Examples of org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

Package org.springframework.security.web.authentication

Examples of org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

In the pre-authenticated authentication case (unlike CAS, for example) the user will already have been identified through some external mechanism and a secure context established by the time the security-enforcement filter is invoked.
Therefore this class isn't actually responsible for the commencement of authentication, as it is in the case of other providers. It will be called if the user is rejected by the AbstractPreAuthenticatedProcessingFilter, resulting in a null authentication.
The commence method will always return an HttpServletResponse.SC_FORBIDDEN (403 error). @see org.springframework.security.web.access.ExceptionTranslationFilter @author Luke Taylor @author Ruud Senden @since 2.0

        PreAuthenticatedAuthenticationProvider authenticationProvider = new PreAuthenticatedAuthenticationProvider();
        authenticationProvider.setPreAuthenticatedUserDetailsService(getAuthenticationUserDetailsService(http));


        http
            .authenticationProvider(authenticationProvider)
            .setSharedObject(AuthenticationEntryPoint.class,new Http403ForbiddenEntryPoint());
    }

View Full Code Here

        authenticationProvider.setPreAuthenticatedUserDetailsService(getUserDetailsService());
        authenticationProvider = postProcess(authenticationProvider);


        http
            .authenticationProvider(authenticationProvider)
            .setSharedObject(AuthenticationEntryPoint.class,new Http403ForbiddenEntryPoint());
    }

View Full Code Here

        return entryPoint;
    }


    private AuthenticationEntryPoint createDefaultEntryPoint(H http) {
        if(defaultEntryPointMappings.isEmpty()) {
            return new Http403ForbiddenEntryPoint();
        }
        if(defaultEntryPointMappings.size() == 1) {
            return defaultEntryPointMappings.values().iterator().next();
        }
        DelegatingAuthenticationEntryPoint entryPoint = new DelegatingAuthenticationEntryPoint(defaultEntryPointMappings);

View Full Code Here

public class Http403ForbiddenEntryPointTests extends TestCase {


    public void testCommence() {
        MockHttpServletRequest req = new MockHttpServletRequest();
        MockHttpServletResponse resp = new MockHttpServletResponse();
        Http403ForbiddenEntryPoint fep = new Http403ForbiddenEntryPoint();
        try {
            fep.commence(req,resp,new AuthenticationCredentialsNotFoundException("test"));
            assertEquals("Incorrect status",resp.getStatus(),HttpServletResponse.SC_FORBIDDEN);
        } catch (IOException e) {
            fail("Unexpected exception thrown: "+e);
        } catch (ServletException e) {
            fail("Unexpected exception thrown: "+e);

View Full Code Here

@ImportResource({ "classpath:/META-INF/spring/spring-nanotrader-services/security.xml" })
public class SecurityConfig {


  @Bean
  public AuthenticationEntryPoint entryPoint() {
    return new Http403ForbiddenEntryPoint();
  }

View Full Code Here

        authenticationProvider.setPreAuthenticatedUserDetailsService(getUserDetailsService());
        authenticationProvider = postProcess(authenticationProvider);


        http
            .authenticationProvider(authenticationProvider)
            .setSharedObject(AuthenticationEntryPoint.class,new Http403ForbiddenEntryPoint());
    }

View Full Code Here

        if(entryPoint == null) {
            AuthenticationEntryPoint sharedEntryPoint = http.getSharedObject(AuthenticationEntryPoint.class);
            if(sharedEntryPoint != null) {
                entryPoint = sharedEntryPoint;
            } else {
                entryPoint = new Http403ForbiddenEntryPoint();
            }
        }
        return entryPoint;
    }

View Full Code Here

        PreAuthenticatedAuthenticationProvider authenticationProvider = new PreAuthenticatedAuthenticationProvider();
        authenticationProvider.setPreAuthenticatedUserDetailsService(getAuthenticationUserDetailsService(http));


        http
            .authenticationProvider(authenticationProvider)
            .setSharedObject(AuthenticationEntryPoint.class,new Http403ForbiddenEntryPoint());
    }

View Full Code Here


    @Override
    public void initializeFromConfig(SecurityNamedServiceConfig config) throws IOException {
        super.initializeFromConfig(config);
        
        aep=new Http403ForbiddenEntryPoint();
        
        AuthenticationKeyFilterConfig authConfig = 
                (AuthenticationKeyFilterConfig) config;
        setAuthKeyParamName(authConfig.getAuthKeyParamName());
        setUserGroupServiceName(authConfig.getUserGroupServiceName());

View Full Code Here

    
    @Override
    public void initializeFromConfig(SecurityNamedServiceConfig config) throws IOException {
        super.initializeFromConfig(config);


        aep = new Http403ForbiddenEntryPoint();


        CredentialsFromRequestHeaderFilterConfig authConfig = (CredentialsFromRequestHeaderFilterConfig) config;


        userNameHeaderName = authConfig.getUserNameHeaderName();
        passwordHeaderName = authConfig.getPasswordHeaderName();

View Full Code Here

0 1

TOP

Related Classes of org.springframework.security.web.authentication.Http403ForbiddenEntryPoint

org.geoserver.security.filter.GeoServerCredentialsFromRequestHeaderFilter

org.geoserver.security.filter.GeoServerPreAuthenticationFilter

org.geoserver.security.GeoServerAuthenticationKeyFilter

org.springframework.nanotrader.web.configuration.SecurityConfig

org.springframework.security.config.annotation.web.configurers.ExceptionHandlingConfigurer

org.springframework.security.config.annotation.web.configurers.JeeConfigurer

org.springframework.security.config.annotation.web.configurers.X509Configurer

org.springframework.security.web.authentication.preauth.Http403ForbiddenEntryPointTests

javax.servlet.http.HttpServletResponse

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.