Examples with ClaimsCollection ddf.security.claims.ClaimsCollection used on opensource projects

Example 16 with ClaimsCollection

use of ddf.security.claims.ClaimsCollection in project ddf by codice.

the class UsernamePasswordRealm method createPrincipalCollectionFromSubject.

private SimplePrincipalCollection createPrincipalCollectionFromSubject(Subject subject) {
    SimplePrincipalCollection principals = new SimplePrincipalCollection();
    DefaultSecurityAssertionBuilder assertionBuilder = new DefaultSecurityAssertionBuilder();
    AttributeStatement attributeStatement = new AttributeStatementDefault();
    Principal userPrincipal = subject.getPrincipals().stream().filter(p -> p instanceof UserPrincipal).findFirst().orElseThrow(AuthenticationException::new);
    Set<Principal> rolePrincipals = subject.getPrincipals().stream().filter(p -> p instanceof RolePrincipal).collect(Collectors.toSet());
    for (ClaimsHandler claimsHandler : claimsHandlers) {
        ClaimsCollection claims = claimsHandler.retrieveClaims(new ClaimsParametersImpl(userPrincipal, rolePrincipals, new HashMap<>()));
        mergeClaimsToAttributes(attributeStatement, claims);
    }
    final Instant now = Instant.now();
    assertionBuilder.addAttributeStatement(attributeStatement).userPrincipal(userPrincipal).weight(SecurityAssertion.LOCAL_AUTH_WEIGHT).issuer("DDF").notBefore(Date.from(now)).notOnOrAfter(Date.from(now.plus(fourHours)));
    for (Principal principal : rolePrincipals) {
        assertionBuilder.addPrincipal(principal);
    }
    assertionBuilder.tokenType(USER_PASS_TOKEN_TYPE);
    SecurityAssertion assertion = assertionBuilder.build();
    principals.add(assertion, "UP");
    return principals;
}

Example 17 with ClaimsCollection

use of ddf.security.claims.ClaimsCollection in project ddf by codice.

the class UsernamePasswordRealmTest method setup.

@Before
public void setup() {
    List<ClaimsHandler> claimsHandlers = new ArrayList<>();
    claimsHandlers.add(mock(ClaimsHandler.class));
    claimsHandlers.add(mock(ClaimsHandler.class));
    ClaimsCollection claims1 = new ClaimsCollectionImpl();
    ClaimImpl email1 = new ClaimImpl("email");
    email1.addValue("test@example.com");
    claims1.add(email1);
    ClaimsCollection claims2 = new ClaimsCollectionImpl();
    ClaimImpl email2 = new ClaimImpl("email");
    email2.addValue("tester@example.com");
    claims2.add(email2);
    when(claimsHandlers.get(0).retrieveClaims(any())).thenReturn(claims1);
    when(claimsHandlers.get(1).retrieveClaims(any())).thenReturn(claims2);
    upRealm.setClaimsHandlers(claimsHandlers);
    JaasRealm jaasRealm = mock(JaasRealm.class);
    when(jaasRealm.getName()).thenReturn("realm");
    upRealm.realmList.add(jaasRealm);
}

Example 18 with ClaimsCollection

use of ddf.security.claims.ClaimsCollection in project ddf by codice.

the class AttributeQueryClaimsHandler method retrieveClaims.

/**
 * Retrieves claims from the external attribute store.
 *
 * @param parameters The subject to get claims for.
 * @return The collection of claims or an empty collection if there are no security claims.
 * @throws URISyntaxException
 */
@Override
public ClaimsCollection retrieveClaims(ClaimsParameters parameters) {
    ClaimsCollection claimCollection = new ClaimsCollectionImpl();
    Principal principal = parameters.getPrincipal();
    if (principal == null) {
        return claimCollection;
    }
    String nameId = getNameId(principal);
    try {
        if (!StringUtils.isEmpty(nameId)) {
            ClaimsCollection securityClaimCollection = getAttributes(nameId);
            // If security claim collection came back empty, return an empty claim collection.
            if (!CollectionUtils.isEmpty(securityClaimCollection)) {
                claimCollection.addAll(securityClaimCollection);
            }
        }
    } catch (URISyntaxException e) {
        LOGGER.info(ERROR_RETRIEVING_ATTRIBUTES + "Set log level to DEBUG for more information.", externalAttributeStoreUrl, nameId);
        LOGGER.debug(ERROR_RETRIEVING_ATTRIBUTES, externalAttributeStoreUrl, nameId, e);
    }
    return claimCollection;
}

Example 19 with ClaimsCollection

use of ddf.security.claims.ClaimsCollection in project ddf by codice.

the class AttributeQueryClaimsHandlerTest method testRetrieveClaimsValuesNullPrincipal.

@Test
public void testRetrieveClaimsValuesNullPrincipal() {
    ClaimsParameters claimsParameters = mock(ClaimsParameters.class);
    when(claimsParameters.getPrincipal()).thenReturn(null);
    ClaimsCollection processedClaims = spyAttributeQueryClaimsHandler.retrieveClaims(claimsParameters);
    assertThat(processedClaims.size(), is(equalTo(0)));
}

Example 20 with ClaimsCollection

use of ddf.security.claims.ClaimsCollection in project ddf by codice.

the class LdapClaimsHandlerTest method testUnsuccessfulConnectionBind.

@Test
public void testUnsuccessfulConnectionBind() throws LdapException {
    when(mockBindResult.isSuccess()).thenReturn(false);
    ClaimsCollection testClaimCollection = claimsHandler.retrieveClaims(claimsParameters);
    assertThat(testClaimCollection.isEmpty(), is(true));
}