How to use leap.web

@Override
public AuthzSSOSession getSSOSession(Request request, Response response,
                   AuthzAuthentication authc) throws Throwable {
  return (AuthzSSOSession)request.getAttribute(SSO_SESSION_ATTR_NAME);
}

/**
 * Ignores the csrf checking in the http request.
 */
public static void ignore(Request request) {
  request.setAttribute(CSRF_IGNORED_KEY, Boolean.TRUE);
}

@Override
public void handleLoginFailure(Request request, Response response, LoginContext context) throws Throwable {
  response.setStatus(HTTP.SC_UNAUTHORIZED);
  
  //TODO : error message
}

public RequestOAuth2Params(Request request) {
  this.request   = request;
  this.grantType = request.getParameter(GRANT_TYPE);
}

  protected final String getCacheKey(Request request){
    return request.getMethod() + "$" + request.getPath();
  }
}

@Override
public boolean isProxyRequest(Request request) {
  return request.getHeader(X_FORWARDED_HOST)!=null||
      request.getHeader(X_FORWARDED_FOR)!=null||
      request.getHeader(X_FORWARDED_SERVER)!=null||
      request.getHeader(X_FORWARDED_PROTOCOL)!=null;
}

@Override
public Validation validation() {
  return request.getValidation();
}

  @Override
  public AppContext context() {
    return filter.context();
  }
};

@Override
public BeanFactory factory() {
  return filter.factory();
}

@Override
public void handleLogoutSuccess(Request request, Response response, LogoutContext context) throws Throwable {
  response.setStatus(HTTP.SC_OK);
}

@Override
public AuthzSSOLogin getCurrentSSOLogin(Request request, Response response,
                     AuthzAuthentication authc) throws Throwable {
  return (AuthzSSOLogin)request.getAttribute(SSO_LOGIN_ATTR_NAME);
}

@Override
public String getParameter(String name) {
  return request.getParameter(name);
}

@Override
public boolean isProxyRequest(Request request) {
  return request.getHeader(X_FORWARDED_HOST)!=null||
      request.getHeader(X_FORWARDED_FOR)!=null||
      request.getHeader(X_FORWARDED_SERVER)!=null||
      request.getHeader(X_FORWARDED_PROTOCOL)!=null;
}

@Override
public void setSSOSession(AuthzSSOSession session, Request request, AuthzAuthentication authc) throws Throwable {
  request.setAttribute(SSO_SESSION_ATTR_NAME,session);
}

@Override
public void promoteLogin(Request request, Response response, LoginContext context) throws Throwable {
  response.setStatus(HTTP.SC_UNAUTHORIZED);
}

@Override
public AuthzSSOLogin getCurrentSSOLogin(Request request, Response response,
                     AuthzAuthentication authc) throws Throwable {
  return (AuthzSSOLogin)request.getAttribute(SSO_LOGIN_ATTR_NAME);
}

@Override
public String getParameter(String name) {
  return request.getParameter(name);
}

@Override
public void setCurrentSSOLogin(AuthzSSOLogin login, Request request, AuthzAuthentication authc) throws Throwable {
  request.setAttribute(SSO_LOGIN_ATTR_NAME,login);
}

/**
 * Returns true if csrf checking is ignored in the http request.
 */
public static boolean isIgnored(Request request) {
  Object v = request.getAttribute(CSRF_IGNORED_KEY);
  return Boolean.TRUE == v;
}

@Override
public AuthzSSOSession getSSOSession(Request request, Response response,
                   AuthzAuthentication authc) throws Throwable {
  return (AuthzSSOSession)request.getAttribute(SSO_SESSION_ATTR_NAME);
}