Java Authentication.getAuthorities方法代码示例

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
private String determineTargetUrl(Authentication authentication) {
    boolean isUser = false;
    boolean isAdmin = false;
    Collection<? extends GrantedAuthority> authorities
     = authentication.getAuthorities();
    for (GrantedAuthority grantedAuthority : authorities){
        if (grantedAuthority.getAuthority().equals("ROLE_REGISTER-ROLE")) {
            isUser = true;
            break;
        }else if (grantedAuthority.getAuthority().equals("ROLE_ADMIN")) {
            isAdmin = true;
            break;
        }
    }
 
    if (isAdmin) {
        return "/admin/";
    } else if (isUser) {
        return "/phy_register/io/";
    } else {
        throw new IllegalStateException();
    }
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes)
		throws AccessDeniedException, InsufficientAuthenticationException {
	//System.err.println(" ---------------MaxAccessDecisionManager decide--------------- ");
	if(configAttributes == null) {
		return;
	}
	//所请求的资源拥有的权限(一个资源对多个权限)
	Iterator<ConfigAttribute> iterator = configAttributes.iterator();
	while(iterator.hasNext()) {
		ConfigAttribute configAttribute = iterator.next();
		//访问所请求资源所需要的权限
		String needPermission = configAttribute.getAttribute();
		//System.out.println("NEED-> "+needPermission);
		//用户所拥有的权限authentication
		for(GrantedAuthority ga : authentication.getAuthorities()) {
			//System.out.println("USER-> "+ga.getAuthority());
			if(needPermission.equals(ga.getAuthority())) {
				//System.out.println("pass");
				return;
			}
		}
	}
	//没有权限
	throw new AccessDeniedException("Access Denide!");
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
@Override
public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) throws AccessDeniedException, InsufficientAuthenticationException {
    if(null== configAttributes || configAttributes.size() <=0) {
        return;
    }
    ConfigAttribute c;
    String needRole;
    for(Iterator<ConfigAttribute> iter = configAttributes.iterator(); iter.hasNext(); ) {
        c = iter.next();
        needRole = c.getAttribute();
        for(GrantedAuthority ga : authentication.getAuthorities()) {
            if(needRole.trim().equals(ga.getAuthority())) {
                return;
            }
        }
    }
    throw new AccessDeniedException("no right");
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
protected String targetUrl(Authentication authentication) {
    String url = "";
 
    Collection<? extends GrantedAuthority> authorities = authentication.getAuthorities();
    List<String> roles = new ArrayList<String>();
    for (GrantedAuthority a : authorities) {
        roles.add(a.getAuthority());
    }
 
    System.out.println(roles);
    if (isUserRole(roles)) {
        url = "/deptform.html";
    } else if (isAdminRole(roles)){
        url = "/deptform.html";
    } else if (isHrAdminRole(roles)){
    	url = "/deptform.html";
    } else{
    	url = "/deptform.html";
    }
 
    return url;
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
@Override
protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain,
		Authentication authResult) throws IOException, ServletException {

	System.out.println("AUTH FILTER");
	
	
	Collection<? extends GrantedAuthority> authorities = authResult.getAuthorities();
	List<String> roles = new ArrayList<String>();
	for (GrantedAuthority a : authorities) {
		roles.add(a.getAuthority());
	}
	System.out.println(roles);
	
	String name = obtainPassword(request);
       String password = obtainUsername(request);
	
       
	UsernamePasswordAuthenticationToken userDetails = new UsernamePasswordAuthenticationToken(name, password, authorities);
	setDetails(request, userDetails);	
	chain.doFilter(request, response);
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
private String determineTargetURL(Authentication authentication) {
    boolean isStudent = false;
    boolean isProf = false;
    Collection<? extends GrantedAuthority> authorities = authentication.getAuthorities();

    for (GrantedAuthority grantedAuthority : authorities) {
        if (grantedAuthority.getAuthority().equals(ROLE_STUDENT)) {
            isStudent = true;
            break;
        } else if (grantedAuthority.getAuthority().equals(ROLE_PROF)) {
            isProf = true;
            break;
        }
    }

    if (isProf) return "/prof";
    if (isStudent) return "/student";

    throw new IllegalStateException();
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
public EndpointRequest(UriInfo uriInfo,
					   HttpServletRequest httpRequest,
					   MultivaluedMap<String,String> pathParameters,
					   InputStream body,
					   Authentication authentication) {
	this.uriInfo = uriInfo;
	this.httpRequest = httpRequest;
	this.pathParameters = pathParameters;
	this.body = body;
	this.authentication = authentication;
	if (authentication != null) {
		for (GrantedAuthority authority: authentication.getAuthorities()) {
			roles.add(authority.getAuthority());
		}
	}
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
public boolean isSwitched(Authentication authentication, String attribute) {
    if (!IS_SWITCHED.equals(attribute)) {
        return false;
    }

    Collection<? extends GrantedAuthority> authorities = authentication
            .getAuthorities();

    for (GrantedAuthority auth : authorities) {
        if (auth instanceof SwitchUserGrantedAuthority) {
            return true;
        }
    }

    return false;
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
public static List<String> getAuthorities() {
    Authentication authentication = getAuthentication();

    if (authentication == null) {
        return Collections.EMPTY_LIST;
    }

    Collection<? extends GrantedAuthority> grantedAuthorityList = authentication
            .getAuthorities();

    List<String> authorities = new ArrayList<String>();

    for (GrantedAuthority grantedAuthority : grantedAuthorityList) {
        authorities.add(grantedAuthority.getAuthority());
    }

    return authorities;
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
@Override
public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) throws AccessDeniedException, InsufficientAuthenticationException {

    if(null== configAttributes || configAttributes.size() <=0) {
        return;
    }
    ConfigAttribute c;
    String needRole;
    for(Iterator<ConfigAttribute> iter = configAttributes.iterator(); iter.hasNext(); ) {
        c = iter.next();
        needRole = c.getAttribute();
        for(GrantedAuthority ga : authentication.getAuthorities()) {
            if(needRole.trim().equals(ga.getAuthority())) {
                return;
            }
        }
    }
    throw new AccessDeniedException("no right");
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
@Override
public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) throws AccessDeniedException, InsufficientAuthenticationException {
    if (configAttributes == null) {
        return;
    }

    for (ConfigAttribute ca : configAttributes) {
        String needRole = ca.getAttribute();
        //ga 为用户所被赋予的权限。 needRole 为访问相应的资源应该具有的权限。
        for (GrantedAuthority ga : authentication.getAuthorities()) {
            if (needRole.trim().equals(ga.getAuthority().trim())) {
                return;
            }
        }
    }

    throw new AccessDeniedException("没有权限进行操作！");
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
@Override
public Response isUserAdmin(HttpServletRequest request, HttpServletResponse response) {
    Authentication auth = SecurityContextHolder.getContext().getAuthentication();
    if (auth != null) {
        @SuppressWarnings("unchecked")
        Collection<GrantedAuthority> authorities = (Collection<GrantedAuthority>) auth.getAuthorities();
        if (authorities!= null &&  authorities.contains(new SimpleGrantedAuthority(ApplicationProperties.get(PROP_JWALA_ROLE_ADMIN)))) {
            return ResponseBuilder.ok(JSON_RESPONSE_TRUE);
        }
    }
    return ResponseBuilder.ok(JSON_RESPONSE_FALSE);
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
@Override
public Authentication extractAuthentication(Map<String, ?> map) {
	Authentication authentication = super.extractAuthentication(map);
	if (map.containsKey(USER_ID) && map.containsKey(USERNAME) && map.containsKey(EMAIL)) {
		UserEntity user = new UserEntity()
			.setId((String) map.get(USER_ID))
			.setEmail((String) map.get(EMAIL))
			.setUsername((String) map.get(USERNAME));
		return new UsernamePasswordAuthenticationToken(user, "N/A", authentication.getAuthorities());
	}
	throw new BadCredentialsException("Invalid token");
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
@Override
public Authentication extractAuthentication(Map<String, ?> map) {
    Authentication authentication = super.extractAuthentication(map);
    Collection<? extends GrantedAuthority> authorities = authentication.getAuthorities();
    AuthenticatedUser user = new AuthenticatedUser(getUsername(map), getFistName(map), getLastName(map), authorities);
    return new UsernamePasswordAuthenticationToken(user, authentication.getCredentials(), authorities);
}
 

import org.springframework.security.core.Authentication; //导入方法依赖的package包/类
private User getUser(Authentication auth) {
    Collection<? extends GrantedAuthority> authorities = auth.getAuthorities();
    ArrayList<RoleImpl> erraiRoles = new ArrayList<RoleImpl>(authorities.size());
    for (GrantedAuthority grantedAuthority : authorities) {
        erraiRoles.add(new RoleImpl(grantedAuthority.getAuthority().replace("ROLE_", "")));
    }
    User user = new UserImpl(auth.getName(), erraiRoles);
    return user;
}