Josh Cummings
2 years ago
28 changed files with 199 additions and 520 deletions
@ -0,0 +1,41 @@
@@ -0,0 +1,41 @@
|
||||
/* |
||||
* Copyright 2002-2024 the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
|
||||
package org.springframework.security.authorization.method; |
||||
|
||||
import org.springframework.expression.Expression; |
||||
import org.springframework.security.authorization.AuthorizationResult; |
||||
import org.springframework.security.authorization.ExpressionAuthorizationDecision; |
||||
import org.springframework.util.Assert; |
||||
|
||||
class PostAuthorizeAuthorizationDecision extends ExpressionAuthorizationDecision |
||||
implements MethodAuthorizationDeniedPostProcessor { |
||||
|
||||
private final MethodAuthorizationDeniedPostProcessor postProcessor; |
||||
|
||||
PostAuthorizeAuthorizationDecision(boolean granted, Expression expression, |
||||
MethodAuthorizationDeniedPostProcessor postProcessor) { |
||||
super(granted, expression); |
||||
Assert.notNull(postProcessor, "postProcessor cannot be null"); |
||||
this.postProcessor = postProcessor; |
||||
} |
||||
|
||||
@Override |
||||
public Object postProcessResult(MethodInvocationResult methodInvocationResult, AuthorizationResult result) { |
||||
return this.postProcessor.postProcessResult(methodInvocationResult, result); |
||||
} |
||||
|
||||
} |
||||
@ -0,0 +1,43 @@
@@ -0,0 +1,43 @@
|
||||
/* |
||||
* Copyright 2002-2024 the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
|
||||
package org.springframework.security.authorization.method; |
||||
|
||||
import org.aopalliance.intercept.MethodInvocation; |
||||
|
||||
import org.springframework.expression.Expression; |
||||
import org.springframework.security.authorization.AuthorizationResult; |
||||
import org.springframework.security.authorization.ExpressionAuthorizationDecision; |
||||
import org.springframework.util.Assert; |
||||
|
||||
class PreAuthorizeAuthorizationDecision extends ExpressionAuthorizationDecision |
||||
implements MethodAuthorizationDeniedHandler { |
||||
|
||||
private final MethodAuthorizationDeniedHandler handler; |
||||
|
||||
PreAuthorizeAuthorizationDecision(boolean granted, Expression expression, |
||||
MethodAuthorizationDeniedHandler handler) { |
||||
super(granted, expression); |
||||
Assert.notNull(handler, "handler cannot be null"); |
||||
this.handler = handler; |
||||
} |
||||
|
||||
@Override |
||||
public Object handle(MethodInvocation methodInvocation, AuthorizationResult result) { |
||||
return this.handler.handle(methodInvocation, result); |
||||
} |
||||
|
||||
} |
||||
@ -1,70 +0,0 @@
@@ -1,70 +0,0 @@
|
||||
/* |
||||
* Copyright 2002-2024 the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
|
||||
package org.springframework.security.access.expression; |
||||
|
||||
import org.junit.jupiter.api.Test; |
||||
|
||||
import org.springframework.expression.Expression; |
||||
import org.springframework.expression.spel.standard.SpelExpressionParser; |
||||
import org.springframework.expression.spel.support.StandardEvaluationContext; |
||||
import org.springframework.security.authorization.AuthorizationDecision; |
||||
import org.springframework.security.authorization.ExpressionAuthorizationDecision; |
||||
|
||||
import static org.assertj.core.api.Assertions.assertThat; |
||||
|
||||
public class ExpressionUtilsTests { |
||||
|
||||
private final Object details = new Object(); |
||||
|
||||
@Test |
||||
public void evaluateWhenAuthorizationDecisionThenReturns() { |
||||
SpelExpressionParser parser = new SpelExpressionParser(); |
||||
Expression expression = parser.parseExpression("#root.returnDecision()"); |
||||
StandardEvaluationContext context = new StandardEvaluationContext(this); |
||||
assertThat(ExpressionUtils.evaluate(expression, context)).isInstanceOf(AuthorizationDecisionDetails.class) |
||||
.extracting("details") |
||||
.isEqualTo(this.details); |
||||
} |
||||
|
||||
@Test |
||||
public void evaluateWhenBooleanThenReturnsExpressionAuthorizationDecision() { |
||||
SpelExpressionParser parser = new SpelExpressionParser(); |
||||
Expression expression = parser.parseExpression("#root.returnResult()"); |
||||
StandardEvaluationContext context = new StandardEvaluationContext(this); |
||||
assertThat(ExpressionUtils.evaluate(expression, context)).isInstanceOf(ExpressionAuthorizationDecision.class); |
||||
} |
||||
|
||||
public AuthorizationDecision returnDecision() { |
||||
return new AuthorizationDecisionDetails(false, this.details); |
||||
} |
||||
|
||||
public boolean returnResult() { |
||||
return false; |
||||
} |
||||
|
||||
static final class AuthorizationDecisionDetails extends AuthorizationDecision { |
||||
|
||||
final Object details; |
||||
|
||||
AuthorizationDecisionDetails(boolean granted, Object details) { |
||||
super(granted); |
||||
this.details = details; |
||||
} |
||||
|
||||
} |
||||
|
||||
} |
||||
Loading…
Reference in new issue