Examples with OAuth2Error org.springframework.security.oauth2.core.OAuth2Error used on opensource projects

Example 76 with OAuth2Error

use of org.springframework.security.oauth2.core.OAuth2Error in project spring-security by spring-projects.

the class OAuth2ErrorHttpMessageConverterTests method readInternalWhenErrorResponseThenReadOAuth2Error.

@Test
public void readInternalWhenErrorResponseThenReadOAuth2Error() throws Exception {
    // @formatter:off
    String errorResponse = "{\n" + "   \"error\": \"unauthorized_client\",\n" + "   \"error_description\": \"The client is not authorized\",\n" + "   \"error_uri\": \"https://tools.ietf.org/html/rfc6749#section-5.2\"\n" + "}\n";
    // @formatter:on
    MockClientHttpResponse response = new MockClientHttpResponse(errorResponse.getBytes(), HttpStatus.BAD_REQUEST);
    OAuth2Error oauth2Error = this.messageConverter.readInternal(OAuth2Error.class, response);
    assertThat(oauth2Error.getErrorCode()).isEqualTo("unauthorized_client");
    assertThat(oauth2Error.getDescription()).isEqualTo("The client is not authorized");
    assertThat(oauth2Error.getUri()).isEqualTo("https://tools.ietf.org/html/rfc6749#section-5.2");
}

Example 77 with OAuth2Error

use of org.springframework.security.oauth2.core.OAuth2Error in project spring-security by spring-projects.

the class OAuth2ErrorHttpMessageConverterTests method writeInternalWhenOAuth2ErrorThenWriteErrorResponse.

@Test
public void writeInternalWhenOAuth2ErrorThenWriteErrorResponse() throws Exception {
    OAuth2Error oauth2Error = new OAuth2Error("unauthorized_client", "The client is not authorized", "https://tools.ietf.org/html/rfc6749#section-5.2");
    MockHttpOutputMessage outputMessage = new MockHttpOutputMessage();
    this.messageConverter.writeInternal(oauth2Error, outputMessage);
    String errorResponse = outputMessage.getBodyAsString();
    assertThat(errorResponse).contains("\"error\":\"unauthorized_client\"");
    assertThat(errorResponse).contains("\"error_description\":\"The client is not authorized\"");
    assertThat(errorResponse).contains("\"error_uri\":\"https://tools.ietf.org/html/rfc6749#section-5.2\"");
}

Example 78 with OAuth2Error

use of org.springframework.security.oauth2.core.OAuth2Error in project spring-security by spring-projects.

the class OAuth2ErrorHttpMessageConverterTests method readInternalWhenErrorResponseWithObjectThenReadOAuth2Error.

// gh-8157
@Test
public void readInternalWhenErrorResponseWithObjectThenReadOAuth2Error() throws Exception {
    // @formatter:off
    String errorResponse = "{\n" + "   \"error\": \"unauthorized_client\",\n" + "   \"error_description\": \"The client is not authorized\",\n" + "   \"error_codes\": [65001],\n" + "   \"error_uri\": \"https://tools.ietf.org/html/rfc6749#section-5.2\"\n" + "}\n";
    // @formatter:on
    MockClientHttpResponse response = new MockClientHttpResponse(errorResponse.getBytes(), HttpStatus.BAD_REQUEST);
    OAuth2Error oauth2Error = this.messageConverter.readInternal(OAuth2Error.class, response);
    assertThat(oauth2Error.getErrorCode()).isEqualTo("unauthorized_client");
    assertThat(oauth2Error.getDescription()).isEqualTo("The client is not authorized");
    assertThat(oauth2Error.getUri()).isEqualTo("https://tools.ietf.org/html/rfc6749#section-5.2");
}

Example 79 with OAuth2Error

use of org.springframework.security.oauth2.core.OAuth2Error in project spring-security by spring-projects.

the class BearerTokenAuthenticationEntryPoint method commence.

/**
 * Collect error details from the provided parameters and format according to RFC
 * 6750, specifically {@code error}, {@code error_description}, {@code error_uri}, and
 * {@code scope}.
 * @param request that resulted in an <code>AuthenticationException</code>
 * @param response so that the user agent can begin authentication
 * @param authException that caused the invocation
 */
@Override
public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) {
    HttpStatus status = HttpStatus.UNAUTHORIZED;
    Map<String, String> parameters = new LinkedHashMap<>();
    if (this.realmName != null) {
        parameters.put("realm", this.realmName);
    }
    if (authException instanceof OAuth2AuthenticationException) {
        OAuth2Error error = ((OAuth2AuthenticationException) authException).getError();
        parameters.put("error", error.getErrorCode());
        if (StringUtils.hasText(error.getDescription())) {
            parameters.put("error_description", error.getDescription());
        }
        if (StringUtils.hasText(error.getUri())) {
            parameters.put("error_uri", error.getUri());
        }
        if (error instanceof BearerTokenError) {
            BearerTokenError bearerTokenError = (BearerTokenError) error;
            if (StringUtils.hasText(bearerTokenError.getScope())) {
                parameters.put("scope", bearerTokenError.getScope());
            }
            status = ((BearerTokenError) error).getHttpStatus();
        }
    }
    String wwwAuthenticate = computeWWWAuthenticateHeaderValue(parameters);
    response.addHeader(HttpHeaders.WWW_AUTHENTICATE, wwwAuthenticate);
    response.setStatus(status.value());
}

Example 80 with OAuth2Error

use of org.springframework.security.oauth2.core.OAuth2Error in project dhis2-core by dhis2.

the class CrudControllerAdvice method handleOAuth2AuthenticationException.

@ExceptionHandler(OAuth2AuthenticationException.class)
@ResponseBody
public WebMessage handleOAuth2AuthenticationException(OAuth2AuthenticationException ex) {
    OAuth2Error error = ex.getError();
    if (error instanceof BearerTokenError) {
        BearerTokenError bearerTokenError = (BearerTokenError) error;
        HttpStatus status = ((BearerTokenError) error).getHttpStatus();
        return createWebMessage(bearerTokenError.getErrorCode(), bearerTokenError.getDescription(), Status.ERROR, status);
    }
    return unauthorized(ex.getMessage());
}