Examples with UsernamePasswordAuthentication com.laurentiuspilca.ssc6.security.authentications.UsernamePasswordAuthentication used on opensource projects

Example 1 with UsernamePasswordAuthentication

use of com.laurentiuspilca.ssc6.security.authentications.UsernamePasswordAuthentication in project youtubechannel by lspil.

the class UsernamePasswordAuthFilter method doFilterInternal.

@Override
protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
    // Step 1: username & password
    // Step 2: username & otp
    var username = request.getHeader("username");
    var password = request.getHeader("password");
    var otp = request.getHeader("otp");
    if (otp == null) {
        // step 1
        Authentication a = new UsernamePasswordAuthentication(username, password);
        a = authenticationManager.authenticate(a);
        // we generate an OTP
        String code = String.valueOf(new Random().nextInt(9999) + 1000);
        Otp otpEntity = new Otp();
        otpEntity.setUsername(username);
        otpEntity.setOtp(code);
        otpRepository.save(otpEntity);
    } else {
        // step 2
        Authentication a = new OtpAuthentication(username, otp);
        a = authenticationManager.authenticate(a);
        // we issue a token
        var token = UUID.randomUUID().toString();
        tokenManager.add(token);
        response.setHeader("Authorization", token);
    }
}

Example 2 with UsernamePasswordAuthentication

use of com.laurentiuspilca.ssc6.security.authentications.UsernamePasswordAuthentication in project youtubechannel by lspil.

the class UsernamePasswordAuthProvider method authenticate.

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    String username = authentication.getName();
    String password = (String) authentication.getCredentials();
    UserDetails user = userDetailsService.loadUserByUsername(username);
    if (passwordEncoder.matches(password, user.getPassword())) {
        return new UsernamePasswordAuthentication(username, password, user.getAuthorities());
    }
    throw new BadCredentialsException(":(");
}