Package dev.relism.flash.ext.security.form

Class FormLoginExtension

java.lang.Object

dev.relism.flash.ext.security.form.FormLoginExtension

All Implemented Interfaces:

dev.relism.flash.extension.FlashExtension

public final class FormLoginExtension
extends Object
implements dev.relism.flash.extension.FlashExtension

Password sign-in: POST /auth/form/login with username and password form-encoded — what an HTML form sends, and what fetch sends given URLSearchParams. Success starts a session and answers 303 to redirect (same-origin paths only) or /; failure is a 401, identical for an unknown account and a wrong password.

 app.install(new SecurityExtension())
    .install(new FormLoginExtension(accounts::byUsername));
 

Rate-limit the route with flash-ext-limiter; this extension does not.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	LOGIN

Constructor Summary

Constructors

Constructor	Description
FormLoginExtension(PasswordStore store)

Method Summary

Modifier and Type	Method	Description
void	configure(dev.relism.flash.extension.FlashRegistrar<?> app, dev.relism.flash.extension.FlashContext ctx)
FormLoginExtension	passwordEncoder(PasswordEncoder encoder)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOGIN

public static final String LOGIN

See Also:

• Constant Field Values

Constructor Details

FormLoginExtension

public FormLoginExtension(PasswordStore store)

Method Details

passwordEncoder

public FormLoginExtension passwordEncoder(PasswordEncoder encoder)

configure

public void configure(dev.relism.flash.extension.FlashRegistrar<?> app,
 dev.relism.flash.extension.FlashContext ctx)

Specified by:

configure in interface dev.relism.flash.extension.FlashExtension