Java SecurityLogic类代码示例

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Override
protected void filter(JaxRsContext context) throws IOException {

    Config config = getConfig();

    String cs;
    // no client was set
    if (clients == null && config instanceof JaxRsConfig) {
        cs = ((JaxRsConfig) config).getDefaultClients();
    } else {
        cs = clients;
    }

    // Note: basically, there is two possible outcomes:
    // either the access is granted or there was an error or a redirect!
    // For the former, we do nothing (see SecurityGrantedAccessOutcome comments)
    // For the later, we interpret the error and abort the request using jax-rs abstractions
    SecurityLogic<Object, JaxRsContext> logic = buildLogic(config);
    AuthorizationCheckerWrapper wrapper = null;
    if (logic instanceof DefaultSecurityLogic) {
        wrapper = new AuthorizationCheckerWrapper(((DefaultSecurityLogic) logic).getAuthorizationChecker());
        ((DefaultSecurityLogic) logic).setAuthorizationChecker(wrapper);
    }
    logic.perform(context, config, new SecurityGrantedAccessOutcome(wrapper), adapter(config), cs, authorizers,
            matchers, multiProfile);
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Test(expected = TechnicalException.class)
public void shouldRethrowTechnicalException() throws Exception {
  String clients = "FormClient";
  String authorizers = null;
  String matchers = null;
  boolean multiProfile = false;
  String clientParameterName = Clients.DEFAULT_CLIENT_NAME_PARAMETER;
  Set<String> excludes = new HashSet<>();
  TechnicalException x = new TechnicalException("intentional err");
  new MockUnit(Request.class, Response.class, Config.class, WebContext.class, SecurityLogic.class,
      HttpActionAdapter.class, Route.Chain.class)
      .expect(webContext)
      .expect(getSecurityLogic)
      .expect(getActionAdapter)
      .expect(clientParameterName(clientParameterName, clients, clients))
      .expect(getSessionAttribute(Pac4jConstants.REQUESTED_URL, null))
      .expect(executeCallback(clients, authorizers, matchers, multiProfile, x))
      .run(unit -> {
        Pac4jSecurityFilter action = new Pac4jSecurityFilter(unit.get(Config.class), clients,
            authorizers, matchers, multiProfile, clientParameterName, excludes);

        action.handle(unit.get(Request.class), unit.get(Response.class),
            unit.get(Route.Chain.class));
      });
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Test(expected = Err.class)
public void shouldThrowJoobyErrWhenTechnicalExceptionWrapsIt() throws Exception {
  String clients = "FormClient";
  String authorizers = null;
  String matchers = null;
  boolean multiProfile = false;
  String clientParameterName = Clients.DEFAULT_CLIENT_NAME_PARAMETER;
  Set<String> excludes = new HashSet<>();
  TechnicalException x = new TechnicalException(new Err(Status.UNAUTHORIZED, "intentional err"));
  new MockUnit(Request.class, Response.class, Config.class, WebContext.class, SecurityLogic.class,
      HttpActionAdapter.class, Route.Chain.class)
      .expect(webContext)
      .expect(getSecurityLogic)
      .expect(getActionAdapter)
      .expect(clientParameterName(clientParameterName, clients, clients))
      .expect(getSessionAttribute(Pac4jConstants.REQUESTED_URL, null))
      .expect(executeCallback(clients, authorizers, matchers, multiProfile, x))
      .run(unit -> {
        Pac4jSecurityFilter action = new Pac4jSecurityFilter(unit.get(Config.class), clients,
            authorizers, matchers, multiProfile, clientParameterName, excludes);

        action.handle(unit.get(Request.class), unit.get(Response.class),
            unit.get(Route.Chain.class));
      });
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Override
public void setup(Bootstrap<?> bootstrap) {
    ObjectMapper om = bootstrap.getObjectMapper();

    // for Config
    om.addMixIn(SessionStore.class, sessionStoreMixin());
    om.addMixIn(Authorizer.class, authorizerMixin());
    om.addMixIn(HttpActionAdapter.class, httpActionAdapterMixin());
    om.addMixIn(Matcher.class, matcherMixin());
    om.addMixIn(SecurityLogic.class, securityLogicMixin());
    om.addMixIn(CallbackLogic.class, callbackLogicMixin());
    om.addMixIn(LogoutLogic.class, logoutLogicMixin());

    // for Clients
    om.addMixIn(Client.class, clientMixin());
    om.addMixIn(BaseClient.class, baseClientMixin());

    // for Clients and Client subsclasses
    om.addMixIn(AjaxRequestResolver.class, ajaxRequestResolverMixin());
    om.addMixIn(UrlResolver.class, urlResolverMixin());
    om.addMixIn(AuthorizationGenerator.class,
            authorizationGeneratorMixin());

    // for Client/BaseClient
    om.addMixIn(Authenticator.class, authenticatorMixin());
    om.addMixIn(CredentialsExtractor.class, credentialExtractorMixin());
    om.addMixIn(ProfileCreator.class, profileCreatorMixin());

    // for IndirectClient
    om.addMixIn(RedirectActionBuilder.class, redirectActionBuilderMixin());
    om.addMixIn(LogoutActionBuilder.class, logoutActionBuilderMixin());
    
    // for some of the Authenticators
    om.addMixIn(PasswordEncoder.class, passwordEncoderMixin());
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
protected SecurityLogic<Object, JaxRsContext> buildLogic(Config config) {
    if (securityLogic != null) {
        return securityLogic;
    } else if (config.getSecurityLogic() != null) {
        return config.getSecurityLogic();
    } else {
        DefaultSecurityLogic<Object, JaxRsContext> logic = new DefaultSecurityLogic<>();
        logic.setProfileManagerFactory(JaxRsProfileManager::new);
        return logic;
    }
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Test
public void withSecurityLogic() throws Exception {
  Config config = config("/");
  SecurityLogic action = new DefaultSecurityLogic();
  new MockUnit(Env.class, Binder.class, Router.class, WebContext.class, Registry.class,
      Function.class)
      .expect(newLoginFormClient())
      .expect(newClients("http://localhost:8080/callback"))
      .expect(pac4jConfig)
      .expect(sessionStore(null))
      .expect(profile(CommonProfile.class))
      .expect(profile(UserProfile.class))
      .expect(router)
      .expect(setClients(FormClient.class))
      .expect(webContext)
      .expect(profileManager)
      .expect(profileManagerFactory(null))
      .expect(loginForm("/callback"))
      .expect(callback(null, "/", "/callback", false, false))
      .expect(
          securityLogic(action, "/**", null, null, false, Clients.DEFAULT_CLIENT_NAME_PARAMETER,
              ImmutableSet.of("/callback", "/**"), FormClient.class))
      .expect(logoutLogic(null, "/", "/.*", true, true, false))
      .expect(guiceAuthorizers())
      .expect(setupGuiceAuthorizers())
      .run(unit -> {
        new Pac4j()
            .doWith(pac4j -> {
              pac4j.setSecurityLogic(action);
            })
            .configure(unit.get(Env.class), config, unit.get(Binder.class));
      }, setupGuiceAuthorizers());
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Test
public void shouldExecuteCallback() throws Exception {
  String clients = "FormClient";
  String authorizers = null;
  String matchers = null;
  String clientParameterName = Clients.DEFAULT_CLIENT_NAME_PARAMETER;
  Set<String> excludes = Sets.newHashSet("/profile");
  boolean multiProfile = false;
  new MockUnit(Request.class, Response.class, Config.class, WebContext.class, SecurityLogic.class,
      HttpActionAdapter.class, Route.Chain.class)
      .expect(webContext)
      .expect(getSecurityLogic)
      .expect(getActionAdapter)
      .expect(clientParameterName(clientParameterName, clients, clients))
      .expect(getSessionAttribute(Pac4jConstants.REQUESTED_URL, null))
      .expect(requestMatches("/profile", false))
      .expect(executeCallback(clients, authorizers, matchers, multiProfile))
      .run(unit -> {
        Pac4jSecurityFilter action = new Pac4jSecurityFilter(unit.get(Config.class), clients,
            authorizers, matchers, multiProfile, clientParameterName, excludes);

        assertEquals("FormClient", action.toString());

        action.handle(unit.get(Request.class), unit.get(Response.class),
            unit.get(Route.Chain.class));
      });
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Test
public void shouldResetRequestedUrl() throws Exception {
  String clients = "FormClient";
  String authorizers = null;
  String matchers = null;
  String clientParameterName = Clients.DEFAULT_CLIENT_NAME_PARAMETER;
  Set<String> excludes = ImmutableSet.of("/**", "/facebook");
  boolean multiProfile = false;
  new MockUnit(Request.class, Response.class, Config.class, WebContext.class, SecurityLogic.class,
      HttpActionAdapter.class, Route.Chain.class, Session.class)
      .expect(webContext)
      .expect(getSecurityLogic)
      .expect(getActionAdapter)
      .expect(clientParameterName(clientParameterName, clients, clients))
      .expect(getSessionAttribute(Pac4jConstants.REQUESTED_URL, "/previous"))
      .expect(requestMatches("/facebook", true))
      .expect(executeCallback(clients, authorizers, matchers, multiProfile))
      .expect(ifSession(true))
      .expect(setSessionAttribute(Pac4jConstants.REQUESTED_URL, "/previous"))
      .run(unit -> {
        Pac4jSecurityFilter action = new Pac4jSecurityFilter(unit.get(Config.class), clients,
            authorizers, matchers, multiProfile, clientParameterName, excludes);

        assertEquals("FormClient", action.toString());

        action.handle(unit.get(Request.class), unit.get(Response.class),
            unit.get(Route.Chain.class));
      });
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Test
public void shouldIgnoreResetRequestedUrlIfNoSession() throws Exception {
  String clients = "FormClient";
  String authorizers = null;
  String matchers = null;
  String clientParameterName = Clients.DEFAULT_CLIENT_NAME_PARAMETER;
  Set<String> excludes = ImmutableSet.of("/**", "/facebook");
  boolean multiProfile = false;
  new MockUnit(Request.class, Response.class, Config.class, WebContext.class, SecurityLogic.class,
      HttpActionAdapter.class, Route.Chain.class, Session.class)
      .expect(webContext)
      .expect(getSecurityLogic)
      .expect(getActionAdapter)
      .expect(clientParameterName(clientParameterName, clients, clients))
      .expect(getSessionAttribute(Pac4jConstants.REQUESTED_URL, "/previous"))
      .expect(requestMatches("/facebook", true))
      .expect(executeCallback(clients, authorizers, matchers, multiProfile))
      .expect(ifSession(false))
      .run(unit -> {
        Pac4jSecurityFilter action = new Pac4jSecurityFilter(unit.get(Config.class), clients,
            authorizers, matchers, multiProfile, clientParameterName, excludes);

        assertEquals("FormClient", action.toString());

        action.handle(unit.get(Request.class), unit.get(Response.class),
            unit.get(Route.Chain.class));
      });
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@Test
public void shouldExecuteCallbackWithClients() throws Exception {
  String clients = "FormClient";
  String authorizers = null;
  String matchers = null;
  boolean multiProfile = false;
  String clientParameterName = Clients.DEFAULT_CLIENT_NAME_PARAMETER;
  Set<String> excludes = new HashSet<>();
  new MockUnit(Request.class, Response.class, Config.class, WebContext.class, SecurityLogic.class,
      HttpActionAdapter.class, Route.Chain.class)
      .expect(webContext)
      .expect(getSecurityLogic)
      .expect(getActionAdapter)
      .expect(clientParameterName(clientParameterName, clients + ",FacebookClient",
          clients + ",FacebookClient"))
      .expect(getSessionAttribute(Pac4jConstants.REQUESTED_URL, null))
      .expect(executeCallback(clients + ",FacebookClient", authorizers, matchers, multiProfile))
      .run(unit -> {
        Pac4jSecurityFilter action = new Pac4jSecurityFilter(unit.get(Config.class), clients,
            authorizers, matchers, multiProfile, clientParameterName, excludes)
            .addClient("FacebookClient");

        assertEquals("FormClient,FacebookClient", action.toString());

        action.handle(unit.get(Request.class), unit.get(Response.class),
            unit.get(Route.Chain.class));
      });
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
private MockUnit.Block executeCallback(String defaultUrl, String logoutUrlPattern,
    String matchers, boolean multiProfile, Throwable x) {
  return unit -> {
    SecurityLogic action = unit.get(SecurityLogic.class);

    IExpectationSetters<Object> expect = expect(
        action.perform(eq(unit.get(WebContext.class)), eq(unit.get(Config.class)),
            isA(Pac4jGrantAccessAdapter.class), eq(unit.get(HttpActionAdapter.class)),
            eq(defaultUrl), eq(logoutUrlPattern), eq(matchers), eq(multiProfile)));
    if (x == null)
      expect.andReturn(null);
    else
      expect.andThrow(x);
  };
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
public SecurityLogic getSecurityLogic() {
    return securityLogic;
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
public void setSecurityLogic(final SecurityLogic securityLogic) {
    this.securityLogic = securityLogic;
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
@JsonProperty
public SecurityLogic getSecurityLogic() {
    return securityLogic;
}
 

import org.pac4j.core.engine.SecurityLogic; //导入依赖的package包/类
public SecurityLogic<Object, JaxRsContext> getSecurityLogic() {
    return securityLogic;
}