1

I'm trying to get some client data inside the UserAuthenticationSecurityCheck.validateCredentials method.

The IP Address is the most important for it.

In the other adapters, I'm using the HttpServletRequest:

@Context
protected HttpServletRequest request;

But this request object is always null in the UserAuthenticationSecurityCheck.

How can I get client data (IP Address or the headers) in this class?

Gaurab Kumar
  • 2,144
  • 2
  • 17
  • 29
Leonardo Simas
  • 13
  • 2

2 Answers2

2

You cannot inject the HttpServletRequest into a security check object(by design - not a bug). Once the user is authenticated, then you can make another Adapter Call, from where you can get the desired details. Unfortunately this is not documented anywhere (not to my knowledge at least).

I had a similar issue with AdapterAPI class as described here.

Prerak Tiwari
  • 3,436
  • 4
  • 34
  • 64
0

You can get request in security adapter but not from @Context. Just override authorize method:

@Override
public void authorize(Set<String> scope, Map<String, Object> credentials, HttpServletRequest request, AuthorizationResponse response) {
    //TODO use request object 
    super.authorize(scope, credentials, request, response);

}
3squad
  • 355
  • 3
  • 14