Example usage for org.springframework.security.web.authentication.preauth PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

List of usage examples for org.springframework.security.web.authentication.preauth PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails

Introduction

In this page you can find the example usage for org.springframework.security.web.authentication.preauth PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails.

Prototype

public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(HttpServletRequest request,
            Collection<? extends GrantedAuthority> authorities) 

Source Link

Usage

From source file:edu.uchicago.duo.security.DuoAuthenticationDetailsSource.java

@Override
public GrantedAuthoritiesContainer buildDetails(HttpServletRequest request) {

    List gal = new ArrayList();
    try {//  w  w  w . j av a 2 s.  c  om
        GrantedAuthority ga = null;

        if (StringUtils.hasLength(request.getHeader("uid"))) {
            ga = new SimpleGrantedAuthority("ROLE_USER");
        } else {
            ga = new SimpleGrantedAuthority("ROLE_ANONYMOUS");
        }

        log.debug("UID=" + request.getHeader("uid") + "|Granted:" + ga);

        gal.add(ga);
    } catch (Exception e) {
        throw new AuthenticationServiceException("Error..", e);
    }

    return new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(request, gal);
}

From source file:org.appverse.web.framework.backend.api.helpers.security.SessionParameterPreAuthenticatedAutheticationDetailsSource.java

@Override
@SuppressWarnings("unchecked")
public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails buildDetails(HttpServletRequest request) {
    if (request.getSession().getAttribute(authoritiesSessionAttribute) != null) {
        List<String> authorities = (List<String>) request.getSession()
                .getAttribute(authoritiesSessionAttribute);
        Collection<GrantedAuthority> grantedAuthorities = new ArrayList<GrantedAuthority>();
        for (String authority : authorities) {
            GrantedAuthority grantedAuthority = new SimpleGrantedAuthority(authority);
            grantedAuthorities.add(grantedAuthority);
        }/*from www .  j  ava 2 s.  c  o  m*/
        PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails details = new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(
                request, grantedAuthorities);
        return details;
    } else {
        GrantedAuthority grantedAuthority = new SimpleGrantedAuthority("NO_AUTHORITY");
        Collection<GrantedAuthority> grantedAuthorities = new ArrayList<GrantedAuthority>();
        grantedAuthorities.add(grantedAuthority);
        PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails details = new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(
                request, grantedAuthorities);
        return details;
    }
}

From source file:org.italiangrid.storm.webdav.authz.VOMSPreAuthDetailsSource.java

@Override
public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails buildDetails(HttpServletRequest request) {

    return new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(request,
            getVOMSGrantedAuthorities(request));
}

From source file:io.syndesis.runtime.SecurityConfiguration.java

@SuppressWarnings("PMD.SignatureDeclareThrowsException")
private RequestHeaderAuthenticationFilter requestHeaderAuthenticationFilter() throws Exception {
    RequestHeaderAuthenticationFilter f = new RequestHeaderAuthenticationFilter();
    f.setPrincipalRequestHeader("X-Forwarded-User");
    f.setCredentialsRequestHeader("X-Forwarded-Access-Token");
    f.setAuthenticationManager(authenticationManager());
    f.setAuthenticationDetailsSource(/*from  w  w w  .  ja va2 s . c om*/
            (AuthenticationDetailsSource<HttpServletRequest, PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails>) (
                    request) -> new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(request,
                            AuthorityUtils.createAuthorityList("ROLE_AUTHENTICATED")));
    f.setAuthenticationFailureHandler(new SimpleUrlAuthenticationFailureHandler());
    f.setExceptionIfHeaderMissing(false);
    return f;
}

From source file:org.ojbc.web.security.PortalAuthenticationDetailsSource.java

@Override
public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails buildDetails(HttpServletRequest context) {

    List<SimpleGrantedAuthority> grantedAuthorities = new ArrayList<SimpleGrantedAuthority>();

    Element samlAssertion = (Element) context.getAttribute("samlAssertion");
    SimpleGrantedAuthority rolePortalUser = new SimpleGrantedAuthority(Authorities.AUTHZ_PORTAL.name());

    String principal = (String) context.getAttribute("principal");
    log.info("requireIdentityBasedAccessControl:" + requireIdentityBasedAccessControl);
    if (requireIdentityBasedAccessControl && !WebPortalConstants.EMPTY_FEDERATION_ID.equals(principal)) {

        String accessControlResponseString = accessControlServicesConfig
                .getIdentityBasedAccessControlServiceBean().invokeAccessControlRequest(
                        UUID.randomUUID().toString(), samlAssertion, policyAccessControlResourceURI);
        Assert.notNull(accessControlResponseString);

        /*//ww  w. j ava 2  s.  c  o  m
         * Grant the "PortalUser" Role only if accessDenied is "false"
         */
        String accessDenied = getAccessDeniedIndicator(accessControlResponseString);

        if (accessDenied != "" && !Boolean.valueOf(accessDenied)) {
            grantedAuthorities.add(rolePortalUser);
        } else {
            context.setAttribute("accessControlResponse", accessControlResponseString);
        }
    } else if (!requireIdentityBasedAccessControl) {
        grantedAuthorities.add(rolePortalUser);
    }

    /*
     * Check whether to grant other authorities only when PortalUser access is granted.  
     */
    if (grantedAuthorities.contains(rolePortalUser)) {
        if (requireSubscriptionAccessControl) {
            String accessControlResponseString = accessControlServicesConfig
                    .getIdentityBasedAccessControlServiceBean().invokeAccessControlRequest(
                            UUID.randomUUID().toString(), samlAssertion, subscriptionAccessControlResourceURI);
            Assert.notNull(accessControlResponseString);

            /*
             * Grant the "Subscription" access only if accessDenied is "false"
             */
            String accessDenied = getAccessDeniedIndicator(accessControlResponseString);

            if (accessDenied != "" && !Boolean.valueOf(accessDenied)) {
                grantedAuthorities.add(new SimpleGrantedAuthority(Authorities.AUTHZ_SUBSCRIPTION.name()));
            }

        } else {
            grantedAuthorities.add(new SimpleGrantedAuthority(Authorities.AUTHZ_SUBSCRIPTION.name()));
        }
    }

    return new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(context, grantedAuthorities);
}

From source file:org.springframework.security.web.authentication.preauth.j2ee.J2eeBasedPreAuthenticatedWebAuthenticationDetailsSource.java

/**
 * Builds the authentication details object.
 *
 * @see org.springframework.security.authentication.AuthenticationDetailsSource#buildDetails(Object)
 *//*from   ww w  .  j  av a  2  s.com*/
public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails buildDetails(HttpServletRequest context) {

    Collection<String> j2eeUserRoles = getUserRoles(context);
    Collection<? extends GrantedAuthority> userGas = j2eeUserRoles2GrantedAuthoritiesMapper
            .getGrantedAuthorities(j2eeUserRoles);

    if (logger.isDebugEnabled()) {
        logger.debug("J2EE roles [" + j2eeUserRoles + "] mapped to Granted Authorities: [" + userGas + "]");
    }

    PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails result = new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(
            context, userGas);

    return result;
}

From source file:org.springframework.security.web.authentication.preauth.websphere.WebSpherePreAuthenticatedWebAuthenticationDetailsSource.java

public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails buildDetails(HttpServletRequest context) {
    return new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(context,
            getWebSphereGroupsBasedGrantedAuthorities());
}