Examples of org.springframework.security.web.context.SecurityContextRepository

Package org.springframework.security.web.context

Examples of org.springframework.security.web.context.SecurityContextRepository

org.springframework.security.web.context.SecurityContextRepository
Strategy used for persisting a {@link SecurityContext} between requests.
Used by {@link SecurityContextPersistenceFilter} to obtain the context which should be used for the current threadof execution and to store the context once it has been removed from thread-local storage and the request has completed.
The persistence mechanism used will depend on the implementation, but most commonly the HttpSession will be used to store the context. @author Luke Taylor @since 3.0 @see SecurityContextPersistenceFilter @see HttpSessionSecurityContextRepository @see SaveContextOnUpdateOrErrorResponseWrapper

         * @param securityContext the {@link SecurityContext} to save
         * @param request the {@link HttpServletRequest} to use
         */
        final void save(SecurityContext securityContext,
                HttpServletRequest request) {
            SecurityContextRepository securityContextRepository = WebTestUtils.getSecurityContextRepository(request);
            boolean isTestRepository = securityContextRepository instanceof TestSecurityContextRepository;
            if(!isTestRepository) {
                securityContextRepository = new TestSecurityContextRepository(securityContextRepository);
                WebTestUtils.setSecurityContextRepository(request, securityContextRepository);
            }


            HttpServletResponse response = new MockHttpServletResponse();


            HttpRequestResponseHolder requestResponseHolder = new HttpRequestResponseHolder(
                    request, response);
            securityContextRepository.loadContext(requestResponseHolder);


            request = requestResponseHolder.getRequest();
            response = requestResponseHolder.getResponse();


            securityContextRepository.saveContext(securityContext, request,
                    response);
        }

View Full Code Here

        private ConcurrencyControlConfigurer() {}
    }


    @Override
    public void init(H http) throws Exception {
        SecurityContextRepository securityContextRepository = http.getSharedObject(SecurityContextRepository.class);
        boolean stateless = isStateless();


        if(securityContextRepository == null) {
            if(stateless) {
                http.setSharedObject(SecurityContextRepository.class, new NullSecurityContextRepository());

View Full Code Here

        http.setSharedObject(InvalidSessionStrategy.class, getInvalidSessionStrategy());
    }


    @Override
    public void configure(H http) throws Exception {
        SecurityContextRepository securityContextRepository = http.getSharedObject(SecurityContextRepository.class);
        SessionManagementFilter sessionManagementFilter = new SessionManagementFilter(securityContextRepository, getSessionAuthenticationStrategy());
        if(sessionAuthenticationErrorUrl != null) {
            sessionManagementFilter.setAuthenticationFailureHandler(new SimpleUrlAuthenticationFailureHandler(sessionAuthenticationErrorUrl));
        }
        if(invalidSessionUrl != null) {

View Full Code Here


    @Override
    @SuppressWarnings("unchecked")
    public void configure(H http) throws Exception {


        SecurityContextRepository securityContextRepository = http.getSharedObject(SecurityContextRepository.class);
        SecurityContextPersistenceFilter securityContextFilter = new SecurityContextPersistenceFilter(
                securityContextRepository);
        SessionManagementConfigurer<?> sessionManagement = http.getConfigurer(SessionManagementConfigurer.class);
        SessionCreationPolicy sessionCreationPolicy = sessionManagement == null ? null
                : sessionManagement.getSessionCreationPolicy();

View Full Code Here

        SecurityContextHolder.clearContext();
    }


    @Test
    public void newSessionShouldNotBeCreatedIfSessionExistsAndUserIsNotAuthenticated() throws Exception {
        SecurityContextRepository repo = mock(SecurityContextRepository.class);
        SessionManagementFilter filter = new SessionManagementFilter(repo);
        HttpServletRequest request = new MockHttpServletRequest();
        String sessionId = request.getSession().getId();


        filter.doFilter(request, new MockHttpServletResponse(), new MockFilterChain());

View Full Code Here

        assertEquals(sessionId, request.getSession().getId());
    }


    @Test
    public void strategyIsNotInvokedIfSecurityContextAlreadyExistsForRequest() throws Exception {
        SecurityContextRepository repo = mock(SecurityContextRepository.class);
        SessionAuthenticationStrategy strategy = mock(SessionAuthenticationStrategy.class);
        // mock that repo contains a security context
        when(repo.containsContext(any(HttpServletRequest.class))).thenReturn(true);
        SessionManagementFilter filter = new SessionManagementFilter(repo);
        filter.setSessionAuthenticationStrategy(strategy);
        HttpServletRequest request = new MockHttpServletRequest();
        authenticateUser();

View Full Code Here

        verifyZeroInteractions(strategy);
    }


    @Test
    public void strategyIsNotInvokedIfAuthenticationIsNull() throws Exception {
        SecurityContextRepository repo = mock(SecurityContextRepository.class);
        SessionAuthenticationStrategy strategy = mock(SessionAuthenticationStrategy.class);
        SessionManagementFilter filter = new SessionManagementFilter(repo);
        filter.setSessionAuthenticationStrategy(strategy);
        HttpServletRequest request = new MockHttpServletRequest();

View Full Code Here

        verifyZeroInteractions(strategy);
    }


    @Test
    public void strategyIsInvokedIfUserIsNewlyAuthenticated() throws Exception {
        SecurityContextRepository repo = mock(SecurityContextRepository.class);
        // repo will return false to containsContext()
        SessionAuthenticationStrategy strategy = mock(SessionAuthenticationStrategy.class);
        SessionManagementFilter filter = new SessionManagementFilter(repo);
        filter.setSessionAuthenticationStrategy(strategy);
        HttpServletRequest request = new MockHttpServletRequest();

View Full Code Here

        verifyNoMoreInteractions(strategy);
    }


    @Test
    public void strategyFailureInvokesFailureHandler() throws Exception {
        SecurityContextRepository repo = mock(SecurityContextRepository.class);
        // repo will return false to containsContext()
        SessionAuthenticationStrategy strategy = mock(SessionAuthenticationStrategy.class);


        AuthenticationFailureHandler failureHandler = mock(AuthenticationFailureHandler.class);
        SessionManagementFilter filter = new SessionManagementFilter(repo);

View Full Code Here

        verify(failureHandler).onAuthenticationFailure(request, response, exception);
    }


    @Test
    public void responseIsRedirectedToTimeoutUrlIfSetAndSessionIsInvalid() throws Exception {
        SecurityContextRepository repo = mock(SecurityContextRepository.class);
        // repo will return false to containsContext()
        SessionAuthenticationStrategy strategy = mock(SessionAuthenticationStrategy.class);
        SessionManagementFilter filter = new SessionManagementFilter(repo);
        filter.setSessionAuthenticationStrategy(strategy);
        MockHttpServletRequest request = new MockHttpServletRequest();

View Full Code Here

0 1

TOP

Related Classes of org.springframework.security.web.context.SecurityContextRepository

org.springframework.security.config.annotation.web.configurers.SecurityContextConfigurer

org.springframework.security.config.annotation.web.configurers.SessionManagementConfigurer

org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors$SecurityContextRequestPostProcessorSupport

org.springframework.security.test.web.servlet.response.SecurityMockMvcResultMatchers$AuthenticationMatcher

org.springframework.security.web.session.SessionManagementFilterTests

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.