Examples of org.springframework.security.authentication.InsufficientAuthenticationException

Package org.springframework.security.authentication

Examples of org.springframework.security.authentication.InsufficientAuthenticationException

org.springframework.security.authentication.InsufficientAuthenticationException
Thrown if an authentication request is rejected because the credentials are not sufficiently trusted.
{@link org.springframework.security.access.AccessDecisionVoter}s will typically throw this exception if they are dissatisfied with the level of the authentication, such as if performed using a remember-me mechanism or anonymously. The {@code ExceptionTranslationFilter} will then typically cause the {@code AuthenticationEntryPoint}to be called, allowing the principal to authenticate with a stronger level of authentication. @author Ben Alex


    Set<String> accessTokenDeps = getAccessTokenDependencies(request, response, chain);
    if (!accessTokenDeps.isEmpty()) {
      Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
      if (isRequireAuthenticated() && !authentication.isAuthenticated()) {
        throw new InsufficientAuthenticationException("An authenticated principal must be present.");
      }


      OAuthSecurityContext context = OAuthSecurityContextHolder.getContext();
      if (context == null) {
        throw new IllegalStateException("No OAuth security context has been established. Unable to access resources.");

View Full Code Here

      request.setAttribute(CALLBACK_ATTRIBUTE, callbackURL);
    }


    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    if (authentication == null || !authentication.isAuthenticated()) {
      throw new InsufficientAuthenticationException("User must be authenticated before authorizing a request token.");
    }
    String verifier = getVerifierServices().createVerifier();
    request.setAttribute(VERIFIER_ATTRIBUTE, verifier);
    getTokenServices().authorizeRequestToken(requestToken, verifier, authentication);
    return authentication;

View Full Code Here

                if (logger.isDebugEnabled()) {
                    logger.debug("Access is denied (user is anonymous); redirecting to authentication entry point",
                            exception);
                }


                sendStartAuthentication(request, response, chain, new InsufficientAuthenticationException(
                        "Full authentication is required to access this resource"));
            }
            else {
                if (logger.isDebugEnabled()) {
                    logger.debug("Access is denied (user is not anonymous); delegating to AccessDeniedHandler",

View Full Code Here

                        return;
                    }
                }
            }


            throw new InsufficientAuthenticationException("Response doesn't contain any of the requested authentication context class or declaration references");


        }


    }

View Full Code Here

          .createAuthenticationFromUserDetails(user);
    } else if (allowRepeatedAuthenticationAttempts
        && alreadyAuthenticatedUserId != null) {
      return SecurityContextHolder.getContext().getAuthentication();
    } else {
      throw new InsufficientAuthenticationException(
          "SpringSocialSecurity sign in details not found in session");
    }
  }

View Full Code Here

    public static RuntimeException unauthorizedAccess(String resourceName) {
        // not hide, and not filtering out a list, this
        // is an unauthorized direct resource access, complain
        Authentication user = user();
        if (user == null || user.getAuthorities().size() == 0)
            return new InsufficientAuthenticationException("Cannot access "
                    + resourceName + " as anonymous");
        else
            return new AccessDeniedException("Cannot access "
                    + resourceName + " with the current privileges");
    }

View Full Code Here

    public static RuntimeException unauthorizedAccess() {
        // not hide, and not filtering out a list, this
        // is an unauthorized direct resource access, complain
        Authentication user = user();
        if (user == null || user.getAuthorities().size() == 0)
            return new InsufficientAuthenticationException("Operation unallowed with the current privileges");
        else
            return new AccessDeniedException("Operation unallowed with the current privileges");
    }

View Full Code Here

            // user is authenticated and has one of the required roles
            if(!allowedRoles.contains(ServiceAccessRule.ANY) && !allowedRoles.isEmpty()) {
                Authentication user = SecurityContextHolder.getContext().getAuthentication();
                
                if (user == null || user.getAuthorities().size() == 0)
                    throw new InsufficientAuthenticationException("Cannot access "
                            + service + "." + method + " as anonymous");
                
                boolean roleFound = false;
                for (GrantedAuthority role : user.getAuthorities()) {
                    if(allowedRoles.contains(role.getAuthority())) {

View Full Code Here

0 1

TOP

Related Classes of org.springframework.security.authentication.InsufficientAuthenticationException

com.narirelays.ems.security.CustomExceptionTranslationFilter

nu.localhost.tapestry5.springsecurity.services.internal.SpringSecurityExceptionTranslationFilter

org.geoserver.security.OperationSecurityCallback

org.geoserver.security.SecureCatalogImpl

org.socialsignin.springsocial.security.signin.SpringSocialSecurityAuthenticationFilter

org.springframework.security.oauth.consumer.filter.OAuthConsumerProcessingFilter

org.springframework.security.oauth.provider.filter.UserAuthorizationProcessingFilter

org.springframework.security.oauth2.client.token.AccessTokenProviderChain

org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationProcessingFilter

org.springframework.security.oauth2.provider.endpoint.AuthorizationEndpoint

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.