Java Code Examples for org.springframework.security.authentication.UsernamePasswordAuthenticationToken#getPrincipal()

protected void validateAuthenticated(
    final MvcResult result,
    final String expectedUsername,
    final long expectedUserId,
    final Collection<String> expectedRoles
) {
    // Validate session is valid
    final MockHttpSession session = (MockHttpSession) result.getRequest().getSession();
    assertNotNull("Session should not be null", session);
    assertTrue("Session should be new", session.isNew());
    assertFalse("sesison should be valid", session.isInvalid());

    // Pull out context
    final SecurityContext securityContext = (SecurityContext) session.getValue("SPRING_SECURITY_CONTEXT");
    assertNotNull("Should be authenticated", securityContext);
    final UsernamePasswordAuthenticationToken authenticationToken = (UsernamePasswordAuthenticationToken) securityContext.getAuthentication();
    assertNotNull("Should be authenticated", authenticationToken);

    // Verify we have the correct roles
    expectedRoles.forEach((expectedRole) -> {
        assertTrue("Should have user role", authenticationToken.getAuthorities().contains(new SimpleGrantedAuthority(expectedRole)));
    });
    assertEquals("Should have no extra roles", expectedRoles.size(), authenticationToken.getAuthorities().size());

    final CustomUserDetails customUserDetails = (CustomUserDetails) authenticationToken.getPrincipal();
    expectedRoles.forEach((expectedRole) -> {
        assertTrue("Should have user role", customUserDetails.getAuthorities().contains(new SimpleGrantedAuthority(expectedRole)));
    });
    assertEquals("Should have no extra roles", expectedRoles.size(), customUserDetails.getAuthorities().size());

    assertEquals("LDAP Users should have userId", expectedUserId, customUserDetails.getUserId());
    assertEquals("Should have username", expectedUsername, customUserDetails.getUsername());
}
 

@GetMapping("/my")
    public ModelAndView myEvents(@AuthenticationPrincipal UsernamePasswordAuthenticationToken upat) {
        CalendarUser currentUser = (CalendarUser)upat.getPrincipal();

        return myEvents(currentUser);
//        Integer currentUserId = currentUser.getId();
//        ModelAndView result = new ModelAndView("events/my", "events", calendarService.findForUser(currentUserId));
//        result.addObject("currentUser", currentUser);
//        return result;
    }
 

@GetMapping("/my")
    public ModelAndView myEvents(@AuthenticationPrincipal UsernamePasswordAuthenticationToken upat) {
        CalendarUser currentUser = (CalendarUser)upat.getPrincipal();

        return myEvents(currentUser);
//        Integer currentUserId = currentUser.getId();
//        ModelAndView result = new ModelAndView("events/my", "events", calendarService.findForUser(currentUserId));
//        result.addObject("currentUser", currentUser);
//        return result;
    }
 

private boolean isAdmin(SecurityContext context) {
    if (context.getAuthentication() == null) {
        return false;
    }

    Authentication authentication = context.getAuthentication();

    if (authentication instanceof UsernamePasswordAuthenticationToken) {
        UsernamePasswordAuthenticationToken token = (UsernamePasswordAuthenticationToken) authentication;
        if (token.getPrincipal() instanceof String) {
            return token.getPrincipal().equals(config.getAdminLogin()) &&
                    token.getCredentials().equals(config.getAdminPassword());
        }
    }

    Object principal = authentication.getPrincipal();

    if (!(principal instanceof User)) {
        return false;
    }

    User user = (User) principal;
    if (user == null) {
        return false;
    }

    Collection<GrantedAuthority> authorities = user.getAuthorities();
    if (authorities == null) {
        return false;
    }

    return authorities.contains(ROLE_ADMIN.authority());
}
 

public String curUser(HttpEntity entity) {
	UsernamePasswordAuthenticationToken token = (UsernamePasswordAuthenticationToken) SecurityContextHolder
			.getContext().getAuthentication();
	return (String) token.getPrincipal();
}
 

@Test(expected = BadCredentialsException.class)
public void testAuthBasicBad() throws Exception {

    final AuthenticationManager manager = this.context.mock(AuthenticationManager.class);
    final HttpServletRequest request = this.context.mock(HttpServletRequest.class);

    final ConnectorAuthStrategyBasicAuth auth = new ConnectorAuthStrategyBasicAuth();

    auth.setAuthenticationManager(manager);

    final UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("üsernäme", "pä$sw()rd");
    final String basic = token.getPrincipal() + ":" + token.getCredentials();
    final byte[] encodedBytes = Base64.encodeBase64(basic.getBytes(StandardCharsets.UTF_8));


    this.context.checking(new Expectations() {{
        allowing(request).getHeader("Authorization"); will(returnValue("Basic " + new String(encodedBytes)));
        allowing(manager).authenticate(token); will(throwException(new BadCredentialsException("bad")));
    }});

    auth.authenticated(request);

}
 

@Test
public void testAuthBasicValidUTF8() throws Exception {

    final AuthenticationManager manager = this.context.mock(AuthenticationManager.class);
    final HttpServletRequest request = this.context.mock(HttpServletRequest.class);

    final ConnectorAuthStrategyBasicAuth auth = new ConnectorAuthStrategyBasicAuth();

    auth.setAuthenticationManager(manager);


    final UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("üsernäme", "pä$sw()rd");
    final String basic = token.getPrincipal() + ":" + token.getCredentials();
    final byte[] encodedBytes = Base64.encodeBase64(basic.getBytes(StandardCharsets.UTF_8));


    this.context.checking(new Expectations() {{
        allowing(request).getHeader("Authorization"); will(returnValue("Basic " + new String(encodedBytes)));
        allowing(manager).authenticate(token); will(returnValue(token));
    }});

    assertTrue(auth.authenticated(request));

}
 

@Test
public void testAuthBasicValidRegular() throws Exception {

    final AuthenticationManager manager = this.context.mock(AuthenticationManager.class);
    final HttpServletRequest request = this.context.mock(HttpServletRequest.class);

    final ConnectorAuthStrategyBasicAuth auth = new ConnectorAuthStrategyBasicAuth();

    auth.setAuthenticationManager(manager);


    final UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken("username", "pa$sw()rd");
    final String basic = token.getPrincipal() + ":" + token.getCredentials();
    final byte[] encodedBytes = Base64.encodeBase64(basic.getBytes(StandardCharsets.UTF_8));


    this.context.checking(new Expectations() {{
        allowing(request).getHeader("Authorization"); will(returnValue("Basic " + new String(encodedBytes)));
        allowing(manager).authenticate(token); will(returnValue(token));
    }});

    assertTrue(auth.authenticated(request));

}