Examples with UsernamePasswordAuthenticationToken org.springframework.security.authentication.UsernamePasswordAuthenticationToken used on opensource projects

Example 56 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class CasAuthenticationProviderTests method authenticateAllAuthenticationIsSuccessful.

@Test
public void authenticateAllAuthenticationIsSuccessful() throws Exception {
    String serviceUrl = "https://service/context";
    ServiceAuthenticationDetails details = mock(ServiceAuthenticationDetails.class);
    when(details.getServiceUrl()).thenReturn(serviceUrl);
    TicketValidator validator = mock(TicketValidator.class);
    when(validator.validate(any(String.class), any(String.class))).thenReturn(new AssertionImpl("rod"));
    ServiceProperties serviceProperties = makeServiceProperties();
    serviceProperties.setAuthenticateAllArtifacts(true);
    CasAuthenticationProvider cap = new CasAuthenticationProvider();
    cap.setAuthenticationUserDetailsService(new MockAuthoritiesPopulator());
    cap.setKey("qwerty");
    cap.setTicketValidator(validator);
    cap.setServiceProperties(serviceProperties);
    cap.afterPropertiesSet();
    String ticket = "ST-456";
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(CasAuthenticationFilter.CAS_STATELESS_IDENTIFIER, ticket);
    Authentication result = cap.authenticate(token);
    verify(validator).validate(ticket, serviceProperties.getService());
    serviceProperties.setAuthenticateAllArtifacts(true);
    result = cap.authenticate(token);
    verify(validator, times(2)).validate(ticket, serviceProperties.getService());
    token.setDetails(details);
    result = cap.authenticate(token);
    verify(validator).validate(ticket, serviceUrl);
    serviceProperties.setAuthenticateAllArtifacts(false);
    serviceProperties.setService(null);
    cap.setServiceProperties(serviceProperties);
    cap.afterPropertiesSet();
    result = cap.authenticate(token);
    verify(validator, times(2)).validate(ticket, serviceUrl);
    token.setDetails(new WebAuthenticationDetails(new MockHttpServletRequest()));
    try {
        cap.authenticate(token);
        fail("Expected Exception");
    } catch (IllegalStateException success) {
    }
    cap.setServiceProperties(null);
    cap.afterPropertiesSet();
    try {
        cap.authenticate(token);
        fail("Expected Exception");
    } catch (IllegalStateException success) {
    }
}

Example 57 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class JaasAuthenticationProviderTests method testBadUser.

@Test
public void testBadUser() {
    try {
        jaasProvider.authenticate(new UsernamePasswordAuthenticationToken("asdf", "password"));
        fail("LoginException should have been thrown for the bad user");
    } catch (AuthenticationException e) {
    }
    assertThat(eventCheck.failedEvent).as("Failure event not fired").isNotNull();
    assertThat(eventCheck.failedEvent.getException()).withFailMessage("Failure event exception was null").isNotNull();
    assertThat(eventCheck.successEvent).as("Success event was fired").isNull();
}

Example 58 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class JaasAuthenticationProviderTests method testFull.

@Test
public void testFull() throws Exception {
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("user", "password", AuthorityUtils.createAuthorityList("ROLE_ONE"));
    assertThat(jaasProvider.supports(UsernamePasswordAuthenticationToken.class)).isTrue();
    Authentication auth = jaasProvider.authenticate(token);
    assertThat(jaasProvider.getAuthorityGranters()).isNotNull();
    assertThat(jaasProvider.getCallbackHandlers()).isNotNull();
    assertThat(jaasProvider.getLoginConfig()).isNotNull();
    assertThat(jaasProvider.getLoginContextName()).isNotNull();
    Collection<? extends GrantedAuthority> list = auth.getAuthorities();
    Set<String> set = AuthorityUtils.authorityListToSet(list);
    assertThat(set.contains("ROLE_ONE")).withFailMessage("GrantedAuthorities should not contain ROLE_ONE").isFalse();
    assertThat(set.contains("ROLE_TEST1")).withFailMessage("GrantedAuthorities should contain ROLE_TEST1").isTrue();
    assertThat(set.contains("ROLE_TEST2")).withFailMessage("GrantedAuthorities should contain ROLE_TEST2").isTrue();
    boolean foundit = false;
    for (GrantedAuthority a : list) {
        if (a instanceof JaasGrantedAuthority) {
            JaasGrantedAuthority grant = (JaasGrantedAuthority) a;
            assertThat(grant.getPrincipal()).withFailMessage("Principal was null on JaasGrantedAuthority").isNotNull();
            foundit = true;
        }
    }
    assertThat(foundit).as("Could not find a JaasGrantedAuthority").isTrue();
    assertThat(eventCheck.successEvent).as("Success event should be fired").isNotNull();
    assertThat(eventCheck.successEvent.getAuthentication()).withFailMessage("Auth objects should be equal").isEqualTo(auth);
    assertThat(eventCheck.failedEvent).as("Failure event should not be fired").isNull();
}

Example 59 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class JaasAuthenticationProviderTests method testBadPassword.

@Test
public void testBadPassword() {
    try {
        jaasProvider.authenticate(new UsernamePasswordAuthenticationToken("user", "asdf"));
        fail("LoginException should have been thrown for the bad password");
    } catch (AuthenticationException e) {
    }
    assertThat(eventCheck.failedEvent).as("Failure event not fired").isNotNull();
    assertThat(eventCheck.failedEvent.getException()).withFailMessage("Failure event exception was null").isNotNull();
    assertThat(eventCheck.successEvent).as("Success event was fired").isNull();
}

Example 60 with UsernamePasswordAuthenticationToken

use of org.springframework.security.authentication.UsernamePasswordAuthenticationToken in project spring-security by spring-projects.

the class Sec760Tests method testAuthenticate.

private void testAuthenticate(JaasAuthenticationProvider p1) {
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("user", "password", AuthorityUtils.createAuthorityList("ROLE_ONE", "ROLE_TWO"));
    Authentication auth = p1.authenticate(token);
    assertThat(auth).isNotNull();
}