Examples with Saml2AuthenticationException org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticationException used on opensource projects

Example 1 with Saml2AuthenticationException

use of org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticationException in project spring-security by spring-projects.

the class OpenSamlAuthenticationProvider method parse.

private Response parse(String response) throws Saml2Exception, Saml2AuthenticationException {
    try {
        Document document = this.parserPool.parse(new ByteArrayInputStream(response.getBytes(StandardCharsets.UTF_8)));
        Element element = document.getDocumentElement();
        return (Response) this.responseUnmarshaller.unmarshall(element);
    } catch (Exception ex) {
        throw createAuthenticationException(Saml2ErrorCodes.MALFORMED_RESPONSE_DATA, ex.getMessage(), ex);
    }
}

Example 2 with Saml2AuthenticationException

use of org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticationException in project spring-security by spring-projects.

the class Saml2AuthenticationTokenConverter method samlInflate.

private String samlInflate(byte[] b) {
    try {
        ByteArrayOutputStream out = new ByteArrayOutputStream();
        InflaterOutputStream inflaterOutputStream = new InflaterOutputStream(out, new Inflater(true));
        inflaterOutputStream.write(b);
        inflaterOutputStream.finish();
        return out.toString(StandardCharsets.UTF_8.name());
    } catch (Exception ex) {
        throw new Saml2AuthenticationException(new Saml2Error(Saml2ErrorCodes.INVALID_RESPONSE, "Unable to inflate string"), ex);
    }
}

Example 3 with Saml2AuthenticationException

use of org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticationException in project spring-security by spring-projects.

the class Saml2LoginConfigurerTests method authenticateWithInvalidDeflatedSAMLResponseThenFailureHandlerUses.

@Test
public void authenticateWithInvalidDeflatedSAMLResponseThenFailureHandlerUses() throws Exception {
    this.spring.register(CustomAuthenticationFailureHandler.class).autowire();
    byte[] invalidDeflated = "invalid".getBytes();
    String encoded = Saml2Utils.samlEncode(invalidDeflated);
    MockHttpServletRequestBuilder request = get("/login/saml2/sso/registration-id").queryParam("SAMLResponse", encoded);
    this.mvc.perform(request);
    ArgumentCaptor<Saml2AuthenticationException> captor = ArgumentCaptor.forClass(Saml2AuthenticationException.class);
    verify(CustomAuthenticationFailureHandler.authenticationFailureHandler).onAuthenticationFailure(any(HttpServletRequest.class), any(HttpServletResponse.class), captor.capture());
    Saml2AuthenticationException exception = captor.getValue();
    assertThat(exception.getSaml2Error().getErrorCode()).isEqualTo(Saml2ErrorCodes.INVALID_RESPONSE);
    assertThat(exception.getSaml2Error().getDescription()).isEqualTo("Unable to inflate string");
    assertThat(exception.getCause()).isInstanceOf(IOException.class);
}

Example 4 with Saml2AuthenticationException

use of org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticationException in project spring-security by spring-projects.

the class Saml2WebSsoAuthenticationFilter method attemptAuthentication.

@Override
public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException {
    Authentication authentication = this.authenticationConverter.convert(request);
    if (authentication == null) {
        Saml2Error saml2Error = new Saml2Error(Saml2ErrorCodes.RELYING_PARTY_REGISTRATION_NOT_FOUND, "No relying party registration found");
        throw new Saml2AuthenticationException(saml2Error);
    }
    setDetails(request, authentication);
    this.authenticationRequestRepository.removeAuthenticationRequest(request, response);
    return getAuthenticationManager().authenticate(authentication);
}

Example 5 with Saml2AuthenticationException

use of org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticationException in project spring-security by spring-projects.

the class OpenSamlAuthenticationProvider method authenticate.

/**
 * @param authentication the authentication request object, must be of type
 * {@link Saml2AuthenticationToken}
 * @return {@link Saml2Authentication} if the assertion is valid
 * @throws AuthenticationException if a validation exception occurs
 */
@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    try {
        Saml2AuthenticationToken token = (Saml2AuthenticationToken) authentication;
        String serializedResponse = token.getSaml2Response();
        Response response = parse(serializedResponse);
        process(token, response);
        return this.responseAuthenticationConverter.convert(new ResponseToken(response, token));
    } catch (Saml2AuthenticationException ex) {
        throw ex;
    } catch (Exception ex) {
        throw createAuthenticationException(Saml2ErrorCodes.INTERNAL_VALIDATION_ERROR, ex.getMessage(), ex);
    }
}