How to use

OAuth2AuthorizationRequestRedirectWebFilter

in

org.springframework.security.oauth2.client.web.server

private OAuth2AuthorizationRequestRedirectWebFilter getRedirectWebFilter() {
  OAuth2AuthorizationRequestRedirectWebFilter oauthRedirectFilter;
  if (this.authorizationRequestResolver == null) {
    oauthRedirectFilter = new OAuth2AuthorizationRequestRedirectWebFilter(getClientRegistrationRepository());
  } else {
    oauthRedirectFilter = new OAuth2AuthorizationRequestRedirectWebFilter(this.authorizationRequestResolver);
  }
  return oauthRedirectFilter;
}

@Override
public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {
  return this.authorizationRequestResolver.resolve(exchange)
    .switchIfEmpty(chain.filter(exchange).then(Mono.empty()))
    .onErrorResume(ClientAuthorizationRequiredException.class, e -> {
      return this.requestCache.saveRequest(exchange)
        .then(this.authorizationRequestResolver.resolve(exchange, e.getClientRegistrationId()));
    })
    .flatMap(clientRegistration -> sendRedirectForAuthorization(exchange, clientRegistration));
}

@Before
public void setup() {
  this.filter = new OAuth2AuthorizationRequestRedirectWebFilter(this.clientRepository);
  this.filter.setAuthorizationRequestRepository(this.authzRequestRepository);
  FilteringWebHandler webHandler = new FilteringWebHandler(e -> e.getResponse().setComplete(), Arrays.asList(this.filter));
  this.client = WebTestClient.bindToWebHandler(webHandler).build();
  when(this.clientRepository.findByRegistrationId(this.registration.getRegistrationId())).thenReturn(
      Mono.just(this.registration));
  when(this.authzRequestRepository.saveAuthorizationRequest(any(), any())).thenReturn(
      Mono.empty());
}

  @Test
  public void filterWhenPathMatchesThenRequestSessionAttributeNotSaved() {
    this.filter.setRequestCache(this.requestCache);
    this.client.get()
        .uri("https://example.com/oauth2/authorization/registration-id")
        .exchange()
        .expectStatus()
        .is3xxRedirection()
        .returnResult(String.class);
    verifyZeroInteractions(this.requestCache);
  }
}

@Test
public void filterWhenExceptionThenSaveRequestSessionAttribute() {
  this.filter.setRequestCache(this.requestCache);
  when(this.requestCache.saveRequest(any())).thenReturn(Mono.empty());
  FilteringWebHandler webHandler = new FilteringWebHandler(
      e -> Mono.error(new ClientAuthorizationRequiredException(this.registration.getRegistrationId())),
      Arrays.asList(this.filter));
  this.client = WebTestClient.bindToWebHandler(webHandler).build();
  this.client.get()
      .uri("https://example.com/foo")
      .exchange()
      .expectStatus()
      .is3xxRedirection()
      .returnResult(String.class);
  verify(this.requestCache).saveRequest(any());
}

@Test
public void constructorWhenClientRegistrationRepositoryNullThenIllegalArgumentException() {
  this.clientRepository = null;
  assertThatThrownBy(() -> new OAuth2AuthorizationRequestRedirectWebFilter(this.clientRepository))
    .isInstanceOf(IllegalArgumentException.class);
}

@Override
public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {
  return this.authorizationRequestResolver.resolve(exchange)
    .switchIfEmpty(chain.filter(exchange).then(Mono.empty()))
    .onErrorResume(ClientAuthorizationRequiredException.class, e -> this.authorizationRequestResolver.resolve(exchange, e.getClientRegistrationId()))
    .flatMap(clientRegistration -> sendRedirectForAuthorization(exchange, clientRegistration));
}

protected void configure(ServerHttpSecurity http) {
  ReactiveClientRegistrationRepository clientRegistrationRepository = getClientRegistrationRepository();
  ServerOAuth2AuthorizedClientRepository authorizedClientRepository = getAuthorizedClientRepository();
  ServerAuthenticationConverter authenticationConverter = getAuthenticationConverter();
  ReactiveAuthenticationManager authenticationManager = getAuthenticationManager();
  OAuth2AuthorizationCodeGrantWebFilter codeGrantWebFilter = new OAuth2AuthorizationCodeGrantWebFilter(authenticationManager,
      authenticationConverter,
      authorizedClientRepository);
  OAuth2AuthorizationRequestRedirectWebFilter oauthRedirectFilter = new OAuth2AuthorizationRequestRedirectWebFilter(
      clientRegistrationRepository);
  http.addFilterAt(codeGrantWebFilter, SecurityWebFiltersOrder.OAUTH2_AUTHORIZATION_CODE);
  http.addFilterAt(oauthRedirectFilter, SecurityWebFiltersOrder.HTTP_BASIC);
}

protected void configure(ServerHttpSecurity http) {
  ReactiveClientRegistrationRepository clientRegistrationRepository = getClientRegistrationRepository();
  ServerOAuth2AuthorizedClientRepository authorizedClientRepository = getAuthorizedClientRepository();
  ServerAuthenticationConverter authenticationConverter = getAuthenticationConverter();
  ReactiveAuthenticationManager authenticationManager = getAuthenticationManager();
  OAuth2AuthorizationCodeGrantWebFilter codeGrantWebFilter = new OAuth2AuthorizationCodeGrantWebFilter(authenticationManager,
      authenticationConverter,
      authorizedClientRepository);
  OAuth2AuthorizationRequestRedirectWebFilter oauthRedirectFilter = new OAuth2AuthorizationRequestRedirectWebFilter(
      clientRegistrationRepository);
  http.addFilterAt(codeGrantWebFilter, SecurityWebFiltersOrder.OAUTH2_AUTHORIZATION_CODE);
  http.addFilterAt(oauthRedirectFilter, SecurityWebFiltersOrder.HTTP_BASIC);
}

protected void configure(ServerHttpSecurity http) {
  ReactiveClientRegistrationRepository clientRegistrationRepository = getClientRegistrationRepository();
  ServerOAuth2AuthorizedClientRepository authorizedClientRepository = getAuthorizedClientRepository();
  OAuth2AuthorizationRequestRedirectWebFilter oauthRedirectFilter = new OAuth2AuthorizationRequestRedirectWebFilter(clientRegistrationRepository);
  ReactiveAuthenticationManager manager = getAuthenticationManager();
  AuthenticationWebFilter authenticationFilter = new OAuth2LoginAuthenticationWebFilter(manager, authorizedClientRepository);
  authenticationFilter.setRequiresAuthenticationMatcher(createAttemptAuthenticationRequestMatcher());
  authenticationFilter.setServerAuthenticationConverter(getAuthenticationConverter(clientRegistrationRepository));
  RedirectServerAuthenticationSuccessHandler redirectHandler = new RedirectServerAuthenticationSuccessHandler();
  authenticationFilter.setAuthenticationSuccessHandler(redirectHandler);
  authenticationFilter.setAuthenticationFailureHandler(new ServerAuthenticationFailureHandler() {
    @Override
    public Mono<Void> onAuthenticationFailure(WebFilterExchange webFilterExchange,
        AuthenticationException exception) {
      return Mono.error(exception);
    }
  });
  authenticationFilter.setSecurityContextRepository(new WebSessionServerSecurityContextRepository());
  MediaTypeServerWebExchangeMatcher htmlMatcher = new MediaTypeServerWebExchangeMatcher(
      MediaType.TEXT_HTML);
  htmlMatcher.setIgnoredMediaTypes(Collections.singleton(MediaType.ALL));
  Map<String, String> urlToText = http.oauth2Login.getLinks();
  if (urlToText.size() == 1) {
    http.defaultEntryPoints.add(new DelegateEntry(htmlMatcher, new RedirectServerAuthenticationEntryPoint(urlToText.keySet().iterator().next())));
  } else {
    http.defaultEntryPoints.add(new DelegateEntry(htmlMatcher, new RedirectServerAuthenticationEntryPoint("/login")));
  }
  http.addFilterAt(oauthRedirectFilter, SecurityWebFiltersOrder.HTTP_BASIC);
  http.addFilterAt(authenticationFilter, SecurityWebFiltersOrder.AUTHENTICATION);
}

protected void configure(ServerHttpSecurity http) {
  ReactiveClientRegistrationRepository clientRegistrationRepository = getClientRegistrationRepository();
  ServerOAuth2AuthorizedClientRepository authorizedClientRepository = getAuthorizedClientRepository();
  ServerAuthenticationConverter authenticationConverter = getAuthenticationConverter();
  ReactiveAuthenticationManager authenticationManager = getAuthenticationManager();
  OAuth2AuthorizationCodeGrantWebFilter codeGrantWebFilter = new OAuth2AuthorizationCodeGrantWebFilter(authenticationManager,
      authenticationConverter,
      authorizedClientRepository);
  OAuth2AuthorizationRequestRedirectWebFilter oauthRedirectFilter = new OAuth2AuthorizationRequestRedirectWebFilter(
      clientRegistrationRepository);
  http.addFilterAt(codeGrantWebFilter, SecurityWebFiltersOrder.OAUTH2_AUTHORIZATION_CODE);
  http.addFilterAt(oauthRedirectFilter, SecurityWebFiltersOrder.HTTP_BASIC);
}

protected void configure(ServerHttpSecurity http) {
  ReactiveClientRegistrationRepository clientRegistrationRepository = getClientRegistrationRepository();
  ServerOAuth2AuthorizedClientRepository authorizedClientRepository = getAuthorizedClientRepository();
  OAuth2AuthorizationRequestRedirectWebFilter oauthRedirectFilter = new OAuth2AuthorizationRequestRedirectWebFilter(clientRegistrationRepository);
  ReactiveAuthenticationManager manager = getAuthenticationManager();
  AuthenticationWebFilter authenticationFilter = new OAuth2LoginAuthenticationWebFilter(manager, authorizedClientRepository);
  authenticationFilter.setRequiresAuthenticationMatcher(createAttemptAuthenticationRequestMatcher());
  authenticationFilter.setServerAuthenticationConverter(getAuthenticationConverter(clientRegistrationRepository));
  RedirectServerAuthenticationSuccessHandler redirectHandler = new RedirectServerAuthenticationSuccessHandler();
  authenticationFilter.setAuthenticationSuccessHandler(redirectHandler);
  authenticationFilter.setAuthenticationFailureHandler(new ServerAuthenticationFailureHandler() {
    @Override
    public Mono<Void> onAuthenticationFailure(WebFilterExchange webFilterExchange,
        AuthenticationException exception) {
      return Mono.error(exception);
    }
  });
  authenticationFilter.setSecurityContextRepository(new WebSessionServerSecurityContextRepository());
  MediaTypeServerWebExchangeMatcher htmlMatcher = new MediaTypeServerWebExchangeMatcher(
      MediaType.TEXT_HTML);
  htmlMatcher.setIgnoredMediaTypes(Collections.singleton(MediaType.ALL));
  Map<String, String> urlToText = http.oauth2Login.getLinks();
  if (urlToText.size() == 1) {
    http.defaultEntryPoints.add(new DelegateEntry(htmlMatcher, new RedirectServerAuthenticationEntryPoint(urlToText.keySet().iterator().next())));
  } else {
    http.defaultEntryPoints.add(new DelegateEntry(htmlMatcher, new RedirectServerAuthenticationEntryPoint("/login")));
  }
  http.addFilterAt(oauthRedirectFilter, SecurityWebFiltersOrder.HTTP_BASIC);
  http.addFilterAt(authenticationFilter, SecurityWebFiltersOrder.AUTHENTICATION);
}