Examples of org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

Package org.springframework.security.web.access.intercept

Examples of org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource
Default implementation of FilterInvocationDefinitionSource.
Stores an ordered map of {@link RequestMatcher}s to ConfigAttribute collections and provides matching of {@code FilterInvocation}s against the items stored in the map.
The order of the {@link RequestMatcher}s in the map is very important. The first one which matches the request will be used. Later matchers in the map will not be invoked if a match has already been found. Accordingly, the most specific matchers should be registered first, with the most general matches registered last.
The most common method creating an instance is using the Spring Security namespace. For example, the {@code pattern}and {@code access} attributes of the {@code <intercept-url>} elements defined as children of the{@code <http>} element are combined to build the instance used by the {@code FilterSecurityInterceptor}. @author Ben Alex @author Luke Taylor

            @SpringSecurityServices final AuthenticationManager manager,
            final Collection<RequestInvocationDefinition> contributions ) throws Exception {


        FilterSecurityInterceptor interceptor = new FilterSecurityInterceptor();
        LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>> requestMap = convertCollectionToLinkedHashMap( contributions );
        DefaultFilterInvocationSecurityMetadataSource source =
                new DefaultFilterInvocationSecurityMetadataSource(requestMap);
        interceptor.setAccessDecisionManager( accessDecisionManager );
        interceptor.setAlwaysReauthenticate( false );
        interceptor.setAuthenticationManager( manager );
        interceptor.setSecurityMetadataSource(source);
        interceptor.setValidateConfigAttributes( true );

View Full Code Here

            @SpringSecurityServices final AuthenticationManager manager,
            final Collection<RequestInvocationDefinition> contributions ) throws Exception {


        FilterSecurityInterceptor interceptor = new FilterSecurityInterceptor();
        LinkedHashMap<RequestMatcher, Collection<ConfigAttribute>> requestMap = convertCollectionToLinkedHashMap( contributions );
        DefaultFilterInvocationSecurityMetadataSource source =
                new DefaultFilterInvocationSecurityMetadataSource(requestMap);
        interceptor.setAccessDecisionManager( accessDecisionManager );
        interceptor.setAlwaysReauthenticate( false );
        interceptor.setAuthenticationManager( manager );
        interceptor.setSecurityMetadataSource(source);
        interceptor.setValidateConfigAttributes( true );

View Full Code Here

    public void parsingMinimalConfigurationIsSuccessful() {
        setContext(
                "<filter-security-metadata-source id='fids'>" +
                "   <intercept-url pattern='/**' access='ROLE_A'/>" +
                "</filter-security-metadata-source>");
        DefaultFilterInvocationSecurityMetadataSource fids = (DefaultFilterInvocationSecurityMetadataSource) appContext.getBean("fids");
        Collection<ConfigAttribute> cad = fids.getAttributes(createFilterInvocation("/anything", "GET"));
        assertNotNull(cad);
        assertTrue(cad.contains(new SecurityConfig("ROLE_A")));
    }

View Full Code Here

        setContext(
                "<b:bean class='org.springframework.beans.factory.config.PropertyPlaceholderConfigurer'/>" +
                "<filter-security-metadata-source id='fids'>" +
                "   <intercept-url pattern='${secure.url}' access='${secure.role}'/>" +
                "</filter-security-metadata-source>");
        DefaultFilterInvocationSecurityMetadataSource fids = (DefaultFilterInvocationSecurityMetadataSource) appContext.getBean("fids");
        Collection<ConfigAttribute> cad = fids.getAttributes(createFilterInvocation("/secure", "GET"));
        assertNotNull(cad);
        assertEquals(1, cad.size());
        assertTrue(cad.contains(new SecurityConfig("ROLE_A")));
    }

View Full Code Here

     *
     * @param http the builder to use
     */
    @Override
    FilterInvocationSecurityMetadataSource createMetadataSource(H http) {
        return new DefaultFilterInvocationSecurityMetadataSource(REGISTRY.createRequestMap());
    }

View Full Code Here

        channelDecisionManager.setChannelProcessors(getChannelProcessors(http));
        channelDecisionManager = postProcess(channelDecisionManager);


        channelFilter.setChannelDecisionManager(channelDecisionManager);


        DefaultFilterInvocationSecurityMetadataSource filterInvocationSecurityMetadataSource =
                new DefaultFilterInvocationSecurityMetadataSource(requestMap);
        channelFilter.setSecurityMetadataSource(filterInvocationSecurityMetadataSource);


        channelFilter = postProcess(channelFilter);
        http.addFilter(channelFilter);
    }

View Full Code Here

        String value = this.getUrlPatterns().get(key);
        Collection<ConfigAttribute> elements = new ArrayList<ConfigAttribute>();
        elements.add(new SecurityConfig(value));
        requestMap.put(new RequestKey(key), elements);
      }
      this.defaultFilterInvocationSecurityMetadataSource = new DefaultFilterInvocationSecurityMetadataSource(matcher, requestMap);
    }
    return this.defaultFilterInvocationSecurityMetadataSource.lookupAttributes(uri, null);
  }

View Full Code Here

            String value = entry.getValue();
            requestMap.put(new AntPathRequestMatcher(key),
                    SecurityConfig.createListFromCommaDelimitedString(value));
        }


        FilterInvocationSecurityMetadataSource source = new DefaultFilterInvocationSecurityMetadataSource(
                requestMap);
        filterSecurityInterceptor.setSecurityMetadataSource(source);
    }

View Full Code Here

            String value = entry.getValue();
            requestMap.put(new AntPathRequestMatcher(key),
                    SecurityConfig.createListFromCommaDelimitedString(value));
        }


        FilterInvocationSecurityMetadataSource source = new DefaultFilterInvocationSecurityMetadataSource(
                requestMap);
        filterSecurityInterceptor.setSecurityMetadataSource(source);
    }

View Full Code Here

        }
    }


    private synchronized DefaultFilterInvocationSecurityMetadataSource getDelegateSource() {
        if (_baseSource == null) {
            DefaultFilterInvocationSecurityMetadataSource ms = new DefaultFilterInvocationSecurityMetadataSource(_requestMap);
            _baseSource = ms;
        }
        return _baseSource;
    }

View Full Code Here

0 1

TOP

Related Classes of org.springframework.security.web.access.intercept.DefaultFilterInvocationSecurityMetadataSource

com.mossle.security.client.UrlResourcePopulator

com.mossle.security.client.UrlSourceBuilder

com.wizriver.config.DefinitionSourceFactoryBean

grails.plugin.springsecurity.web.access.intercept.ChannelFilterInvocationSecurityMetadataSourceFactoryBean

jeeves.server.overrides.OverridesMetadataSource

nu.localhost.tapestry5.springsecurity.services.SecurityModule

org.apdplat.module.security.service.SpringSecurityService

org.jamwiki.authentication.JAMWikiErrorMessageProvider

org.lightadmin.core.config.context.LightAdminSecurityConfiguration

org.springframework.security.config.annotation.web.configurers.ChannelSecurityConfigurer

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.