Examples with RedirectingAuthFilter com.bakdata.conquery.models.auth.web.RedirectingAuthFilter used on opensource projects

Example 1 with RedirectingAuthFilter

use of com.bakdata.conquery.models.auth.web.RedirectingAuthFilter in project conquery by bakdata.

the class JwtPkceVerifyingRealmFactory method createRealm.

public ConqueryAuthenticationRealm createRealm(ManagerNode manager) {
    List<TokenVerifier.Predicate<AccessToken>> additionalVerifiers = new ArrayList<>();
    for (String additionalTokenCheck : additionalTokenChecks) {
        additionalVerifiers.add(ScriptedTokenChecker.create(additionalTokenCheck));
    }
    idpConfigurationSupplier = getIdpOptionsSupplier(manager.getClient());
    authCookieCreator = manager.getConfig().getAuthentication()::createAuthCookie;
    // Add login schema for admin end
    final RedirectingAuthFilter redirectingAuthFilter = manager.getAuthController().getRedirectingAuthFilter();
    redirectingAuthFilter.getAuthAttemptCheckers().add(this::checkAndRedeemAuthzCode);
    redirectingAuthFilter.getAuthAttemptCheckers().add(this::checkAndRedeemRefreshToken);
    redirectingAuthFilter.getLoginInitiators().add(this::initiateLogin);
    return new JwtPkceVerifyingRealm(idpConfigurationSupplier, client, additionalVerifiers, alternativeIdClaims, manager.getStorage(), tokenLeeway);
}

Example 2 with RedirectingAuthFilter

use of com.bakdata.conquery.models.auth.web.RedirectingAuthFilter in project conquery by bakdata.

the class LocalAuthenticationConfig method createRealm.

@Override
public ConqueryAuthenticationRealm createRealm(ManagerNode manager) {
    // Token extractor is not needed because this realm depends on the ConqueryTokenRealm
    manager.getAuthController().getAuthenticationFilter().registerTokenExtractor(JWTokenHandler::extractToken);
    LocalAuthenticationRealm realm = new LocalAuthenticationRealm(manager.getValidator(), Jackson.copyMapperAndInjectables(Jackson.BINARY_MAPPER), manager.getAuthController().getConqueryTokenRealm(), storeName, directory, passwordStoreConfig, jwtDuration);
    UserAuthenticationManagementProcessor processor = new UserAuthenticationManagementProcessor(realm, manager.getStorage());
    // Register resources for users to exchange username and password for an access token
    registerAdminUnprotectedAuthenticationResources(manager.getUnprotectedAuthAdmin(), realm);
    registerApiUnprotectedAuthenticationResources(manager.getUnprotectedAuthApi(), realm);
    registerAuthenticationAdminResources(manager.getAdmin().getJerseyConfig(), processor);
    // Add login schema for admin end
    final RedirectingAuthFilter redirectingAuthFilter = manager.getAuthController().getRedirectingAuthFilter();
    redirectingAuthFilter.getLoginInitiators().add(loginProvider(manager.getUnprotectedAuthAdmin()));
    return realm;
}