Examples with FilterChain jakarta.servlet.FilterChain used on opensource projects

Example 96 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class ConcurrentSessionFilterTests method lastRequestTimeUpdatesCorrectly.

@Test
public void lastRequestTimeUpdatesCorrectly() throws Exception {
    // Setup our HTTP request
    MockHttpServletRequest request = new MockHttpServletRequest();
    MockHttpSession session = new MockHttpSession();
    request.setSession(session);
    MockHttpServletResponse response = new MockHttpServletResponse();
    FilterChain fc = mock(FilterChain.class);
    // Setup our test fixture
    SessionRegistry registry = new SessionRegistryImpl();
    registry.registerNewSession(session.getId(), "principal");
    SimpleRedirectSessionInformationExpiredStrategy expiredSessionStrategy = new SimpleRedirectSessionInformationExpiredStrategy("/expired.jsp");
    ConcurrentSessionFilter filter = new ConcurrentSessionFilter(registry, expiredSessionStrategy);
    Date lastRequest = registry.getSessionInformation(session.getId()).getLastRequest();
    Thread.sleep(1000);
    filter.doFilter(request, response, fc);
    verify(fc).doFilter(request, response);
    assertThat(registry.getSessionInformation(session.getId()).getLastRequest().after(lastRequest)).isTrue();
}

Example 97 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class BasicAuthenticationFilterTests method testFilterIgnoresRequestsContainingNoAuthorizationHeader.

@Test
public void testFilterIgnoresRequestsContainingNoAuthorizationHeader() throws Exception {
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.setServletPath("/some_file.html");
    final MockHttpServletResponse response = new MockHttpServletResponse();
    FilterChain chain = mock(FilterChain.class);
    this.filter.doFilter(request, response, chain);
    verify(chain).doFilter(any(ServletRequest.class), any(ServletResponse.class));
    // Test
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isNull();
}

Example 98 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class BasicAuthenticationFilterTests method invalidBase64IsIgnored.

@Test
public void invalidBase64IsIgnored() throws Exception {
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.addHeader("Authorization", "Basic NOT_VALID_BASE64");
    request.setServletPath("/some_file.html");
    request.setSession(new MockHttpSession());
    final MockHttpServletResponse response = new MockHttpServletResponse();
    FilterChain chain = mock(FilterChain.class);
    this.filter.doFilter(request, response, chain);
    // The filter chain shouldn't proceed
    verify(chain, never()).doFilter(any(ServletRequest.class), any(ServletResponse.class));
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isNull();
    assertThat(response.getStatus()).isEqualTo(401);
}

Example 99 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class SecurityContextPersistenceFilterTests method nullSecurityContextRepoDoesntSaveContextOrCreateSession.

@Test
public void nullSecurityContextRepoDoesntSaveContextOrCreateSession() throws Exception {
    final FilterChain chain = mock(FilterChain.class);
    final MockHttpServletRequest request = new MockHttpServletRequest();
    final MockHttpServletResponse response = new MockHttpServletResponse();
    SecurityContextRepository repo = new NullSecurityContextRepository();
    SecurityContextPersistenceFilter filter = new SecurityContextPersistenceFilter(repo);
    filter.doFilter(request, response, chain);
    assertThat(repo.containsContext(request)).isFalse();
    assertThat(request.getSession(false)).isNull();
}

Example 100 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class SecurityContextPersistenceFilterTests method contextIsStillClearedIfExceptionIsThrowByFilterChain.

@Test
public void contextIsStillClearedIfExceptionIsThrowByFilterChain() throws Exception {
    final FilterChain chain = mock(FilterChain.class);
    final MockHttpServletRequest request = new MockHttpServletRequest();
    final MockHttpServletResponse response = new MockHttpServletResponse();
    SecurityContextPersistenceFilter filter = new SecurityContextPersistenceFilter();
    SecurityContextHolder.getContext().setAuthentication(this.testToken);
    willThrow(new IOException()).given(chain).doFilter(any(ServletRequest.class), any(ServletResponse.class));
    assertThatIOException().isThrownBy(() -> filter.doFilter(request, response, chain));
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isNull();
}