Java SecurityContextHolder.setContext方法代码示例

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
/**
 * Alimente la session pour un compte local
 * 
 * @param cptMin
 *            le compte a minima a connecter
 */
public void alimenteSecurityUserCptMin(CompteMinima cptMin) {
	SecurityUser user = (SecurityUser) getCurrentUser();
	if (user != null) {
		List<GrantedAuthority> authoritiesListe = new ArrayList<GrantedAuthority>();
		SimpleGrantedAuthority sga = new SimpleGrantedAuthority(ConstanteUtils.ROLE_CANDIDAT);
		authoritiesListe.add(sga);

		SecurityUserCandidat securityUserCandidat = new SecurityUserCandidat(user.getUsername(),
				user.getDisplayName(), authoritiesListe, cptMin.getIdCptMin(), cptMin.getNumDossierOpiCptMin(),
				cptMin.getTemValidCptMin(), cptMin.getTemValidMailCptMin(), null);
		UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(
				securityUserCandidat, securityUserCandidat.getUsername(), securityUserCandidat.getAuthorities());
		Authentication authentication = authenticationManagerCandidat.authenticate(authRequest);
		SecurityContext context = SecurityContextHolder.createEmptyContext();
		context.setAuthentication(authentication);
		SecurityContextHolder.setContext(context);
		UI.getCurrent().getSession().getSession()
				.setAttribute(HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY, context);
	}
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Test
public void testgetCurrentUserLogin() {
    SecurityContext securityContext = SecurityContextHolder.createEmptyContext();
    securityContext.setAuthentication(new UsernamePasswordAuthenticationToken("admin", "admin"));
    SecurityContextHolder.setContext(securityContext);
    String login = SecurityUtils.getCurrentUserLogin();
    assertThat(login).isEqualTo("admin");
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Test
public void testIsAuthenticated() {
    SecurityContext securityContext = SecurityContextHolder.createEmptyContext();
    securityContext.setAuthentication(new UsernamePasswordAuthenticationToken("admin", "admin"));
    SecurityContextHolder.setContext(securityContext);
    boolean isAuthenticated = SecurityUtils.isAuthenticated();
    assertThat(isAuthenticated).isTrue();
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Test
public void testgetCurrentUserLogin() {
    SecurityContext securityContext = SecurityContextHolder.createEmptyContext();
    securityContext.setAuthentication(new UsernamePasswordAuthenticationToken("admin", "admin"));
    SecurityContextHolder.setContext(securityContext);
    Optional<String> login = SecurityUtils.getCurrentUserLogin();
    assertThat(login).contains("admin");
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Test
public void testAnonymousIsNotAuthenticated() {
    SecurityContext securityContext = SecurityContextHolder.createEmptyContext();
    Collection<GrantedAuthority> authorities = new ArrayList<>();
    authorities.add(new SimpleGrantedAuthority(AuthoritiesConstants.ANONYMOUS));
    securityContext.setAuthentication(new UsernamePasswordAuthenticationToken("anonymous", "anonymous", authorities));
    SecurityContextHolder.setContext(securityContext);
    boolean isAuthenticated = SecurityUtils.isAuthenticated();
    assertThat(isAuthenticated).isFalse();
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Test
public void testIsCurrentUserInRole() {
    SecurityContext securityContext = SecurityContextHolder.createEmptyContext();
    Collection<GrantedAuthority> authorities = new ArrayList<>();
    authorities.add(new SimpleGrantedAuthority(AuthoritiesConstants.USER));
    securityContext.setAuthentication(new UsernamePasswordAuthenticationToken("user", "user", authorities));
    SecurityContextHolder.setContext(securityContext);

    assertThat(SecurityUtils.isCurrentUserInRole(AuthoritiesConstants.USER)).isTrue();
    assertThat(SecurityUtils.isCurrentUserInRole(AuthoritiesConstants.ADMIN)).isFalse();
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Override
protected void doFilterInternal(
        HttpServletRequest req, HttpServletResponse res, FilterChain chain)
        throws ServletException, IOException {

    ServletRequestAttributes attributes = new ServletRequestAttributes(req, res);

    try {

        if(1 + 1 == 2) {

            SecurityContext oldCtx = SecurityContextHolder.getContext();
            SecurityContextHolder.setContext(null); //
            try {
                super.doFilter(req, res, chain);
            } finally {
                SecurityContextHolder.setContext(oldCtx);
            }
        }
        else {
            super.doFilter(req, res, chain);
        }
    }
    finally {
        attributes.requestCompleted();
    }
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
/**
 * Initialize {@link SecurityContextHolder} for given user.
 * 
 * @param user
 *            the user to set in the context.
 * @param authorities
 *            the optional authorities name
 * @return The configured {@link SecurityContext}.
 */
@SuppressWarnings("unchecked")
protected SecurityContext initSpringSecurityContext(final String user, final GrantedAuthority... authorities) {
	SecurityContextHolder.clearContext();
	final SecurityContext context = Mockito.mock(SecurityContext.class);
	final Authentication authentication = Mockito.mock(Authentication.class);
	final List<GrantedAuthority> authoritiesAsList = Arrays.asList(authorities);
	final User userDetails = new User(user, USER_DETAILS_NA, authoritiesAsList);
	Mockito.when((List<GrantedAuthority>) authentication.getAuthorities()).thenReturn(authoritiesAsList);
	Mockito.when(context.getAuthentication()).thenReturn(authentication);
	Mockito.when(authentication.getPrincipal()).thenReturn(userDetails);
	Mockito.when(authentication.getName()).thenReturn(user);
	SecurityContextHolder.setContext(context);
	return context;
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Test
public void shouldReturnAnEmtpySetOfAuthoritiesIfTheAuthenticationIsNotAnOAuth2Authentication() {
	when(context.getAuthentication()).thenReturn(testAuthentication);
	SecurityContextHolder.setContext(context);

	OAuth2AuthorizationContext ctx = new OAuth2AuthorizationContext();
	assertThat(ctx.getAuthorities()).hasSize(0);
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Test
public void shouldReturnAnEmtpySetOfScopesIfTheAuthenticationIsNotAnOAuth2Authentication() {
	when(context.getAuthentication()).thenReturn(testAuthentication);
	SecurityContextHolder.setContext(context);

	OAuth2AuthorizationContext ctx = new OAuth2AuthorizationContext();
	assertThat(ctx.getScopes()).hasSize(0);
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Before
public void setupMockMvc() throws Exception {
    mockMvc = MockMvcBuilders.webAppContextSetup(context).build();
    securityContext = Mockito.mock( SecurityContext.class );
    SecurityContextHolder.setContext( securityContext );
    Mockito.when( securityContext.getAuthentication() ).thenReturn( new AnonAuthentication() );
    mockAuthenticatedUser(buildTestAdmin());
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
@Override
protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain,
        Authentication authResult) throws IOException, ServletException {
    SecurityContext context = SecurityContextHolder.createEmptyContext();
    context.setAuthentication(authResult);
    SecurityContextHolder.setContext(context);
    chain.doFilter(request, response);
}
 

import org.springframework.security.core.context.SecurityContextHolder; //导入方法依赖的package包/类
/**
 * Connexion d'un candidat
 * 
 * @param username
 *            login
 * @param password
 *            mot de passe
 */
public void connectCandidatInterne(String username, String password) {
	if (loadBalancingController.isLoadBalancingGestionnaireMode()) {
		return;
	}
	CompteMinima cptMin = candidatController.searchCptMinByNumDossier(username);
	if (cptMin != null) {
		if (!validPwdCandidat(password, cptMin)) {
			return;
		}
		if (!cptMin.getTemValidCptMin() || !cptMin.getTemValidMailCptMin()) {
			Notification.show(applicationContext.getMessage("compteMinima.connect.valid.error", null,
					UI.getCurrent().getLocale()), Type.WARNING_MESSAGE);
			return;
		}
	} else {
		Notification.show(
				applicationContext.getMessage("compteMinima.connect.user.error", null, UI.getCurrent().getLocale()),
				Type.WARNING_MESSAGE);
		return;
	}

	SecurityUser user = constructSecurityUserCandidat(username, cptMin);
	if (user == null) {
		return;
	}

	// authentication
	UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(user, username,
			user.getAuthorities());
	Authentication authentication = authenticationManagerCandidat.authenticate(authRequest);

	/* Se désinscrit de la réception de notifications */
	uiController.unregisterUiCandidat(MainUI.getCurrent());
	SecurityContext context = SecurityContextHolder.createEmptyContext();
	context.setAuthentication(authentication);
	SecurityContextHolder.setContext(context);
	UI.getCurrent().getSession().getSession()
			.setAttribute(HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY, context);
	MainUI current = (MainUI) UI.getCurrent();
	uiController.registerUiCandidat(current);
	i18nController.initLanguageUI(true);
	current.navigateToAccueilView();
}