Examples with Authentication org.springframework.security.core.Authentication used on opensource projects

Example 21 with Authentication

use of org.springframework.security.core.Authentication in project spring-security by spring-projects.

the class WithMockCustomUserSecurityContextFactory method createSecurityContext.

public SecurityContext createSecurityContext(WithMockCustomUser customUser) {
    SecurityContext context = SecurityContextHolder.createEmptyContext();
    CustomUserDetails principal = new CustomUserDetails(customUser.name(), customUser.username());
    Authentication auth = new UsernamePasswordAuthenticationToken(principal, "password", principal.getAuthorities());
    context.setAuthentication(auth);
    return context;
}

Example 22 with Authentication

use of org.springframework.security.core.Authentication in project spring-security by spring-projects.

the class AuthenticationTag method doEndTag.

public int doEndTag() throws JspException {
    Object result = null;
    // determine the value by...
    if (property != null) {
        if ((SecurityContextHolder.getContext() == null) || !(SecurityContextHolder.getContext() instanceof SecurityContext) || (SecurityContextHolder.getContext().getAuthentication() == null)) {
            return Tag.EVAL_PAGE;
        }
        Authentication auth = SecurityContextHolder.getContext().getAuthentication();
        if (auth.getPrincipal() == null) {
            return Tag.EVAL_PAGE;
        }
        try {
            BeanWrapperImpl wrapper = new BeanWrapperImpl(auth);
            result = wrapper.getPropertyValue(property);
        } catch (BeansException e) {
            throw new JspException(e);
        }
    }
    if (var != null) {
        /*
			 * Store the result, letting an IllegalArgumentException propagate back if the
			 * scope is invalid (e.g., if an attempt is made to store something in the
			 * session without any HttpSession existing).
			 */
        if (result != null) {
            pageContext.setAttribute(var, result, scope);
        } else {
            if (scopeSpecified) {
                pageContext.removeAttribute(var, scope);
            } else {
                pageContext.removeAttribute(var);
            }
        }
    } else {
        if (htmlEscape) {
            writeMessage(TextEscapeUtils.escapeEntities(String.valueOf(result)));
        } else {
            writeMessage(String.valueOf(result));
        }
    }
    return EVAL_PAGE;
}

Example 23 with Authentication

use of org.springframework.security.core.Authentication in project spring-security by spring-projects.

the class GaeAuthenticationFilter method doFilter.

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    User googleUser = UserServiceFactory.getUserService().getCurrentUser();
    if (authentication != null && !loggedInUserMatchesGaeUser(authentication, googleUser)) {
        SecurityContextHolder.clearContext();
        authentication = null;
        ((HttpServletRequest) request).getSession().invalidate();
    }
    if (authentication == null) {
        if (googleUser != null) {
            logger.debug("Currently logged on to GAE as user " + googleUser);
            logger.debug("Authenticating to Spring Security");
            // User has returned after authenticating via GAE. Need to authenticate
            // through Spring Security.
            PreAuthenticatedAuthenticationToken token = new PreAuthenticatedAuthenticationToken(googleUser, null);
            token.setDetails(ads.buildDetails((HttpServletRequest) request));
            try {
                authentication = authenticationManager.authenticate(token);
                SecurityContextHolder.getContext().setAuthentication(authentication);
                if (authentication.getAuthorities().contains(AppRole.NEW_USER)) {
                    logger.debug("New user authenticated. Redirecting to registration page");
                    ((HttpServletResponse) response).sendRedirect(REGISTRATION_URL);
                    return;
                }
            } catch (AuthenticationException e) {
                failureHandler.onAuthenticationFailure((HttpServletRequest) request, (HttpServletResponse) response, e);
                return;
            }
        }
    }
    chain.doFilter(request, response);
}

Example 24 with Authentication

use of org.springframework.security.core.Authentication in project spring-security by spring-projects.

the class RegistrationController method register.

@RequestMapping(method = RequestMethod.POST)
public String register(@Valid RegistrationForm form, BindingResult result) {
    if (result.hasErrors()) {
        return null;
    }
    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    GaeUser currentUser = (GaeUser) authentication.getPrincipal();
    Set<AppRole> roles = EnumSet.of(AppRole.USER);
    if (UserServiceFactory.getUserService().isUserAdmin()) {
        roles.add(AppRole.ADMIN);
    }
    GaeUser user = new GaeUser(currentUser.getUserId(), currentUser.getNickname(), currentUser.getEmail(), form.getForename(), form.getSurname(), roles, true);
    registry.registerUser(user);
    // Update the context with the full authentication
    SecurityContextHolder.getContext().setAuthentication(new GaeUserAuthentication(user, authentication.getDetails()));
    return "redirect:/home.htm";
}

Example 25 with Authentication

use of org.springframework.security.core.Authentication in project spring-security by spring-projects.

the class ContactManagerTests method makeActiveUser.

private void makeActiveUser(String username) {
    String password = "";
    if ("rod".equals(username)) {
        password = "koala";
    } else if ("dianne".equals(username)) {
        password = "emu";
    } else if ("scott".equals(username)) {
        password = "wombat";
    } else if ("peter".equals(username)) {
        password = "opal";
    }
    Authentication authRequest = new UsernamePasswordAuthenticationToken(username, password);
    SecurityContextHolder.getContext().setAuthentication(authRequest);
}