Examples with WebSubjectContext org.apache.shiro.web.subject.WebSubjectContext used on opensource projects

Example 1 with WebSubjectContext

use of org.apache.shiro.web.subject.WebSubjectContext in project shiro by apache.

the class CookieRememberMeManagerTest method getRememberedSerializedIdentityReturnsNullForDeletedCookie.

// SHIRO-183
@Test
public void getRememberedSerializedIdentityReturnsNullForDeletedCookie() {
    HttpServletRequest mockRequest = createMock(HttpServletRequest.class);
    HttpServletResponse mockResponse = createMock(HttpServletResponse.class);
    WebSubjectContext context = new DefaultWebSubjectContext();
    context.setServletRequest(mockRequest);
    context.setServletResponse(mockResponse);
    expect(mockRequest.getAttribute(ShiroHttpServletRequest.IDENTITY_REMOVED_KEY)).andReturn(null);
    Cookie[] cookies = new Cookie[] { new Cookie(CookieRememberMeManager.DEFAULT_REMEMBER_ME_COOKIE_NAME, org.apache.shiro.web.servlet.Cookie.DELETED_COOKIE_VALUE) };
    expect(mockRequest.getCookies()).andReturn(cookies);
    replay(mockRequest);
    CookieRememberMeManager mgr = new CookieRememberMeManager();
    assertNull(mgr.getRememberedSerializedIdentity(context));
}

Example 2 with WebSubjectContext

use of org.apache.shiro.web.subject.WebSubjectContext in project shiro by apache.

the class DefaultWebSecurityManager method createSessionContext.

@Override
protected SessionContext createSessionContext(SubjectContext subjectContext) {
    SessionContext sessionContext = super.createSessionContext(subjectContext);
    if (subjectContext instanceof WebSubjectContext) {
        WebSubjectContext wsc = (WebSubjectContext) subjectContext;
        ServletRequest request = wsc.resolveServletRequest();
        ServletResponse response = wsc.resolveServletResponse();
        DefaultWebSessionContext webSessionContext = new DefaultWebSessionContext(sessionContext);
        if (request != null) {
            webSessionContext.setServletRequest(request);
        }
        if (response != null) {
            webSessionContext.setServletResponse(response);
        }
        sessionContext = webSessionContext;
    }
    return sessionContext;
}

Example 3 with WebSubjectContext

use of org.apache.shiro.web.subject.WebSubjectContext in project shiro by apache.

the class CookieRememberMeManagerTest method getRememberedPrincipalsDecryptionError.

// SHIRO-69
@Test
public void getRememberedPrincipalsDecryptionError() {
    HttpServletRequest mockRequest = createNiceMock(HttpServletRequest.class);
    HttpServletResponse mockResponse = createNiceMock(HttpServletResponse.class);
    WebSubjectContext context = new DefaultWebSubjectContext();
    context.setServletRequest(mockRequest);
    context.setServletResponse(mockResponse);
    expect(mockRequest.getAttribute(ShiroHttpServletRequest.IDENTITY_REMOVED_KEY)).andReturn(null);
    // Simulate a bad return value here (for example if this was encrypted with a different key
    final String userPCAesBase64 = "garbage";
    Cookie[] cookies = new Cookie[] { new Cookie(CookieRememberMeManager.DEFAULT_REMEMBER_ME_COOKIE_NAME, userPCAesBase64) };
    expect(mockRequest.getCookies()).andReturn(cookies).anyTimes();
    replay(mockRequest);
    CookieRememberMeManager mgr = new CookieRememberMeManager();
    try {
        mgr.getRememberedPrincipals(context);
    } catch (CryptoException expected) {
        return;
    }
    fail("CryptoException was expected to be thrown");
}

Example 4 with WebSubjectContext

use of org.apache.shiro.web.subject.WebSubjectContext in project shiro by apache.

the class CookieRememberMeManagerTest method getRememberedPrincipalsNoMoreDefaultCipher.

@Test(expected = CryptoException.class)
public void getRememberedPrincipalsNoMoreDefaultCipher() {
    HttpServletRequest mockRequest = createMock(HttpServletRequest.class);
    HttpServletResponse mockResponse = createMock(HttpServletResponse.class);
    WebSubjectContext context = new DefaultWebSubjectContext();
    context.setServletRequest(mockRequest);
    context.setServletResponse(mockResponse);
    expect(mockRequest.getAttribute(ShiroHttpServletRequest.IDENTITY_REMOVED_KEY)).andReturn(null);
    expect(mockRequest.getContextPath()).andReturn("/test");
    // The following base64 string was determined from the log output of the above 'onSuccessfulLogin' test.
    // This will have to change any time the PrincipalCollection implementation changes:
    final String userPCAesBase64 = "WlD5MLzzZznN3dQ1lPJO/eScSuY245k29aECNmjUs31o7Yu478hWhaM5Sj" + "jmoe900/72JNu3hcJaPG6Q17Vuz4F8x0kBjbFnPVx4PqzsZYT6yreeS2jwO6OwfI+efqXOKyB2a5KPtnr" + "7jt5kZsyH38XJISb81cf6xqTGUru8zC+kNqJFz7E5RpO0kraBofS5jhMm45gDVjDRkjgPJAzocVWMtrza" + "zy67P8eb+kMSBCqGI251JTNAGboVgQ28KjfaAJ/6LXRJUj7kB7CGia7mgRk+hxzEJGDs81at5VOPqODJr" + "xb8tcIdemFUFIkiYVP9bGs4dP3ECtmw7aNrCzv+84sx3vRFUrd5DbDYpEuE12hF2Y9owDK9sxStbXoF0y" + "A32dhfGDIqS+agsass0sWn8WX2TM9i8SxrUjiFbxqyIG49HbqGrZp5QLM9IuIwO+TzGfF1FzumQGdwmWT" + "xkVapw5UESl34YvA615cb+82ue1I=";
    Cookie[] cookies = new Cookie[] { new Cookie(CookieRememberMeManager.DEFAULT_REMEMBER_ME_COOKIE_NAME, userPCAesBase64) };
    expect(mockRequest.getCookies()).andReturn(cookies);
    replay(mockRequest);
    CookieRememberMeManager mgr = new CookieRememberMeManager();
    // without the old default cipher set, this will fail (expected)
    // mgr.setCipherKey( Base64.decode("kPH+bIxk5D2deZiIxcaaaA=="));
    // this will throw a CryptoException
    mgr.getRememberedPrincipals(context);
}

Example 5 with WebSubjectContext

use of org.apache.shiro.web.subject.WebSubjectContext in project shiro by apache.

the class CookieRememberMeManagerTest method getRememberedPrincipals.

// SHIRO-69
@Test
public void getRememberedPrincipals() {
    HttpServletRequest mockRequest = createMock(HttpServletRequest.class);
    HttpServletResponse mockResponse = createMock(HttpServletResponse.class);
    WebSubjectContext context = new DefaultWebSubjectContext();
    context.setServletRequest(mockRequest);
    context.setServletResponse(mockResponse);
    expect(mockRequest.getAttribute(ShiroHttpServletRequest.IDENTITY_REMOVED_KEY)).andReturn(null);
    // The following base64 string was determined from the log output of the above 'onSuccessfulLogin' test.
    // This will have to change any time the PrincipalCollection implementation changes:
    final String userPCAesBase64 = "WlD5MLzzZznN3dQ1lPJO/eScSuY245k29aECNmjUs31o7Yu478hWhaM5Sj" + "jmoe900/72JNu3hcJaPG6Q17Vuz4F8x0kBjbFnPVx4PqzsZYT6yreeS2jwO6OwfI+efqXOKyB2a5KPtnr" + "7jt5kZsyH38XJISb81cf6xqTGUru8zC+kNqJFz7E5RpO0kraBofS5jhMm45gDVjDRkjgPJAzocVWMtrza" + "zy67P8eb+kMSBCqGI251JTNAGboVgQ28KjfaAJ/6LXRJUj7kB7CGia7mgRk+hxzEJGDs81at5VOPqODJr" + "xb8tcIdemFUFIkiYVP9bGs4dP3ECtmw7aNrCzv+84sx3vRFUrd5DbDYpEuE12hF2Y9owDK9sxStbXoF0y" + "A32dhfGDIqS+agsass0sWn8WX2TM9i8SxrUjiFbxqyIG49HbqGrZp5QLM9IuIwO+TzGfF1FzumQGdwmWT" + "xkVapw5UESl34YvA615cb+82ue1I=";
    Cookie[] cookies = new Cookie[] { new Cookie(CookieRememberMeManager.DEFAULT_REMEMBER_ME_COOKIE_NAME, userPCAesBase64) };
    expect(mockRequest.getCookies()).andReturn(cookies);
    replay(mockRequest);
    CookieRememberMeManager mgr = new CookieRememberMeManager();
    mgr.setCipherKey(Base64.decode("kPH+bIxk5D2deZiIxcaaaA=="));
    PrincipalCollection collection = mgr.getRememberedPrincipals(context);
    verify(mockRequest);
    assertTrue(collection != null);
    // noinspection ConstantConditions
    assertTrue(collection.iterator().next().equals("user"));
}