Examples with DefaultRegisteredServiceAuthenticationPolicy org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy used on opensource projects

Example 1 with DefaultRegisteredServiceAuthenticationPolicy

use of org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy in project cas by apereo.

the class RegisteredServiceAuthenticationPolicySingleSignOnParticipationStrategyTests method verifySsoWithHandlers.

@Test
public void verifySsoWithHandlers() throws Exception {
    val appCtx = new StaticApplicationContext();
    appCtx.refresh();
    val context = new MockRequestContext();
    val request = new MockHttpServletRequest();
    val response = new MockHttpServletResponse();
    context.setExternalContext(new ServletExternalContext(new MockServletContext(), request, response));
    val svc = RegisteredServiceTestUtils.getRegisteredService("serviceid1", Map.of());
    val policy = new DefaultRegisteredServiceAuthenticationPolicy();
    policy.setRequiredAuthenticationHandlers(Set.of(SimpleTestUsernamePasswordAuthenticationHandler.class.getSimpleName()));
    svc.setAuthenticationPolicy(policy);
    val ticketRegistry = new DefaultTicketRegistry();
    val strategy = getSingleSignOnStrategy(svc, ticketRegistry);
    WebUtils.putServiceIntoFlowScope(context, CoreAuthenticationTestUtils.getWebApplicationService("serviceid1"));
    val tgt = new MockTicketGrantingTicket("casuser");
    ticketRegistry.addTicket(tgt);
    WebUtils.putTicketGrantingTicketInScopes(context, tgt);
    val ssoRequest = SingleSignOnParticipationRequest.builder().httpServletRequest(request).requestContext(context).build();
    assertTrue(strategy.supports(ssoRequest));
    assertTrue(strategy.isParticipating(ssoRequest));
}

Example 2 with DefaultRegisteredServiceAuthenticationPolicy

use of org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy in project cas by apereo.

the class RegisteredServiceAuthenticationPolicySingleSignOnParticipationStrategyTests method verifySsoWithExcludedHandlers.

@Test
public void verifySsoWithExcludedHandlers() throws Exception {
    val appCtx = new StaticApplicationContext();
    appCtx.refresh();
    val context = new MockRequestContext();
    val request = new MockHttpServletRequest();
    val response = new MockHttpServletResponse();
    context.setExternalContext(new ServletExternalContext(new MockServletContext(), request, response));
    val svc = RegisteredServiceTestUtils.getRegisteredService("serviceid1", Map.of());
    val policy = new DefaultRegisteredServiceAuthenticationPolicy();
    policy.setCriteria(new ExcludedAuthenticationHandlersRegisteredServiceAuthenticationPolicyCriteria());
    policy.setExcludedAuthenticationHandlers(Set.of(SimpleTestUsernamePasswordAuthenticationHandler.class.getName()));
    svc.setAuthenticationPolicy(policy);
    val ticketRegistry = new DefaultTicketRegistry();
    val strategy = getSingleSignOnStrategy(svc, ticketRegistry);
    WebUtils.putServiceIntoFlowScope(context, CoreAuthenticationTestUtils.getWebApplicationService("serviceid1"));
    val tgt = new MockTicketGrantingTicket("casuser");
    ticketRegistry.addTicket(tgt);
    WebUtils.putTicketGrantingTicketInScopes(context, tgt);
    val ssoRequest = SingleSignOnParticipationRequest.builder().httpServletRequest(request).requestContext(context).build();
    assertTrue(strategy.supports(ssoRequest));
    assertFalse(strategy.isParticipating(ssoRequest));
}

Example 3 with DefaultRegisteredServiceAuthenticationPolicy

use of org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy in project cas by apereo.

the class RegisteredServiceAuthenticationPolicySingleSignOnParticipationStrategyTests method verifyNoServiceOrPolicy.

@Test
public void verifyNoServiceOrPolicy() {
    val context = new MockRequestContext();
    val request = new MockHttpServletRequest();
    val response = new MockHttpServletResponse();
    context.setExternalContext(new ServletExternalContext(new MockServletContext(), request, response));
    val svc = RegisteredServiceTestUtils.getRegisteredService("serviceid1", Map.of());
    val policy = new DefaultRegisteredServiceAuthenticationPolicy();
    policy.setCriteria(null);
    svc.setAuthenticationPolicy(policy);
    val ticketRegistry = new DefaultTicketRegistry();
    val strategy = getSingleSignOnStrategy(svc, ticketRegistry);
    val ssoRequest = SingleSignOnParticipationRequest.builder().httpServletRequest(request).requestContext(context).build();
    assertTrue(strategy.isParticipating(ssoRequest));
    WebUtils.putRegisteredService(context, svc);
    assertEquals(0, strategy.getOrder());
    assertFalse(strategy.supports(ssoRequest));
    svc.setAuthenticationPolicy(null);
    assertTrue(strategy.isParticipating(ssoRequest));
}

Example 4 with DefaultRegisteredServiceAuthenticationPolicy

use of org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy in project cas by apereo.

the class RegisteredServiceAuthenticationPolicySingleSignOnParticipationStrategyTests method verifySsoWithMismatchedHandlers.

@Test
public void verifySsoWithMismatchedHandlers() throws Exception {
    val appCtx = new StaticApplicationContext();
    appCtx.refresh();
    val context = new MockRequestContext();
    val request = new MockHttpServletRequest();
    val response = new MockHttpServletResponse();
    context.setExternalContext(new ServletExternalContext(new MockServletContext(), request, response));
    val svc = RegisteredServiceTestUtils.getRegisteredService("serviceid1", Map.of());
    val policy = new DefaultRegisteredServiceAuthenticationPolicy();
    policy.setRequiredAuthenticationHandlers(Set.of("SomeOtherHandler"));
    policy.setCriteria(new AllowedAuthenticationHandlersRegisteredServiceAuthenticationPolicyCriteria());
    svc.setAuthenticationPolicy(policy);
    val ticketRegistry = new DefaultTicketRegistry();
    val strategy = getSingleSignOnStrategy(svc, ticketRegistry);
    WebUtils.putServiceIntoFlowScope(context, CoreAuthenticationTestUtils.getWebApplicationService("serviceid1"));
    val tgt = new MockTicketGrantingTicket("casuser");
    ticketRegistry.addTicket(tgt);
    WebUtils.putTicketGrantingTicketInScopes(context, tgt);
    val ssoRequest = SingleSignOnParticipationRequest.builder().httpServletRequest(request).requestContext(context).build();
    assertTrue(strategy.supports(ssoRequest));
    assertFalse(strategy.isParticipating(ssoRequest));
}

Example 5 with DefaultRegisteredServiceAuthenticationPolicy

use of org.apereo.cas.services.DefaultRegisteredServiceAuthenticationPolicy in project cas by apereo.

the class DelegatedClientAuthenticationActionTests method verifySsoAuthenticationWithUnauthorizedSso.

@Test
public void verifySsoAuthenticationWithUnauthorizedSso() throws Exception {
    val context = new MockRequestContext();
    val request = new MockHttpServletRequest();
    val response = new MockHttpServletResponse();
    val client = builtClients.findClient("FacebookClient").get();
    val webContext = new JEEContext(request, new MockHttpServletResponse());
    request.setParameter(Pac4jConstants.DEFAULT_CLIENT_NAME_PARAMETER, "FacebookClient");
    val service = CoreAuthenticationTestUtils.getService("https://delegated2-authn-policy.example.org");
    val registeredService = RegisteredServiceTestUtils.getRegisteredService(service.getId(), Map.of());
    val authenticationPolicy = new DefaultRegisteredServiceAuthenticationPolicy();
    authenticationPolicy.setRequiredAuthenticationHandlers(Set.of("DelegatedClientAuthenticationHandler"));
    authenticationPolicy.setCriteria(new AllAuthenticationHandlersRegisteredServiceAuthenticationPolicyCriteria());
    registeredService.setAuthenticationPolicy(authenticationPolicy);
    servicesManager.save(registeredService);
    request.addParameter(CasProtocolConstants.PARAMETER_SERVICE, service.getId());
    val ticket = delegatedClientAuthenticationWebflowManager.store(webContext, client);
    request.addParameter(DefaultDelegatedClientAuthenticationWebflowManager.PARAMETER_CLIENT_ID, ticket.getId());
    context.setExternalContext(new ServletExternalContext(new MockServletContext(), request, response));
    setRequestContext(context);
    setExternalContext(context.getExternalContext());
    val tgt = new MockTicketGrantingTicket("casuser");
    centralAuthenticationService.addTicket(tgt);
    WebUtils.putTicketGrantingTicketInScopes(context, tgt);
    assertEquals(CasWebflowConstants.TRANSITION_ID_SUCCESS, delegatedAuthenticationAction.execute(context).getId());
    assertThrows(InvalidTicketException.class, () -> centralAuthenticationService.getTicket(tgt.getId()));
}