How to use jwtAuthenticationFilter method of com.testsigma.config.WebSecurityConfig class

Best Testsigma code snippet using com.testsigma.config.WebSecurityConfig.jwtAuthenticationFilter

Source:WebSecurityConfig.java

...77  public AjaxLoginFailureHandler ajaxLoginFailureHandler() {78    return new AjaxLoginFailureHandler();79  }80  @Bean81  public JWTAuthenticationFilter jwtAuthenticationFilter() throws Exception {82    JWTAuthenticationFilter filter = new JWTAuthenticationFilter("/**/*");83    filter.setAuthenticationManager(super.authenticationManagerBean());84    return filter;85  }86  @Bean87  public com.testsigma.security.api.APIAuthenticationFilter apiJwtAuthenticationFilter() throws Exception {88    com.testsigma.security.api.APIAuthenticationFilter filter = new com.testsigma.security.api.APIAuthenticationFilter();89    filter.setAuthenticationManager(super.authenticationManagerBean());90    return filter;91  }92  @Bean93  public com.testsigma.security.PresignedAuthenticationFilter presignedJwtAuthenticationFilter() throws Exception {94    com.testsigma.security.PresignedAuthenticationFilter filter = new com.testsigma.security.PresignedAuthenticationFilter();95    filter.setAuthenticationManager(super.authenticationManagerBean());96    return filter;97  }98  @Bean99  public AgentJwtAuthenticationFilter agentJwtAuthorizationFilter() throws Exception {100    AgentJwtAuthenticationFilter filter = new AgentJwtAuthenticationFilter();101    filter.setAuthenticationManager(super.authenticationManagerBean());102    return filter;103  }104  @Bean105  public AuthorizationRequestRepository<OAuth2AuthorizationRequest> cookieAuthorizationRequestRepository() {106    return new com.testsigma.security.HttpCookieOAuth2AuthorizationRequestRepository();107  }108  @Bean109  public ClientRegistrationRepository clientRegistrationRepository() {110    return new InMemoryClientRegistrationRepository(this.googleClientRegistration());111  }112  private ClientRegistration googleClientRegistration() {113    String googleClientId = StringUtils.defaultIfEmpty(additionalPropertiesConfig.getGoogleClientId(),114      authenticationConfigProperties.getGoogleOAuthClientID());115    String googleClientSecret = StringUtils.defaultIfEmpty(additionalPropertiesConfig.getGoogleClientSecret(),116      authenticationConfigProperties.getGoogleOAuthClientSecret());117    return CommonOAuth2Provider.GOOGLE.getBuilder("google")118      .clientId(googleClientId)119      .clientSecret(googleClientSecret)120      .build();121  }122  @Override123  public void configure(WebSecurity web) {124    web.ignoring()125      .antMatchers(HttpMethod.GET, URLConstants.SESSION_RESOURCE_URL)126      .antMatchers((URLConstants.AGENT_CERTIFICATE_URL + URLConstants.ALL_SUB_URLS))127      .antMatchers(URLConstants.ASSETS_URL)128      .antMatchers("/servers")129      .antMatchers("/auth_config")130      .antMatchers("/onboarding/**")131      .antMatchers("/local/agents/**");132  }133  @Override134  protected void configure(HttpSecurity http) throws Exception {135    configureOauth2LoginHandlers(136      configureFilters(137        configureLoginHandlers(138          configureLogoutHandlers(139            configureExceptionHandling(140              configureUrlAuthorizations(141                configureCsrf(142                  configureCors(143                    basicConfig(http)144                  )145                )146              )147            )148          )149        )150      )151    );152  }153  private HttpSecurity basicConfig(HttpSecurity http) throws Exception {154    return http.headers().frameOptions().disable().and()155      .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and();156  }157  private HttpSecurity configureCors(HttpSecurity http) throws Exception {158    return http.cors().and();159  }160  private HttpSecurity configureCsrf(HttpSecurity http) throws Exception {161    return http.csrf().disable();162  }163  private HttpSecurity configureUrlAuthorizations(HttpSecurity http) throws Exception {164    return http.authorizeRequests().antMatchers(URLConstants.ASSETS_URL).permitAll()165      .antMatchers(URLConstants.AGENT_CERTIFICATE_URL + URLConstants.ALL_SUB_URLS).permitAll()166      .antMatchers(HttpMethod.POST, URLConstants.LOGIN_URL).permitAll()167      .antMatchers(HttpMethod.GET, URLConstants.SESSION_RESOURCE_URL).permitAll()168      .antMatchers(URLConstants.ALL_URLS).access("isFullyAuthenticated()")169      .antMatchers(URLConstants.ALL_URLS).authenticated().and();170  }171  private HttpSecurity configureExceptionHandling(HttpSecurity http) throws Exception {172    return http.exceptionHandling().authenticationEntryPoint(authenticationEntryPoint()).and();173  }174  private HttpSecurity configureLogoutHandlers(HttpSecurity http) throws Exception {175    return http.logout()176      .logoutRequestMatcher(new AntPathRequestMatcher(URLConstants.LOGOUT_URL, HttpMethod.GET.name()))177      .logoutSuccessHandler((new HttpStatusReturningLogoutSuccessHandler(HttpStatus.OK)))178      .deleteCookies(JSESSIONID_COOKIE)179      .deleteCookies(JWTTokenService.JWT_COOKIE_NAME).invalidateHttpSession(true).and();180  }181  private HttpSecurity configureLoginHandlers(HttpSecurity http) throws Exception {182    return http.anonymous().disable().apply(ajaxLogin()).loginPage(URLConstants.LOGIN_URL)183      .successHandler(ajaxLoginSuccessHandler()).failureHandler(ajaxLoginFailureHandler()).and();184  }185  private HttpSecurity configureFilters(HttpSecurity http) throws Exception {186    return http.addFilterBefore(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class)187      .addFilterAfter(apiJwtAuthenticationFilter(), JWTAuthenticationFilter.class)188      .addFilterAfter(agentJwtAuthorizationFilter(), JWTAuthenticationFilter.class)189      .addFilterBefore(presignedJwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);190  }191  private HttpSecurity configureOauth2LoginHandlers(HttpSecurity http) throws Exception {192    return http.oauth2Login().redirectionEndpoint()193      .and().authorizationEndpoint()194      .authorizationRequestRepository(cookieAuthorizationRequestRepository()).and()195      .userInfoEndpoint()196      .oidcUserService(authUserService).and()197      .clientRegistrationRepository(clientRegistrationRepository())198      .successHandler(ajaxLoginSuccessHandler())199      .failureHandler(ajaxLoginFailureHandler()).and();200  }...

jwtAuthenticationFilter

Using AI Code Generation

1    private JwtAuthenticationFilter jwtAuthenticationFilter;2    protected void configure(HttpSecurity http) throws Exception {3        http.cors().and().csrf().disable()4                .authorizeRequests()5                .antMatchers("/api/auth/**").permitAll()6                .antMatchers("/api/test/**").permitAll()7                .antMatchers("/h2-console/**").permitAll()8                .anyRequest().authenticated();9        http.addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class);10    }11}12import java.util.Date;13import org.springframework.beans.factory.annotation.Value;14import org.springframework.security.core.Authentication;15import org.springframework.stereotype.Service;16import com.testsigma.config.UserPrincipal;17import com.testsigma.model.User;18import io.jsonwebtoken.Claims;19import io.jsonwebtoken.Jwts;20import io.jsonwebtoken.SignatureAlgorithm;21public class JwtTokenProvider {22    @Value("${app.jwtSecret}")23    private String jwtSecret;24    @Value("${app.jwtExpirationInMs}")25    private int jwtExpirationInMs;26    public String generateToken(Authentication authentication) {27        UserPrincipal userPrincipal = (UserPrincipal) authentication.getPrincipal();28        Date now = new Date();29        Date expiryDate = new Date(now.getTime() + jwtExpirationInMs);30        return Jwts.builder()31                .setSubject(Long.toString(userPrincipal.getId()))32                .setIssuedAt(new Date())33                .setExpiration(expiryDate)34                .signWith(SignatureAlgorithm.HS512, jwtSecret)35                .compact();36    }37    public Long getUserIdFromJWT(String token) {38        Claims claims = Jwts.parser()39                .setSigningKey(jwtSecret)40                .parseClaimsJws(token)41                .getBody();42        return Long.parseLong(claims.getSubject());43    }44    public boolean validateToken(String authToken) {45        try {46            Jwts.parser().setSigningKey(jwtSecret).parseClaimsJws(authToken);47            return true;48        } catch (Exception ex) {49            ex.printStackTrace();50        }51        return false;52    }53}54import java.util.List;55import org.springframework.beans.factory.annotation.Autowired;56import org.springframework.http.ResponseEntity;57import org.springframework.security.access.prepost.PreAuthorize;58import org.springframework.web.bind.annotation.GetMapping;59import org.springframework.web.bind.annotation.RequestMapping;60import org.springframework.web

Automation Testing Tutorials

Learn to execute automation testing from scratch with LambdaTest Learning Hub. Right from setting up the prerequisites to run your first automation test, to following best practices and diving deeper into advanced test scenarios. LambdaTest Learning Hubs compile a list of step-by-step guides to help you be proficient with different test automation frameworks i.e. Selenium, Cypress, TestNG etc.