Examples with FilterInvocation org.springframework.security.web.FilterInvocation used on opensource projects

Example 11 with FilterInvocation

use of org.springframework.security.web.FilterInvocation in project spring-security by spring-projects.

the class FilterInvocationTests method testStringMethodsWithAQueryString.

@Test
public void testStringMethodsWithAQueryString() {
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.setQueryString("foo=bar");
    request.setServletPath("/HelloWorld");
    request.setServerName("www.example.com");
    request.setScheme("http");
    request.setServerPort(80);
    request.setContextPath("/mycontext");
    request.setRequestURI("/mycontext/HelloWorld");
    MockHttpServletResponse response = new MockHttpServletResponse();
    FilterInvocation fi = new FilterInvocation(request, response, mock(FilterChain.class));
    assertThat(fi.getRequestUrl()).isEqualTo("/HelloWorld?foo=bar");
    assertThat(fi.toString()).isEqualTo("FilterInvocation: URL: /HelloWorld?foo=bar");
    assertThat(fi.getFullRequestUrl()).isEqualTo("http://www.example.com/mycontext/HelloWorld?foo=bar");
}

Example 12 with FilterInvocation

use of org.springframework.security.web.FilterInvocation in project spring-security by spring-projects.

the class SecureChannelProcessorTests method testDecideDetectsUnacceptableChannel.

@Test
public void testDecideDetectsUnacceptableChannel() throws Exception {
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.setQueryString("info=true");
    request.setServerName("localhost");
    request.setContextPath("/bigapp");
    request.setServletPath("/servlet");
    request.setScheme("http");
    request.setServerPort(8080);
    MockHttpServletResponse response = new MockHttpServletResponse();
    FilterInvocation fi = new FilterInvocation(request, response, mock(FilterChain.class));
    SecureChannelProcessor processor = new SecureChannelProcessor();
    processor.decide(fi, SecurityConfig.createList(new String[] { "SOME_IGNORED_ATTRIBUTE", "REQUIRES_SECURE_CHANNEL" }));
    assertThat(fi.getResponse().isCommitted()).isTrue();
}

Example 13 with FilterInvocation

use of org.springframework.security.web.FilterInvocation in project spring-security by spring-projects.

the class InsecureChannelProcessorTests method testDecideDetectsAcceptableChannel.

@Test
public void testDecideDetectsAcceptableChannel() throws Exception {
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.setQueryString("info=true");
    request.setServerName("localhost");
    request.setContextPath("/bigapp");
    request.setServletPath("/servlet");
    request.setScheme("http");
    request.setServerPort(8080);
    MockHttpServletResponse response = new MockHttpServletResponse();
    FilterInvocation fi = new FilterInvocation(request, response, mock(FilterChain.class));
    InsecureChannelProcessor processor = new InsecureChannelProcessor();
    processor.decide(fi, SecurityConfig.createList("SOME_IGNORED_ATTRIBUTE", "REQUIRES_INSECURE_CHANNEL"));
    assertThat(fi.getResponse().isCommitted()).isFalse();
}

Example 14 with FilterInvocation

use of org.springframework.security.web.FilterInvocation in project spring-security by spring-projects.

the class DefaultFilterInvocationSecurityMetadataSourceTests method lookupRequiringExactMatchWithAdditionalSlashesIsSuccessful.

@Test
public void lookupRequiringExactMatchWithAdditionalSlashesIsSuccessful() {
    createFids("/someAdminPage.html**", null);
    FilterInvocation fi = createFilterInvocation("/someAdminPage.html", null, "a=/test", null);
    Collection<ConfigAttribute> response = this.fids.getAttributes(fi);
    // see SEC-161 (it should truncate after ?
    assertThat(response);
// sign).isEqualTo(def)
}

Example 15 with FilterInvocation

use of org.springframework.security.web.FilterInvocation in project head by mifos.

the class DynamicAuthorizationVoter method vote.

@Override
public int vote(Authentication authentication, Object object, Collection attributes) {
    Object principal = authentication.getPrincipal();
    for (Object configAttribute : attributes) {
        if (supports((ConfigAttribute) configAttribute)) {
        }
    }
    FilterInvocation filter = (FilterInvocation) object;
    String fullUrl = filter.getFullRequestUrl();
    HttpServletRequest request = filter.getHttpRequest();
    HttpSession session = request.getSession();
    PreviousRequestValues previousRequestValues = (PreviousRequestValues) session.getAttribute(Constants.PREVIOUS_REQUEST);
    if (null == previousRequestValues) {
        previousRequestValues = new PreviousRequestValues();
        session.setAttribute(Constants.PREVIOUS_REQUEST, previousRequestValues);
    }
    return ACCESS_GRANTED;
}