io.undertow.security.api.AuthenticationMode Java Examples

private UndertowDeploymentInfoCustomizer enableAuthUDICustomizer() {
    return (DeploymentInfo di) -> {
        if(StringUtils.isEmpty(encodedPass)) {
            return;
        }
        SecurityConstraint sc = new SecurityConstraint();
        sc.setEmptyRoleSemantic(SecurityInfo.EmptyRoleSemantic.AUTHENTICATE);
        // empty web resource interpret as default
        sc.addWebResourceCollection(new WebResourceCollection());
        di.addSecurityConstraints(sc);
        di.setSecurityDisabled(false);
        di.setAuthenticationMode(AuthenticationMode.PRO_ACTIVE);
        di.setLoginConfig(new LoginConfig(HttpServletRequest.BASIC_AUTH, "Haven Agent"));
        di.setIdentityManager(new IdentityManagerImpl(encodedPass));
    };
}
 

private boolean authTransitionRequired() {
    switch (authenticationState) {
        case NOT_ATTEMPTED:
            // There has been no attempt to authenticate the current request so do so either if required or if we are set to
            // be pro-active.
            return isAuthenticationRequired() || authenticationMode == AuthenticationMode.PRO_ACTIVE;
        case ATTEMPTED:
            // To be ATTEMPTED we know it was not AUTHENTICATED so if it is required we need to transition to send the
            // challenges.
            return isAuthenticationRequired();
        default:
            // At this point the state would either be AUTHENTICATED or CHALLENGE_SENT - either of which mean no further
            // transitions applicable for this request.
            return false;
    }
}
 

private boolean authTransitionRequired() {
    switch (authenticationState) {
        case NOT_ATTEMPTED:
            // There has been no attempt to authenticate the current request so do so either if required or if we are set to
            // be pro-active.
            return isAuthenticationRequired() || authenticationMode == AuthenticationMode.PRO_ACTIVE;
        case ATTEMPTED:
            // To be ATTEMPTED we know it was not AUTHENTICATED so if it is required we need to transition to send the
            // challenges.
            return isAuthenticationRequired();
        default:
            // At this point the state would either be AUTHENTICATED or CHALLENGE_SENT - either of which mean no further
            // transitions applicable for this request.
            return false;
    }
}
 

static SecurityContextImpl createSecurityContextImpl(final HttpServerExchange exchange, final AuthenticationMode authenticationMode, final IdentityManager identityManager) {
    if (System.getSecurityManager() == null) {
        return new SecurityContextImpl(exchange, authenticationMode, identityManager);
    } else {
        return AccessController.doPrivileged(new PrivilegedAction<SecurityContextImpl>() {
            @Override
            public SecurityContextImpl run() {
                return new SecurityContextImpl(exchange, authenticationMode, identityManager);
            }
        });
    }
}
 

static SecurityContextImpl createSecurityContextImpl(final HttpServerExchange exchange, final AuthenticationMode authenticationMode, final IdentityManager identityManager) {
    if (System.getSecurityManager() == null) {
        return new SecurityContextImpl(exchange, authenticationMode, identityManager);
    } else {
        return AccessController.doPrivileged(new PrivilegedAction<SecurityContextImpl>() {
            @Override
            public SecurityContextImpl run() {
                return new SecurityContextImpl(exchange, authenticationMode, identityManager);
            }
        });
    }
}
 

@Override
public SecurityContext createSecurityContext(final HttpServerExchange exchange, final AuthenticationMode mode,
    final IdentityManager identityManager, final String programmaticMechName) {
    SecurityContextImpl securityContext = SecurityActions.createSecurityContextImpl(exchange, mode, identityManager);
    if (programmaticMechName != null)
        securityContext.setProgramaticMechName(programmaticMechName);
    return securityContext;
}
 

public SecurityContextImpl(final HttpServerExchange exchange, final AuthenticationMode authenticationMode, final IdentityManager identityManager) {
    super(exchange);
    this.authenticationMode = authenticationMode;
    this.identityManager = identityManager;
    if (System.getSecurityManager() != null) {
        System.getSecurityManager().checkPermission(PERMISSION);
    }
}
 

public SecurityInitialHandler(final AuthenticationMode authenticationMode, final IdentityManager identityManager,
        final String programaticMechName, final SecurityContextFactory contextFactory, final HttpHandler next) {
    super(next);
    this.authenticationMode = authenticationMode;
    this.identityManager = identityManager;
    this.programaticMechName = programaticMechName;
    this.contextFactory = contextFactory;
}
 

@Override
public SecurityContext createSecurityContext(final HttpServerExchange exchange, final AuthenticationMode mode,
    final IdentityManager identityManager, final String programmaticMechName) {
    SecurityContextImpl securityContext = SecurityActions.createSecurityContextImpl(exchange, mode, identityManager);
    if (programmaticMechName != null)
        securityContext.setProgramaticMechName(programmaticMechName);
    return securityContext;
}
 

public SecurityContextImpl(final HttpServerExchange exchange, final AuthenticationMode authenticationMode, final IdentityManager identityManager) {
    super(exchange);
    this.authenticationMode = authenticationMode;
    this.identityManager = identityManager;
    if (System.getSecurityManager() != null) {
        System.getSecurityManager().checkPermission(PERMISSION);
    }
}
 

public SecurityInitialHandler(final AuthenticationMode authenticationMode, final IdentityManager identityManager,
        final String programaticMechName, final SecurityContextFactory contextFactory, final HttpHandler next) {
    super(next);
    this.authenticationMode = authenticationMode;
    this.identityManager = identityManager;
    this.programaticMechName = programaticMechName;
    this.contextFactory = contextFactory;
}
 

public SecurityContextImpl(final HttpServerExchange exchange, final IdentityManager identityManager) {
    this(exchange, AuthenticationMode.PRO_ACTIVE, identityManager);
}
 

public AuthenticationMode getAuthenticationMode() {
    return authenticationMode;
}
 

public SecurityInitialHandler(final AuthenticationMode authenticationMode, final IdentityManager identityManager,
        final HttpHandler next) {
    this(authenticationMode, identityManager, null, SecurityContextFactoryImpl.INSTANCE, next);
}
 

public SecurityInitialHandler(final AuthenticationMode authenticationMode, final IdentityManager identityManager,
        final String programaticMechName, final HttpHandler next) {
    this(authenticationMode, identityManager, programaticMechName, SecurityContextFactoryImpl.INSTANCE, next);
}
 

public SecurityInitialHandler(final AuthenticationMode authenticationMode, final IdentityManager identityManager,
        final HttpHandler next) {
    this(authenticationMode, identityManager, null, SecurityContextFactoryImpl.INSTANCE, next);
}
 

public SecurityContextImpl(final HttpServerExchange exchange, final IdentityManager identityManager) {
    this(exchange, AuthenticationMode.PRO_ACTIVE, identityManager);
}
 

public SecurityInitialHandler(final AuthenticationMode authenticationMode, final IdentityManager identityManager,
        final String programaticMechName, final HttpHandler next) {
    this(authenticationMode, identityManager, programaticMechName, SecurityContextFactoryImpl.INSTANCE, next);
}
 

@BeforeClass
public static void setup() throws ServletException {

    final PathHandler path = new PathHandler();

    final ServletContainer container = ServletContainer.Factory.newInstance();

    ServletInfo s = new ServletInfo("servlet", SendUsernameServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("role1"))
            .addMapping("/secured/*");

    ServletInfo echo = new ServletInfo("echo", EchoServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("role1"))
            .addMapping("/secured/echo");

    ServletInfo echoParam = new ServletInfo("echoParam", RequestParamEchoServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("role1"))
            .addMapping("/secured/echoParam");

    ServletInfo s1 = new ServletInfo("loginPage", FormLoginServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("group1"))
            .addMapping("/FormLoginServlet");


    ServletIdentityManager identityManager = new ServletIdentityManager();
    identityManager.addUser("user1", "password1", "role1");

    DeploymentInfo builder = new DeploymentInfo()
            .setServletSessionConfig(new ServletSessionConfig().setSessionTrackingModes(Collections.singleton(SessionTrackingMode.URL)))
            .setClassLoader(SimpleServletTestCase.class.getClassLoader())
            .setContextPath("/servletContext")
            .setClassIntrospecter(TestClassIntrospector.INSTANCE)
            .setDeploymentName("servletContext.war")
            .setAuthenticationMode(AuthenticationMode.CONSTRAINT_DRIVEN)
            .setIdentityManager(identityManager)
            .setLoginConfig(new LoginConfig("FORM", "Test Realm", "/FormLoginServlet", "/error.html"))
            .addServlets(s, s1, echo,echoParam);

    DeploymentManager manager = container.addDeployment(builder);
    manager.deploy();
    path.addPrefixPath(builder.getContextPath(), manager.start());

    DefaultServer.setRootHandler(path);
}
 

@BeforeClass
public static void setup() throws ServletException {

    final PathHandler path = new PathHandler();

    final ServletContainer container = ServletContainer.Factory.newInstance();

    ServletInfo s = new ServletInfo("servlet", SendUsernameServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("role1"))
            .addMapping("/secured/*");

    ServletInfo echo = new ServletInfo("echo", EchoServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("role1"))
            .addMapping("/secured/echo");

    ServletInfo echoParam = new ServletInfo("echoParam", RequestParamEchoServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("role1"))
            .addMapping("/secured/echoParam");

    ServletInfo s1 = new ServletInfo("loginPage", FormLoginServlet.class)
            .setServletSecurityInfo(new ServletSecurityInfo()
                    .addRoleAllowed("group1"))
            .addMapping("/FormLoginServlet");


    ServletIdentityManager identityManager = new ServletIdentityManager();
    identityManager.addUser("user1", "password1", "role1");

    DeploymentInfo builder = new DeploymentInfo()
            .setClassLoader(SimpleServletTestCase.class.getClassLoader())
            .setContextPath("/servletContext")
            .setClassIntrospecter(TestClassIntrospector.INSTANCE)
            .setDeploymentName("servletContext.war")
            .setAuthenticationMode(AuthenticationMode.CONSTRAINT_DRIVEN)
            .setIdentityManager(identityManager)
            .setLoginConfig(new LoginConfig("FORM", "Test Realm", "/FormLoginServlet", "/error.html"))
            .addServlets(s, s1, echo,echoParam);

    DeploymentManager manager = container.addDeployment(builder);
    manager.deploy();
    path.addPrefixPath(builder.getContextPath(), manager.start());

    DefaultServer.setRootHandler(path);
}
 

public AuthenticationMode getAuthenticationMode() {
    return authenticationMode;
}
 

/**
 * Sets if this deployment should use pro-active authentication and always authenticate if the credentials are present
 * or constraint driven auth which will only call the authentication mechanisms for protected resources.
 *
 * Pro active auth means that requests for unprotected resources will still be associated with a user, which may be
 * useful for access logging.
 *
 *
 * @param authenticationMode The authentication mode to use
 * @return
 */
public DeploymentInfo setAuthenticationMode(AuthenticationMode authenticationMode) {
    this.authenticationMode = authenticationMode;
    return this;
}
 

/**
 * Sets if this deployment should use pro-active authentication and always authenticate if the credentials are present
 * or constraint driven auth which will only call the authentication mechanisms for protected resources.
 *
 * Pro active auth means that requests for unprotected resources will still be associated with a user, which may be
 * useful for access logging.
 *
 *
 * @param authenticationMode The authentication mode to use
 * @return
 */
public DeploymentInfo setAuthenticationMode(AuthenticationMode authenticationMode) {
    this.authenticationMode = authenticationMode;
    return this;
}