Examples with SimpleGrantedAuthority org.springframework.security.core.authority.SimpleGrantedAuthority used on opensource projects

Example 61 with SimpleGrantedAuthority

use of org.springframework.security.core.authority.SimpleGrantedAuthority in project spring-security by spring-projects.

the class SwitchUserFilterTests method modificationOfAuthoritiesWorks.

@Test
public void modificationOfAuthoritiesWorks() {
    UsernamePasswordAuthenticationToken auth = new UsernamePasswordAuthenticationToken("dano", "hawaii50");
    SecurityContextHolder.getContext().setAuthentication(auth);
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.addParameter(SwitchUserFilter.SPRING_SECURITY_SWITCH_USERNAME_KEY, "jacklord");
    SwitchUserFilter filter = new SwitchUserFilter();
    filter.setUserDetailsService(new MockUserDetailsService());
    filter.setSwitchUserAuthorityChanger(new SwitchUserAuthorityChanger() {

        public Collection<GrantedAuthority> modifyGrantedAuthorities(UserDetails targetUser, Authentication currentAuthentication, Collection<? extends GrantedAuthority> authoritiesToBeGranted) {
            List<GrantedAuthority> auths = new ArrayList<GrantedAuthority>();
            auths.add(new SimpleGrantedAuthority("ROLE_NEW"));
            return auths;
        }
    });
    Authentication result = filter.attemptSwitchUser(request);
    assertThat(result != null).isTrue();
    assertThat(result.getAuthorities()).hasSize(2);
    assertThat(AuthorityUtils.authorityListToSet(result.getAuthorities())).contains("ROLE_NEW");
}

Example 62 with SimpleGrantedAuthority

use of org.springframework.security.core.authority.SimpleGrantedAuthority in project spring-security-oauth by spring-projects.

the class OAuth2SecurityExpressionMethodsTests method testClientOnly.

@Test
public void testClientOnly() throws Exception {
    OAuth2Request request = RequestTokenFactory.createOAuth2Request("foo", true, Collections.singleton("read"));
    Authentication userAuthentication = new UsernamePasswordAuthenticationToken("foo", "bar", Collections.singleton(new SimpleGrantedAuthority("ROLE_USER")));
    OAuth2Authentication oAuth2Authentication = new OAuth2Authentication(request, userAuthentication);
    assertFalse(new OAuth2SecurityExpressionMethods(oAuth2Authentication).isClient());
    assertTrue(new OAuth2SecurityExpressionMethods(new OAuth2Authentication(request, null)).isClient());
}

Example 63 with SimpleGrantedAuthority

use of org.springframework.security.core.authority.SimpleGrantedAuthority in project spring-security-oauth by spring-projects.

the class OAuth2SecurityExpressionMethodsTests method testOAuthUser.

@Test
public void testOAuthUser() throws Exception {
    OAuth2Request clientAuthentication = RequestTokenFactory.createOAuth2Request("foo", true, Collections.singleton("read"));
    Authentication userAuthentication = new UsernamePasswordAuthenticationToken("foo", "bar", Collections.singleton(new SimpleGrantedAuthority("ROLE_USER")));
    OAuth2Authentication oAuth2Authentication = new OAuth2Authentication(clientAuthentication, userAuthentication);
    assertTrue(new OAuth2SecurityExpressionMethods(oAuth2Authentication).isUser());
    assertFalse(new OAuth2SecurityExpressionMethods(new OAuth2Authentication(clientAuthentication, null)).isUser());
}

Example 64 with SimpleGrantedAuthority

use of org.springframework.security.core.authority.SimpleGrantedAuthority in project spring-security by spring-projects.

the class EhCacheBasedAclCacheTests method setup.

@Before
public void setup() {
    myCache = new EhCacheBasedAclCache(cache, new DefaultPermissionGrantingStrategy(new ConsoleAuditLogger()), new AclAuthorizationStrategyImpl(new SimpleGrantedAuthority("ROLE_USER")));
    ObjectIdentity identity = new ObjectIdentityImpl(TARGET_CLASS, Long.valueOf(100));
    AclAuthorizationStrategy aclAuthorizationStrategy = new AclAuthorizationStrategyImpl(new SimpleGrantedAuthority("ROLE_OWNERSHIP"), new SimpleGrantedAuthority("ROLE_AUDITING"), new SimpleGrantedAuthority("ROLE_GENERAL"));
    acl = new AclImpl(identity, Long.valueOf(1), aclAuthorizationStrategy, new ConsoleAuditLogger());
}

Example 65 with SimpleGrantedAuthority

use of org.springframework.security.core.authority.SimpleGrantedAuthority in project spring-security by spring-projects.

the class CasAuthenticationProviderTests method statefulAuthenticationIsSuccessful.

@Test
public void statefulAuthenticationIsSuccessful() throws Exception {
    CasAuthenticationProvider cap = new CasAuthenticationProvider();
    cap.setAuthenticationUserDetailsService(new MockAuthoritiesPopulator());
    cap.setKey("qwerty");
    StatelessTicketCache cache = new MockStatelessTicketCache();
    cap.setStatelessTicketCache(cache);
    cap.setServiceProperties(makeServiceProperties());
    cap.setTicketValidator(new MockTicketValidator(true));
    cap.afterPropertiesSet();
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(CasAuthenticationFilter.CAS_STATEFUL_IDENTIFIER, "ST-123");
    token.setDetails("details");
    Authentication result = cap.authenticate(token);
    // Confirm ST-123 was NOT added to the cache
    assertThat(cache.getByTicketId("ST-456") == null).isTrue();
    if (!(result instanceof CasAuthenticationToken)) {
        fail("Should have returned a CasAuthenticationToken");
    }
    CasAuthenticationToken casResult = (CasAuthenticationToken) result;
    assertThat(casResult.getPrincipal()).isEqualTo(makeUserDetailsFromAuthoritiesPopulator());
    assertThat(casResult.getCredentials()).isEqualTo("ST-123");
    assertThat(casResult.getAuthorities()).contains(new SimpleGrantedAuthority("ROLE_A"));
    assertThat(casResult.getAuthorities()).contains(new SimpleGrantedAuthority("ROLE_B"));
    assertThat(casResult.getKeyHash()).isEqualTo(cap.getKey().hashCode());
    assertThat(casResult.getDetails()).isEqualTo("details");
    // Now confirm the CasAuthenticationToken is automatically re-accepted.
    // To ensure TicketValidator not called again, set it to deliver an exception...
    cap.setTicketValidator(new MockTicketValidator(false));
    Authentication laterResult = cap.authenticate(result);
    assertThat(laterResult).isEqualTo(result);
}