Examples with UsernamePasswordAuthenticationToken org.springframework.security.authentication.UsernamePasswordAuthenticationToken used on opensource projects

Example 26 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class GlobalMethodSecurityBeanDefinitionParserTests method targetShouldAllowProtectedMethodInvocationWithCorrectRole.

@Test
public void targetShouldAllowProtectedMethodInvocationWithCorrectRole() {
    loadContext();
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("user", "password");
    SecurityContextHolder.getContext().setAuthentication(token);
    target.someUserMethod1();
    // SEC-1213. Check the order
    Advisor[] advisors = ((Advised) target).getAdvisors();
    assertThat(advisors.length).isEqualTo(1);
    assertThat(((MethodSecurityMetadataSourceAdvisor) advisors[0]).getOrder()).isEqualTo(1001);
}

Example 27 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class GlobalMethodSecurityBeanDefinitionParserTests method supportsMethodArgumentsInPointcut.

@Test
public void supportsMethodArgumentsInPointcut() {
    setContext("<b:bean id='target' class='org.springframework.security.access.annotation.BusinessServiceImpl'/>" + "<global-method-security>" + "   <protect-pointcut expression='execution(* org.springframework.security.access.annotation.BusinessService.someOther(String))' access='ROLE_ADMIN'/>" + "   <protect-pointcut expression='execution(* org.springframework.security.access.annotation.BusinessService.*(..))' access='ROLE_USER'/>" + "</global-method-security>" + ConfigTestUtils.AUTH_PROVIDER_XML);
    SecurityContextHolder.getContext().setAuthentication(new UsernamePasswordAuthenticationToken("user", "password"));
    target = (BusinessService) appContext.getBean("target");
    // someOther(int) should not be matched by someOther(String), but should require
    // ROLE_USER
    target.someOther(0);
    try {
        // String version should required admin role
        target.someOther("somestring");
        fail("Expected AccessDeniedException");
    } catch (AccessDeniedException expected) {
    }
}

Example 28 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class GlobalMethodSecurityBeanDefinitionParserTests method worksWithAspectJAutoproxy.

@Test(expected = AccessDeniedException.class)
public void worksWithAspectJAutoproxy() {
    setContext("<global-method-security>" + "  <protect-pointcut expression='execution(* org.springframework.security.config.*Service.*(..))'" + "       access='ROLE_SOMETHING' />" + "</global-method-security>" + "<b:bean id='myUserService' class='org.springframework.security.config.PostProcessedMockUserDetailsService'/>" + "<aop:aspectj-autoproxy />" + "<authentication-manager>" + "   <authentication-provider user-service-ref='myUserService'/>" + "</authentication-manager>");
    UserDetailsService service = (UserDetailsService) appContext.getBean("myUserService");
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("Test", "Password", AuthorityUtils.createAuthorityList("ROLE_SOMEOTHERROLE"));
    SecurityContextHolder.getContext().setAuthentication(token);
    service.loadUserByUsername("notused");
}

Example 29 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class InterceptMethodsBeanDefinitionDecoratorTests method targetShouldAllowProtectedMethodInvocationWithCorrectRole.

@Test
public void targetShouldAllowProtectedMethodInvocationWithCorrectRole() {
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("Test", "Password", AuthorityUtils.createAuthorityList("ROLE_USER"));
    SecurityContextHolder.getContext().setAuthentication(token);
    target.doSomething();
}

Example 30 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class SecuredAnnotationDrivenBeanDefinitionParserTests method targetShouldAllowProtectedMethodInvocationWithCorrectRole.

@Test
public void targetShouldAllowProtectedMethodInvocationWithCorrectRole() {
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("Test", "Password", AuthorityUtils.createAuthorityList("ROLE_USER"));
    SecurityContextHolder.getContext().setAuthentication(token);
    target.someUserMethod1();
}