Example 1 with ServerAuthenticationFailureHandler
use of org.springframework.security.web.server.authentication.ServerAuthenticationFailureHandler in project spring-security by spring-projects.
the class OAuth2LoginTests method oauth2LoginFailsWhenCustomObjectsThenUsed.
@Test
public void oauth2LoginFailsWhenCustomObjectsThenUsed() {
this.spring.register(OAuth2LoginWithSingleClientRegistrations.class, OAuth2LoginMockAuthenticationManagerConfig.class).autowire();
String redirectLocation = "/custom-redirect-location";
String failureRedirectLocation = "/failure-redirect-location";
// @formatter:off
WebTestClient webTestClient = WebTestClientBuilder.bindToWebFilters(this.springSecurity).build();
// @formatter:on
OAuth2LoginMockAuthenticationManagerConfig config = this.spring.getContext().getBean(OAuth2LoginMockAuthenticationManagerConfig.class);
ServerAuthenticationConverter converter = config.authenticationConverter;
ReactiveAuthenticationManager manager = config.manager;
ServerWebExchangeMatcher matcher = config.matcher;
ServerOAuth2AuthorizationRequestResolver resolver = config.resolver;
ServerAuthenticationSuccessHandler successHandler = config.successHandler;
ServerAuthenticationFailureHandler failureHandler = config.failureHandler;
given(converter.convert(any())).willReturn(Mono.just(new TestingAuthenticationToken("a", "b", "c")));
given(manager.authenticate(any())).willReturn(Mono.error(new OAuth2AuthenticationException(new OAuth2Error("error"), "message")));
given(matcher.matches(any())).willReturn(ServerWebExchangeMatcher.MatchResult.match());
given(resolver.resolve(any())).willReturn(Mono.empty());
given(successHandler.onAuthenticationSuccess(any(), any())).willAnswer((Answer<Mono<Void>>) (invocation) -> {
WebFilterExchange webFilterExchange = invocation.getArgument(0);
Authentication authentication = invocation.getArgument(1);
return new RedirectServerAuthenticationSuccessHandler(redirectLocation).onAuthenticationSuccess(webFilterExchange, authentication);
});
given(failureHandler.onAuthenticationFailure(any(), any())).willAnswer((Answer<Mono<Void>>) (invocation) -> {
WebFilterExchange webFilterExchange = invocation.getArgument(0);
AuthenticationException authenticationException = invocation.getArgument(1);
return new RedirectServerAuthenticationFailureHandler(failureRedirectLocation).onAuthenticationFailure(webFilterExchange, authenticationException);
});
// @formatter:off
webTestClient.get().uri("/login/oauth2/code/github").exchange().expectStatus().is3xxRedirection().expectHeader().valueEquals("Location", failureRedirectLocation);
// @formatter:on
verify(converter).convert(any());
verify(manager).authenticate(any());
verify(matcher).matches(any());
verify(resolver).resolve(any());
verify(failureHandler).onAuthenticationFailure(any(), any());
}
Also used :
ServerAuthorizationRequestRepository(org.springframework.security.oauth2.client.web.server.ServerAuthorizationRequestRepository)
OidcUser(org.springframework.security.oauth2.core.oidc.user.OidcUser)
TestingAuthenticationToken(org.springframework.security.authentication.TestingAuthenticationToken)
RegisteredOAuth2AuthorizedClient(org.springframework.security.oauth2.client.annotation.RegisteredOAuth2AuthorizedClient)
Assertions.assertThat(org.assertj.core.api.Assertions.assertThat)
Autowired(org.springframework.beans.factory.annotation.Autowired)
WebHandler(org.springframework.web.server.WebHandler)
WebTestClientHtmlUnitDriverBuilder(org.springframework.security.htmlunit.server.WebTestClientHtmlUnitDriverBuilder)
WebFilterExchange(org.springframework.security.web.server.WebFilterExchange)
OAuth2AuthorizationCodeAuthenticationToken(org.springframework.security.oauth2.client.authentication.OAuth2AuthorizationCodeAuthenticationToken)
ReactiveUserDetailsService(org.springframework.security.core.userdetails.ReactiveUserDetailsService)
ExtendWith(org.junit.jupiter.api.extension.ExtendWith)
TestOidcUsers(org.springframework.security.oauth2.core.oidc.user.TestOidcUsers)
WebFilter(org.springframework.web.server.WebFilter)
BDDMockito.given(org.mockito.BDDMockito.given)
Map(java.util.Map)
ReactiveAuthenticationManager(org.springframework.security.authentication.ReactiveAuthenticationManager)
AuthenticationException(org.springframework.security.core.AuthenticationException)
Jwt(org.springframework.security.oauth2.jwt.Jwt)
ReactiveJwtDecoder(org.springframework.security.oauth2.jwt.ReactiveJwtDecoder)
TestClientRegistrations(org.springframework.security.oauth2.client.registration.TestClientRegistrations)
WebFilterChain(org.springframework.web.server.WebFilterChain)
OidcClientInitiatedServerLogoutSuccessHandler(org.springframework.security.oauth2.client.oidc.web.server.logout.OidcClientInitiatedServerLogoutSuccessHandler)
TestOAuth2AuthorizationExchanges(org.springframework.security.oauth2.core.endpoint.TestOAuth2AuthorizationExchanges)
ReactiveAuthenticationTestConfiguration(org.springframework.security.config.users.ReactiveAuthenticationTestConfiguration)
HttpHeaders(org.springframework.http.HttpHeaders)
OAuth2AuthorizationExchange(org.springframework.security.oauth2.core.endpoint.OAuth2AuthorizationExchange)
OAuth2AuthenticationException(org.springframework.security.oauth2.core.OAuth2AuthenticationException)
TestJwts(org.springframework.security.oauth2.jwt.TestJwts)
ReactiveOAuth2AccessTokenResponseClient(org.springframework.security.oauth2.client.endpoint.ReactiveOAuth2AccessTokenResponseClient)
ServerAuthenticationSuccessHandler(org.springframework.security.web.server.authentication.ServerAuthenticationSuccessHandler)
ClientRegistration(org.springframework.security.oauth2.client.registration.ClientRegistration)
RestController(org.springframework.web.bind.annotation.RestController)
Test(org.junit.jupiter.api.Test)
Configuration(org.springframework.context.annotation.Configuration)
OAuth2AuthorizationCodeGrantRequest(org.springframework.security.oauth2.client.endpoint.OAuth2AuthorizationCodeGrantRequest)
SecurityContext(org.springframework.security.core.context.SecurityContext)
OAuth2User(org.springframework.security.oauth2.core.user.OAuth2User)
ReactiveJwtDecoderFactory(org.springframework.security.oauth2.jwt.ReactiveJwtDecoderFactory)
Authentication(org.springframework.security.core.Authentication)
OidcUserRequest(org.springframework.security.oauth2.client.oidc.userinfo.OidcUserRequest)
ServerOAuth2AuthorizedClientRepository(org.springframework.security.oauth2.client.web.server.ServerOAuth2AuthorizedClientRepository)
RedirectServerAuthenticationSuccessHandler(org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler)
Mockito.mock(org.mockito.Mockito.mock)
ArgumentMatchers.any(org.mockito.ArgumentMatchers.any)
ServerOAuth2AuthorizationRequestResolver(org.springframework.security.oauth2.client.web.server.ServerOAuth2AuthorizationRequestResolver)
ServerWebExchangeMatcher(org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher)
TestOAuth2AccessTokens(org.springframework.security.oauth2.core.TestOAuth2AccessTokens)
WebDriver(org.openqa.selenium.WebDriver)
IdTokenClaimNames(org.springframework.security.oauth2.core.oidc.IdTokenClaimNames)
TestOAuth2AuthorizationRequests(org.springframework.security.oauth2.core.endpoint.TestOAuth2AuthorizationRequests)
OidcParameterNames(org.springframework.security.oauth2.core.oidc.endpoint.OidcParameterNames)
HashMap(java.util.HashMap)
Mockito.spy(org.mockito.Mockito.spy)
OidcAuthorizationCodeReactiveAuthenticationManager(org.springframework.security.oauth2.client.oidc.authentication.OidcAuthorizationCodeReactiveAuthenticationManager)
RedirectServerAuthenticationFailureHandler(org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler)
ServerWebExchange(org.springframework.web.server.ServerWebExchange)
ServerAuthenticationConverter(org.springframework.security.web.server.authentication.ServerAuthenticationConverter)
WebTestClient(org.springframework.test.web.reactive.server.WebTestClient)
Answer(org.mockito.stubbing.Answer)
SecurityContextServerLogoutHandler(org.springframework.security.web.server.authentication.logout.SecurityContextServerLogoutHandler)
EnableWebFlux(org.springframework.web.reactive.config.EnableWebFlux)
EnableWebFluxSecurity(org.springframework.security.config.annotation.web.reactive.EnableWebFluxSecurity)
CommonOAuth2Provider(org.springframework.security.config.oauth2.client.CommonOAuth2Provider)
ReactiveOAuth2UserService(org.springframework.security.oauth2.client.userinfo.ReactiveOAuth2UserService)
JwtValidationException(org.springframework.security.oauth2.jwt.JwtValidationException)
GetMapping(org.springframework.web.bind.annotation.GetMapping)
OAuth2AccessToken(org.springframework.security.oauth2.core.OAuth2AccessToken)
TestOAuth2Users(org.springframework.security.oauth2.core.user.TestOAuth2Users)
WebTestClientBuilder(org.springframework.security.test.web.reactive.server.WebTestClientBuilder)
OAuth2LoginAuthenticationToken(org.springframework.security.oauth2.client.authentication.OAuth2LoginAuthenticationToken)
OAuth2AuthorizationResponse(org.springframework.security.oauth2.core.endpoint.OAuth2AuthorizationResponse)
ServerSecurityContextRepository(org.springframework.security.web.server.context.ServerSecurityContextRepository)
SecurityContextImpl(org.springframework.security.core.context.SecurityContextImpl)
ServerRequestCache(org.springframework.security.web.server.savedrequest.ServerRequestCache)
OAuth2AuthorizationRequest(org.springframework.security.oauth2.core.endpoint.OAuth2AuthorizationRequest)
Mono(reactor.core.publisher.Mono)
OAuth2AuthenticationToken(org.springframework.security.oauth2.client.authentication.OAuth2AuthenticationToken)
OAuth2AccessTokenResponse(org.springframework.security.oauth2.core.endpoint.OAuth2AccessTokenResponse)
ApplicationContext(org.springframework.context.ApplicationContext)
WebFilterChainProxy(org.springframework.security.web.server.WebFilterChainProxy)
OAuth2AuthorizedClient(org.springframework.security.oauth2.client.OAuth2AuthorizedClient)
Mockito.verify(org.mockito.Mockito.verify)
InMemoryReactiveClientRegistrationRepository(org.springframework.security.oauth2.client.registration.InMemoryReactiveClientRegistrationRepository)
SecurityWebFilterChain(org.springframework.security.web.server.SecurityWebFilterChain)
SpringTestContext(org.springframework.security.config.test.SpringTestContext)
TestOAuth2AuthorizationResponses(org.springframework.security.oauth2.core.endpoint.TestOAuth2AuthorizationResponses)
SpringTestContextExtension(org.springframework.security.config.test.SpringTestContextExtension)
OAuth2Error(org.springframework.security.oauth2.core.OAuth2Error)
Bean(org.springframework.context.annotation.Bean)
Collections(java.util.Collections)
AuthorityUtils(org.springframework.security.core.authority.AuthorityUtils)
UserDetailsRepositoryReactiveAuthenticationManager(org.springframework.security.authentication.UserDetailsRepositoryReactiveAuthenticationManager)
ServerAuthenticationFailureHandler(org.springframework.security.web.server.authentication.ServerAuthenticationFailureHandler)
ReactiveAuthenticationManager(org.springframework.security.authentication.ReactiveAuthenticationManager)
OidcAuthorizationCodeReactiveAuthenticationManager(org.springframework.security.oauth2.client.oidc.authentication.OidcAuthorizationCodeReactiveAuthenticationManager)
UserDetailsRepositoryReactiveAuthenticationManager(org.springframework.security.authentication.UserDetailsRepositoryReactiveAuthenticationManager)
RedirectServerAuthenticationFailureHandler(org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler)
ServerAuthenticationFailureHandler(org.springframework.security.web.server.authentication.ServerAuthenticationFailureHandler)
WebTestClient(org.springframework.test.web.reactive.server.WebTestClient)
AuthenticationException(org.springframework.security.core.AuthenticationException)
OAuth2AuthenticationException(org.springframework.security.oauth2.core.OAuth2AuthenticationException)
ServerAuthenticationSuccessHandler(org.springframework.security.web.server.authentication.ServerAuthenticationSuccessHandler)
RedirectServerAuthenticationSuccessHandler(org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler)
Mono(reactor.core.publisher.Mono)
OAuth2Error(org.springframework.security.oauth2.core.OAuth2Error)
ServerAuthenticationConverter(org.springframework.security.web.server.authentication.ServerAuthenticationConverter)
TestingAuthenticationToken(org.springframework.security.authentication.TestingAuthenticationToken)
WebFilterExchange(org.springframework.security.web.server.WebFilterExchange)
RedirectServerAuthenticationFailureHandler(org.springframework.security.web.server.authentication.RedirectServerAuthenticationFailureHandler)
Authentication(org.springframework.security.core.Authentication)
ServerWebExchangeMatcher(org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher)
OAuth2AuthenticationException(org.springframework.security.oauth2.core.OAuth2AuthenticationException)
ServerOAuth2AuthorizationRequestResolver(org.springframework.security.oauth2.client.web.server.ServerOAuth2AuthorizationRequestResolver)
RedirectServerAuthenticationSuccessHandler(org.springframework.security.web.server.authentication.RedirectServerAuthenticationSuccessHandler)
Test(org.junit.jupiter.api.Test)
Aggregations
Collections (java.util.Collections)1
HashMap (java.util.HashMap)1
Map (java.util.Map)1
Assertions.assertThat (org.assertj.core.api.Assertions.assertThat)1
Test (org.junit.jupiter.api.Test)1
ExtendWith (org.junit.jupiter.api.extension.ExtendWith)1
ArgumentMatchers.any (org.mockito.ArgumentMatchers.any)1
BDDMockito.given (org.mockito.BDDMockito.given)1
Mockito.mock (org.mockito.Mockito.mock)1
Mockito.spy (org.mockito.Mockito.spy)1
Mockito.verify (org.mockito.Mockito.verify)1
Answer (org.mockito.stubbing.Answer)1
WebDriver (org.openqa.selenium.WebDriver)1
Autowired (org.springframework.beans.factory.annotation.Autowired)1
ApplicationContext (org.springframework.context.ApplicationContext)1
Bean (org.springframework.context.annotation.Bean)1
Configuration (org.springframework.context.annotation.Configuration)1
HttpHeaders (org.springframework.http.HttpHeaders)1
ReactiveAuthenticationManager (org.springframework.security.authentication.ReactiveAuthenticationManager)1
TestingAuthenticationToken (org.springframework.security.authentication.TestingAuthenticationToken)1
