Examples with AuthzAuthenticationRequest org.cloudfoundry.identity.uaa.authentication.AuthzAuthenticationRequest used on opensource projects

Example 1 with AuthzAuthenticationRequest

use of org.cloudfoundry.identity.uaa.authentication.AuthzAuthenticationRequest in project uaa by cloudfoundry.

the class LoginAuthenticationManagerTests method testSuccessfulAuthenticationPublishesEvent.

@Test
void testSuccessfulAuthenticationPublishesEvent() {
    UaaUser user = UaaUserTestFactory.getUser("FOO", "foo", "fo@test.org", "Foo", "Bar");
    Mockito.when(userDatabase.retrieveUserByName("foo", OriginKeys.LOGIN_SERVER)).thenReturn(user);
    AuthzAuthenticationRequest authenticationRequest = UaaAuthenticationTestFactory.getAuthenticationRequest("foo");
    manager.authenticate(authenticationRequest);
    assertEquals(1, publisher.getEventCount());
    assertEquals("foo", publisher.getLatestEvent().getUser().getUsername());
}

Example 2 with AuthzAuthenticationRequest

use of org.cloudfoundry.identity.uaa.authentication.AuthzAuthenticationRequest in project uaa by cloudfoundry.

the class LoginInfoEndpoint method generateAutologinCode.

@RequestMapping(value = "/autologin", method = RequestMethod.POST)
@ResponseBody
public AutologinResponse generateAutologinCode(@RequestBody AutologinRequest request, @RequestHeader(value = "Authorization", required = false) String auth) throws Exception {
    if (mfaChecker.isMfaEnabled(IdentityZoneHolder.get())) {
        throw new BadCredentialsException("MFA is required");
    }
    if (auth == null || (!auth.startsWith("Basic"))) {
        throw new BadCredentialsException("No basic authorization client information in request");
    }
    String username = request.getUsername();
    if (username == null) {
        throw new BadCredentialsException("No username in request");
    }
    Authentication userAuthentication = null;
    if (authenticationManager != null) {
        String password = request.getPassword();
        if (!hasText(password)) {
            throw new BadCredentialsException("No password in request");
        }
        userAuthentication = authenticationManager.authenticate(new AuthzAuthenticationRequest(username, password, null));
    }
    String base64Credentials = auth.substring("Basic".length()).trim();
    String credentials = new String(getDecoder().decode(base64Credentials.getBytes()), UTF_8.name());
    // credentials = username:password
    final String[] values = credentials.split(":", 2);
    if (values == null || values.length == 0) {
        throw new BadCredentialsException("Invalid authorization header.");
    }
    String clientId = values[0];
    Map<String, String> codeData = new HashMap<>();
    codeData.put("client_id", clientId);
    codeData.put("username", username);
    if (userAuthentication != null && userAuthentication.getPrincipal() instanceof UaaPrincipal) {
        UaaPrincipal p = (UaaPrincipal) userAuthentication.getPrincipal();
        if (p != null) {
            codeData.put("user_id", p.getId());
            codeData.put(OriginKeys.ORIGIN, p.getOrigin());
        }
    }
    ExpiringCode expiringCode = expiringCodeStore.generateCode(JsonUtils.writeValueAsString(codeData), new Timestamp(System.currentTimeMillis() + 5 * 60 * 1000), ExpiringCodeType.AUTOLOGIN.name(), IdentityZoneHolder.get().getId());
    return new AutologinResponse(expiringCode.getCode());
}

Example 3 with AuthzAuthenticationRequest

use of org.cloudfoundry.identity.uaa.authentication.AuthzAuthenticationRequest in project uaa by cloudfoundry.

the class AutologinAuthenticationManagerTest method setUp.

@BeforeEach
void setUp() {
    IdentityZoneHolder.clear();
    IdentityZoneHolder.setProvisioning(null);
    clientId = new RandomValueStringGenerator().generate();
    manager = new AutologinAuthenticationManager();
    codeStore = mock(ExpiringCodeStore.class);
    userDatabase = mock(UaaUserDatabase.class);
    clientDetailsService = mock(MultitenantClientServices.class);
    manager.setExpiringCodeStore(codeStore);
    manager.setClientDetailsService(clientDetailsService);
    manager.setUserDatabase(userDatabase);
    Map<String, String> info = new HashMap<>();
    info.put("code", "the_secret_code");
    UaaAuthenticationDetails details = new UaaAuthenticationDetails(new MockHttpServletRequest(), clientId);
    authenticationToken = new AuthzAuthenticationRequest(info, details);
}

Example 4 with AuthzAuthenticationRequest

use of org.cloudfoundry.identity.uaa.authentication.AuthzAuthenticationRequest in project uaa by cloudfoundry.

the class AutologinAuthenticationManager method authenticate.

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    if (!(authentication instanceof AuthzAuthenticationRequest)) {
        return null;
    }
    AuthzAuthenticationRequest request = (AuthzAuthenticationRequest) authentication;
    Map<String, String> info = request.getInfo();
    String code = info.get("code");
    ExpiringCode expiringCode = doRetrieveCode(code);
    Map<String, String> codeData = null;
    try {
        if (expiringCode == null) {
            logger.debug("Autologin code has expired");
            throw new InvalidCodeException("expired_code", "Expired code", 422);
        }
        codeData = JsonUtils.readValue(expiringCode.getData(), new TypeReference<Map<String, String>>() {
        });
        if (!isAutologinCode(expiringCode.getIntent(), codeData.get("action"))) {
            logger.debug("Code is not meant for autologin");
            throw new InvalidCodeException("invalid_code", "Not an autologin code", 422);
        }
    } catch (JsonUtils.JsonUtilException x) {
        throw new BadCredentialsException("JsonConversion error", x);
    }
    String userId = codeData.get("user_id");
    String clientId = codeData.get(OAuth2Utils.CLIENT_ID);
    if (clientId == null) {
        throw new BadCredentialsException("Cannot redeem provided code for user, client id missing");
    }
    try {
        clientDetailsService.loadClientByClientId(clientId, IdentityZoneHolder.get().getId());
    } catch (NoSuchClientException x) {
        throw new BadCredentialsException("Cannot redeem provided code for user, client is missing");
    }
    UaaUser user = null;
    try {
        user = userDatabase.retrieveUserById(userId);
    } catch (UsernameNotFoundException e) {
        throw new BadCredentialsException("Cannot redeem provided code for user, user is missing");
    }
    UaaAuthenticationDetails details = (UaaAuthenticationDetails) authentication.getDetails();
    if (!clientId.equals(details.getClientId())) {
        throw new BadCredentialsException("Cannot redeem provided code for user, client mismatch");
    }
    UaaPrincipal principal = new UaaPrincipal(user);
    return new UaaAuthentication(principal, UaaAuthority.USER_AUTHORITIES, (UaaAuthenticationDetails) authentication.getDetails());
}

Example 5 with AuthzAuthenticationRequest

use of org.cloudfoundry.identity.uaa.authentication.AuthzAuthenticationRequest in project uaa by cloudfoundry.

the class LoginAuthenticationManager method authenticate.

@Override
public Authentication authenticate(Authentication request) throws AuthenticationException {
    if (!(request instanceof AuthzAuthenticationRequest)) {
        logger.debug("Cannot process request of type: " + request.getClass().getName());
        return null;
    }
    AuthzAuthenticationRequest req = (AuthzAuthenticationRequest) request;
    Map<String, String> info = req.getInfo();
    logger.debug("Processing authentication request for " + req.getName());
    SecurityContext context = SecurityContextHolder.getContext();
    if (context.getAuthentication() instanceof OAuth2Authentication) {
        OAuth2Authentication authentication = (OAuth2Authentication) context.getAuthentication();
        if (authentication.isClientOnly()) {
            UaaUser user = getUser(req, info);
            UaaAuthenticationDetails authdetails = (UaaAuthenticationDetails) req.getDetails();
            boolean addNewAccounts = authdetails != null && authdetails.isAddNew();
            try {
                if (NotANumber.equals(user.getId())) {
                    user = userDatabase.retrieveUserByName(user.getUsername(), user.getOrigin());
                } else {
                    // we should never add new accounts if we specify user_id
                    addNewAccounts = false;
                    user = userDatabase.retrieveUserById(user.getId());
                }
            } catch (UsernameNotFoundException e) {
                // Not necessarily fatal
                if (addNewAccounts) {
                    // Register new users automatically
                    publish(new NewUserAuthenticatedEvent(user));
                    try {
                        user = userDatabase.retrieveUserByName(user.getUsername(), user.getOrigin());
                    } catch (UsernameNotFoundException ex) {
                        throw new BadCredentialsException("Bad credentials");
                    }
                } else {
                    // if add_new=false then this is a bad user ID
                    throw new BadCredentialsException("Bad Credentials");
                }
            }
            Authentication success = new UaaAuthentication(new UaaPrincipal(user), user.getAuthorities(), authdetails);
            publish(new IdentityProviderAuthenticationSuccessEvent(user, success, user.getOrigin(), identityZoneManager.getCurrentIdentityZoneId()));
            return success;
        }
    }
    logger.debug("Did not locate login credentials");
    return null;
}