Examples with SecurityContextHolderAwareRequestFilter org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter used on opensource projects

Example 1 with SecurityContextHolderAwareRequestFilter

use of org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter in project spring-security by spring-projects.

the class ServletApiConfigurerTests method checkSecurityContextAwareAndLogoutFilterHasSameSizeAndHasLogoutSuccessEventPublishingLogoutHandler.

@Test
public void checkSecurityContextAwareAndLogoutFilterHasSameSizeAndHasLogoutSuccessEventPublishingLogoutHandler() {
    this.spring.register(ServletApiWithLogoutConfig.class);
    SecurityContextHolderAwareRequestFilter scaFilter = getFilter(SecurityContextHolderAwareRequestFilter.class);
    LogoutFilter logoutFilter = getFilter(LogoutFilter.class);
    LogoutHandler lfLogoutHandler = getFieldValue(logoutFilter, "handler");
    assertThat(lfLogoutHandler).isInstanceOf(CompositeLogoutHandler.class);
    List<LogoutHandler> scaLogoutHandlers = getFieldValue(scaFilter, "logoutHandlers");
    List<LogoutHandler> lfLogoutHandlers = getFieldValue(lfLogoutHandler, "logoutHandlers");
    assertThat(scaLogoutHandlers).hasSameSizeAs(lfLogoutHandlers);
    assertThat(scaLogoutHandlers).hasAtLeastOneElementOfType(LogoutSuccessEventPublishingLogoutHandler.class);
    assertThat(lfLogoutHandlers).hasAtLeastOneElementOfType(LogoutSuccessEventPublishingLogoutHandler.class);
}

Example 2 with SecurityContextHolderAwareRequestFilter

use of org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter in project syncope by apache.

the class DefaultRolesPrefixPostProcessor method postProcessAfterInitialization.

@Override
public Object postProcessAfterInitialization(final Object bean, final String beanName) {
    if (bean instanceof DefaultMethodSecurityExpressionHandler) {
        ((DefaultMethodSecurityExpressionHandler) bean).setDefaultRolePrefix(null);
    }
    if (bean instanceof DefaultWebSecurityExpressionHandler) {
        ((DefaultWebSecurityExpressionHandler) bean).setDefaultRolePrefix(null);
    }
    if (bean instanceof SecurityContextHolderAwareRequestFilter) {
        SecurityContextHolderAwareRequestFilter filter = (SecurityContextHolderAwareRequestFilter) bean;
        filter.setRolePrefix(StringUtils.EMPTY);
        try {
            filter.afterPropertiesSet();
        } catch (ServletException e) {
            throw new FatalBeanException(e.getMessage(), e);
        }
    }
    return bean;
}

Example 3 with SecurityContextHolderAwareRequestFilter

use of org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter in project motech by motech.

the class SecurityRuleBuilder method addSecurityContextHolderAwareRequestFilter.

private void addSecurityContextHolderAwareRequestFilter(List<Filter> filters) throws ServletException {
    SecurityContextHolderAwareRequestFilter securityFilter = new SecurityContextHolderAwareRequestFilter();
    securityFilter.setTrustResolver(new AuthenticationTrustResolverImpl());
    securityFilter.afterPropertiesSet();
    filters.add(securityFilter);
}