# Package org.springframework.security.web

package org.springframework.security.web
Spring Security's web security module. Classes which have a dependency on the Servlet API can be found here.

Related Packages
Package
Description
org.springframework.security.web.access
Access-control related classes and packages.
org.springframework.security.web.authentication
Authentication processing mechanisms, which respond to the submission of authentication credentials using various protocols (eg BASIC, CAS, form login etc).
org.springframework.security.web.context
Classes which are responsible for maintaining the security context between HTTP requests.
org.springframework.security.web.csrf
org.springframework.security.web.debug
org.springframework.security.web.firewall
org.springframework.security.web.header
org.springframework.security.web.http
org.springframework.security.web.jaasapi
Makes a JAAS Subject available as the current Subject.
org.springframework.security.web.jackson2
Mix-in classes to provide Jackson serialization support.
org.springframework.security.web.savedrequest
Classes related to the caching of an `HttpServletRequest` which requires authentication.
org.springframework.security.web.server
org.springframework.security.web.servletapi
Populates a Servlet request with a new Spring Security compliant `HttpServletRequestWrapper`.
org.springframework.security.web.session
Session management filters, `HttpSession` events and publisher classes.
org.springframework.security.web.util
Web utility classes.
Class
Description
AuthenticationEntryPoint
Used by `ExceptionTranslationFilter` to commence an authentication scheme.
DefaultRedirectStrategy
Simple implementation of `RedirectStrategy` which is the default used throughout the framework.
DefaultSecurityFilterChain
Standard implementation of `SecurityFilterChain`.
FilterChainProxy
Delegates `Filter` requests to a list of Spring-managed filter beans.
FilterChainProxy.FilterChainDecorator
A strategy for decorating the provided filter chain with one that accounts for the `SecurityFilterChain` for a given request.
FilterChainProxy.FilterChainValidator
FilterChainProxy.VirtualFilterChainDecorator
A `FilterChainProxy.FilterChainDecorator` that uses the `FilterChainProxy.VirtualFilterChain`
FilterInvocation
Holds objects associated with a HTTP filter.
ObservationFilterChainDecorator
A `FilterChainProxy.FilterChainDecorator` that wraps the chain in before and after observations
PortMapper
`PortMapper` implementations provide callers with information about which HTTP ports are associated with which HTTPS ports on the system, and vice versa.
PortMapperImpl
Concrete implementation of `PortMapper` that obtains HTTP:HTTPS pairs from the application context.
PortResolver
A `PortResolver` determines the port a web request was received on.
PortResolverImpl
Concrete implementation of `PortResolver` that obtains the port from `ServletRequest.getServerPort()`.
RedirectStrategy
Encapsulates the redirection logic for all classes in the framework which perform redirects.
RequestMatcherRedirectFilter
Filter that redirects requests that match `RequestMatcher` to the specified URL.
SecurityFilterChain
Defines a filter chain which is capable of being matched against an `HttpServletRequest`.
WebAttributes
Well-known keys which are used to store Spring Security information in request or session scope.