Examples with SecurityQuestionsAuthenticationToken com.evolveum.midpoint.authentication.impl.module.authentication.token.SecurityQuestionsAuthenticationToken used on opensource projects

Example 1 with SecurityQuestionsAuthenticationToken

use of com.evolveum.midpoint.authentication.impl.module.authentication.token.SecurityQuestionsAuthenticationToken in project midpoint by Evolveum.

the class SecurityQuestionsAuthenticationFilter method attemptAuthentication.

public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException {
    if (isPostOnly() && !request.getMethod().equals("POST")) {
        throw new AuthenticationServiceException("Authentication method not supported: " + request.getMethod());
    }
    setUsernameParameter(SPRING_SECURITY_FORM_USER_KEY);
    String username = obtainUsername(request);
    Map<String, String> answers = obtainAnswers(request);
    if (username == null) {
        username = "";
    }
    if (answers == null) {
        answers = new HashMap<>();
    }
    username = username.trim();
    UsernamePasswordAuthenticationToken authRequest = new SecurityQuestionsAuthenticationToken(username, answers);
    // Allow subclasses to set the "details" property
    setDetails(request, authRequest);
    return this.getAuthenticationManager().authenticate(authRequest);
}

Example 2 with SecurityQuestionsAuthenticationToken

use of com.evolveum.midpoint.authentication.impl.module.authentication.token.SecurityQuestionsAuthenticationToken in project midpoint by Evolveum.

the class SecurityQuestionProvider method internalAuthentication.

@Override
protected Authentication internalAuthentication(Authentication authentication, List<ObjectReferenceType> requireAssignment, AuthenticationChannel channel, Class<? extends FocusType> focusType) throws AuthenticationException {
    if (authentication.isAuthenticated() && authentication.getPrincipal() instanceof GuiProfiledPrincipal) {
        return authentication;
    }
    String enteredUsername = (String) authentication.getPrincipal();
    LOGGER.trace("Authenticating username '{}'", enteredUsername);
    ConnectionEnvironment connEnv = createEnvironment(channel);
    try {
        Authentication token;
        if (authentication instanceof SecurityQuestionsAuthenticationToken) {
            Map<String, String> answers = (Map<String, String>) authentication.getCredentials();
            SecurityQuestionsAuthenticationContext authContext = new SecurityQuestionsAuthenticationContext(enteredUsername, focusType, answers, requireAssignment);
            if (channel != null) {
                authContext.setSupportActivationByChannel(channel.isSupportActivationByChannel());
            }
            token = getEvaluator().authenticate(connEnv, authContext);
        } else {
            LOGGER.error("Unsupported authentication {}", authentication);
            throw new AuthenticationServiceException("web.security.provider.unavailable");
        }
        MidPointPrincipal principal = (MidPointPrincipal) token.getPrincipal();
        LOGGER.debug("User '{}' authenticated ({}), authorities: {}", authentication.getPrincipal(), authentication.getClass().getSimpleName(), principal.getAuthorities());
        return token;
    } catch (AuthenticationException e) {
        LOGGER.info("Authentication failed for {}: {}", enteredUsername, e.getMessage());
        throw e;
    }
}