Java Authentication.getAuthorities方法代码示例

import org.springframework.security.Authentication; //导入方法依赖的package包/类
@Override
public Authentication authenticate(Authentication authenticationRequest)
		throws AuthenticationException {
	GrantedAuthority[] authorities = new GrantedAuthorityImpl[authenticationRequest.getAuthorities().length + 1];
	authorities[0] = new GrantedAuthorityImpl(AUTHENTICATED_AUTHORITY_NAME);
	int i = 1;
	for(GrantedAuthority originalAuth : authenticationRequest.getAuthorities()){
		authorities[i] = new GrantedAuthorityImpl(originalAuth.getAuthority());
		i += 1;
	}
	
	UsernamePasswordAuthenticationToken authenticationOutcome = new UsernamePasswordAuthenticationToken(authenticationRequest.getPrincipal(), 
			authenticationRequest.getCredentials(), authorities);
	authenticationOutcome.setDetails(authenticationRequest.getDetails());
	return authenticationOutcome;
}
 

import org.springframework.security.Authentication; //导入方法依赖的package包/类
/**
 * Determine if the currently authenticated user has the role provided. Note that role
 * comparisons are case sensitive.
 * 
 * @param role to check
 * @return true if the user has the role requested
 */
public boolean isUserInRole(String role) {
    boolean inRole = false;

    Authentication authentication = getAuthentication();
    if( authentication != null ) {
        GrantedAuthority[] authorities = authentication.getAuthorities();
        for( int i = 0; i < authorities.length; i++ ) {
            if( role.equals( authorities[i].getAuthority() ) ) {
                inRole = true;
                break;
            }
        }
    }
    return inRole;
}
 

import org.springframework.security.Authentication; //导入方法依赖的package包/类
/**
 * 인증된 사용자의 권한 정보를 가져온다. 예) [ROLE_ADMIN, ROLE_USER,
 * ROLE_A, ROLE_B, ROLE_RESTRICTED,
 * IS_AUTHENTICATED_FULLY,
 * IS_AUTHENTICATED_REMEMBERED,
 * IS_AUTHENTICATED_ANONYMOUSLY]
 * @return 사용자 권한정보 목록
 */
public static List<String> getAuthorities() {
    List<String> listAuth = new ArrayList<String>();

    SecurityContext context = SecurityContextHolder.getContext();
    Authentication authentication = context.getAuthentication();

    if (EgovObjectUtil.isNull(authentication)) {
        log.debug("## authentication object is null!!");
        return null;
    }

    GrantedAuthority[] authorities = authentication.getAuthorities();

    for (int i = 0; i < authorities.length; i++) {
        listAuth.add(authorities[i].getAuthority());

        log.debug("## EgovUserDetailsHelper.getAuthorities : Authority is "
            + authorities[i].getAuthority());
    }

    return listAuth;
}
 

import org.springframework.security.Authentication; //导入方法依赖的package包/类
@Test
public void testAuthenticateTempUser() throws Exception {
       OnmsUser user = new OnmsUser("tempuser");
    user.setFullName("Temporary User");
    user.setPassword("18126E7BD3F84B3F3E4DF094DEF5B7DE");
    user.setDutySchedule(Arrays.asList("MoTuWeThFrSaSu800-2300"));
    m_userManager.save(user);

	Authentication authentication = new UsernamePasswordAuthenticationToken("tempuser", "mike");
	Authentication authenticated = m_provider.authenticate(authentication);
	assertNotNull("authenticated Authentication object not null", authenticated);
	GrantedAuthority[] authorities = authenticated.getAuthorities();
	assertNotNull("GrantedAuthorities should not be null", authorities);
	assertEquals("GrantedAuthorities size", 1, authorities.length);
	assertEquals("GrantedAuthorities zero role", "ROLE_USER", authorities[0].getAuthority());
}
 

import org.springframework.security.Authentication; //导入方法依赖的package包/类
private void setAdmininstratorRole(Context velocityContext, Authentication authentication) {
    final GrantedAuthority[] authorities = authentication.getAuthorities();
    if (authorities == null) {
        return;
    }
    removeAdminFromContextIfNecessary(velocityContext, authorities);
    removeGroupAdminFromContextIfNecessary(velocityContext, authorities);
    removeTemplateAdminFromContextIfNecessary(velocityContext, authorities);
    removeTemplateViewUserFromContextIfNecessary(velocityContext, authorities);
    removeViewAdminRightsFromContextIfNecessary(velocityContext);

}
 

import org.springframework.security.Authentication; //导入方法依赖的package包/类
static boolean matchesRole(Authentication authentication, String roleAgent) {
    GrantedAuthority[] authorities = authentication.getAuthorities();
    if (authorities == null) {
        return false;
    }
    for (GrantedAuthority authority : authorities) {
        if (authority.getAuthority().equals(roleAgent)) {
            return true;
        }
    }
    return false;
}
 

import org.springframework.security.Authentication; //导入方法依赖的package包/类
@Test
public void testAuthenticateAdmin() {
    Authentication authentication = new UsernamePasswordAuthenticationToken("admin", "admin");
	Authentication authenticated = m_provider.authenticate(authentication);
	assertNotNull("authenticated Authentication object not null", authenticated);
	GrantedAuthority[] authorities = authenticated.getAuthorities();
	assertNotNull("GrantedAuthorities should not be null", authorities);
	assertEquals("GrantedAuthorities size", 2, authorities.length);
	assertEquals("GrantedAuthorities zero role", "ROLE_USER", authorities[0].getAuthority());
	assertEquals("GrantedAuthorities two name", "ROLE_ADMIN", authorities[1].getAuthority());
}
 

import org.springframework.security.Authentication; //导入方法依赖的package包/类
@Test
public void testAuthenticateRtc() {
	Authentication authentication = new UsernamePasswordAuthenticationToken("rtc", "rtc");
	Authentication authenticated = m_provider.authenticate(authentication);
	assertNotNull("authenticated Authentication object not null", authenticated);
	GrantedAuthority[] authorities = authenticated.getAuthorities();
	assertNotNull("GrantedAuthorities should not be null", authorities);
	assertEquals("GrantedAuthorities size", 1, authorities.length);
	assertEquals("GrantedAuthorities one name", "ROLE_RTC", authorities[0].getAuthority());
}