Examples with FilterChain jakarta.servlet.FilterChain used on opensource projects

Example 41 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class SecurityContextPersistenceFilterTests method contextIsClearedAfterChainProceeds.

@Test
public void contextIsClearedAfterChainProceeds() throws Exception {
    final FilterChain chain = mock(FilterChain.class);
    final MockHttpServletRequest request = new MockHttpServletRequest();
    final MockHttpServletResponse response = new MockHttpServletResponse();
    SecurityContextPersistenceFilter filter = new SecurityContextPersistenceFilter();
    SecurityContextHolder.getContext().setAuthentication(this.testToken);
    filter.doFilter(request, response, chain);
    verify(chain).doFilter(any(ServletRequest.class), any(ServletResponse.class));
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isNull();
}

Example 42 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class DigestAuthenticationFilterTests method executeFilterInContainerSimulator.

private MockHttpServletResponse executeFilterInContainerSimulator(Filter filter, final ServletRequest request, final boolean expectChainToProceed) throws ServletException, IOException {
    final MockHttpServletResponse response = new MockHttpServletResponse();
    final FilterChain chain = mock(FilterChain.class);
    filter.doFilter(request, response, chain);
    verify(chain, times(expectChainToProceed ? 1 : 0)).doFilter(request, response);
    return response;
}

Example 43 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class RememberMeAuthenticationFilterTests method testOperationWhenAuthenticationExistsInContextHolder.

@Test
public void testOperationWhenAuthenticationExistsInContextHolder() throws Exception {
    // Put an Authentication object into the SecurityContextHolder
    Authentication originalAuth = new TestingAuthenticationToken("user", "password", "ROLE_A");
    SecurityContextHolder.getContext().setAuthentication(originalAuth);
    // Setup our filter correctly
    RememberMeAuthenticationFilter filter = new RememberMeAuthenticationFilter(mock(AuthenticationManager.class), new MockRememberMeServices(this.remembered));
    filter.afterPropertiesSet();
    // Test
    MockHttpServletRequest request = new MockHttpServletRequest();
    FilterChain fc = mock(FilterChain.class);
    request.setRequestURI("x");
    filter.doFilter(request, new MockHttpServletResponse(), fc);
    // Ensure filter didn't change our original object
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isSameAs(originalAuth);
    verify(fc).doFilter(any(HttpServletRequest.class), any(HttpServletResponse.class));
}

Example 44 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class RememberMeAuthenticationFilterTests method testOperationWhenNoAuthenticationInContextHolder.

@Test
public void testOperationWhenNoAuthenticationInContextHolder() throws Exception {
    AuthenticationManager am = mock(AuthenticationManager.class);
    given(am.authenticate(this.remembered)).willReturn(this.remembered);
    RememberMeAuthenticationFilter filter = new RememberMeAuthenticationFilter(am, new MockRememberMeServices(this.remembered));
    filter.afterPropertiesSet();
    MockHttpServletRequest request = new MockHttpServletRequest();
    FilterChain fc = mock(FilterChain.class);
    request.setRequestURI("x");
    filter.doFilter(request, new MockHttpServletResponse(), fc);
    // Ensure filter setup with our remembered authentication object
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isSameAs(this.remembered);
    verify(fc).doFilter(any(HttpServletRequest.class), any(HttpServletResponse.class));
}

Example 45 with FilterChain

use of jakarta.servlet.FilterChain in project spring-security by spring-projects.

the class RememberMeAuthenticationFilterTests method authenticationSuccessHandlerIsInvokedOnSuccessfulAuthenticationIfSet.

@Test
public void authenticationSuccessHandlerIsInvokedOnSuccessfulAuthenticationIfSet() throws Exception {
    AuthenticationManager am = mock(AuthenticationManager.class);
    given(am.authenticate(this.remembered)).willReturn(this.remembered);
    RememberMeAuthenticationFilter filter = new RememberMeAuthenticationFilter(am, new MockRememberMeServices(this.remembered));
    filter.setAuthenticationSuccessHandler(new SimpleUrlAuthenticationSuccessHandler("/target"));
    MockHttpServletRequest request = new MockHttpServletRequest();
    MockHttpServletResponse response = new MockHttpServletResponse();
    FilterChain fc = mock(FilterChain.class);
    request.setRequestURI("x");
    filter.doFilter(request, response, fc);
    assertThat(response.getRedirectedUrl()).isEqualTo("/target");
    // Should return after success handler is invoked, so chain should not proceed
    verifyZeroInteractions(fc);
}