Java AuthorizationFailureEvent类代码示例

import org.springframework.security.access.event.AuthorizationFailureEvent; //导入依赖的package包/类
@Override
public void handle(Object event) {
    WebAuthenticationDetails details = (WebAuthenticationDetails) ((AuthorizationFailureEvent) event)
            .getAuthentication().getDetails();
    eventService.raiseSecurityEvent(new UnauthorizedAccessAttemptedEvent(
            details.getRemoteAddress(), Optional.ofNullable(SecurityContextHolder.getContext())
            .map(SecurityContext::getAuthentication)
            .map(Authentication::getName).orElse("AuthenticationNameNotFound")));
}
 

import org.springframework.security.access.event.AuthorizationFailureEvent; //导入依赖的package包/类
@Test
public void testHandle() {
    AuthorizationFailureEvent event=mock(AuthorizationFailureEvent.class);
    WebAuthenticationDetails details=mock(WebAuthenticationDetails.class);
    Authentication authentication=mock(Authentication.class);
    doReturn(authentication).when(event).getAuthentication();
    doReturn(details).when(authentication).getDetails();
    doReturn(IP_ADDRESS).when(details).getRemoteAddress();
    authorizationFailureEventListener.handle(event);
    verify(eventService).raiseSecurityEvent(any(UnauthorizedAccessAttemptedEvent.class));
}
 

import org.springframework.security.access.event.AuthorizationFailureEvent; //导入依赖的package包/类
@Override
public void onApplicationEvent(AbstractAuthorizationEvent event) {
	if (event instanceof AuthenticationCredentialsNotFoundEvent) {
		onAuthenticationCredentialsNotFoundEvent(
				(AuthenticationCredentialsNotFoundEvent) event);
	}
	else if (event instanceof AuthorizationFailureEvent) {
		onAuthorizationFailureEvent((AuthorizationFailureEvent) event);
	}
}
 

import org.springframework.security.access.event.AuthorizationFailureEvent; //导入依赖的package包/类
private void onAuthorizationFailureEvent(AuthorizationFailureEvent event) {
	Map<String, Object> data = new HashMap<String, Object>();
	data.put("type", event.getAccessDeniedException().getClass().getName());
	data.put("message", event.getAccessDeniedException().getMessage());
	publish(new AuditEvent(event.getAuthentication().getName(),
			"AUTHORIZATION_FAILURE", data));
}
 

import org.springframework.security.access.event.AuthorizationFailureEvent; //导入依赖的package包/类
@Test
public void testAuthenticationSuccess() {
	this.listener.onApplicationEvent(new AuthorizationFailureEvent(this,
			Arrays.<ConfigAttribute>asList(new SecurityConfig("USER")),
			new UsernamePasswordAuthenticationToken("user", "password"),
			new AccessDeniedException("Bad user")));
	verify(this.publisher).publishEvent((ApplicationEvent) anyObject());
}
 

import org.springframework.security.access.event.AuthorizationFailureEvent; //导入依赖的package包/类
@Override
public boolean canHandle(Object event) {
    return event instanceof AuthorizationFailureEvent;
}
 

import org.springframework.security.access.event.AuthorizationFailureEvent; //导入依赖的package包/类
@Override
public void onApplicationEvent(final AuthorizationFailureEvent authorizationFailureEvent) {

	final String sessionId = RequestContextHolder.currentRequestAttributes().getSessionId();

	final CreateApplicationEventRequest serviceRequest = new CreateApplicationEventRequest();
	serviceRequest.setSessionId(sessionId);

	serviceRequest.setEventGroup(ApplicationEventGroup.APPLICATION);
	serviceRequest.setApplicationOperation(ApplicationOperationType.AUTHORIZATION);

	serviceRequest.setUserId(UserContextUtil.getUserIdFromSecurityContext());

	final Page currentPageIfAny = Page.getCurrent();
	final String requestUrl = UserContextUtil.getRequestUrl(currentPageIfAny);
	final UI currentUiIfAny = UI.getCurrent();
	String methodInfo = "";

	if (currentPageIfAny != null && currentUiIfAny != null && currentUiIfAny.getNavigator() != null
			&& currentUiIfAny.getNavigator().getCurrentView() != null) {
		serviceRequest.setPage(currentUiIfAny.getNavigator().getCurrentView().getClass().getSimpleName());
		serviceRequest.setPageMode(currentPageIfAny.getUriFragment());
	}

	if (authorizationFailureEvent.getSource() instanceof ReflectiveMethodInvocation) {
		final ReflectiveMethodInvocation methodInvocation = (ReflectiveMethodInvocation) authorizationFailureEvent
				.getSource();
		if (methodInvocation.getMethod() != null && methodInvocation.getThis() != null) {
			methodInfo = methodInvocation.getThis().getClass().getSimpleName() + "."
					+ methodInvocation.getMethod().getName();
		}
	}

	final Collection<? extends GrantedAuthority> authorities = authorizationFailureEvent.getAuthentication().getAuthorities();
	final Collection<ConfigAttribute> configAttributes = authorizationFailureEvent.getConfigAttributes();

	serviceRequest.setErrorMessage(MessageFormat.format(ERROR_MESSAGE_FORMAT, requestUrl, methodInfo, AUTHORITIES, authorities,
			REQUIRED_AUTHORITIES, configAttributes, authorizationFailureEvent.getSource()));
	serviceRequest.setApplicationMessage(ACCESS_DENIED);

	applicationManager.service(serviceRequest);

	LOGGER.info(LOG_MSG_AUTHORIZATION_FAILURE_SESSION_ID_AUTHORITIES_REQUIRED_AUTHORITIES, requestUrl, methodInfo,
			sessionId, authorities,
			configAttributes);
}