github
/
halo
mirror of https://github.com/halo-dev/halo
1
0
Fork 0
Code Issues Releases Wiki Activity

Set SecurityContext for development

pull/137/head
johnniang 2019-03-28 23:18:30 +08:00
parent 35a2ddf546
commit cd9313c929
3 changed files with 33 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/main/java/cc/ryanc/halo/cache/InMemoryCacheStore.java vendored
View File

@ -4,6 +4,7 @@ import lombok.extern.slf4j.Slf4j;
import org.springframework.util.Assert;
import java.util.Optional;
import java.util.TimerTask;
import java.util.concurrent.ConcurrentHashMap;
import java.util.concurrent.locks.Lock;
import java.util.concurrent.locks.ReentrantLock;
@ -76,4 +77,19 @@ public class InMemoryCacheStore extends StringCacheStore {
cacheContainer.remove(key);
}
/**
* Cache store cleaner.
*
* @author johnniang
* @date 03/28/19
*/
private class CacheStoreCleaner extends TimerTask {
@Override
public void run() {
cacheContainer.keySet().forEach(InMemoryCacheStore.this::get);
}
}
}

6
src/main/java/cc/ryanc/halo/config/HaloConfiguration.java
View File

@ -9,6 +9,7 @@ import cc.ryanc.halo.security.filter.AdminAuthenticationFilter;
import cc.ryanc.halo.security.filter.ApiAuthenticationFilter;
import cc.ryanc.halo.security.handler.AdminAuthenticationFailureHandler;
import cc.ryanc.halo.security.handler.DefaultAuthenticationFailureHandler;
import cc.ryanc.halo.service.UserService;
import com.fasterxml.jackson.databind.ObjectMapper;
import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
import org.springframework.boot.context.properties.EnableConfigurationProperties;
@ -80,8 +81,9 @@ public class HaloConfiguration {
@Bean
public FilterRegistrationBean<AdminAuthenticationFilter> adminAuthenticationFilter(HaloProperties haloProperties,
ObjectMapper objectMapper,
StringCacheStore cacheStore) {
AdminAuthenticationFilter adminFilter = new AdminAuthenticationFilter(cacheStore, "/admin/api/login");
StringCacheStore cacheStore,
UserService userService) {
AdminAuthenticationFilter adminFilter = new AdminAuthenticationFilter(cacheStore, userService, "/admin/api/login");
// Set auth enabled
adminFilter.setAuthEnabled(haloProperties.getAuthEnabled());

18
src/main/java/cc/ryanc/halo/security/filter/AdminAuthenticationFilter.java
View File

@ -2,11 +2,13 @@ package cc.ryanc.halo.security.filter;
import cc.ryanc.halo.cache.StringCacheStore;
import cc.ryanc.halo.exception.AuthenticationException;
import cc.ryanc.halo.model.entity.User;
import cc.ryanc.halo.security.authentication.AuthenticationImpl;
import cc.ryanc.halo.security.context.SecurityContextHolder;
import cc.ryanc.halo.security.context.SecurityContextImpl;
import cc.ryanc.halo.security.handler.AuthenticationFailureHandler;
import cc.ryanc.halo.security.support.UserDetail;
import cc.ryanc.halo.service.UserService;
import cc.ryanc.halo.utils.JsonUtils;
import org.apache.commons.lang3.StringUtils;
import org.springframework.http.HttpHeaders;
@ -21,10 +23,7 @@ import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.Arrays;
import java.util.Collection;
import java.util.Collections;
import java.util.Optional;
import java.util.*;
/**
* Admin authentication filter.
@ -57,12 +56,15 @@ public class AdminAuthenticationFilter extends OncePerRequestFilter {
private final StringCacheStore cacheStore;
private final UserService userService;
private final Collection<String> excludeUrlPatterns;
private final AntPathMatcher antPathMatcher;
public AdminAuthenticationFilter(StringCacheStore cacheStore, String... excludeUrls) {
public AdminAuthenticationFilter(StringCacheStore cacheStore, UserService userService, String... excludeUrls) {
this.cacheStore = cacheStore;
this.userService = userService;
this.excludeUrlPatterns = excludeUrls == null ? Collections.emptyList() : Collections.unmodifiableCollection(Arrays.asList(excludeUrls));
antPathMatcher = new AntPathMatcher();
}
@ -71,6 +73,12 @@ public class AdminAuthenticationFilter extends OncePerRequestFilter {
protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
if (!authEnabled) {
List<User> users = userService.listAll();
if (!users.isEmpty()) {
// Set security context
User user = users.get(0);
SecurityContextHolder.setContext(new SecurityContextImpl(new AuthenticationImpl(new UserDetail(user))));
}
// If authentication disabled
filterChain.doFilter(request, response);
return;