Examples with WebSession org.springframework.web.server.WebSession used on opensource projects

Example 46 with WebSession

use of org.springframework.web.server.WebSession in project spring-framework by spring-projects.

the class SessionAttributesHandlerTests method cleanupAttributes.

@Test
public void cleanupAttributes() {
    WebSession session = new MockWebSession();
    session.getAttributes().put("attr1", "value1");
    session.getAttributes().put("attr2", "value2");
    session.getAttributes().put("attr3", new TestBean());
    this.sessionAttributesHandler.cleanupAttributes(session);
    assertThat(session.getAttributes().get("attr1")).isNull();
    assertThat(session.getAttributes().get("attr2")).isNull();
    assertThat(session.getAttributes().get("attr3")).isNotNull();
    // Resolve 'attr3' by type
    this.sessionAttributesHandler.isHandlerSessionAttribute("attr3", TestBean.class);
    this.sessionAttributesHandler.cleanupAttributes(session);
    assertThat(session.getAttributes().get("attr3")).isNull();
}

Example 47 with WebSession

use of org.springframework.web.server.WebSession in project spring-framework by spring-projects.

the class ModelInitializerTests method saveModelAttributeToSession.

@Test
public void saveModelAttributeToSession() {
    TestController controller = new TestController();
    InitBinderBindingContext context = getBindingContext(controller);
    Method method = ResolvableMethod.on(TestController.class).annotPresent(GetMapping.class).resolveMethod();
    HandlerMethod handlerMethod = new HandlerMethod(controller, method);
    this.modelInitializer.initModel(handlerMethod, context, this.exchange).block(TIMEOUT);
    WebSession session = this.exchange.getSession().block(Duration.ZERO);
    assertThat(session).isNotNull();
    assertThat(session.getAttributes().size()).isEqualTo(0);
    context.saveModel();
    assertThat(session.getAttributes().size()).isEqualTo(1);
    assertThat(((TestBean) session.getRequiredAttribute("bean")).getName()).isEqualTo("Bean");
}

Example 48 with WebSession

use of org.springframework.web.server.WebSession in project spring-security by spring-projects.

the class WebSessionOAuth2ServerAuthorizationRequestRepositoryDoNotAllowMultipleAuthorizationRequestsTests method removeAuthorizationRequestWhenMultipleThenSessionAttributeRemoved.

// gh-5145
@Test
public void removeAuthorizationRequestWhenMultipleThenSessionAttributeRemoved() {
    String oldState = "state0";
    // @formatter:off
    MockServerHttpRequest oldRequest = MockServerHttpRequest.get("/").queryParam(OAuth2ParameterNames.STATE, oldState).build();
    OAuth2AuthorizationRequest oldAuthorizationRequest = OAuth2AuthorizationRequest.authorizationCode().authorizationUri("https://example.com/oauth2/authorize").clientId("client-id").redirectUri("http://localhost/client-1").state(oldState).build();
    // @formatter:on
    Map<String, Object> sessionAttrs = spy(new HashMap<>());
    WebSession session = mock(WebSession.class);
    given(session.getAttributes()).willReturn(sessionAttrs);
    WebSessionManager sessionManager = (e) -> Mono.just(session);
    this.exchange = new DefaultServerWebExchange(this.exchange.getRequest(), new MockServerHttpResponse(), sessionManager, ServerCodecConfigurer.create(), new AcceptHeaderLocaleContextResolver());
    ServerWebExchange oldExchange = new DefaultServerWebExchange(oldRequest, new MockServerHttpResponse(), sessionManager, ServerCodecConfigurer.create(), new AcceptHeaderLocaleContextResolver());
    // @formatter:off
    Mono<OAuth2AuthorizationRequest> saveAndSaveAndRemove = this.repository.saveAuthorizationRequest(oldAuthorizationRequest, oldExchange).then(this.repository.saveAuthorizationRequest(this.authorizationRequest, this.exchange)).then(this.repository.removeAuthorizationRequest(this.exchange));
    StepVerifier.create(saveAndSaveAndRemove).expectNext(this.authorizationRequest).verifyComplete();
    StepVerifier.create(this.repository.loadAuthorizationRequest(this.exchange)).verifyComplete();
    // @formatter:on
    verify(sessionAttrs, times(2)).put(anyString(), any());
    verify(sessionAttrs).remove(anyString());
}

Example 49 with WebSession

use of org.springframework.web.server.WebSession in project spring-security by spring-projects.

the class WebSessionOAuth2ServerAuthorizationRequestRepositoryAllowMultipleAuthorizationRequestsTests method removeAuthorizationRequestWhenMultipleThenRemovedAndSessionAttributeUpdated.

// gh-7327
@Test
public void removeAuthorizationRequestWhenMultipleThenRemovedAndSessionAttributeUpdated() {
    String oldState = "state0";
    // @formatter:off
    MockServerHttpRequest oldRequest = MockServerHttpRequest.get("/").queryParam(OAuth2ParameterNames.STATE, oldState).build();
    OAuth2AuthorizationRequest oldAuthorizationRequest = OAuth2AuthorizationRequest.authorizationCode().authorizationUri("https://example.com/oauth2/authorize").clientId("client-id").redirectUri("http://localhost/client-1").state(oldState).build();
    // @formatter:on
    Map<String, Object> sessionAttrs = spy(new HashMap<>());
    WebSession session = mock(WebSession.class);
    given(session.getAttributes()).willReturn(sessionAttrs);
    WebSessionManager sessionManager = (e) -> Mono.just(session);
    this.exchange = new DefaultServerWebExchange(this.exchange.getRequest(), new MockServerHttpResponse(), sessionManager, ServerCodecConfigurer.create(), new AcceptHeaderLocaleContextResolver());
    ServerWebExchange oldExchange = new DefaultServerWebExchange(oldRequest, new MockServerHttpResponse(), sessionManager, ServerCodecConfigurer.create(), new AcceptHeaderLocaleContextResolver());
    // @formatter:off
    Mono<OAuth2AuthorizationRequest> saveAndSaveAndRemove = this.repository.saveAuthorizationRequest(oldAuthorizationRequest, oldExchange).then(this.repository.saveAuthorizationRequest(this.authorizationRequest, this.exchange)).then(this.repository.removeAuthorizationRequest(this.exchange));
    StepVerifier.create(saveAndSaveAndRemove).expectNext(this.authorizationRequest).verifyComplete();
    StepVerifier.create(this.repository.loadAuthorizationRequest(this.exchange)).verifyComplete();
    // @formatter:on
    verify(sessionAttrs, times(3)).put(any(), any());
}

Example 50 with WebSession

use of org.springframework.web.server.WebSession in project spring-security by spring-projects.

the class WebSessionServerOAuth2AuthorizedClientRepositoryTests method removeAuthorizedClientWhenSavedThenRemovedFromSession.

@Test
public void removeAuthorizedClientWhenSavedThenRemovedFromSession() {
    OAuth2AuthorizedClient authorizedClient = new OAuth2AuthorizedClient(this.registration1, this.principalName1, mock(OAuth2AccessToken.class));
    this.authorizedClientRepository.saveAuthorizedClient(authorizedClient, null, this.exchange).block();
    OAuth2AuthorizedClient loadedAuthorizedClient = this.authorizedClientRepository.loadAuthorizedClient(this.registrationId1, null, this.exchange).block();
    assertThat(loadedAuthorizedClient).isSameAs(authorizedClient);
    this.authorizedClientRepository.removeAuthorizedClient(this.registrationId1, null, this.exchange).block();
    WebSession session = this.exchange.getSession().block();
    assertThat(session).isNotNull();
    assertThat(session.getAttributes()).isEmpty();
}