Examples with SecurityContext io.undertow.security.api.SecurityContext used on opensource projects

Example 6 with SecurityContext

use of io.undertow.security.api.SecurityContext in project undertow by undertow-io.

the class HttpServletRequestImpl method logout.

@Override
public void logout() throws ServletException {
    SecurityContext sc = exchange.getSecurityContext();
    sc.logout();
    if (servletContext.getDeployment().getDeploymentInfo().isInvalidateSessionOnLogout()) {
        HttpSession session = getSession(false);
        if (session != null) {
            session.invalidate();
        }
    }
}

Example 7 with SecurityContext

use of io.undertow.security.api.SecurityContext in project undertow by undertow-io.

the class HttpServletRequestImpl method isUserInRole.

@Override
public boolean isUserInRole(final String role) {
    if (role == null) {
        return false;
    }
    //according to the servlet spec this aways returns false
    if (role.equals("*")) {
        return false;
    }
    SecurityContext sc = exchange.getSecurityContext();
    Account account = sc.getAuthenticatedAccount();
    if (account == null) {
        return false;
    }
    ServletRequestContext servletRequestContext = exchange.getAttachment(ServletRequestContext.ATTACHMENT_KEY);
    if (role.equals("**")) {
        Set<String> roles = servletRequestContext.getDeployment().getDeploymentInfo().getSecurityRoles();
        if (!roles.contains("**")) {
            return true;
        }
    }
    final ServletChain servlet = servletRequestContext.getCurrentServlet();
    final Deployment deployment = servletContext.getDeployment();
    final AuthorizationManager authorizationManager = deployment.getDeploymentInfo().getAuthorizationManager();
    return authorizationManager.isUserInRole(role, account, servlet.getManagedServlet().getServletInfo(), this, deployment);
}

Example 8 with SecurityContext

use of io.undertow.security.api.SecurityContext in project undertow by undertow-io.

the class HttpServletRequestImpl method login.

@Override
public void login(final String username, final String password) throws ServletException {
    if (username == null || password == null) {
        throw UndertowServletMessages.MESSAGES.loginFailed();
    }
    SecurityContext sc = exchange.getSecurityContext();
    if (sc.isAuthenticated()) {
        throw UndertowServletMessages.MESSAGES.userAlreadyLoggedIn();
    }
    boolean login = false;
    try {
        login = sc.login(username, password);
    } catch (SecurityException se) {
        if (se.getCause() instanceof ServletException)
            throw (ServletException) se.getCause();
        throw new ServletException(se);
    }
    if (!login) {
        throw UndertowServletMessages.MESSAGES.loginFailed();
    }
}

Example 9 with SecurityContext

use of io.undertow.security.api.SecurityContext in project undertow by undertow-io.

the class CachedAuthenticatedSessionHandler method handleRequest.

@Override
public void handleRequest(HttpServerExchange exchange) throws Exception {
    SecurityContext securityContext = exchange.getSecurityContext();
    securityContext.registerNotificationReceiver(NOTIFICATION_RECEIVER);
    HttpSession session = servletContext.getSession(exchange, false);
    // the AuthenticatedSessionManager.
    if (session != null) {
        exchange.putAttachment(AuthenticatedSessionManager.ATTACHMENT_KEY, SESSION_MANAGER);
        //not sure if this is where it belongs
        SavedRequest.tryRestoreRequest(exchange, session);
    }
    next.handleRequest(exchange);
}

Example 10 with SecurityContext

use of io.undertow.security.api.SecurityContext in project undertow by undertow-io.

the class HttpServletRequestImpl method getUserPrincipal.

@Override
public Principal getUserPrincipal() {
    SecurityContext securityContext = exchange.getSecurityContext();
    Principal result = null;
    Account account = null;
    if (securityContext != null && (account = securityContext.getAuthenticatedAccount()) != null) {
        result = account.getPrincipal();
    }
    return result;
}