Examples with PasswordEncoder org.springframework.security.crypto.password.PasswordEncoder used on opensource projects

Example 16 with PasswordEncoder

use of org.springframework.security.crypto.password.PasswordEncoder in project spring-security by spring-projects.

the class DaoAuthenticationProviderTests method authenticateWhenSuccessAndPasswordManagerThenUpdates.

@Test
public void authenticateWhenSuccessAndPasswordManagerThenUpdates() {
    String password = "password";
    String encodedPassword = "encoded";
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("user", password);
    PasswordEncoder encoder = mock(PasswordEncoder.class);
    UserDetailsService userDetailsService = mock(UserDetailsService.class);
    UserDetailsPasswordService passwordManager = mock(UserDetailsPasswordService.class);
    DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
    provider.setPasswordEncoder(encoder);
    provider.setUserDetailsService(userDetailsService);
    provider.setUserDetailsPasswordService(passwordManager);
    UserDetails user = PasswordEncodedUser.user();
    given(encoder.matches(any(), any())).willReturn(true);
    given(encoder.upgradeEncoding(any())).willReturn(true);
    given(encoder.encode(any())).willReturn(encodedPassword);
    given(userDetailsService.loadUserByUsername(any())).willReturn(user);
    given(passwordManager.updatePassword(any(), any())).willReturn(user);
    Authentication result = provider.authenticate(token);
    verify(encoder).encode(password);
    verify(passwordManager).updatePassword(eq(user), eq(encodedPassword));
}

Example 17 with PasswordEncoder

use of org.springframework.security.crypto.password.PasswordEncoder in project spring-security by spring-projects.

the class DaoAuthenticationProviderTests method authenticateWhenNotUpgradeAndPasswordManagerThenNoUpdate.

@Test
public void authenticateWhenNotUpgradeAndPasswordManagerThenNoUpdate() {
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("user", "password");
    PasswordEncoder encoder = mock(PasswordEncoder.class);
    UserDetailsService userDetailsService = mock(UserDetailsService.class);
    UserDetailsPasswordService passwordManager = mock(UserDetailsPasswordService.class);
    DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
    provider.setPasswordEncoder(encoder);
    provider.setUserDetailsService(userDetailsService);
    provider.setUserDetailsPasswordService(passwordManager);
    UserDetails user = PasswordEncodedUser.user();
    given(encoder.matches(any(), any())).willReturn(true);
    given(encoder.upgradeEncoding(any())).willReturn(false);
    given(userDetailsService.loadUserByUsername(any())).willReturn(user);
    Authentication result = provider.authenticate(token);
    verifyZeroInteractions(passwordManager);
}

Example 18 with PasswordEncoder

use of org.springframework.security.crypto.password.PasswordEncoder in project spring-security by spring-projects.

the class DaoAuthenticationProviderTests method testUserNotFoundBCryptPasswordEncoder.

@Test
public void testUserNotFoundBCryptPasswordEncoder() {
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("missing", "koala");
    PasswordEncoder encoder = new BCryptPasswordEncoder();
    DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
    provider.setHideUserNotFoundExceptions(false);
    provider.setPasswordEncoder(encoder);
    MockUserDetailsServiceUserRod userDetailsService = new MockUserDetailsServiceUserRod();
    userDetailsService.password = encoder.encode((CharSequence) token.getCredentials());
    provider.setUserDetailsService(userDetailsService);
    assertThatExceptionOfType(UsernameNotFoundException.class).isThrownBy(() -> provider.authenticate(token));
}

Example 19 with PasswordEncoder

use of org.springframework.security.crypto.password.PasswordEncoder in project spring-security by spring-projects.

the class DaoAuthenticationProviderTests method authenticateWhenBadCredentialsAndPasswordManagerThenNoUpdate.

@Test
public void authenticateWhenBadCredentialsAndPasswordManagerThenNoUpdate() {
    UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("user", "password");
    PasswordEncoder encoder = mock(PasswordEncoder.class);
    UserDetailsService userDetailsService = mock(UserDetailsService.class);
    UserDetailsPasswordService passwordManager = mock(UserDetailsPasswordService.class);
    DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
    provider.setPasswordEncoder(encoder);
    provider.setUserDetailsService(userDetailsService);
    provider.setUserDetailsPasswordService(passwordManager);
    UserDetails user = PasswordEncodedUser.user();
    given(encoder.matches(any(), any())).willReturn(false);
    given(userDetailsService.loadUserByUsername(any())).willReturn(user);
    assertThatExceptionOfType(BadCredentialsException.class).isThrownBy(() -> provider.authenticate(token));
    verifyZeroInteractions(passwordManager);
}

Example 20 with PasswordEncoder

use of org.springframework.security.crypto.password.PasswordEncoder in project cas by apereo.

the class AcceptUsersAuthenticationHandlerTests method verifyPasswordTransform.

@Test
public void verifyPasswordTransform() {
    val handler = new AcceptUsersAuthenticationHandler(StringUtils.EMPTY, null, PrincipalFactoryUtils.newPrincipalFactory(), null, Map.of("another", "another"));
    handler.setPasswordEncoder(new PasswordEncoder() {

        @Override
        public String encode(final CharSequence charSequence) {
            return null;
        }

        @Override
        public boolean matches(final CharSequence charSequence, final String s) {
            return true;
        }
    });
    assertThrows(AccountNotFoundException.class, () -> handler.authenticate(CoreAuthenticationTestUtils.getCredentialsWithSameUsernameAndPassword("another")));
}