org.springframework.security.authentication.AuthenticationDetailsSource Java Examples

@SuppressWarnings("PMD.SignatureDeclareThrowsException")
private RequestHeaderAuthenticationFilter requestHeaderAuthenticationFilter() throws Exception {
    RequestHeaderAuthenticationFilter f = new RequestHeaderAuthenticationFilter();
    f.setPrincipalRequestHeader("X-Forwarded-User");
    f.setCredentialsRequestHeader("X-Forwarded-Access-Token");
    f.setAuthenticationManager(authenticationManager());
    f.setAuthenticationDetailsSource(
        (AuthenticationDetailsSource<HttpServletRequest, PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails>)
            (request) ->new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(
                request,
                AuthorityUtils.createAuthorityList("ROLE_AUTHENTICATED")
            )
    );
    f.setAuthenticationFailureHandler(new SimpleUrlAuthenticationFailureHandler());
    f.setExceptionIfHeaderMissing(false);
    return f;
}
 

@Test
void giveCertificates_thenRemoveForeign_whenCallFilter() throws IOException, ServletException {
    ApimlX509AuthenticationFilter filter = new ApimlX509AuthenticationFilter(new HashSet<>(Arrays.asList(
        correctBase64("apimlCert1"),
        correctBase64("apimlCert2")
    )));
    filter.setAuthenticationDetailsSource(mock(AuthenticationDetailsSource.class));
    filter.setAuthenticationManager(mock(AuthenticationManager.class));

    X509Certificate[] certificates = new X509Certificate[] {
        getCertificate(correctBase64("foreignCert1")),
        getCertificate(correctBase64("apimlCert1")),
        getCertificate(correctBase64("foreignCert2")),
        getCertificate(correctBase64("apimlCert2"))
    };
    //doReturn(certificates).when(request).getAttribute("javax.servlet.request.X509Certificate");
    request.setAttribute("javax.servlet.request.X509Certificate", certificates);

    filter.doFilter(request, response, chain);

    X509Certificate[] filtered = (X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate");
    assertNotNull(filtered);
    assertEquals(2, filtered.length);
    assertSame(certificates[1], filtered[0]);
    assertSame(certificates[3], filtered[1]);

    verify(chain, times(1)).doFilter(request, response);
}
 

public void setAuthenticationDetailsSource(
		AuthenticationDetailsSource<HttpServletRequest, ?> authenticationDetailsSource) {
	Assert.notNull(authenticationDetailsSource, "AuthenticationDetailsSource required");
	this.authenticationDetailsSource = authenticationDetailsSource;
}
 

public LoginConfig(AuthenticationDetailsSource<HttpServletRequest, WebAuthenticationDetails> authenticationDetailsSource, AuthenticationFailureHandler authenticationFailureHandler) {
    this.authenticationDetailsSource = authenticationDetailsSource;
    this.authenticationFailureHandler = authenticationFailureHandler;
}
 

@Override
@Autowired(required = false)
public void setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?> authenticationDetailsSource) {
    super.setAuthenticationDetailsSource(authenticationDetailsSource);
}
 

@Bean
AuthenticationDetailsSource<HttpServletRequest, WebAuthenticationDetails> authenticationDetailsSource() {
    return CustomAuthenticationDetails::new;
}
 

@Bean
public AuthenticationDetailsSource<HttpServletRequest, WebAuthenticationDetails> authenticationDetailsSource() {
    return new WebAuthenticationDetailsSource();
}
 

@RequestMapping(value = "/consumer/saml/v20/{spId}")
public ModelAndView consumer(HttpServletRequest request,
		HttpServletResponse response, @PathVariable("spId") String spId)
		throws Exception {

	logger.debug("Attempting authentication.");
	// 初始化SP 证书
	initCredential(spId);

	SAMLMessageContext messageContext=null;

	/*try {
		messageContext = bindingAdapter.extractSAMLMessageContext(request);
	} catch (MessageDecodingException me) {
		logger.error("Could not decode SAML Response", me);
		throw new Exception(me);
	} catch (SecurityException se) {
		logger.error("Could not decode SAML Response", se);
		throw new Exception(se);
	}*/

	logger.debug("Message received from issuer: "
			+ messageContext.getInboundMessageIssuer());

	if (!(messageContext.getInboundSAMLMessage() instanceof Response)) {
		logger.error("SAML Message was not a Response");
		throw new Exception();
	}
	List<Assertion> assertionList = ((Response) messageContext
			.getInboundSAMLMessage()).getAssertions();



	String credentials = extractBindingAdapter.extractSAMLMessage(request);

	// 未认证token
	Response samlResponse=(Response) messageContext.getInboundSAMLMessage();
	
	AuthenticationDetailsSource<HttpServletRequest, ?> authenticationDetailsSource = new WebAuthenticationDetailsSource();


	try {
		validatorSuite.validate(samlResponse);
	} catch (ValidationException ve) {
		logger.warn("Response Message failed Validation", ve);
		throw new ServiceProviderAuthenticationException("Invalid SAML REsponse Message", ve);
	}

	
	checkResponseStatus(samlResponse);

	Assertion assertion = samlResponse.getAssertions().get(0);
	
	logger.debug("authenticationResponseIssuingEntityName {}" ,samlResponse.getIssuer().getValue()); 
	
	String username=assertion.getSubject().getNameID().getValue();
	
	logger.debug("assertion.getID() " ,assertion.getID());
	logger.debug("assertion.getSubject().getNameID().getValue() ", username);
	

	logger.debug("assertion.getID() ", assertion.getAuthnStatements());
	
	WebContext.setAuthentication(username, ConstantsLoginType.SAMLTRUST,"","","success");

	ModelAndView mav = new ModelAndView();
	mav.addObject("username", username);

	mav.setViewName("redirect:/consumer/saml/v20/forward/webseal/eai");
	return mav;
}
 

public AuthenticationDetailsSource<HttpServletRequest, ?> getAuthenticationDetailsSource() {
    return authenticationDetailsSource;
}
 

public void setAuthenticationDetailsSource(AuthenticationDetailsSource<HttpServletRequest, ?> authenticationDetailsSource) {
    this.authenticationDetailsSource = authenticationDetailsSource;
}
 

public void setAuthenticationDetailsSource(
		AuthenticationDetailsSource<HttpServletRequest, ?> authenticationDetailsSource) {
	Assert.notNull(authenticationDetailsSource,
			"AuthenticationDetailsSource required");
	this.authenticationDetailsSource = authenticationDetailsSource;
}
 

private AuthenticationDetailsSource<HttpServletRequest, GraviteeAuthenticationDetails> authenticationDetailsSource() {
    return GraviteeAuthenticationDetails::new;
}
 

private AuthenticationDetailsSource<HttpServletRequest, GraviteeAuthenticationDetails> authenticationDetailsSource() {
    return GraviteeAuthenticationDetails::new;
}
 

public void setAuthenticationDetailsSource(
    AuthenticationDetailsSource<HttpServletRequest, ?> authenticationDetailsSource) {
    Assert.notNull(authenticationDetailsSource, "AuthenticationDetailsSource required");
    this.authenticationDetailsSource = authenticationDetailsSource;
}
 

/**
 * A source of authentication details for requests that result in authentication.
 * 
 * @param authenticationDetailsSource the authenticationDetailsSource to set
 */
public void setAuthenticationDetailsSource(
		AuthenticationDetailsSource<HttpServletRequest, ?> authenticationDetailsSource) {
	this.authenticationDetailsSource = authenticationDetailsSource;
}