Package com.sonymobile.jenkins.plugins.kerberossso

Class KerberosPreCrumbAuthentication

java.lang.Object

hudson.security.csrf.CrumbExclusion

com.sonymobile.jenkins.plugins.kerberossso.KerberosPreCrumbAuthentication

All Implemented Interfaces:

ExtensionPoint

@Extension(ordinal=-100.0)
public class KerberosPreCrumbAuthentication
extends CrumbExclusion

Establishes request authentication before Jenkins validates a POST's crumb. Core runs CrumbFilter before PluginServletFilter, so a per-request machine identity would otherwise be anonymous at validation time. CrumbExclusion is the pre-validation callback: despite its name, this extension never exempts an authenticated request from CSRF checks. It returns false after authentication so core validates the crumb normally. It only returns true when negotiation has already handled the response, without invoking the downstream chain. Ordered last so a genuine exclusion, such as a webhook endpoint another plugin exempts, decides first. Marks the request so KerberosSSOFilter does not negotiate it again once PluginServletFilter is reached.

Nested Class Summary

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

ExtensionPoint.LegacyInstancesAreScopedToHudson

Constructor Summary

Constructors

Constructor	Description
KerberosPreCrumbAuthentication()

Method Summary

Modifier and Type	Method	Description
boolean	process(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, jakarta.servlet.FilterChain chain)

Methods inherited from class hudson.security.csrf.CrumbExclusion

all, process

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

KerberosPreCrumbAuthentication

public KerberosPreCrumbAuthentication()

Method Details

process

public boolean process(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 jakarta.servlet.FilterChain chain)
                throws IOException,
jakarta.servlet.ServletException

Overrides:

process in class CrumbExclusion

Throws:

IOException

jakarta.servlet.ServletException