Examples with AuthenticationTrustResolver org.springframework.security.authentication.AuthenticationTrustResolver used on opensource projects

Example 1 with AuthenticationTrustResolver

use of org.springframework.security.authentication.AuthenticationTrustResolver in project spring-security by spring-projects.

the class SecurityExpressionRootTests method rememberMeIsCorrectlyDetected.

@Test
public void rememberMeIsCorrectlyDetected() throws Exception {
    AuthenticationTrustResolver atr = mock(AuthenticationTrustResolver.class);
    root.setTrustResolver(atr);
    when(atr.isRememberMe(JOE)).thenReturn(true);
    assertThat(root.isRememberMe()).isTrue();
    assertThat(root.isFullyAuthenticated()).isFalse();
}

Example 2 with AuthenticationTrustResolver

use of org.springframework.security.authentication.AuthenticationTrustResolver in project spring-security by spring-projects.

the class HttpSessionSecurityContextRepositoryTests method saveContextCustomTrustResolver.

@Test
public void saveContextCustomTrustResolver() {
    SecurityContext contextToSave = SecurityContextHolder.createEmptyContext();
    contextToSave.setAuthentication(testToken);
    HttpSessionSecurityContextRepository repo = new HttpSessionSecurityContextRepository();
    MockHttpServletRequest request = new MockHttpServletRequest();
    HttpRequestResponseHolder holder = new HttpRequestResponseHolder(request, new MockHttpServletResponse());
    repo.loadContext(holder);
    AuthenticationTrustResolver trustResolver = mock(AuthenticationTrustResolver.class);
    repo.setTrustResolver(trustResolver);
    repo.saveContext(contextToSave, holder.getRequest(), holder.getResponse());
    verify(trustResolver).isAnonymous(contextToSave.getAuthentication());
}

Example 3 with AuthenticationTrustResolver

use of org.springframework.security.authentication.AuthenticationTrustResolver in project spring-security by spring-projects.

the class GlobalMethodSecurityConfiguration method afterSingletonsInstantiated.

/*
	 * (non-Javadoc)
	 *
	 * @see org.springframework.beans.factory.SmartInitializingSingleton#
	 * afterSingletonsInstantiated()
	 */
@Override
public void afterSingletonsInstantiated() {
    try {
        initializeMethodSecurityInterceptor();
    } catch (Exception e) {
        throw new RuntimeException(e);
    }
    PermissionEvaluator permissionEvaluator = getSingleBeanOrNull(PermissionEvaluator.class);
    if (permissionEvaluator != null) {
        this.defaultMethodExpressionHandler.setPermissionEvaluator(permissionEvaluator);
    }
    RoleHierarchy roleHierarchy = getSingleBeanOrNull(RoleHierarchy.class);
    if (roleHierarchy != null) {
        this.defaultMethodExpressionHandler.setRoleHierarchy(roleHierarchy);
    }
    AuthenticationTrustResolver trustResolver = getSingleBeanOrNull(AuthenticationTrustResolver.class);
    if (trustResolver != null) {
        this.defaultMethodExpressionHandler.setTrustResolver(trustResolver);
    }
    GrantedAuthorityDefaults grantedAuthorityDefaults = getSingleBeanOrNull(GrantedAuthorityDefaults.class);
    if (grantedAuthorityDefaults != null) {
        this.defaultMethodExpressionHandler.setDefaultRolePrefix(grantedAuthorityDefaults.getRolePrefix());
    }
}

Example 4 with AuthenticationTrustResolver

use of org.springframework.security.authentication.AuthenticationTrustResolver in project spring-security by spring-projects.

the class SessionManagementConfigurer method init.

@Override
public void init(H http) throws Exception {
    SecurityContextRepository securityContextRepository = http.getSharedObject(SecurityContextRepository.class);
    boolean stateless = isStateless();
    if (securityContextRepository == null) {
        if (stateless) {
            http.setSharedObject(SecurityContextRepository.class, new NullSecurityContextRepository());
        } else {
            HttpSessionSecurityContextRepository httpSecurityRepository = new HttpSessionSecurityContextRepository();
            httpSecurityRepository.setDisableUrlRewriting(!this.enableSessionUrlRewriting);
            httpSecurityRepository.setAllowSessionCreation(isAllowSessionCreation());
            AuthenticationTrustResolver trustResolver = http.getSharedObject(AuthenticationTrustResolver.class);
            if (trustResolver != null) {
                httpSecurityRepository.setTrustResolver(trustResolver);
            }
            http.setSharedObject(SecurityContextRepository.class, httpSecurityRepository);
        }
    }
    RequestCache requestCache = http.getSharedObject(RequestCache.class);
    if (requestCache == null) {
        if (stateless) {
            http.setSharedObject(RequestCache.class, new NullRequestCache());
        }
    }
    http.setSharedObject(SessionAuthenticationStrategy.class, getSessionAuthenticationStrategy(http));
    http.setSharedObject(InvalidSessionStrategy.class, getInvalidSessionStrategy());
}

Example 5 with AuthenticationTrustResolver

use of org.springframework.security.authentication.AuthenticationTrustResolver in project spring-security by spring-projects.

the class SessionManagementFilterTests method customAuthenticationTrustResolver.

@Test
public void customAuthenticationTrustResolver() throws Exception {
    AuthenticationTrustResolver trustResolver = mock(AuthenticationTrustResolver.class);
    SecurityContextRepository repo = mock(SecurityContextRepository.class);
    SessionManagementFilter filter = new SessionManagementFilter(repo);
    filter.setTrustResolver(trustResolver);
    HttpServletRequest request = new MockHttpServletRequest();
    authenticateUser();
    filter.doFilter(request, new MockHttpServletResponse(), new MockFilterChain());
    verify(trustResolver).isAnonymous(any(Authentication.class));
}