in the chain.

        A typical implementation of this method would follow the following pattern:-
        1. Examine the request
        2. Optionally wrap the request object with a custom implementation to filter content or headers for input filtering
        3. Optionally wrap the response object with a custom implementation to filter content or headers for output filtering
        4. a) Either invoke the next entity in the chain using the FilterChain object (chain.doFilter()),
        4. b) or not pass on the request/response pair to the next entity in the filter chain to block the request processing
        5. Directly set headers on the response after invocation of the next entity in the filter chain.

        ----------------------------------------------------------------------------------------------------
        Actually its goal in OFBiz is simply to prevent a post-auth security issue described in OFBIZ-12332
        ----------------------------------------------------------------------------------------------------

        Specified by:
        doFilter in interface javax.servlet.Filter
        Parameters:
        request - The request to process
        response - The response associated with the request
        chain - Provides access to the next filter in the chain for this filter to pass the request and response to for further processing
        Throws:
        java.io.IOException - if an I/O error occurs during this filter's processing of the request
        javax.servlet.ServletException - if the processing fails for any other reason

      • init

        public void init​(javax.servlet.FilterConfig filterConfiguration)
          throws javax.servlet.ServletException
        Called by the web container to indicate to a filter that it is being placed into service. The servlet container calls the init method exactly once after instantiating the filter. The init method must complete successfully before the filter is asked to do any filtering work.

        The web container cannot place the filter into service if the init method either:

        • Throws a ServletException
        • Does not return within a time period defined by the web container
        The default implementation is a NO-OP.
        Specified by:
        init in interface javax.servlet.Filter
        Parameters:
        filterConfiguration - The configuration information associated with the filter instance being initialised
        Throws:
        javax.servlet.ServletException - if the initialisation fails

      • destroy

        public void destroy()
        Called by the web container to indicate to a filter that it is being taken out of service. This method is only called once all threads within the filter's doFilter method have exited or after a timeout period has passed. After the web container calls this method, it will not call the doFilter method again on this instance of the filter.

        This method gives the filter an opportunity to clean up any resources that are being held (for example, memory, file handles, threads) and make sure that any persistent state is synchronized with the filter's current state in memory. The default implementation is a NO-OP.
        Specified by:
        destroy in interface javax.servlet.Filter

      • getFilterConfig

        public javax.servlet.FilterConfig getFilterConfig()
        Returns:
        the filterConfig

      • setFilterConfig

        public void setFilterConfig​(javax.servlet.FilterConfig filterConfig)
        Parameters:
        filterConfig - the filterConfig to set