Search in sources :

Example 21 with SaslNegotiator

use of org.apache.qpid.server.security.auth.sasl.SaslNegotiator in project qpid-broker-j by apache.

the class SimpleAuthenticationManagerTest method authenticateCramMd5.

private AuthenticationResult authenticateCramMd5(String userName, String userPassword) throws Exception {
    SaslSettings saslSettings = mock(SaslSettings.class);
    when(saslSettings.getLocalFQDN()).thenReturn("testHost");
    SaslNegotiator saslNegotiator = _authenticationManager.createSaslNegotiator("CRAM-MD5", saslSettings, null);
    AuthenticationResult result = saslNegotiator.handleResponse(new byte[0]);
    assertEquals("Unexpected SASL status", AuthenticationStatus.CONTINUE, result.getStatus());
    byte[] challenge = result.getChallenge();
    byte[] response = SaslUtil.generateCramMD5ClientResponse(userName, userPassword, challenge);
    return saslNegotiator.handleResponse(response);
}
Also used : SaslSettings(org.apache.qpid.server.security.auth.sasl.SaslSettings) SaslNegotiator(org.apache.qpid.server.security.auth.sasl.SaslNegotiator) AuthenticationResult(org.apache.qpid.server.security.auth.AuthenticationResult)

Example 22 with SaslNegotiator

use of org.apache.qpid.server.security.auth.sasl.SaslNegotiator in project qpid-broker-j by apache.

the class OAuth2AuthenticationProviderImplTest method testFailAuthenticateViaSasl.

public void testFailAuthenticateViaSasl() throws Exception {
    OAuth2MockEndpoint mockIdentityResolverEndpoint = createMockIdentityResolverEndpoint();
    mockIdentityResolverEndpoint.putExpectedParameter("token", TEST_INVALID_ACCESS_TOKEN);
    mockIdentityResolverEndpoint.setResponse(400, "{\"error\":\"invalid_token\"}");
    _server.setEndpoints(Collections.singletonMap(TEST_IDENTITY_RESOLVER_ENDPOINT_PATH, mockIdentityResolverEndpoint));
    final SaslNegotiator negotiator = _authProvider.createSaslNegotiator(OAuth2Negotiator.MECHANISM, null, null);
    AuthenticationResult authenticationResult = negotiator.handleResponse(("auth=Bearer " + TEST_INVALID_ACCESS_TOKEN + "\1\1").getBytes(UTF8));
    assertFailure(authenticationResult, "invalid_token");
}
Also used : SaslNegotiator(org.apache.qpid.server.security.auth.sasl.SaslNegotiator) AuthenticationResult(org.apache.qpid.server.security.auth.AuthenticationResult)

Aggregations

SaslNegotiator (org.apache.qpid.server.security.auth.sasl.SaslNegotiator)22 AuthenticationResult (org.apache.qpid.server.security.auth.AuthenticationResult)13 X500Principal (javax.security.auth.x500.X500Principal)7 SaslSettings (org.apache.qpid.server.security.auth.sasl.SaslSettings)7 UsernamePrincipal (org.apache.qpid.server.security.auth.UsernamePrincipal)5 SubjectCreator (org.apache.qpid.server.security.SubjectCreator)2 InetSocketAddress (java.net.InetSocketAddress)1 Subject (javax.security.auth.Subject)1 HttpSession (javax.servlet.http.HttpSession)1 TaskExecutorImpl (org.apache.qpid.server.configuration.updater.TaskExecutorImpl)1 EventLogger (org.apache.qpid.server.logging.EventLogger)1 SessionInvalidatedException (org.apache.qpid.server.management.plugin.SessionInvalidatedException)1 AuthenticationProvider (org.apache.qpid.server.model.AuthenticationProvider)1 Broker (org.apache.qpid.server.model.Broker)1 BrokerModel (org.apache.qpid.server.model.BrokerModel)1 Model (org.apache.qpid.server.model.Model)1 SystemConfig (org.apache.qpid.server.model.SystemConfig)1 VirtualHostNode (org.apache.qpid.server.model.VirtualHostNode)1 AmqpPort (org.apache.qpid.server.model.port.AmqpPort)1 AuthenticatedPrincipal (org.apache.qpid.server.security.auth.AuthenticatedPrincipal)1