Examples with RunAsManager org.springframework.security.access.intercept.RunAsManager used on opensource projects

Example 6 with RunAsManager

use of org.springframework.security.access.intercept.RunAsManager in project spring-security by spring-projects.

the class MethodSecurityInterceptorTests method runAsReplacementIsCorrectlySet.

@Test
public void runAsReplacementIsCorrectlySet() throws Exception {
    SecurityContext ctx = SecurityContextHolder.getContext();
    ctx.setAuthentication(token);
    token.setAuthenticated(true);
    final RunAsManager runAs = mock(RunAsManager.class);
    final RunAsUserToken runAsToken = new RunAsUserToken("key", "someone", "creds", token.getAuthorities(), TestingAuthenticationToken.class);
    interceptor.setRunAsManager(runAs);
    mdsReturnsUserRole();
    when(runAs.buildRunAs(eq(token), any(MethodInvocation.class), any(List.class))).thenReturn(runAsToken);
    String result = advisedTarget.makeUpperCase("hello");
    assertThat(result).isEqualTo("HELLO org.springframework.security.access.intercept.RunAsUserToken true");
    // Check we've changed back
    assertThat(SecurityContextHolder.getContext()).isSameAs(ctx);
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isSameAs(token);
}

Example 7 with RunAsManager

use of org.springframework.security.access.intercept.RunAsManager in project spring-security by spring-projects.

the class MethodSecurityInterceptorTests method gettersReturnExpectedData.

@Test
public void gettersReturnExpectedData() {
    RunAsManager runAs = mock(RunAsManager.class);
    AfterInvocationManager aim = mock(AfterInvocationManager.class);
    interceptor.setRunAsManager(runAs);
    interceptor.setAfterInvocationManager(aim);
    assertThat(interceptor.getAccessDecisionManager()).isEqualTo(adm);
    assertThat(interceptor.getRunAsManager()).isEqualTo(runAs);
    assertThat(interceptor.getAuthenticationManager()).isEqualTo(authman);
    assertThat(interceptor.getSecurityMetadataSource()).isEqualTo(mds);
    assertThat(interceptor.getAfterInvocationManager()).isEqualTo(aim);
}

Example 8 with RunAsManager

use of org.springframework.security.access.intercept.RunAsManager in project spring-security by spring-projects.

the class FilterSecurityInterceptorTests method finallyInvocationIsInvokedIfExceptionThrown.

// SEC-1967
@Test
@SuppressWarnings("unchecked")
public void finallyInvocationIsInvokedIfExceptionThrown() throws Exception {
    SecurityContext ctx = SecurityContextHolder.getContext();
    Authentication token = new TestingAuthenticationToken("Test", "Password", "NOT_USED");
    token.setAuthenticated(true);
    ctx.setAuthentication(token);
    RunAsManager runAsManager = mock(RunAsManager.class);
    when(runAsManager.buildRunAs(eq(token), any(), anyCollection())).thenReturn(new RunAsUserToken("key", "someone", "creds", token.getAuthorities(), token.getClass()));
    interceptor.setRunAsManager(runAsManager);
    FilterInvocation fi = createinvocation();
    FilterChain chain = fi.getChain();
    doThrow(new RuntimeException()).when(chain).doFilter(any(HttpServletRequest.class), any(HttpServletResponse.class));
    when(ods.getAttributes(fi)).thenReturn(SecurityConfig.createList("MOCK_OK"));
    AfterInvocationManager aim = mock(AfterInvocationManager.class);
    interceptor.setAfterInvocationManager(aim);
    try {
        interceptor.invoke(fi);
        fail("Expected exception");
    } catch (RuntimeException expected) {
    }
    // Check we've changed back
    assertThat(SecurityContextHolder.getContext()).isSameAs(ctx);
    assertThat(SecurityContextHolder.getContext().getAuthentication()).isSameAs(token);
}