# Package org.springframework.security.web.authentication.preauth

package org.springframework.security.web.authentication.preauth
Support for "pre-authenticated" scenarios, where Spring Security assumes the incoming request has already been authenticated by some externally configured system.

Related Packages
Package
Description
org.springframework.security.web.authentication
Authentication processing mechanisms, which respond to the submission of authentication credentials using various protocols (eg BASIC, CAS, form login etc).
org.springframework.security.web.authentication.preauth.j2ee
Pre-authentication support for container-authenticated requests.
org.springframework.security.web.authentication.preauth.websphere
Websphere-specific pre-authentication classes.
org.springframework.security.web.authentication.preauth.x509
X.509 client certificate authentication support.
Class
Description
AbstractPreAuthenticatedProcessingFilter
Base class for processing filters that handle pre-authenticated authentication requests, where it is assumed that the principal has already been authenticated by an external system.
PreAuthenticatedAuthenticationProvider
Processes a pre-authenticated authentication request.
PreAuthenticatedAuthenticationToken
`Authentication` implementation for pre-authenticated authentication.
PreAuthenticatedCredentialsNotFoundException
PreAuthenticatedGrantedAuthoritiesUserDetailsService
This AuthenticationUserDetailsService implementation creates a UserDetails object based solely on the information contained in the given PreAuthenticatedAuthenticationToken.
PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails
This WebAuthenticationDetails implementation allows for storing a list of pre-authenticated Granted Authorities.
RequestAttributeAuthenticationFilter
A simple pre-authenticated filter which obtains the username from request attributes, for use with SSO systems such as Stanford WebAuth or Shibboleth.
RequestHeaderAuthenticationFilter
A simple pre-authenticated filter which obtains the username from a request header, for use with systems such as CA Siteminder.