Examples with LogoutHandler org.springframework.security.web.authentication.logout.LogoutHandler used on opensource projects

Example 11 with LogoutHandler

use of org.springframework.security.web.authentication.logout.LogoutHandler in project spring-security by spring-projects.

the class Saml2LogoutConfigurer method createRelyingPartyLogoutFilter.

private LogoutFilter createRelyingPartyLogoutFilter(RelyingPartyRegistrationResolver registrations) {
    LogoutHandler[] logoutHandlers = this.logoutHandlers.toArray(new LogoutHandler[0]);
    Saml2RelyingPartyInitiatedLogoutSuccessHandler logoutRequestSuccessHandler = createSaml2LogoutRequestSuccessHandler(registrations);
    LogoutFilter logoutFilter = new LogoutFilter(logoutRequestSuccessHandler, logoutHandlers);
    logoutFilter.setLogoutRequestMatcher(createLogoutMatcher());
    return postProcess(logoutFilter);
}

Example 12 with LogoutHandler

use of org.springframework.security.web.authentication.logout.LogoutHandler in project spring-security by spring-projects.

the class SessionManagementConfigurer method createConcurrencyFilter.

private ConcurrentSessionFilter createConcurrencyFilter(H http) {
    SessionInformationExpiredStrategy expireStrategy = getExpiredSessionStrategy();
    SessionRegistry sessionRegistry = getSessionRegistry(http);
    ConcurrentSessionFilter concurrentSessionFilter = (expireStrategy != null) ? new ConcurrentSessionFilter(sessionRegistry, expireStrategy) : new ConcurrentSessionFilter(sessionRegistry);
    LogoutConfigurer<H> logoutConfigurer = http.getConfigurer(LogoutConfigurer.class);
    if (logoutConfigurer != null) {
        List<LogoutHandler> logoutHandlers = logoutConfigurer.getLogoutHandlers();
        if (!CollectionUtils.isEmpty(logoutHandlers)) {
            concurrentSessionFilter.setLogoutHandlers(logoutHandlers);
        }
    }
    return concurrentSessionFilter;
}

Example 13 with LogoutHandler

use of org.springframework.security.web.authentication.logout.LogoutHandler in project spring-security by spring-projects.

the class Saml2LogoutConfigurerTests method saml2LogoutWhenDefaultsThenLogsOutAndSendsLogoutRequest.

@Test
public void saml2LogoutWhenDefaultsThenLogsOutAndSendsLogoutRequest() throws Exception {
    this.spring.register(Saml2LogoutDefaultsConfig.class).autowire();
    MvcResult result = this.mvc.perform(post("/logout").with(authentication(this.user)).with(csrf())).andExpect(status().isFound()).andReturn();
    String location = result.getResponse().getHeader("Location");
    LogoutHandler logoutHandler = this.spring.getContext().getBean(LogoutHandler.class);
    assertThat(location).startsWith("https://ap.example.org/logout/saml2/request");
    verify(logoutHandler).logout(any(), any(), any());
}

Example 14 with LogoutHandler

use of org.springframework.security.web.authentication.logout.LogoutHandler in project spring-security by spring-projects.

the class SessionManagementConfigTests method checkConcurrencyAndLogoutFilterHasSameSizeAndHasLogoutSuccessEventPublishingLogoutHandler.

/**
 * SEC-2680
 */
@Test
public void checkConcurrencyAndLogoutFilterHasSameSizeAndHasLogoutSuccessEventPublishingLogoutHandler() {
    this.spring.configLocations(xml("ConcurrencyControlLogoutAndRememberMeHandlers")).autowire();
    ConcurrentSessionFilter concurrentSessionFilter = getFilter(ConcurrentSessionFilter.class);
    LogoutFilter logoutFilter = getFilter(LogoutFilter.class);
    LogoutHandler csfLogoutHandler = getFieldValue(concurrentSessionFilter, "handlers");
    LogoutHandler lfLogoutHandler = getFieldValue(logoutFilter, "handler");
    assertThat(csfLogoutHandler).isInstanceOf(CompositeLogoutHandler.class);
    assertThat(lfLogoutHandler).isInstanceOf(CompositeLogoutHandler.class);
    List<LogoutHandler> csfLogoutHandlers = getFieldValue(csfLogoutHandler, "logoutHandlers");
    List<LogoutHandler> lfLogoutHandlers = getFieldValue(lfLogoutHandler, "logoutHandlers");
    assertThat(csfLogoutHandlers).hasSameSizeAs(lfLogoutHandlers);
    assertThat(csfLogoutHandlers).hasAtLeastOneElementOfType(LogoutSuccessEventPublishingLogoutHandler.class);
    assertThat(lfLogoutHandlers).hasAtLeastOneElementOfType(LogoutSuccessEventPublishingLogoutHandler.class);
}

Example 15 with LogoutHandler

use of org.springframework.security.web.authentication.logout.LogoutHandler in project spring-security by spring-projects.

the class ConcurrentSessionFilterTests method setLogoutHandlersWhenEmptyThenThrowsException.

@Test
public void setLogoutHandlersWhenEmptyThenThrowsException() {
    ConcurrentSessionFilter filter = new ConcurrentSessionFilter(new SessionRegistryImpl());
    assertThatIllegalArgumentException().isThrownBy(() -> filter.setLogoutHandlers(new LogoutHandler[0]));
}