mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-06-27 14:22:47 +00:00
SecurityContextServerRepository->ServerSecurityContextRepository
Issue gh-4615
This commit is contained in:
parent
792944eee7
commit
7271a427e8
@ -44,10 +44,10 @@ import org.springframework.security.web.server.authorization.AuthorizationWebFil
|
|||||||
import org.springframework.security.web.server.authorization.DelegatingReactiveAuthorizationManager;
|
import org.springframework.security.web.server.authorization.DelegatingReactiveAuthorizationManager;
|
||||||
import org.springframework.security.web.server.authorization.ExceptionTranslationWebFilter;
|
import org.springframework.security.web.server.authorization.ExceptionTranslationWebFilter;
|
||||||
import org.springframework.security.web.server.context.AuthenticationReactorContextWebFilter;
|
import org.springframework.security.web.server.context.AuthenticationReactorContextWebFilter;
|
||||||
import org.springframework.security.web.server.context.SecurityContextServerRepository;
|
import org.springframework.security.web.server.context.ServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.context.SecurityContextRepositoryWebFilter;
|
import org.springframework.security.web.server.context.SecurityContextRepositoryWebFilter;
|
||||||
import org.springframework.security.web.server.context.ServerWebExchangeAttributeSecurityContextServerRepository;
|
import org.springframework.security.web.server.context.ServerWebExchangeAttributeServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.context.WebSessionSecurityContextServerRepository;
|
import org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.header.CacheControlServerHttpHeadersWriter;
|
import org.springframework.security.web.server.header.CacheControlServerHttpHeadersWriter;
|
||||||
import org.springframework.security.web.server.header.CompositeServerHttpHeadersWriter;
|
import org.springframework.security.web.server.header.CompositeServerHttpHeadersWriter;
|
||||||
import org.springframework.security.web.server.header.ContentTypeOptionsServerHttpHeadersWriter;
|
import org.springframework.security.web.server.header.ContentTypeOptionsServerHttpHeadersWriter;
|
||||||
@ -94,7 +94,7 @@ public class ServerHttpSecurity {
|
|||||||
|
|
||||||
private ReactiveAuthenticationManager authenticationManager;
|
private ReactiveAuthenticationManager authenticationManager;
|
||||||
|
|
||||||
private SecurityContextServerRepository securityContextServerRepository;
|
private ServerSecurityContextRepository serverSecurityContextRepository;
|
||||||
|
|
||||||
private ServerAuthenticationEntryPoint serverAuthenticationEntryPoint;
|
private ServerAuthenticationEntryPoint serverAuthenticationEntryPoint;
|
||||||
|
|
||||||
@ -127,9 +127,9 @@ public class ServerHttpSecurity {
|
|||||||
return this.securityMatcher;
|
return this.securityMatcher;
|
||||||
}
|
}
|
||||||
|
|
||||||
public ServerHttpSecurity securityContextRepository(SecurityContextServerRepository securityContextServerRepository) {
|
public ServerHttpSecurity securityContextRepository(ServerSecurityContextRepository serverSecurityContextRepository) {
|
||||||
Assert.notNull(securityContextServerRepository, "securityContextRepository cannot be null");
|
Assert.notNull(serverSecurityContextRepository, "securityContextRepository cannot be null");
|
||||||
this.securityContextServerRepository = securityContextServerRepository;
|
this.serverSecurityContextRepository = serverSecurityContextRepository;
|
||||||
return this;
|
return this;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -183,15 +183,15 @@ public class ServerHttpSecurity {
|
|||||||
}
|
}
|
||||||
if(this.httpBasic != null) {
|
if(this.httpBasic != null) {
|
||||||
this.httpBasic.authenticationManager(this.authenticationManager);
|
this.httpBasic.authenticationManager(this.authenticationManager);
|
||||||
if(this.securityContextServerRepository != null) {
|
if(this.serverSecurityContextRepository != null) {
|
||||||
this.httpBasic.securityContextRepository(this.securityContextServerRepository);
|
this.httpBasic.securityContextRepository(this.serverSecurityContextRepository);
|
||||||
}
|
}
|
||||||
this.httpBasic.configure(this);
|
this.httpBasic.configure(this);
|
||||||
}
|
}
|
||||||
if(this.formLogin != null) {
|
if(this.formLogin != null) {
|
||||||
this.formLogin.authenticationManager(this.authenticationManager);
|
this.formLogin.authenticationManager(this.authenticationManager);
|
||||||
if(this.securityContextServerRepository != null) {
|
if(this.serverSecurityContextRepository != null) {
|
||||||
this.formLogin.securityContextRepository(this.securityContextServerRepository);
|
this.formLogin.securityContextRepository(this.serverSecurityContextRepository);
|
||||||
}
|
}
|
||||||
if(this.formLogin.serverAuthenticationEntryPoint == null) {
|
if(this.formLogin.serverAuthenticationEntryPoint == null) {
|
||||||
this.webFilters.add(new OrderedWebFilter(new LoginPageGeneratingWebFilter(), SecurityWebFiltersOrder.LOGIN_PAGE_GENERATING.getOrder()));
|
this.webFilters.add(new OrderedWebFilter(new LoginPageGeneratingWebFilter(), SecurityWebFiltersOrder.LOGIN_PAGE_GENERATING.getOrder()));
|
||||||
@ -233,7 +233,7 @@ public class ServerHttpSecurity {
|
|||||||
}
|
}
|
||||||
|
|
||||||
private WebFilter securityContextRepositoryWebFilter() {
|
private WebFilter securityContextRepositoryWebFilter() {
|
||||||
SecurityContextServerRepository repository = this.securityContextServerRepository;
|
ServerSecurityContextRepository repository = this.serverSecurityContextRepository;
|
||||||
if(repository == null) {
|
if(repository == null) {
|
||||||
return null;
|
return null;
|
||||||
}
|
}
|
||||||
@ -322,7 +322,7 @@ public class ServerHttpSecurity {
|
|||||||
public class HttpBasicBuilder {
|
public class HttpBasicBuilder {
|
||||||
private ReactiveAuthenticationManager authenticationManager;
|
private ReactiveAuthenticationManager authenticationManager;
|
||||||
|
|
||||||
private SecurityContextServerRepository securityContextServerRepository = new ServerWebExchangeAttributeSecurityContextServerRepository();
|
private ServerSecurityContextRepository serverSecurityContextRepository = new ServerWebExchangeAttributeServerSecurityContextRepository();
|
||||||
|
|
||||||
private ServerAuthenticationEntryPoint entryPoint = new HttpBasicServerAuthenticationEntryPoint();
|
private ServerAuthenticationEntryPoint entryPoint = new HttpBasicServerAuthenticationEntryPoint();
|
||||||
|
|
||||||
@ -331,8 +331,8 @@ public class ServerHttpSecurity {
|
|||||||
return this;
|
return this;
|
||||||
}
|
}
|
||||||
|
|
||||||
public HttpBasicBuilder securityContextRepository(SecurityContextServerRepository securityContextServerRepository) {
|
public HttpBasicBuilder securityContextRepository(ServerSecurityContextRepository serverSecurityContextRepository) {
|
||||||
this.securityContextServerRepository = securityContextServerRepository;
|
this.serverSecurityContextRepository = serverSecurityContextRepository;
|
||||||
return this;
|
return this;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -357,8 +357,8 @@ public class ServerHttpSecurity {
|
|||||||
this.authenticationManager);
|
this.authenticationManager);
|
||||||
authenticationFilter.setServerAuthenticationFailureHandler(new ServerAuthenticationEntryPointFailureHandler(this.entryPoint));
|
authenticationFilter.setServerAuthenticationFailureHandler(new ServerAuthenticationEntryPointFailureHandler(this.entryPoint));
|
||||||
authenticationFilter.setAuthenticationConverter(new ServerHttpBasicAuthenticationConverter());
|
authenticationFilter.setAuthenticationConverter(new ServerHttpBasicAuthenticationConverter());
|
||||||
if(this.securityContextServerRepository != null) {
|
if(this.serverSecurityContextRepository != null) {
|
||||||
authenticationFilter.setSecurityContextServerRepository(this.securityContextServerRepository);
|
authenticationFilter.setServerSecurityContextRepository(this.serverSecurityContextRepository);
|
||||||
}
|
}
|
||||||
http.addFilterAt(authenticationFilter, SecurityWebFiltersOrder.HTTP_BASIC);
|
http.addFilterAt(authenticationFilter, SecurityWebFiltersOrder.HTTP_BASIC);
|
||||||
}
|
}
|
||||||
@ -373,7 +373,7 @@ public class ServerHttpSecurity {
|
|||||||
public class FormLoginBuilder {
|
public class FormLoginBuilder {
|
||||||
private ReactiveAuthenticationManager authenticationManager;
|
private ReactiveAuthenticationManager authenticationManager;
|
||||||
|
|
||||||
private SecurityContextServerRepository securityContextServerRepository = new WebSessionSecurityContextServerRepository();
|
private ServerSecurityContextRepository serverSecurityContextRepository = new WebSessionServerSecurityContextRepository();
|
||||||
|
|
||||||
private ServerAuthenticationEntryPoint serverAuthenticationEntryPoint;
|
private ServerAuthenticationEntryPoint serverAuthenticationEntryPoint;
|
||||||
|
|
||||||
@ -408,8 +408,8 @@ public class ServerHttpSecurity {
|
|||||||
return this;
|
return this;
|
||||||
}
|
}
|
||||||
|
|
||||||
public FormLoginBuilder securityContextRepository(SecurityContextServerRepository securityContextServerRepository) {
|
public FormLoginBuilder securityContextRepository(ServerSecurityContextRepository serverSecurityContextRepository) {
|
||||||
this.securityContextServerRepository = securityContextServerRepository;
|
this.serverSecurityContextRepository = serverSecurityContextRepository;
|
||||||
return this;
|
return this;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -436,7 +436,7 @@ public class ServerHttpSecurity {
|
|||||||
authenticationFilter.setServerAuthenticationFailureHandler(this.serverAuthenticationFailureHandler);
|
authenticationFilter.setServerAuthenticationFailureHandler(this.serverAuthenticationFailureHandler);
|
||||||
authenticationFilter.setAuthenticationConverter(new ServerFormLoginAuthenticationConverter());
|
authenticationFilter.setAuthenticationConverter(new ServerFormLoginAuthenticationConverter());
|
||||||
authenticationFilter.setServerAuthenticationSuccessHandler(new RedirectServerAuthenticationSuccessHandler("/"));
|
authenticationFilter.setServerAuthenticationSuccessHandler(new RedirectServerAuthenticationSuccessHandler("/"));
|
||||||
authenticationFilter.setSecurityContextServerRepository(this.securityContextServerRepository);
|
authenticationFilter.setServerSecurityContextRepository(this.serverSecurityContextRepository);
|
||||||
http.addFilterAt(authenticationFilter, SecurityWebFiltersOrder.FORM_LOGIN);
|
http.addFilterAt(authenticationFilter, SecurityWebFiltersOrder.FORM_LOGIN);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -26,8 +26,8 @@ import org.springframework.security.authentication.ReactiveAuthenticationManager
|
|||||||
import org.springframework.security.authentication.TestingAuthenticationToken;
|
import org.springframework.security.authentication.TestingAuthenticationToken;
|
||||||
import org.springframework.security.test.web.reactive.server.WebTestClientBuilder;
|
import org.springframework.security.test.web.reactive.server.WebTestClientBuilder;
|
||||||
import org.springframework.security.web.server.WebFilterChainProxy;
|
import org.springframework.security.web.server.WebFilterChainProxy;
|
||||||
import org.springframework.security.web.server.context.SecurityContextServerRepository;
|
import org.springframework.security.web.server.context.ServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.context.WebSessionSecurityContextServerRepository;
|
import org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository;
|
||||||
import org.springframework.test.web.reactive.server.EntityExchangeResult;
|
import org.springframework.test.web.reactive.server.EntityExchangeResult;
|
||||||
import org.springframework.test.web.reactive.server.FluxExchangeResult;
|
import org.springframework.test.web.reactive.server.FluxExchangeResult;
|
||||||
import org.springframework.test.web.reactive.server.WebTestClient;
|
import org.springframework.test.web.reactive.server.WebTestClient;
|
||||||
@ -45,7 +45,7 @@ import static org.springframework.web.reactive.function.client.ExchangeFilterFun
|
|||||||
*/
|
*/
|
||||||
@RunWith(MockitoJUnitRunner.class)
|
@RunWith(MockitoJUnitRunner.class)
|
||||||
public class ServerHttpSecurityTests {
|
public class ServerHttpSecurityTests {
|
||||||
@Mock SecurityContextServerRepository contextRepository;
|
@Mock ServerSecurityContextRepository contextRepository;
|
||||||
@Mock
|
@Mock
|
||||||
ReactiveAuthenticationManager authenticationManager;
|
ReactiveAuthenticationManager authenticationManager;
|
||||||
|
|
||||||
@ -77,7 +77,7 @@ public class ServerHttpSecurityTests {
|
|||||||
public void basic() {
|
public void basic() {
|
||||||
given(this.authenticationManager.authenticate(any())).willReturn(Mono.just(new TestingAuthenticationToken("rob", "rob", "ROLE_USER", "ROLE_ADMIN")));
|
given(this.authenticationManager.authenticate(any())).willReturn(Mono.just(new TestingAuthenticationToken("rob", "rob", "ROLE_USER", "ROLE_ADMIN")));
|
||||||
|
|
||||||
this.http.securityContextRepository(new WebSessionSecurityContextServerRepository());
|
this.http.securityContextRepository(new WebSessionServerSecurityContextRepository());
|
||||||
this.http.httpBasic();
|
this.http.httpBasic();
|
||||||
this.http.authenticationManager(this.authenticationManager);
|
this.http.authenticationManager(this.authenticationManager);
|
||||||
ServerHttpSecurity.AuthorizeExchangeBuilder authorize = this.http.authorizeExchange();
|
ServerHttpSecurity.AuthorizeExchangeBuilder authorize = this.http.authorizeExchange();
|
||||||
|
@ -26,9 +26,9 @@ import org.springframework.security.core.context.SecurityContextImpl;
|
|||||||
import org.springframework.security.web.server.ServerHttpBasicAuthenticationConverter;
|
import org.springframework.security.web.server.ServerHttpBasicAuthenticationConverter;
|
||||||
import org.springframework.security.web.server.WebFilterExchange;
|
import org.springframework.security.web.server.WebFilterExchange;
|
||||||
import org.springframework.security.web.server.authentication.www.HttpBasicServerAuthenticationEntryPoint;
|
import org.springframework.security.web.server.authentication.www.HttpBasicServerAuthenticationEntryPoint;
|
||||||
import org.springframework.security.web.server.context.SecurityContextServerRepository;
|
import org.springframework.security.web.server.context.ServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.context.SecurityContextRepositoryServerWebExchange;
|
import org.springframework.security.web.server.context.SecurityContextRepositoryServerWebExchange;
|
||||||
import org.springframework.security.web.server.context.ServerWebExchangeAttributeSecurityContextServerRepository;
|
import org.springframework.security.web.server.context.ServerWebExchangeAttributeServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher;
|
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher;
|
||||||
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers;
|
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatchers;
|
||||||
import org.springframework.util.Assert;
|
import org.springframework.util.Assert;
|
||||||
@ -51,7 +51,7 @@ public class AuthenticationWebFilter implements WebFilter {
|
|||||||
|
|
||||||
private ServerAuthenticationFailureHandler serverAuthenticationFailureHandler = new ServerAuthenticationEntryPointFailureHandler(new HttpBasicServerAuthenticationEntryPoint());
|
private ServerAuthenticationFailureHandler serverAuthenticationFailureHandler = new ServerAuthenticationEntryPointFailureHandler(new HttpBasicServerAuthenticationEntryPoint());
|
||||||
|
|
||||||
private SecurityContextServerRepository securityContextServerRepository = new ServerWebExchangeAttributeSecurityContextServerRepository();
|
private ServerSecurityContextRepository serverSecurityContextRepository = new ServerWebExchangeAttributeServerSecurityContextRepository();
|
||||||
|
|
||||||
private ServerWebExchangeMatcher requiresAuthenticationMatcher = ServerWebExchangeMatchers.anyExchange();
|
private ServerWebExchangeMatcher requiresAuthenticationMatcher = ServerWebExchangeMatchers.anyExchange();
|
||||||
|
|
||||||
@ -62,7 +62,7 @@ public class AuthenticationWebFilter implements WebFilter {
|
|||||||
|
|
||||||
@Override
|
@Override
|
||||||
public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {
|
public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {
|
||||||
ServerWebExchange wrappedExchange = new SecurityContextRepositoryServerWebExchange(exchange, this.securityContextServerRepository);
|
ServerWebExchange wrappedExchange = new SecurityContextRepositoryServerWebExchange(exchange, this.serverSecurityContextRepository);
|
||||||
return filterInternal(wrappedExchange, chain);
|
return filterInternal(wrappedExchange, chain);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -87,15 +87,15 @@ public class AuthenticationWebFilter implements WebFilter {
|
|||||||
ServerWebExchange exchange = webFilterExchange.getExchange();
|
ServerWebExchange exchange = webFilterExchange.getExchange();
|
||||||
SecurityContextImpl securityContext = new SecurityContextImpl();
|
SecurityContextImpl securityContext = new SecurityContextImpl();
|
||||||
securityContext.setAuthentication(authentication);
|
securityContext.setAuthentication(authentication);
|
||||||
return this.securityContextServerRepository.save(exchange, securityContext)
|
return this.serverSecurityContextRepository.save(exchange, securityContext)
|
||||||
.then(this.serverAuthenticationSuccessHandler
|
.then(this.serverAuthenticationSuccessHandler
|
||||||
.success(authentication, webFilterExchange));
|
.success(authentication, webFilterExchange));
|
||||||
}
|
}
|
||||||
|
|
||||||
public void setSecurityContextServerRepository(
|
public void setServerSecurityContextRepository(
|
||||||
SecurityContextServerRepository securityContextServerRepository) {
|
ServerSecurityContextRepository serverSecurityContextRepository) {
|
||||||
Assert.notNull(securityContextServerRepository, "securityContextRepository cannot be null");
|
Assert.notNull(serverSecurityContextRepository, "securityContextRepository cannot be null");
|
||||||
this.securityContextServerRepository = securityContextServerRepository;
|
this.serverSecurityContextRepository = serverSecurityContextRepository;
|
||||||
}
|
}
|
||||||
|
|
||||||
public void setServerAuthenticationSuccessHandler(ServerAuthenticationSuccessHandler serverAuthenticationSuccessHandler) {
|
public void setServerAuthenticationSuccessHandler(ServerAuthenticationSuccessHandler serverAuthenticationSuccessHandler) {
|
||||||
|
@ -19,9 +19,9 @@ package org.springframework.security.web.server.authentication.logout;
|
|||||||
import org.springframework.security.core.Authentication;
|
import org.springframework.security.core.Authentication;
|
||||||
import org.springframework.security.web.server.DefaultServerRedirectStrategy;
|
import org.springframework.security.web.server.DefaultServerRedirectStrategy;
|
||||||
import org.springframework.security.web.server.ServerRedirectStrategy;
|
import org.springframework.security.web.server.ServerRedirectStrategy;
|
||||||
import org.springframework.security.web.server.context.SecurityContextServerRepository;
|
import org.springframework.security.web.server.context.ServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.WebFilterExchange;
|
import org.springframework.security.web.server.WebFilterExchange;
|
||||||
import org.springframework.security.web.server.context.WebSessionSecurityContextServerRepository;
|
import org.springframework.security.web.server.context.WebSessionServerSecurityContextRepository;
|
||||||
import reactor.core.publisher.Mono;
|
import reactor.core.publisher.Mono;
|
||||||
|
|
||||||
import java.net.URI;
|
import java.net.URI;
|
||||||
@ -31,7 +31,7 @@ import java.net.URI;
|
|||||||
* @since 5.0
|
* @since 5.0
|
||||||
*/
|
*/
|
||||||
public class SecurityContextServerLogoutHandler implements ServerLogoutHandler {
|
public class SecurityContextServerLogoutHandler implements ServerLogoutHandler {
|
||||||
private SecurityContextServerRepository repository = new WebSessionSecurityContextServerRepository();
|
private ServerSecurityContextRepository repository = new WebSessionServerSecurityContextRepository();
|
||||||
|
|
||||||
private URI logoutSuccessUrl = URI.create("/login?logout");
|
private URI logoutSuccessUrl = URI.create("/login?logout");
|
||||||
|
|
||||||
|
@ -27,9 +27,9 @@ import reactor.core.publisher.Mono;
|
|||||||
* @since 5.0
|
* @since 5.0
|
||||||
*/
|
*/
|
||||||
public class SecurityContextRepositoryServerWebExchange extends ServerWebExchangeDecorator {
|
public class SecurityContextRepositoryServerWebExchange extends ServerWebExchangeDecorator {
|
||||||
private final SecurityContextServerRepository repository;
|
private final ServerSecurityContextRepository repository;
|
||||||
|
|
||||||
public SecurityContextRepositoryServerWebExchange(ServerWebExchange delegate, SecurityContextServerRepository repository) {
|
public SecurityContextRepositoryServerWebExchange(ServerWebExchange delegate, ServerSecurityContextRepository repository) {
|
||||||
super(delegate);
|
super(delegate);
|
||||||
this.repository = repository;
|
this.repository = repository;
|
||||||
}
|
}
|
||||||
|
@ -26,9 +26,9 @@ import reactor.core.publisher.Mono;
|
|||||||
* @since 5.0
|
* @since 5.0
|
||||||
*/
|
*/
|
||||||
public class SecurityContextRepositoryWebFilter implements WebFilter {
|
public class SecurityContextRepositoryWebFilter implements WebFilter {
|
||||||
private final SecurityContextServerRepository repository;
|
private final ServerSecurityContextRepository repository;
|
||||||
|
|
||||||
public SecurityContextRepositoryWebFilter(SecurityContextServerRepository repository) {
|
public SecurityContextRepositoryWebFilter(ServerSecurityContextRepository repository) {
|
||||||
Assert.notNull(repository, "repository cannot be null");
|
Assert.notNull(repository, "repository cannot be null");
|
||||||
this.repository = repository;
|
this.repository = repository;
|
||||||
}
|
}
|
||||||
|
@ -20,7 +20,7 @@ import org.springframework.web.server.ServerWebExchange;
|
|||||||
|
|
||||||
import reactor.core.publisher.Mono;
|
import reactor.core.publisher.Mono;
|
||||||
|
|
||||||
public interface SecurityContextServerRepository {
|
public interface ServerSecurityContextRepository {
|
||||||
|
|
||||||
Mono<Void> save(ServerWebExchange exchange, SecurityContext context);
|
Mono<Void> save(ServerWebExchange exchange, SecurityContext context);
|
||||||
|
|
@ -25,8 +25,8 @@ import reactor.core.publisher.Mono;
|
|||||||
* @author Rob Winch
|
* @author Rob Winch
|
||||||
* @since 5.0
|
* @since 5.0
|
||||||
*/
|
*/
|
||||||
public class ServerWebExchangeAttributeSecurityContextServerRepository
|
public class ServerWebExchangeAttributeServerSecurityContextRepository
|
||||||
implements SecurityContextServerRepository {
|
implements ServerSecurityContextRepository {
|
||||||
final String ATTR = "USER";
|
final String ATTR = "USER";
|
||||||
|
|
||||||
public Mono<Void> save(ServerWebExchange exchange, SecurityContext context) {
|
public Mono<Void> save(ServerWebExchange exchange, SecurityContext context) {
|
@ -25,8 +25,8 @@ import reactor.core.publisher.Mono;
|
|||||||
* @author Rob Winch
|
* @author Rob Winch
|
||||||
* @since 5.0
|
* @since 5.0
|
||||||
*/
|
*/
|
||||||
public class WebSessionSecurityContextServerRepository
|
public class WebSessionServerSecurityContextRepository
|
||||||
implements SecurityContextServerRepository {
|
implements ServerSecurityContextRepository {
|
||||||
final String SESSION_ATTR = "USER";
|
final String SESSION_ATTR = "USER";
|
||||||
|
|
||||||
public Mono<Void> save(ServerWebExchange exchange, SecurityContext context) {
|
public Mono<Void> save(ServerWebExchange exchange, SecurityContext context) {
|
@ -30,7 +30,7 @@ import org.springframework.security.authentication.ReactiveAuthenticationManager
|
|||||||
import org.springframework.security.authentication.TestingAuthenticationToken;
|
import org.springframework.security.authentication.TestingAuthenticationToken;
|
||||||
import org.springframework.security.core.Authentication;
|
import org.springframework.security.core.Authentication;
|
||||||
import org.springframework.security.test.web.reactive.server.WebTestClientBuilder;
|
import org.springframework.security.test.web.reactive.server.WebTestClientBuilder;
|
||||||
import org.springframework.security.web.server.context.SecurityContextServerRepository;
|
import org.springframework.security.web.server.context.ServerSecurityContextRepository;
|
||||||
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher;
|
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher;
|
||||||
import org.springframework.test.web.reactive.server.EntityExchangeResult;
|
import org.springframework.test.web.reactive.server.EntityExchangeResult;
|
||||||
import org.springframework.test.web.reactive.server.WebTestClient;
|
import org.springframework.test.web.reactive.server.WebTestClient;
|
||||||
@ -62,7 +62,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
@Mock
|
@Mock
|
||||||
private ServerAuthenticationFailureHandler failureHandler;
|
private ServerAuthenticationFailureHandler failureHandler;
|
||||||
@Mock
|
@Mock
|
||||||
private SecurityContextServerRepository securityContextServerRepository;
|
private ServerSecurityContextRepository serverSecurityContextRepository;
|
||||||
|
|
||||||
private AuthenticationWebFilter filter;
|
private AuthenticationWebFilter filter;
|
||||||
|
|
||||||
@ -71,7 +71,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
this.filter = new AuthenticationWebFilter(this.authenticationManager);
|
this.filter = new AuthenticationWebFilter(this.authenticationManager);
|
||||||
this.filter.setServerAuthenticationSuccessHandler(this.successHandler);
|
this.filter.setServerAuthenticationSuccessHandler(this.successHandler);
|
||||||
this.filter.setAuthenticationConverter(this.authenticationConverter);
|
this.filter.setAuthenticationConverter(this.authenticationConverter);
|
||||||
this.filter.setSecurityContextServerRepository(this.securityContextServerRepository);
|
this.filter.setServerSecurityContextRepository(this.serverSecurityContextRepository);
|
||||||
this.filter.setServerAuthenticationFailureHandler(this.failureHandler);
|
this.filter.setServerAuthenticationFailureHandler(this.failureHandler);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -154,7 +154,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
.expectBody(String.class).consumeWith(b -> assertThat(b.getResponseBody()).isEqualTo("ok"))
|
.expectBody(String.class).consumeWith(b -> assertThat(b.getResponseBody()).isEqualTo("ok"))
|
||||||
.returnResult();
|
.returnResult();
|
||||||
|
|
||||||
verify(this.securityContextServerRepository, never()).save(any(), any());
|
verify(this.serverSecurityContextRepository, never()).save(any(), any());
|
||||||
verifyZeroInteractions(this.authenticationManager, this.successHandler,
|
verifyZeroInteractions(this.authenticationManager, this.successHandler,
|
||||||
this.failureHandler);
|
this.failureHandler);
|
||||||
}
|
}
|
||||||
@ -174,7 +174,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
.expectStatus().is5xxServerError()
|
.expectStatus().is5xxServerError()
|
||||||
.expectBody().isEmpty();
|
.expectBody().isEmpty();
|
||||||
|
|
||||||
verify(this.securityContextServerRepository, never()).save(any(), any());
|
verify(this.serverSecurityContextRepository, never()).save(any(), any());
|
||||||
verifyZeroInteractions(this.authenticationManager, this.successHandler,
|
verifyZeroInteractions(this.authenticationManager, this.successHandler,
|
||||||
this.failureHandler);
|
this.failureHandler);
|
||||||
}
|
}
|
||||||
@ -185,7 +185,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
when(this.authenticationConverter.apply(any())).thenReturn(authentication);
|
when(this.authenticationConverter.apply(any())).thenReturn(authentication);
|
||||||
when(this.authenticationManager.authenticate(any())).thenReturn(authentication);
|
when(this.authenticationManager.authenticate(any())).thenReturn(authentication);
|
||||||
when(this.successHandler.success(any(),any())).thenReturn(Mono.empty());
|
when(this.successHandler.success(any(),any())).thenReturn(Mono.empty());
|
||||||
when(this.securityContextServerRepository.save(any(),any())).thenAnswer( a -> Mono.just(a.getArguments()[0]));
|
when(this.serverSecurityContextRepository.save(any(),any())).thenAnswer( a -> Mono.just(a.getArguments()[0]));
|
||||||
|
|
||||||
WebTestClient client = WebTestClientBuilder
|
WebTestClient client = WebTestClientBuilder
|
||||||
.bindToWebFilters(this.filter)
|
.bindToWebFilters(this.filter)
|
||||||
@ -199,7 +199,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
.expectBody().isEmpty();
|
.expectBody().isEmpty();
|
||||||
|
|
||||||
verify(this.successHandler).success(eq(authentication.block()), any());
|
verify(this.successHandler).success(eq(authentication.block()), any());
|
||||||
verify(this.securityContextServerRepository).save(any(), any());
|
verify(this.serverSecurityContextRepository).save(any(), any());
|
||||||
verifyZeroInteractions(this.failureHandler);
|
verifyZeroInteractions(this.failureHandler);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -244,7 +244,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
.expectBody().isEmpty();
|
.expectBody().isEmpty();
|
||||||
|
|
||||||
verify(this.failureHandler).onAuthenticationFailure(any(),any());
|
verify(this.failureHandler).onAuthenticationFailure(any(),any());
|
||||||
verify(this.securityContextServerRepository, never()).save(any(), any());
|
verify(this.serverSecurityContextRepository, never()).save(any(), any());
|
||||||
verifyZeroInteractions(this.successHandler);
|
verifyZeroInteractions(this.successHandler);
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -265,7 +265,7 @@ public class AuthenticationWebFilterTests {
|
|||||||
.expectStatus().is5xxServerError()
|
.expectStatus().is5xxServerError()
|
||||||
.expectBody().isEmpty();
|
.expectBody().isEmpty();
|
||||||
|
|
||||||
verify(this.securityContextServerRepository, never()).save(any(), any());
|
verify(this.serverSecurityContextRepository, never()).save(any(), any());
|
||||||
verifyZeroInteractions(this.successHandler, this.failureHandler);
|
verifyZeroInteractions(this.successHandler, this.failureHandler);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -40,11 +40,11 @@ import static org.mockito.Mockito.*;
|
|||||||
* @since 5.0
|
* @since 5.0
|
||||||
*/
|
*/
|
||||||
@RunWith(MockitoJUnitRunner.class)
|
@RunWith(MockitoJUnitRunner.class)
|
||||||
public class SecurityContextServerRepositoryWebFilterTests {
|
public class ServerSecurityContextRepositoryWebFilterTests {
|
||||||
@Mock
|
@Mock
|
||||||
Authentication principal;
|
Authentication principal;
|
||||||
|
|
||||||
@Mock SecurityContextServerRepository repository;
|
@Mock ServerSecurityContextRepository repository;
|
||||||
|
|
||||||
MockServerHttpRequest.BaseBuilder<?> exchange = MockServerHttpRequest.get("/");
|
MockServerHttpRequest.BaseBuilder<?> exchange = MockServerHttpRequest.get("/");
|
||||||
|
|
||||||
@ -61,7 +61,7 @@ public class SecurityContextServerRepositoryWebFilterTests {
|
|||||||
|
|
||||||
@Test(expected = IllegalArgumentException.class)
|
@Test(expected = IllegalArgumentException.class)
|
||||||
public void constructorNullSecurityContextRepository() {
|
public void constructorNullSecurityContextRepository() {
|
||||||
SecurityContextServerRepository repository = null;
|
ServerSecurityContextRepository repository = null;
|
||||||
new SecurityContextRepositoryWebFilter(repository);
|
new SecurityContextRepositoryWebFilter(repository);
|
||||||
}
|
}
|
||||||
|
|
@ -29,8 +29,8 @@ import static org.assertj.core.api.Assertions.assertThat;
|
|||||||
* @author Rob Winch
|
* @author Rob Winch
|
||||||
* @since 5.0
|
* @since 5.0
|
||||||
*/
|
*/
|
||||||
public class ServerWebExchangeAttributeSecurityContextServerRepositoryTests {
|
public class ServerWebExchangeAttributeServerSecurityContextRepositoryTests {
|
||||||
ServerWebExchangeAttributeSecurityContextServerRepository repository = new ServerWebExchangeAttributeSecurityContextServerRepository();
|
ServerWebExchangeAttributeServerSecurityContextRepository repository = new ServerWebExchangeAttributeServerSecurityContextRepository();
|
||||||
ServerWebExchange exchange = MockServerHttpRequest.get("/").toExchange();
|
ServerWebExchange exchange = MockServerHttpRequest.get("/").toExchange();
|
||||||
|
|
||||||
@Test
|
@Test
|
Loading…
x
Reference in New Issue
Block a user