Examples with BearerTokenAuthentication org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication used on opensource projects

Example 6 with BearerTokenAuthentication

use of org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication in project spring-security by spring-projects.

the class SecurityReactorContextConfigurationResourceServerTests method requestWhenNotUsingFilterThenBearerTokenNotPropagated.

// gh-7418
@Test
public void requestWhenNotUsingFilterThenBearerTokenNotPropagated() throws Exception {
    BearerTokenAuthentication authentication = TestBearerTokenAuthentications.bearer();
    this.spring.register(BearerFilterlessConfig.class, WebServerConfig.class, Controller.class).autowire();
    MockHttpServletRequestBuilder authenticatedRequest = get("/token").with(authentication(authentication));
    // @formatter:off
    this.mockMvc.perform(authenticatedRequest).andExpect(status().isOk()).andExpect(content().string(""));
// @formatter:on
}

Example 7 with BearerTokenAuthentication

use of org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication in project spring-security by spring-projects.

the class SecurityReactorContextConfigurationResourceServerTests method requestWhenUsingFilterThenBearerTokenPropagated.

// gh-7418
@Test
public void requestWhenUsingFilterThenBearerTokenPropagated() throws Exception {
    BearerTokenAuthentication authentication = TestBearerTokenAuthentications.bearer();
    this.spring.register(BearerFilterConfig.class, WebServerConfig.class, Controller.class).autowire();
    MockHttpServletRequestBuilder authenticatedRequest = get("/token").with(authentication(authentication));
    // @formatter:off
    this.mockMvc.perform(authenticatedRequest).andExpect(status().isOk()).andExpect(content().string("Bearer token"));
// @formatter:on
}

Example 8 with BearerTokenAuthentication

use of org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication in project spring-security by spring-projects.

the class SecurityMockServerConfigurerOpaqueTokenTests method mockOpaqueTokenWhenAttributesThenBearerTokenAuthentication.

@Test
public void mockOpaqueTokenWhenAttributesThenBearerTokenAuthentication() {
    String sub = new String("my-subject");
    this.client.mutateWith(SecurityMockServerConfigurers.mockOpaqueToken().attributes((attributes) -> attributes.put(OAuth2TokenIntrospectionClaimNames.SUB, sub))).get().exchange().expectStatus().isOk();
    SecurityContext context = this.securityContextController.removeSecurityContext();
    assertThat(context.getAuthentication()).isInstanceOf(BearerTokenAuthentication.class);
    BearerTokenAuthentication token = (BearerTokenAuthentication) context.getAuthentication();
    assertThat(token.getTokenAttributes().get(OAuth2TokenIntrospectionClaimNames.SUB)).isSameAs(sub);
}

Example 9 with BearerTokenAuthentication

use of org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication in project spring-security by spring-projects.

the class SecurityMockServerConfigurerOpaqueTokenTests method mockOpaqueTokenWhenPrincipalThenBearerTokenAuthentication.

@Test
public void mockOpaqueTokenWhenPrincipalThenBearerTokenAuthentication() {
    OAuth2AuthenticatedPrincipal principal = TestOAuth2AuthenticatedPrincipals.active();
    this.client.mutateWith(SecurityMockServerConfigurers.mockOpaqueToken().principal(principal)).get().exchange().expectStatus().isOk();
    SecurityContext context = this.securityContextController.removeSecurityContext();
    assertThat(context.getAuthentication()).isInstanceOf(BearerTokenAuthentication.class);
    BearerTokenAuthentication token = (BearerTokenAuthentication) context.getAuthentication();
    assertThat(token.getPrincipal()).isSameAs(principal);
}

Example 10 with BearerTokenAuthentication

use of org.springframework.security.oauth2.server.resource.authentication.BearerTokenAuthentication in project spring-security by spring-projects.

the class JwtBearerTokenAuthenticationConverter method convert.

@Override
public AbstractAuthenticationToken convert(Jwt jwt) {
    OAuth2AccessToken accessToken = new OAuth2AccessToken(OAuth2AccessToken.TokenType.BEARER, jwt.getTokenValue(), jwt.getIssuedAt(), jwt.getExpiresAt());
    Map<String, Object> attributes = jwt.getClaims();
    AbstractAuthenticationToken token = this.jwtAuthenticationConverter.convert(jwt);
    Collection<GrantedAuthority> authorities = token.getAuthorities();
    OAuth2AuthenticatedPrincipal principal = new DefaultOAuth2AuthenticatedPrincipal(attributes, authorities);
    return new BearerTokenAuthentication(principal, accessToken, authorities);
}