Processes a HTTP request's Digest authorization headers, putting the result into the
SecurityContextHolder.For a detailed background on what this filter is designed to process,
refer to RFC 2617 (which superseded RFC 2069, although this
filter support clients that implement either RFC 2617 or RFC 2069).
This filter can be used to provide Digest authentication services to both remoting protocol clients (such as
Hessian and SOAP) as well as standard user agents (such as Internet Explorer and FireFox).
This Digest implementation has been designed to avoid needing to store session state between invocations.
All session management information is stored in the "nonce" that is sent to the client by the
DigestProcessingFilterEntryPoint .
If authentication is successful, the resulting
org.acegisecurity.Authentication Authentication object will be placed into the SecurityContextHolder.
If authentication fails, an
org.acegisecurity.ui.AuthenticationEntryPoint AuthenticationEntryPoint implementation is called. |