Examples of org.apache.shiro.subject.PrincipalCollection

org.apache.shiro.subject.PrincipalCollection
A collection of all principals associated with a corresponding {@link Subject Subject}. A principal is just a security term for an identifying attribute, such as a username or user id or social security number or anything else that can be considered an 'identifying' attribute for a {@code Subject}.
A PrincipalCollection organizes its internal principals based on the {@code Realm} where they came from when theSubject was first created. To obtain the principal(s) for a specific Realm, see the {@link #fromRealm} method. Youcan also see which realms contributed to this collection via the {@link #getRealmNames() getRealmNames()} method. @author Les Hazlewood @see #getPrimaryPrincipal() @see #fromRealm(String realmName) @see #getRealmNames() @since 0.9

            throw new IllegalArgumentException("Subject method argument cannot be null.");
        }


        beforeLogout(subject);


        PrincipalCollection principals = subject.getPrincipals();
        if (principals != null && !principals.isEmpty()) {
            if (log.isDebugEnabled()) {
                log.debug("Logging out subject with primary principal {}" + principals.getPrimaryPrincipal());
            }
            Authenticator authc = getAuthenticator();
            if (authc instanceof LogoutAware) {
                ((LogoutAware) authc).onLogout(principals);
            }

View Full Code Here

     * @param subject the Subject for which principals will potentially be merged into the Subject's session.
     */
    protected void mergePrincipals(Subject subject) {
        //merge PrincipalCollection state:


        PrincipalCollection currentPrincipals = subject.getPrincipals();
        Session session = subject.getSession(false);


        if (session == null) {
            if (!CollectionUtils.isEmpty(currentPrincipals)) {
                session = subject.getSession();
                session.setAttribute(DefaultSubjectContext.PRINCIPALS_SESSION_KEY, currentPrincipals);
            }
            //otherwise no session and no principals - nothing to save
        } else {
            PrincipalCollection existingPrincipals =
                    (PrincipalCollection) session.getAttribute(DefaultSubjectContext.PRINCIPALS_SESSION_KEY);


            if (CollectionUtils.isEmpty(currentPrincipals)) {
                if (!CollectionUtils.isEmpty(existingPrincipals)) {
                    session.removeAttribute(DefaultSubjectContext.PRINCIPALS_SESSION_KEY);

View Full Code Here

  public void testFindUserManager()
      throws NoSuchUserManagerException, AuthenticationException
  {
    final Subject subject = login("test-user", "deployment123");
    try {
      final PrincipalCollection principals = subject.getPrincipals();
      final UserManager userManager = helper().findUserManager(principals);


      assertThat(principals.getPrimaryPrincipal().toString(), isIn(userManager.listUserIds()));
      assertThat(userManager.getAuthenticationRealmName(), isIn(principals.getRealmNames()));
    }
    finally {
      subject.logout();
    }
  }

View Full Code Here

    realms.add("TestPrincipalsRealm");
    securitySystem.setRealms(realms);


    final Subject subject = login("tempUser", "tempPass");
    try {
      final PrincipalCollection principals = subject.getPrincipals();
      final UserManager userManager = helper().findUserManager(principals);


      assertThat(principals.getPrimaryPrincipal().toString(), isIn(userManager.listUserIds()));
      assertThat(userManager.getAuthenticationRealmName(), isIn(principals.getRealmNames()));
    }
    finally {
      subject.logout();
    }
  }

View Full Code Here

  public void testGetUserStatus()
      throws UserNotFoundException, AuthenticationException
  {
    final Subject subject = login("test-user", "deployment123");
    try {
      final PrincipalCollection principals = subject.getPrincipals();


      assertThat(helper().getUserStatus(principals), is(UserStatus.active));
    }
    finally {
      subject.logout();

View Full Code Here

    realms.add("TestPrincipalsRealm");
    securitySystem.setRealms(realms);


    final Subject subject = login("tempUser", "tempPass");
    try {
      final PrincipalCollection principals = subject.getPrincipals();


      // check status is passed through
      assertThat(helper().getUserStatus(principals), is(UserStatus.active));
      TestUserManager.status = UserStatus.disabled;
      assertThat(helper().getUserStatus(principals), is(UserStatus.disabled));

View Full Code Here

    securitySystem.setRealms(realms);


    // jcohen has the role mockrole1, there is also xml role with the same ID, which means jcohen automaticly has
    // this xml role


    PrincipalCollection jcohen = new SimplePrincipalCollection("jcohen", MockRealm.NAME);


    try {
      securitySystem.checkPermission(jcohen, "permissionOne:invalid");
      Assert.fail("Expected AuthorizationException");
    }

View Full Code Here


  public void testAuthorization()
      throws Exception
  {
    SecuritySystem securitySystem = this.getSecuritySystem();
    PrincipalCollection principal = new SimplePrincipalCollection("jcool", "ANYTHING");
    try {
      securitySystem.checkPermission(principal, "INVALID-ROLE:*");
      Assert.fail("expected: AuthorizationException");
    }
    catch (AuthorizationException e) {

View Full Code Here

   */
  public void BROKENtestPermissionFromRole()
      throws Exception
  {
    SecuritySystem securitySystem = this.getSecuritySystem();
    PrincipalCollection principal = new SimplePrincipalCollection("jcool", "ANYTHING");


    securitySystem.checkPermission(principal, "from-role2:read");


  }

View Full Code Here

  public void testPrivileges()
      throws Exception
  {
    SecuritySystem plexusSecurity = this.lookup(SecuritySystem.class);


    PrincipalCollection principal = new SimplePrincipalCollection("admin-simple", new SimpleRealm().getName());


    // test one of the privleges that the admin user has Repositories - (create,read)
    Assert.assertTrue(plexusSecurity.isPermitted(principal, "nexus:repositories:create"));
  }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.apache.shiro.subject.PrincipalCollection

com.github.zhangkaitao.shiro.chapter2.AuthenticatorTest

com.github.zhangkaitao.shiro.chapter24.web.taglib.Functions

com.github.zhangkaitao.shiro.chapter6.realm.PrincialCollectionTest

it.freedomotic.app.Freedomotic

it.freedomotic.security.AuthImpl

org.apache.activemq.shiro.authc.DefaultAuthenticationPolicy

org.apache.activemq.shiro.authz.AuthorizationFilter

org.apache.isis.security.shiro.ShiroAuthenticatorOrAuthorizor

org.apache.shiro.authc.SimpleAuthenticationInfoTest

org.apache.shiro.cas.CasRealm

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.