Examples of org.apache.shiro.authc.UsernamePasswordToken

org.apache.shiro.authc.UsernamePasswordToken
sun.com/j2se/1.5.0/docs/guide/security/jce/JCERefGuide.html#PBEEx"> Java Cryptography Extension Reference Guide.

To avoid this possibility of later memory access, the application developer should always call {@link #clear() clear()} after using the token to perform a login attempt.
@author Jeremy Haile @author Les Hazlewood @since 0.1

        };
    }


    private void authenticateUser(Subject currentUser, ShiroSecurityToken securityToken) {
        if (!currentUser.isAuthenticated()) {
            UsernamePasswordToken token = new UsernamePasswordToken(securityToken.getUsername(), securityToken.getPassword());
            if (alwaysReauthenticate) {
                token.setRememberMe(false);
            } else {
                token.setRememberMe(true);
            }
            
            try {
                currentUser.login(token);
                LOG.debug("Current User {} successfully authenticated", currentUser.getPrincipal());
            } catch (UnknownAccountException uae) {
                throw new UnknownAccountException("Authentication Failed. There is no user with username of " + token.getPrincipal(), uae.getCause());
            } catch (IncorrectCredentialsException ice) {
                throw new IncorrectCredentialsException("Authentication Failed. Password for account " + token.getPrincipal() + " was incorrect!", ice.getCause());
            } catch (LockedAccountException lae) {
                throw new LockedAccountException("Authentication Failed. The account for username " + token.getPrincipal() + " is locked."
                    + "Please contact your administrator to unlock it.", lae.getCause());
            } catch (AuthenticationException ae) {
                throw new AuthenticationException("Authentication Failed.", ae.getCause());
            }
        }

View Full Code Here

    
    try {
      response.setContentType("application/json");
      Subject subject = SecurityUtils.getSubject();
      
      UsernamePasswordToken token = new UsernamePasswordToken(request.getParameter("username"), request.getParameter("password"));
        token.setRememberMe(request.getParameter("rememberMe") != null && request.getParameter("rememberMe").equals("on"));


        try {
          subject.login(token);
          
        String redirect = request.getContextPath();

View Full Code Here

  public <T extends User> boolean login(String username, String password, T user) {
    return login(username, password, false, user);
  }


  public <T extends User> boolean login(String username, String password, boolean rememberMe, T user) {
    UsernamePasswordToken token = new UsernamePasswordToken(username, password);
    try {
      token.setRememberMe(rememberMe);
      SecurityUtils.getSubject().login(token);
      return true;
    } catch (AuthenticationException e) {
      return false;
    }

View Full Code Here

        };
    }


    private void authenticateUser(Subject currentUser, ShiroSecurityToken securityToken) {
        if (!currentUser.isAuthenticated()) {
            UsernamePasswordToken token = new UsernamePasswordToken(securityToken.getUsername(), securityToken.getPassword());
            if (alwaysReauthenticate) {
                token.setRememberMe(false);
            } else {
                token.setRememberMe(true);
            }
            
            try {
                currentUser.login(token);
                LOG.debug("Current User {} successfully authenticated", currentUser.getPrincipal());
            } catch (UnknownAccountException uae) {
                throw new UnknownAccountException("Authentication Failed. There is no user with username of " + token.getPrincipal(), uae.getCause());
            } catch (IncorrectCredentialsException ice) {
                throw new IncorrectCredentialsException("Authentication Failed. Password for account " + token.getPrincipal() + " was incorrect!", ice.getCause());
            } catch (LockedAccountException lae) {
                throw new LockedAccountException("Authentication Failed. The account for username " + token.getPrincipal() + " is locked."
                    + "Please contact your administrator to unlock it.", lae.getCause());
            } catch (AuthenticationException ae) {
                throw new AuthenticationException("Authentication Failed.", ae.getCause());
            }
        }

View Full Code Here


        Subject subject = newSubject(mockRequest, mockResponse);


        assertFalse(subject.isAuthenticated());


        subject.login(new UsernamePasswordToken("lonestarr", "vespa"));


        assertTrue(subject.isAuthenticated());
        assertNotNull(subject.getPrincipal());
        assertTrue(subject.getPrincipal().equals("lonestarr"));
    }

View Full Code Here

        boolean authenticated = currentUser.isAuthenticated();
        boolean sameUser = securityToken.getUsername().equals(currentUser.getPrincipal());
        LOG.trace("Authenticated: {}, same Username: {}", authenticated, sameUser);


        if (!authenticated || !sameUser) {
            UsernamePasswordToken token = new UsernamePasswordToken(securityToken.getUsername(), securityToken.getPassword());
            if (policy.isAlwaysReauthenticate()) {
                token.setRememberMe(false);
            } else {
                token.setRememberMe(true);
            }


            try {
                currentUser.login(token);
                LOG.debug("Current user {} successfully authenticated", currentUser.getPrincipal());
            } catch (UnknownAccountException uae) {
                throw new UnknownAccountException("Authentication Failed. There is no user with username of " + token.getPrincipal(), uae.getCause());
            } catch (IncorrectCredentialsException ice) {
                throw new IncorrectCredentialsException("Authentication Failed. Password for account " + token.getPrincipal() + " was incorrect!", ice.getCause());
            } catch (LockedAccountException lae) {
                throw new LockedAccountException("Authentication Failed. The account for username " + token.getPrincipal() + " is locked."
                        + "Please contact your administrator to unlock it.", lae.getCause());
            } catch (AuthenticationException ae) {
                throw new AuthenticationException("Authentication Failed.", ae.getCause());
            }
        }

View Full Code Here


        Subject subject = newSubject(mockRequest, mockResponse);


        assertFalse(subject.isAuthenticated());


        subject.login(new UsernamePasswordToken("lonestarr", "vespa"));


        assertTrue(subject.isAuthenticated());
        assertNotNull(subject.getPrincipal());
        assertTrue(subject.getPrincipal().equals("lonestarr"));
    }

View Full Code Here

        if (_subject == null) {
            _subject = SecurityUtils.getSubject();
        }


        // use dan to run as a normal user (which cannot close an account)
        _subject.login(new UsernamePasswordToken("dan", "123"));
    }

View Full Code Here

        if (_subject == null) {
            _subject = SecurityUtils.getSubject();
        }


        // use sally to run as a superviser (which cannot operate an account)
        _subject.login(new UsernamePasswordToken("sally", "1234"));
    }

View Full Code Here

    // Session session = currentUser.getSession(true);
    // log.info(session.getId().toString());


    // let's log in the current user so we can check against roles and permissions:
    if (!currentUser.isAuthenticated()) {
      UsernamePasswordToken token = new UsernamePasswordToken(username, password);
      token.setRememberMe(true);
      try {


        currentUser.login(token);
        token.clear();


        // if (this.concurrentSessionControl == true) {
        // removeConcurrentSessions(currentUser);
        // }


        String sessionId = currentUser.getSession(false).getId().toString();
        currentUser.getSession(false).setTimeout(1000*60*60*24);
        logger.info(sessionId);
        return sessionId;
      } catch (UnknownAccountException uae) {
        logger.info("There is no user with username of " + token.getPrincipal());
      } catch (IncorrectCredentialsException ice) {
        logger.info("Password for account " + token.getPrincipal() + " was incorrect!");
      } catch (LockedAccountException lae) {
        logger.info("The account for username " + token.getPrincipal() + " is locked.  "
            + "Please contact your administrator to unlock it.");
      } catch (AuthenticationException ae) {
        logger.info(null, ae);
      }
      return null;

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.apache.shiro.authc.UsernamePasswordToken

be.c4j.ee.security.credentials.OracleCredentialsMatcher

be.c4j.ee.security.service.AuthenticationService

be.c4j.ee.security.view.model.LoginBean

br.com.caelum.vraptor.security.realm.CustomAuthorizingRealm

cn.dreampie.common.util.SubjectUtils

com.adaptrex.core.security.servlet.LogInServlet

com.github.zhangkaitao.shiro.chapter2.LoginLogoutTest

com.google.code.lightssh.project.security.shiro.MyShiroRealm

com.google.code.lightssh.project.web.action.GenericAction

com.ketayao.ketacustom.shiro.ShiroDbRealm

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.