Package org.springframework.security.core.context

Examples of org.springframework.security.core.context.SecurityContext

499
500
501
502
503
504
505
506
507
508
509
510
511
512
    public void traverseWrappedRequests() {
        HttpSessionSecurityContextRepository repo = new HttpSessionSecurityContextRepository();
        MockHttpServletRequest request = new MockHttpServletRequest();
        MockHttpServletResponse response = new MockHttpServletResponse();
        HttpRequestResponseHolder holder = new HttpRequestResponseHolder(request, response);
        SecurityContext context = repo.loadContext(holder);
        assertNull(request.getSession(false));
        // Simulate authentication during the request
        context.setAuthentication(testToken);

        repo.saveContext(context, new HttpServletRequestWrapper(holder.getRequest()), new HttpServletResponseWrapper(holder.getResponse()));

        assertNotNull(request.getSession(false));
        assertEquals(context, request.getSession().getAttribute(SPRING_SECURITY_CONTEXT_KEY));
View Full Code Here
515
516
517
518
519
520
521
522
523
524
    @Test(expected = IllegalStateException.class)
    public void failsWithStandardResponse() {
        HttpSessionSecurityContextRepository repo = new HttpSessionSecurityContextRepository();
        MockHttpServletRequest request = new MockHttpServletRequest();
        MockHttpServletResponse response = new MockHttpServletResponse();
        SecurityContext context = SecurityContextHolder.createEmptyContext();
        context.setAuthentication(testToken);

        repo.saveContext(context,request,response);
    }
View Full Code Here
234
235
236
237
238
239
240
241
242
243
244
        } else {
            if (debug) {
                logger.debug("Switching to RunAs Authentication: " + runAs);
            }

            SecurityContext origCtx = SecurityContextHolder.getContext();
            SecurityContextHolder.setContext(SecurityContextHolder.createEmptyContext());
            SecurityContextHolder.getContext().setAuthentication(runAs);

            // need to revert to token.Authenticated post-invocation
            return new InterceptorStatusToken(origCtx, true, attributes, object);
View Full Code Here
137
138
139
140
141
142
143
144
145
146
147
148
149
150
    // SEC-1967
    @Test
    @SuppressWarnings("unchecked")
    public void finallyInvocationIsInvokedIfExceptionThrown() throws Exception {
        SecurityContext ctx = SecurityContextHolder.getContext();
        Authentication token = new TestingAuthenticationToken("Test", "Password", "NOT_USED");
        token.setAuthenticated(true);
        ctx.setAuthentication(token);

        RunAsManager runAsManager = mock(RunAsManager.class);
        when(runAsManager.buildRunAs(eq(token), any(), anyCollection())).thenReturn(new RunAsUserToken("key", "someone", "creds", token.getAuthorities(), token.getClass()));
        interceptor.setRunAsManager(runAsManager);
View Full Code Here
78
79
80
81
82
83
84
85
86
        Object user = message.getHeaders().get(authenticationHeaderName);
        if(!(user instanceof Authentication)) {
            return;
        }
        Authentication authentication = (Authentication) user;
        SecurityContext context = SecurityContextHolder.createEmptyContext();
        context.setAuthentication(authentication);
        SecurityContextHolder.setContext(context);
    }
View Full Code Here
108
109
110
111
112
113
114
115
    private Authentication getAuthentication() {
        if(authentication != null) {
            return authentication;
        }

        SecurityContext context = SecurityContextHolder.getContext();
        return context.getAuthentication();
    }
View Full Code Here
82
83
84
85
86
87
88
89
90
91
92
    public SecurityContext loadContext(HttpRequestResponseHolder requestResponseHolder) {
        HttpServletRequest request = requestResponseHolder.getRequest();
        HttpServletResponse response = requestResponseHolder.getResponse();
        HttpSession httpSession = request.getSession(false);

        SecurityContext context = readSecurityContextFromSession(httpSession);

        if (context == null) {
            if (logger.isDebugEnabled()) {
                logger.debug("No SecurityContext was available from the HttpSession: " + httpSession +". " +
                        "A new one will be created.");
View Full Code Here
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
                logger.debug("Eagerly created session: " + session.getId());
            }
        }

        HttpRequestResponseHolder holder = new HttpRequestResponseHolder(request, response);
        SecurityContext contextBeforeChainExecution = repo.loadContext(holder);

        try {
            SecurityContextHolder.setContext(contextBeforeChainExecution);

            chain.doFilter(holder.getRequest(), holder.getResponse());

        } finally {
            SecurityContext contextAfterChainExecution = SecurityContextHolder.getContext();
            // Crucial removal of SecurityContextHolder contents - do this before anything else.
            SecurityContextHolder.clearContext();
            repo.saveContext(contextAfterChainExecution, holder.getRequest(), holder.getResponse());
            request.removeAttribute(FILTER_APPLIED);
View Full Code Here
40
41
42
43
44
45
46
47
48
        request = new MockHttpServletRequest();
        response = new MockHttpServletResponse();

        handler = new SecurityContextLogoutHandler();

        SecurityContext context = SecurityContextHolder.createEmptyContext();
        context.setAuthentication(new TestingAuthenticationToken("user", "password", AuthorityUtils.createAuthorityList("ROLE_USER")));
        SecurityContextHolder.setContext(context);
    }
View Full Code Here
53
54
55
56
57
58
59
60
61
    }

    // SEC-2025
    @Test
    public void clearsAuthentication() {
        SecurityContext beforeContext = SecurityContextHolder.getContext();
        handler.logout(request, response, SecurityContextHolder.getContext().getAuthentication());
        assertNull(beforeContext.getAuthentication());
    }
View Full Code Here
TOP

Related Classes of org.springframework.security.core.context.SecurityContext

  • $.UserAuthenticationIntegrationTest
  • br.com.kuntzer.rodrigo.cursoviasoft.web.controller.LoginController
  • com.brienwheeler.web.spring.security.SecurityUtils
  • com.btmatthews.atlas.jcr.servlet.SpringSecurityCredentialsProvider
  • com.dream.util.SecurityUtil
  • com.gcrm.security.AuthenticationSuccessListener
  • com.hamidh.azad92.flash.account.UserAuthenticationIntegrationTest
  • com.jbrisbin.vcloud.security.CloudSessionSecurityContextRepository
  • com.mobius.controllers.LiveCycleDoc
  • com.mobius.controllers.LiveCycleTask
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.