Examples with WebSessionServerSecurityContextRepository org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository used on opensource projects

Example 6 with WebSessionServerSecurityContextRepository

use of org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository in project spring-security by spring-projects.

the class ServerHttpSecurityTests method basicWithGlobalWebSessionServerSecurityContextRepository.

@Test
public void basicWithGlobalWebSessionServerSecurityContextRepository() {
    given(this.authenticationManager.authenticate(any())).willReturn(Mono.just(new TestingAuthenticationToken("rob", "rob", "ROLE_USER", "ROLE_ADMIN")));
    this.http.securityContextRepository(new WebSessionServerSecurityContextRepository());
    this.http.httpBasic();
    this.http.authenticationManager(this.authenticationManager);
    ServerHttpSecurity.AuthorizeExchangeSpec authorize = this.http.authorizeExchange();
    authorize.anyExchange().authenticated();
    WebTestClient client = buildClient();
    // @formatter:off
    EntityExchangeResult<String> result = client.get().uri("/").headers((headers) -> headers.setBasicAuth("rob", "rob")).exchange().expectStatus().isOk().expectHeader().valueMatches(HttpHeaders.CACHE_CONTROL, ".+").expectBody(String.class).consumeWith((b) -> assertThat(b.getResponseBody()).isEqualTo("ok")).returnResult();
    // @formatter:on
    assertThat(result.getResponseCookies().getFirst("SESSION")).isNotNull();
}

Example 7 with WebSessionServerSecurityContextRepository

use of org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository in project spring-security by spring-projects.

the class EnableWebFluxSecurityTests method defaultPopulatesReactorContext.

@Test
public void defaultPopulatesReactorContext() {
    this.spring.register(Config.class).autowire();
    Authentication currentPrincipal = new TestingAuthenticationToken("user", "password", "ROLE_USER");
    WebSessionServerSecurityContextRepository contextRepository = new WebSessionServerSecurityContextRepository();
    SecurityContext context = new SecurityContextImpl(currentPrincipal);
    // @formatter:off
    WebFilter contextRepositoryWebFilter = (exchange, chain) -> contextRepository.save(exchange, context).switchIfEmpty(chain.filter(exchange)).flatMap((e) -> chain.filter(exchange));
    WebTestClient client = WebTestClientBuilder.bindToWebFilters(contextRepositoryWebFilter, this.springSecurityFilterChain, writePrincipalWebFilter()).build();
    client.get().uri("/").exchange().expectStatus().isOk().expectBody(String.class).consumeWith((result) -> assertThat(result.getResponseBody()).isEqualTo(currentPrincipal.getName()));
// @formatter:on
}