Examples with PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails used on opensource projects

Example 1 with PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

use of org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails in project syndesis by syndesisio.

the class SecurityConfiguration method requestHeaderAuthenticationFilter.

@SuppressWarnings("PMD.SignatureDeclareThrowsException")
private RequestHeaderAuthenticationFilter requestHeaderAuthenticationFilter() throws Exception {
    RequestHeaderAuthenticationFilter f = new RequestHeaderAuthenticationFilter();
    f.setPrincipalRequestHeader("X-Forwarded-User");
    f.setCredentialsRequestHeader("X-Forwarded-Access-Token");
    f.setAuthenticationManager(authenticationManager());
    f.setAuthenticationDetailsSource((AuthenticationDetailsSource<HttpServletRequest, PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails>) (request) -> new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(request, AuthorityUtils.createAuthorityList("ROLE_AUTHENTICATED")));
    f.setAuthenticationFailureHandler(new SimpleUrlAuthenticationFailureHandler());
    f.setExceptionIfHeaderMissing(false);
    return f;
}

Example 2 with PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

use of org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails in project spring-security by spring-projects.

the class J2eeBasedPreAuthenticatedWebAuthenticationDetailsSourceTests method testDetails.

private void testDetails(String[] mappedRoles, String[] userRoles, String[] expectedRoles) {
    J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource src = getJ2eeBasedPreAuthenticatedWebAuthenticationDetailsSource(mappedRoles);
    Object o = src.buildDetails(getRequest("testUser", userRoles));
    assertThat(o).isNotNull();
    assertThat(o instanceof PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails).withFailMessage("Returned object not of type PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails, actual type: " + o.getClass()).isTrue();
    PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails details = (PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails) o;
    List<GrantedAuthority> gas = details.getGrantedAuthorities();
    assertThat(gas).as("Granted authorities should not be null").isNotNull();
    assertThat(gas).hasSize(expectedRoles.length);
    Collection<String> expectedRolesColl = Arrays.asList(expectedRoles);
    Collection<String> gasRolesSet = new HashSet<>();
    for (GrantedAuthority grantedAuthority : gas) {
        gasRolesSet.add(grantedAuthority.getAuthority());
    }
    assertThat(expectedRolesColl.containsAll(gasRolesSet) && gasRolesSet.containsAll(expectedRolesColl)).withFailMessage("Granted Authorities do not match expected roles").isTrue();
}

Example 3 with PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

use of org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails in project cas by apereo.

the class PopulateSpringSecurityContextAction method doExecute.

@Override
protected Event doExecute(final RequestContext requestContext) {
    val authn = WebUtils.getAuthentication(requestContext);
    val principal = resolvePrincipal(authn.getPrincipal());
    val request = WebUtils.getHttpServletRequestFromExternalWebflowContext(requestContext);
    val authorities = principal.getAttributes().keySet().stream().map(SimpleGrantedAuthority::new).collect(Collectors.toList());
    val secAuth = new PreAuthenticatedAuthenticationToken(principal, authn.getCredentials(), authorities);
    secAuth.setAuthenticated(true);
    secAuth.setDetails(new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(request, authorities));
    val context = SecurityContextHolder.getContext();
    context.setAuthentication(secAuth);
    val session = request.getSession(true);
    LOGGER.trace("Storing security context in session [{}] for [{}]", session.getId(), principal);
    session.setAttribute(HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY, context);
    return null;
}

Example 4 with PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

use of org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails in project spring-security by spring-projects.

the class J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource method buildDetails.

/**
	 * Builds the authentication details object.
	 *
	 * @see org.springframework.security.authentication.AuthenticationDetailsSource#buildDetails(Object)
	 */
public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails buildDetails(HttpServletRequest context) {
    Collection<String> j2eeUserRoles = getUserRoles(context);
    Collection<? extends GrantedAuthority> userGas = j2eeUserRoles2GrantedAuthoritiesMapper.getGrantedAuthorities(j2eeUserRoles);
    if (logger.isDebugEnabled()) {
        logger.debug("J2EE roles [" + j2eeUserRoles + "] mapped to Granted Authorities: [" + userGas + "]");
    }
    PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails result = new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(context, userGas);
    return result;
}