Examples with AuthorizationDecision org.springframework.security.authorization.AuthorizationDecision used on opensource projects

Example 16 with AuthorizationDecision

use of org.springframework.security.authorization.AuthorizationDecision in project spring-security by spring-projects.

the class PayloadExchangeMatcherReactiveAuthorizationManagerTests method checkWhenFirstMatchThenSecondUsed.

@Test
public void checkWhenFirstMatchThenSecondUsed() {
    AuthorizationDecision expected = new AuthorizationDecision(true);
    given(this.authz.check(any(), any())).willReturn(Mono.just(expected));
    PayloadExchangeMatcherReactiveAuthorizationManager manager = PayloadExchangeMatcherReactiveAuthorizationManager.builder().add(new PayloadExchangeMatcherEntry<>(PayloadExchangeMatchers.anyExchange(), this.authz)).add(new PayloadExchangeMatcherEntry<>((e) -> PayloadExchangeMatcher.MatchResult.notMatch(), this.authz2)).build();
    assertThat(manager.check(Mono.empty(), this.exchange).block()).isEqualTo(expected);
}

Example 17 with AuthorizationDecision

use of org.springframework.security.authorization.AuthorizationDecision in project spring-security by spring-projects.

the class PayloadExchangeMatcherReactiveAuthorizationManagerTests method checkWhenSecondMatchThenSecondUsed.

@Test
public void checkWhenSecondMatchThenSecondUsed() {
    AuthorizationDecision expected = new AuthorizationDecision(true);
    given(this.authz2.check(any(), any())).willReturn(Mono.just(expected));
    PayloadExchangeMatcherReactiveAuthorizationManager manager = PayloadExchangeMatcherReactiveAuthorizationManager.builder().add(new PayloadExchangeMatcherEntry<>((e) -> PayloadExchangeMatcher.MatchResult.notMatch(), this.authz)).add(new PayloadExchangeMatcherEntry<>(PayloadExchangeMatchers.anyExchange(), this.authz2)).build();
    assertThat(manager.check(Mono.empty(), this.exchange).block()).isEqualTo(expected);
}

Example 18 with AuthorizationDecision

use of org.springframework.security.authorization.AuthorizationDecision in project spring-security by spring-projects.

the class AuthorizationManagerWebInvocationPrivilegeEvaluator method isAllowed.

@Override
public boolean isAllowed(String contextPath, String uri, String method, Authentication authentication) {
    FilterInvocation filterInvocation = new FilterInvocation(contextPath, uri, method);
    AuthorizationDecision decision = this.authorizationManager.check(() -> authentication, filterInvocation.getHttpRequest());
    return decision != null && decision.isGranted();
}

Example 19 with AuthorizationDecision

use of org.springframework.security.authorization.AuthorizationDecision in project spring-security by spring-projects.

the class AuthorizationManagerBeforeMethodInterceptor method attemptAuthorization.

private void attemptAuthorization(MethodInvocation mi) {
    this.logger.debug(LogMessage.of(() -> "Authorizing method invocation " + mi));
    AuthorizationDecision decision = this.authorizationManager.check(AUTHENTICATION_SUPPLIER, mi);
    if (decision != null && !decision.isGranted()) {
        this.logger.debug(LogMessage.of(() -> "Failed to authorize " + mi + " with authorization manager " + this.authorizationManager + " and decision " + decision));
        throw new AccessDeniedException("Access Denied");
    }
    this.logger.debug(LogMessage.of(() -> "Authorized method invocation " + mi));
}

Example 20 with AuthorizationDecision

use of org.springframework.security.authorization.AuthorizationDecision in project spring-security by spring-projects.

the class AuthorizationManagerAfterMethodInterceptor method attemptAuthorization.

private void attemptAuthorization(MethodInvocation mi, Object result) {
    this.logger.debug(LogMessage.of(() -> "Authorizing method invocation " + mi));
    AuthorizationDecision decision = this.authorizationManager.check(AUTHENTICATION_SUPPLIER, new MethodInvocationResult(mi, result));
    if (decision != null && !decision.isGranted()) {
        this.logger.debug(LogMessage.of(() -> "Failed to authorize " + mi + " with authorization manager " + this.authorizationManager + " and decision " + decision));
        throw new AccessDeniedException("Access Denied");
    }
    this.logger.debug(LogMessage.of(() -> "Authorized method invocation " + mi));
}