Package org.springframework.security.access

Examples of org.springframework.security.access.AccessDeniedException

34
35
36
37
38
39
40
41
  }

  public void checkAccountProfile(Integer accountProfileId) {
    if (accountProfileId == null
        || accountProfileId.compareTo(getAccountProfileIdFromPrincipal()) != 0) {
      throw new AccessDeniedException(null);
    }
  }
View Full Code Here
41
42
43
44
45
46
47
48
  }

  public void checkAccount(Integer accountId) {
    if (accountId == null
        || accountId.compareTo(getAccountFromPrincipal()) != 0) {
      throw new AccessDeniedException(null);
    }
  }
View Full Code Here
48
49
50
51
52
53
54
55
  }
 
  public void checkAuthToken(String token) {
    if (token == null
        || !token.equals(getAuthToken())) {
      throw new AccessDeniedException(null);
    }
  }
View Full Code Here
53
54
55
56
57
58
59
60
61
62
     */
    @RequestMapping(value = "/oauth/token_key", method = RequestMethod.GET)
    @ResponseBody
    public Map<String, String> getKey(Principal principal) {
        if ((principal == null || principal instanceof AnonymousAuthenticationToken) && !converter.isPublic()) {
            throw new AccessDeniedException("You need to authenticate to see a shared key");
        }
        Map<String, String> result = converter.getKey();
        return result;
    }
View Full Code Here
121
122
123
124
125
126
127
128
129
130
131
        }

        if (result == ACCESS_DENIED && throwException) {
          InsufficientScopeException failure = new InsufficientScopeException(
              "Insufficient scope for this resource", client.getScope());
          throw new AccessDeniedException(failure.getMessage(), failure);
        }

        return result;
      }
    }
View Full Code Here
146
147
148
149
150
151
152
153
154
155
156
        }
        if (result == ACCESS_DENIED && throwException) {
          InsufficientScopeException failure = new InsufficientScopeException(
              "Insufficient scope for this resource", Collections.singleton(attribute.getAttribute()
                  .substring(scopePrefix.length())));
          throw new AccessDeniedException(failure.getMessage(), failure);
        }
      }
    }

    return result;
View Full Code Here
67
68
69
70
71
72
73
74
75
   * @throws InsufficientScopeException if the scope is invalid and we the flag is set to throw the exception
   */
  public boolean throwOnError(boolean decision) {
    if (!decision && !missingScopes.isEmpty()) {
      Throwable failure = new InsufficientScopeException("Insufficient scope for this resource", missingScopes);
      throw new AccessDeniedException(failure.getMessage(), failure);
    }
    return decision;
  }
View Full Code Here
454
455
456
457
458
459
460
461
  @ExceptionHandler(HttpSessionRequiredException.class)
  public ModelAndView handleHttpSessionRequiredException(HttpSessionRequiredException e, ServletWebRequest webRequest)
      throws Exception {
    logger.info("Handling Session required error: " + e.getMessage());
    return handleException(new AccessDeniedException("Could not obtain authorization request from session", e),
        webRequest);
  }
View Full Code Here
35
36
37
38
39
40
41
42
43
44
  private MockHttpServletResponse response = new MockHttpServletResponse();

  @Test
  public void testHandleWithJson() throws Exception {
    request.addHeader("Accept", MediaType.APPLICATION_JSON_VALUE);
    handler.handle(request, response, new AccessDeniedException("Bad"));
    assertEquals(HttpServletResponse.SC_FORBIDDEN, response.getStatus());
    assertEquals(MediaType.APPLICATION_JSON_VALUE, response.getContentType());
    assertEquals(null, response.getErrorMessage());
  }
View Full Code Here
95
96
97
98
99
100
101
102
103
104
  private void checkResourceOwner(String user, Principal principal) {
    if (principal instanceof OAuth2Authentication) {
      OAuth2Authentication authentication = (OAuth2Authentication) principal;
      if (!authentication.isClientOnly() && !user.equals(principal.getName())) {
        throw new AccessDeniedException(String.format("User '%s' cannot obtain tokens for user '%s'",
            principal.getName(), user));
      }
    }
  }
View Full Code Here
TOP

Related Classes of org.springframework.security.access.AccessDeniedException

  • com.es.app.eliteSystemSOUI
  • com.gcrm.security.UrlAccessDecisionManager
  • com.gcrm.util.security.UserUtil
  • com.iisigroup.cap.mvc.action.PageAction
  • com.iisigroup.cap.security.vote.ConditionsUnanimousBased
  • com.infoclinika.mssharing.web.security.RichUser
  • com.lanyuan.security.MyAccessDecisionManager
  • com.loc.security.MyAccssDecisionManager
  • com.narirelays.ems.j2ee.filters.IPRoleAuthenticationFilter
  • com.pe.pgn.clubpgn.security.MyAccessDecisionManager
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.