Examples with ChannelSecurityInterceptor org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor used on opensource projects

Example 1 with ChannelSecurityInterceptor

use of org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor in project spring-security by spring-projects.

the class AbstractSecurityWebSocketMessageBrokerConfigurer method configureClientInboundChannel.

@Override
public final void configureClientInboundChannel(ChannelRegistration registration) {
    ChannelSecurityInterceptor inboundChannelSecurity = this.context.getBean(ChannelSecurityInterceptor.class);
    registration.interceptors(this.context.getBean(SecurityContextChannelInterceptor.class));
    if (!sameOriginDisabled()) {
        registration.interceptors(this.context.getBean(CsrfChannelInterceptor.class));
    }
    if (this.inboundRegistry.containsMapping()) {
        registration.interceptors(inboundChannelSecurity);
    }
    customizeClientInboundChannel(registration);
}

Example 2 with ChannelSecurityInterceptor

use of org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor in project spring-security by spring-projects.

the class AbstractSecurityWebSocketMessageBrokerConfigurerTests method inboundChannelSecurityDefinedByBean.

@Test
public void inboundChannelSecurityDefinedByBean() {
    loadConfig(SockJsProxylessSecurityConfig.class);
    MessageChannel messageChannel = clientInboundChannel();
    ChannelSecurityInterceptor inboundChannelSecurity = this.context.getBean(ChannelSecurityInterceptor.class);
    assertThat(((AbstractMessageChannel) messageChannel).getInterceptors()).contains(inboundChannelSecurity);
}

Example 3 with ChannelSecurityInterceptor

use of org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor in project spring-security by spring-projects.

the class AbstractSecurityWebSocketMessageBrokerConfigurer method inboundChannelSecurity.

@Bean
public ChannelSecurityInterceptor inboundChannelSecurity() {
    ChannelSecurityInterceptor channelSecurityInterceptor = new ChannelSecurityInterceptor(inboundMessageSecurityMetadataSource());
    MessageExpressionVoter<Object> voter = new MessageExpressionVoter<Object>();
    voter.setExpressionHandler(getMessageExpressionHandler());
    List<AccessDecisionVoter<? extends Object>> voters = new ArrayList<AccessDecisionVoter<? extends Object>>();
    voters.add(voter);
    AffirmativeBased manager = new AffirmativeBased(voters);
    channelSecurityInterceptor.setAccessDecisionManager(manager);
    return channelSecurityInterceptor;
}

Example 4 with ChannelSecurityInterceptor

use of org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor in project spring-security by spring-projects.

the class AbstractSecurityWebSocketMessageBrokerConfigurer method inboundChannelSecurity.

@Bean
public ChannelSecurityInterceptor inboundChannelSecurity(MessageSecurityMetadataSource messageSecurityMetadataSource) {
    ChannelSecurityInterceptor channelSecurityInterceptor = new ChannelSecurityInterceptor(messageSecurityMetadataSource);
    MessageExpressionVoter<Object> voter = new MessageExpressionVoter<>();
    voter.setExpressionHandler(getMessageExpressionHandler());
    List<AccessDecisionVoter<?>> voters = new ArrayList<>();
    voters.add(voter);
    AffirmativeBased manager = new AffirmativeBased(voters);
    channelSecurityInterceptor.setAccessDecisionManager(manager);
    return channelSecurityInterceptor;
}

Example 5 with ChannelSecurityInterceptor

use of org.springframework.security.messaging.access.intercept.ChannelSecurityInterceptor in project spring-security by spring-projects.

the class AbstractSecurityWebSocketMessageBrokerConfigurerTests method channelSecurityInterceptorUsesMetadataSourceBeanWhenProxyingDisabled.

@Test
public void channelSecurityInterceptorUsesMetadataSourceBeanWhenProxyingDisabled() {
    loadConfig(SockJsProxylessSecurityConfig.class);
    ChannelSecurityInterceptor channelSecurityInterceptor = this.context.getBean(ChannelSecurityInterceptor.class);
    MessageSecurityMetadataSource messageSecurityMetadataSource = this.context.getBean(MessageSecurityMetadataSource.class);
    assertThat(channelSecurityInterceptor.obtainSecurityMetadataSource()).isSameAs(messageSecurityMetadataSource);
}