Java GrantedAuthorityImpl类代码示例

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Override
public Authentication authenticate(Authentication authenticationRequest)
		throws AuthenticationException {
	GrantedAuthority[] authorities = new GrantedAuthorityImpl[authenticationRequest.getAuthorities().length + 1];
	authorities[0] = new GrantedAuthorityImpl(AUTHENTICATED_AUTHORITY_NAME);
	int i = 1;
	for(GrantedAuthority originalAuth : authenticationRequest.getAuthorities()){
		authorities[i] = new GrantedAuthorityImpl(originalAuth.getAuthority());
		i += 1;
	}
	
	UsernamePasswordAuthenticationToken authenticationOutcome = new UsernamePasswordAuthenticationToken(authenticationRequest.getPrincipal(), 
			authenticationRequest.getCredentials(), authorities);
	authenticationOutcome.setDetails(authenticationRequest.getDetails());
	return authenticationOutcome;
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
private void authenticateUser(String requestingUserName, HttpServletRequest request) throws UserNotFoundException
{
	IPentahoUser user = getUserRoleDao().getUser(null, requestingUserName);
	if (user == null)
	{
		// TODO: implement alternative behavior if needed, e.g. create the
		// user if it does not exist
		throw new UserNotFoundException("User '" + requestingUserName
				+ "' not found in the current system using the default UserRoleDao bean");
	}

	List<IPentahoRole> roles = getUserRoleDao().getUserRoles(null, requestingUserName);
	GrantedAuthority[] authorities = new GrantedAuthority[roles.size()];
	int index = 0;
	for (IPentahoRole role : roles)
	{
		authorities[index] = new GrantedAuthorityImpl(role.getName());
	}
	ExtensionAuthenticationToken authRequestToken = new ExtensionAuthenticationToken(requestingUserName, null,
			authorities);
	authRequestToken.setDetails(new WebAuthenticationDetails(request));
	Authentication authenticationOutcome = getAuthenticationManager().authenticate(authRequestToken);

	// TODO: manage possible errors (authenticationOutcome == null,
	// Exception, etc...)
	SecurityContextHolder.getContext().setAuthentication(authenticationOutcome);
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
private GrantedAuthority[] getGrantedAuthorities(Admin admin) {
	Set<GrantedAuthority> grantedAuthorities = new HashSet<GrantedAuthority>();
	for (Role role : admin.getRoleSet()) {
		for (String authority : role.getAuthorityList()) {
			grantedAuthorities.add(new GrantedAuthorityImpl(authority));
		}
	}
	return grantedAuthorities.toArray(new GrantedAuthority[grantedAuthorities.size()]);
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void shouldSetAdministratorIfUserIsAdministrator() throws Exception {
    securityContext.setAuthentication(
            new TestingAuthenticationToken("jez", "badger",
                    new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_SUPERVISOR.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.ADMINISTRATOR), is(true));
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void shouldSetTemplateAdministratorIfUserIsTemplateAdministrator() throws Exception {
    securityContext.setAuthentication(
            new TestingAuthenticationToken("jez", "badger",
                    new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_TEMPLATE_SUPERVISOR.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.TEMPLATE_ADMINISTRATOR), is(true));
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void shouldSetTemplateViewUserRightsForTemplateViewUser() throws Exception {
    securityContext.setAuthentication(
            new TestingAuthenticationToken("templateView", "badger",
                    new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_TEMPLATE_VIEW_USER.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.TEMPLATE_VIEW_USER), is(true));
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void shouldSetViewAdministratorRightsIfUserHasAnyLevelOfAdministratorRights() throws Exception {
    securityContext.setAuthentication(new TestingAuthenticationToken("jez", "badger", new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_TEMPLATE_SUPERVISOR.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.VIEW_ADMINISTRATOR_RIGHTS), is(true));

    securityContext.setAuthentication(new TestingAuthenticationToken("jez", "badger", new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_GROUP_SUPERVISOR.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.VIEW_ADMINISTRATOR_RIGHTS), is(true));

    securityContext.setAuthentication(new TestingAuthenticationToken("jez", "badger", new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_SUPERVISOR.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.VIEW_ADMINISTRATOR_RIGHTS), is(true));

    securityContext.setAuthentication(new TestingAuthenticationToken("jez", "badger", new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_TEMPLATE_VIEW_USER.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.VIEW_ADMINISTRATOR_RIGHTS), is(true));

    securityContext.setAuthentication(new TestingAuthenticationToken("jez", "badger", new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_USER.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.VIEW_ADMINISTRATOR_RIGHTS), is(nullValue()));
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void shouldSetGroupAdministratorIfUserIsAPipelineGroupAdministrator() throws Exception {
    securityContext.setAuthentication(
            new TestingAuthenticationToken("jez", "badger",
                    new GrantedAuthority[]{new GrantedAuthorityImpl(GoAuthority.ROLE_GROUP_SUPERVISOR.toString())}));
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.ADMINISTRATOR), is(nullValue()));
    assertThat(velocityContext.get(GoVelocityView.GROUP_ADMINISTRATOR), is(true));
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void principalIsTheUsernameWhenNothingElseAvailable() throws Exception {
    request.getSession().setAttribute(SPRING_SECURITY_CONTEXT_KEY, securityContext);
    securityContext.setAuthentication(
            new TestingAuthenticationToken(
                    new User("Test User", "pwd", true, new GrantedAuthority[]{new GrantedAuthorityImpl("nowt")}),
                    null, null));
    view.exposeHelpers(velocityContext, request);
    assertThat(velocityContext.get(GoVelocityView.PRINCIPAL), is("Test User"));
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void shouldReturnUserDetailsWithCorrectAuthorityIfAgentCertificateHasOu() {
    X509Certificate agentCertificate = new X509CertificateGenerator().createCertificateWithDn(
            "CN=hostname, OU=agent").getFirstCertificate();
    UserDetails userDetails = populator.getUserDetails(agentCertificate);
    GrantedAuthority[] actual = userDetails.getAuthorities();
    GrantedAuthority expected = new GrantedAuthorityImpl(ROLE_AGENT);
    assertThat(actual.length, is(1));
    assertThat(actual[0], is(expected));
    assertThat(userDetails.getUsername(), is("_go_agent_hostname"));
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
private void setUserAttributeWithRole(final String role) {
    final UserAttribute initialAttribute = new UserAttribute();
    initialAttribute.setPassword("anonymousUser");
    initialAttribute.setAuthorities(new ArrayList() {
        {
            add(new GrantedAuthorityImpl(role));
        }
    });
    setUserAttribute(initialAttribute);
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
public UserDetails getUserDetails(X509Certificate clientCert) throws AuthenticationException {
    X500Principal principal = clientCert.getSubjectX500Principal();
    Matcher cnMatcher = CN_PATTERN.matcher(principal.getName());
    Matcher ouMatcher = OU_PATTERN.matcher(principal.getName());
    if (cnMatcher.find() && ouMatcher.find()) {
        GrantedAuthorityImpl agentAuthority = new GrantedAuthorityImpl(role);
        return new User("_go_agent_" + cnMatcher.group(1), "", true, true, true, true, new GrantedAuthority[]{agentAuthority});
    }
    throw new BadCredentialsException("Couldn't find CN and/or OU for the certificate");
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
/**
 *
 * This function returns a list of roles from the given set of groups
 * based on the value of the <code>groupToRoleMap</code> property.
 * 
 * @return a {@link java.util.Set} object.
 */
@Override
protected Set<GrantedAuthority> getAdditionalRoles(final DirContextOperations user, final String username) {
	final String userDn = user.getNameInNamespace();
	final Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();

	if (super.getGroupSearchBase() == null) {
		return authorities;
	}

	if (logger.isDebugEnabled()) {
		logger.debug("Searching for roles for user '" + username + "', DN = " + "'" + userDn + "', with filter "
				+ this.groupSearchFilter + " in search base '" + super.getGroupSearchBase() + "'");
	}

	@SuppressWarnings("unchecked")
	final Set<String> userRoles = ldapTemplate.searchForSingleAttributeValues(
			super.getGroupSearchBase(), 
			this.groupSearchFilter,
			new String[]{userDn, username}, 
			this.groupRoleAttribute
	);

	for(String group : userRoles) {
		final List<String> rolesForGroup = this.groupToRoleMap.get(group);
		logger.debug("Checking " + group + " for an associated role");
		if (rolesForGroup != null) {
			for(String role : rolesForGroup) {
				authorities.add(new GrantedAuthorityImpl(role));
				logger.debug("Added role: " + role + " based on group " + group);
			}
		}
	}

	return authorities;
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
/**
 * Construct a token with the given id, password, and role
 */
public static Authentication makeAuthentication( String user, String password, String role ) {
    return new TestingAuthenticationToken( user, password,
        new GrantedAuthority[] { new GrantedAuthorityImpl( role ) } );
}
 

import org.springframework.security.GrantedAuthorityImpl; //导入依赖的package包/类
@Test
public void shouldReturnTrueWhenCheckIsAgentIfGrantedAuthorityContainsAgentRole() {
    TestingAuthenticationToken authentication = new TestingAuthenticationToken(null, null,
            new GrantedAuthorityImpl[]{new GrantedAuthorityImpl("ROLE_AGENT")});
    assertThat(UserHelper.matchesRole(authentication, X509AuthoritiesPopulator.ROLE_AGENT), is(true));
}