Upgrande spring-security 2 to 3.0.5

[Thalys de Aguiar Gomes]

Hello everybody

I'm doing an upgrade from the spring-security-3.0.5 and I had a class here:

package com.cardif.acsele.interfaces.web.shared.security;

import java.io.IOException;
import java.security.Principal;
import java.util.ArrayList;
import java.util.Collections;
import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.security.Authentication;
import org.springframework.security.AuthenticationException;
import org.springframework.security.GrantedAuthority;
import org.springframework.security.ui.webapp.AuthenticationProcessingFilter;

import com.cardif.acsele.domain.security.user.model.User;
import com.cardif.acsele.infrastructure.security.UserWrapper;
import com.cardif.acsele.interfaces.web.claim.data.user.UserAssembler;
import com.cardif.acsele.interfaces.web.claim.data.user.UserDTO;
import com.cardif.acsele.interfaces.web.shared.WebContext;
import com.cardif.acsele.interfaces.web.shared.util.Constants;

/**
 * @author 810954 (Estíver HH) 14/07/2010
 */
public class AcseleAuthenticationProcessingFilter extends AuthenticationProcessingFilter {

    @Override
    protected void onPreAuthentication(HttpServletRequest request, HttpServletResponse response)
            throws AuthenticationException, IOException {
        
        String country = request.getParameter(Constants.COUNTRYATTRIBUTENAME);
        request.setAttribute(Constants.COUNTRYATTRIBUTENAME, country);

        super.onPreAuthentication(request, response);
    }

    @Override
    protected void onSuccessfulAuthentication(HttpServletRequest request, HttpServletResponse response,
                                              Authentication authResult) throws IOException {
    	User user = ((UserWrapper)authResult.getPrincipal()).getUser();
        UserSession userSession = new UserSession();
        UserDTO userDTO = new UserAssembler().toDTO(user);
        GrantedAuthority[] authorities = authResult.getAuthorities();
        List<String> authoritiesStr = new ArrayList<String>();
        for (GrantedAuthority authority : authorities) {
            authoritiesStr.add(authority.getAuthority());
        }
        userDTO.setAuthorities(Collections.unmodifiableList(authoritiesStr));
        userSession.setUser(userDTO);
        HttpSession httpSession = request.getSession();
        httpSession.setAttribute(Constants.USERSESSIONATTRIBUTENAME, userSession);

        // insere os dados de país e idioma escolhidos pelo usuário
        userSession.setCountry(WebContext.getCountry());
        userSession.setLocale(request.getLocale());

        super.onSuccessfulAuthentication(request, response, authResult);
    }

}

and the class AuthenticationProcessingFilter has a method onPreAuthentication that altered the value of the country, and now with spring-security 3.0.5 i saw that on the class that would be the UsernamePasswordAuthenticationFilter and it does not have onPreAuthentication method, so I implemented another class AbstractPreAuthenticatedProcessingFilter

public class PreAcseleAuthenticationProcessingFilter extends AbstractPreAuthenticatedProcessingFilter  {
    
    private static final Logger logger = LoggerFactory.getLogger(PreAcseleAuthenticationProcessingFilter.class);

    @Override
    protected Object getPreAuthenticatedCredentials(HttpServletRequest request) {
	// TODO Auto-generated method stub
	return null;
    }

    @Override
    protected Object getPreAuthenticatedPrincipal(HttpServletRequest request) {
	
	String country = request.getParameter(Constants.COUNTRYATTRIBUTENAME);
        request.setAttribute(Constants.COUNTRYATTRIBUTENAME, country);
        logger.info("country: "+ country);
	return null;
    }
}

there is now changing the country is losing more data credentials, Please could someone tell me what the best way to do this put an attribute on the request before the authentication