diff --git a/web/src/main/java/org/springframework/security/web/authentication/ForwardAuthenticationSuccessHandler.java b/web/src/main/java/org/springframework/security/web/authentication/ForwardAuthenticationSuccessHandler.java new file mode 100644 index 0000000000..ea4170a3d0 --- /dev/null +++ b/web/src/main/java/org/springframework/security/web/authentication/ForwardAuthenticationSuccessHandler.java @@ -0,0 +1,52 @@ +/* + * Copyright 2002-2016 the original author or authors. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.springframework.security.web.authentication; + +import org.springframework.security.core.Authentication; +import org.springframework.security.web.util.UrlUtils; +import org.springframework.util.Assert; + +import javax.servlet.ServletException; +import javax.servlet.http.HttpServletRequest; +import javax.servlet.http.HttpServletResponse; +import java.io.IOException; + +/** + *

+ * Forward Authentication Success Handler + *

+ * + * @author Shazin Sadakath + * + */ +public class ForwardAuthenticationSuccessHandler implements AuthenticationSuccessHandler { + + private final String forwardUrl; + + /** + * @param forwardUrl + */ + public ForwardAuthenticationSuccessHandler(String forwardUrl) { + Assert.isTrue(UrlUtils.isValidRedirectUrl(forwardUrl), "'" + + forwardUrl + "' is not a valid forward URL"); + this.forwardUrl = forwardUrl; + } + + @Override + public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException { + request.getRequestDispatcher(forwardUrl).forward(request, response); + } +} diff --git a/web/src/test/java/org/springframework/security/web/authentication/ForwardAuthenticaionSuccessHandlerTests.java b/web/src/test/java/org/springframework/security/web/authentication/ForwardAuthenticaionSuccessHandlerTests.java new file mode 100644 index 0000000000..60ea573955 --- /dev/null +++ b/web/src/test/java/org/springframework/security/web/authentication/ForwardAuthenticaionSuccessHandlerTests.java @@ -0,0 +1,58 @@ +/* + * Copyright 2002-2016 the original author or authors. + * + * Licensed under the Apache License, Version 2.0 (the "License"); + * you may not use this file except in compliance with the License. + * You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.springframework.security.web.authentication; + +import org.junit.Test; +import org.springframework.mock.web.MockHttpServletRequest; +import org.springframework.mock.web.MockHttpServletResponse; +import org.springframework.security.core.Authentication; + +import static org.mockito.Mockito.mock; +import static org.assertj.core.api.Assertions.*; + +/** + *

+ * Forward Authentication Failure Handler Tests + *

+ * + * @author Shazin Sadakath + * + */ +public class ForwardAuthenticaionSuccessHandlerTests { + + @Test(expected = IllegalArgumentException.class) + public void invalidForwardUrl() { + new ForwardAuthenticationSuccessHandler("aaa"); + } + + @Test(expected = IllegalArgumentException.class) + public void emptyForwardUrl() { + new ForwardAuthenticationSuccessHandler(""); + } + + @Test + public void responseIsForwarded() throws Exception { + ForwardAuthenticationSuccessHandler fash = new ForwardAuthenticationSuccessHandler("/forwardUrl"); + + MockHttpServletRequest request = new MockHttpServletRequest(); + MockHttpServletResponse response = new MockHttpServletResponse(); + Authentication authentication = mock(Authentication.class); + + fash.onAuthenticationSuccess(request, response, authentication); + + assertThat(response.getForwardedUrl()).isEqualTo("/forwardUrl"); + } +}