Examples with SSOToken org.simbasecurity.api.service.thrift.SSOToken used on opensource projects

Example 1 with SSOToken

use of org.simbasecurity.api.service.thrift.SSOToken in project simba-os by cegeka.

the class AuthenticationFilterServiceImplTest method testGetCurrentSession_TokenMappingProvided.

@Test
public void testGetCurrentSession_TokenMappingProvided() {
    SSOToken ssoToken = mock(SSOToken.class);
    String tokenKey = UUID.randomUUID().toString();
    RequestData requestData = new RequestData(Collections.singletonMap(RequestConstants.SIMBA_SSO_TOKEN, tokenKey), null, null, null, null, null, false, false, true, false, false, null, null, null, null);
    when(ssoTokenMappingService.getSSOToken(tokenKey)).thenReturn(ssoToken);
    serviceImpl.getCurrentSession(requestData);
    verify(sessionServiceMock).getSession(same(ssoToken));
    verify(ssoTokenMappingService).destroyMapping(tokenKey);
}

Example 2 with SSOToken

use of org.simbasecurity.api.service.thrift.SSOToken in project simba-os by cegeka.

the class CheckSessionCommand method execute.

@Override
public State execute(ChainContext context) throws Exception {
    SSOToken ssoToken;
    if (context.isSsoTokenMappingKeyProvided() && context.getCurrentSession() != null) {
        ssoToken = context.getCurrentSession().getSSOToken();
    } else {
        ssoToken = context.getRequestSSOToken();
    }
    if (ssoToken == null) {
        redirectToLogin(context);
        audit.log(auditLogFactory.createEventForAuthentication(context, AuditMessages.NO_SSOTOKEN_FOUND_REDIRECT_LOGIN));
        return State.FINISH;
    }
    Session currentSession = context.getCurrentSession();
    if (currentSession == null || currentSession.isExpired()) {
        redirectToLogin(context);
        sessionService.removeSession(currentSession);
        audit.log(auditLogFactory.createEventForAuthenticationForFailure(context, AuditMessages.SESSION_INVALID));
        return State.FINISH;
    }
    currentSession.updateLastAccesTime();
    context.setUserPrincipal(currentSession.getUser().getUserName());
    audit.log(auditLogFactory.createEventForAuthenticationForSuccess(context, AuditMessages.CHECK_SESSION));
    return State.CONTINUE;
}

Example 3 with SSOToken

use of org.simbasecurity.api.service.thrift.SSOToken in project simba-os by cegeka.

the class CreateCookieForNewSSOTokenCommandTest method testExecute_ActivatesMakeCookieActionWhenNewSSOToken.

@Test
public void testExecute_ActivatesMakeCookieActionWhenNewSSOToken() throws Exception {
    SSOToken ssoToken = new SSOToken();
    when(chainContextMock.isSsoTokenMappingKeyProvided()).thenReturn(true);
    when(chainContextMock.getCurrentSession()).thenReturn(session);
    when(session.getSSOToken()).thenReturn(ssoToken);
    CreateCookieForNewSSOTokenCommand command = new CreateCookieForNewSSOTokenCommand();
    command.execute(chainContextMock);
    verify(chainContextMock).activateAction(ActionType.MAKE_COOKIE);
    verify(chainContextMock).setSSOTokenForActions(ssoToken);
}

Example 4 with SSOToken

use of org.simbasecurity.api.service.thrift.SSOToken in project simba-os by cegeka.

the class LogoutCommandTest method onLogoutRequestRemoveSessionAndRedirectAndDeleteCookie.

@Test
public void onLogoutRequestRemoveSessionAndRedirectAndDeleteCookie() throws Exception {
    SSOToken sSOToken = new SSOToken("token");
    when(chainContext.getUserName()).thenReturn(USERNAME);
    when(chainContext.getClientIpAddress()).thenReturn(CLIENT_IP);
    when(chainContext.isLogoutRequest()).thenReturn(true);
    Session sessionMock = mock(Session.class);
    when(chainContext.getCurrentSession()).thenReturn(sessionMock);
    when(chainContext.getRequestSSOToken()).thenReturn(sSOToken);
    State state = logoutCommand.execute(chainContext);
    assertEquals(State.FINISH, state);
    verify(sessionService).removeSession(isA(Session.class));
    verify(chainContext).activateAction(ActionType.DELETE_COOKIE);
    verify(chainContext).redirectToLogout();
    verify(auditMock).log(captor.capture());
    AuditLogEvent resultAuditLogEvent = captor.getValue();
    assertEquals(AuditLogEventCategory.SESSION, resultAuditLogEvent.getCategory());
    assertEquals(AuditMessages.SUCCESS + AuditMessages.LOGGED_OUT + ": SSOToken=" + sSOToken, resultAuditLogEvent.getMessage());
}

Example 5 with SSOToken

use of org.simbasecurity.api.service.thrift.SSOToken in project simba-os by cegeka.

the class SessionDatabaseRepositoryTest method canFindBySSOToken.

@Test
public void canFindBySSOToken() throws Exception {
    User user = new UserEntity("jos");
    SSOToken ssoToken = new SSOToken("eenSsoTokentje");
    SessionEntity session = new SessionEntity(user, ssoToken, "127.0.0.1", "192.168.1.1");
    persistAndRefresh(user, session);
    assertEquals(session, sessionDatabaseRepository.findBySSOToken(ssoToken));
}