Examples with DistinguishedName org.springframework.ldap.core.DistinguishedName used on opensource projects

Example 21 with DistinguishedName

use of org.springframework.ldap.core.DistinguishedName in project spring-security by spring-projects.

the class PasswordComparisonAuthenticatorTests method testWithUserSearch.

@Test
public void testWithUserSearch() {
    authenticator = new PasswordComparisonAuthenticator(getContextSource());
    authenticator.setPasswordEncoder(new PlaintextPasswordEncoder());
    assertThat(authenticator.getUserDns("Bob")).withFailMessage("User DN matches shouldn't be available").isEmpty();
    DirContextAdapter ctx = new DirContextAdapter(new DistinguishedName("uid=Bob,ou=people"));
    ctx.setAttributeValue("userPassword", "bobspassword");
    authenticator.setUserSearch(new MockUserSearch(ctx));
    authenticator.authenticate(new UsernamePasswordAuthenticationToken("shouldntbeused", "bobspassword"));
}

Example 22 with DistinguishedName

use of org.springframework.ldap.core.DistinguishedName in project spring-security by spring-projects.

the class DefaultLdapAuthoritiesPopulatorTests method subGroupRolesAreNotFoundByDefault.

@Test
public void subGroupRolesAreNotFoundByDefault() {
    populator.setGroupRoleAttribute("ou");
    populator.setConvertToUpperCase(true);
    DirContextAdapter ctx = new DirContextAdapter(new DistinguishedName("uid=ben,ou=people,dc=springframework,dc=org"));
    Set<String> authorities = AuthorityUtils.authorityListToSet(populator.getGrantedAuthorities(ctx, "manager"));
    assertThat(authorities).as("Should have 2 roles").hasSize(2);
    assertThat(authorities.contains("ROLE_MANAGER")).isTrue();
    assertThat(authorities.contains("ROLE_DEVELOPER")).isTrue();
}

Example 23 with DistinguishedName

use of org.springframework.ldap.core.DistinguishedName in project spring-security by spring-projects.

the class DefaultLdapAuthoritiesPopulatorTests method userDnWithEscapedCharacterParameterReturnsExpectedRoles.

@Test
public void userDnWithEscapedCharacterParameterReturnsExpectedRoles() {
    populator.setGroupRoleAttribute("ou");
    populator.setConvertToUpperCase(true);
    populator.setGroupSearchFilter("(member={0})");
    DirContextAdapter ctx = new DirContextAdapter(new DistinguishedName("cn=mouse\\, jerry,ou=people,dc=springframework,dc=org"));
    Set<String> authorities = AuthorityUtils.authorityListToSet(populator.getGrantedAuthorities(ctx, "notused"));
    assertThat(authorities).as("Should have 1 role").hasSize(1);
    assertThat(authorities.contains("ROLE_MANAGER")).isTrue();
}

Example 24 with DistinguishedName

use of org.springframework.ldap.core.DistinguishedName in project spring-security by spring-projects.

the class LdapUserDetailsManager method loadUserByUsername.

public UserDetails loadUserByUsername(String username) {
    DistinguishedName dn = usernameMapper.buildDn(username);
    List<GrantedAuthority> authorities = getUserAuthorities(dn, username);
    logger.debug("Loading user '" + username + "' with DN '" + dn + "'");
    DirContextAdapter userCtx = loadUserAsContext(dn, username);
    return userDetailsMapper.mapUserFromContext(userCtx, username, authorities);
}

Example 25 with DistinguishedName

use of org.springframework.ldap.core.DistinguishedName in project spring-security by spring-projects.

the class LdapUserDetailsManager method getUserAuthorities.

/**
	 *
	 * @param dn the distinguished name of the entry - may be either relative to the base
	 * context or a complete DN including the name of the context (either is supported).
	 * @param username the user whose roles are required.
	 * @return the granted authorities returned by the group search
	 */
@SuppressWarnings("unchecked")
List<GrantedAuthority> getUserAuthorities(final DistinguishedName dn, final String username) {
    SearchExecutor se = new SearchExecutor() {

        public NamingEnumeration<SearchResult> executeSearch(DirContext ctx) throws NamingException {
            DistinguishedName fullDn = LdapUtils.getFullDn(dn, ctx);
            SearchControls ctrls = new SearchControls();
            ctrls.setReturningAttributes(new String[] { groupRoleAttributeName });
            return ctx.search(groupSearchBase, groupSearchFilter, new String[] { fullDn.toUrl(), username }, ctrls);
        }
    };
    AttributesMapperCallbackHandler roleCollector = new AttributesMapperCallbackHandler(roleMapper);
    template.search(se, roleCollector);
    return roleCollector.getList();
}