Questions tagged [pre-authentication]

78 questions
1
vote
1 answer

For what reason was pre-authentication removed from Apache httpClient?

As you can see the Apache httpclient 3.x had an amazing method that you could use to reduce the amount of unnecessary connections and data that is send around between client and…
ASA
  • 1,911
  • 3
  • 20
  • 37
1
vote
1 answer

Spring Security X.509 Preauth

I'm using Spring Security 2.x's Preauthentication with X.509 certificates. I get the certificateText via HttpServletRequest.getAttribute("CERTIFICATE"). Sometimes, the above call returns "" (empty). I believe it occurs when the HTTP session has…
Kevin Meredith
  • 41,036
  • 63
  • 209
  • 384
1
vote
0 answers

Pre Authentication Issue

Hi all I have a huge issue in my project. I have configured my project to use Java EE Security for Authentication and Spring Security for authorization using spring Pre Authentication. After the Java EE login the application comes to the…
1
vote
1 answer

In spring security 3,how to customize my @ PreAuthorize annotation?

these days I meet a problem, I can not figure it out,so please help me... My entity: Utilisateur this is a french word means user @Entity @Inheritance(strategy = InheritanceType.JOINED) public class Utilisateur implements Serializable…
1
vote
3 answers

@PreAuthorize not working correctly

My controller: @RequestMapping("/createchar") @PreAuthorize("hasRole('ROLE_USER')") public String createCharacter(Map map, Principal principal) { spring-security.xml
Jaanus
  • 16,161
  • 49
  • 147
  • 202
1
vote
2 answers

Spring Security - conditionally use form-login if external auth fails / doesn't exist

My required setup is a (spring-security enabled) webapp that can either be pre-authenticated (using pubcookie) OR have a "dev" mode enabled so I can ignore pubcookie and show a login form. Naturally, dev-mode will be turned-off in production, where…
deebugger
  • 97
  • 7
0
votes
0 answers

What are some modern authentication service provider products?

I'm looking for a list of products (open-source preferred) that implement all modern authentication protocols (SAML 2.0, OpenID Connect, Pre-authentication mandatory) and handle everything related to these. Once a user is resolved, they are sent…
PentaKon
  • 4,139
  • 5
  • 43
  • 80
0
votes
1 answer

Accessing object storage bucket with a pre-authenticated request using oci java sdk

I have only preauthenticated URL,namespace and bucket name. Is there any way to upload and download data using key with help of oci java sdk. Is there a proper documentation for this, and If there is then which version of java and maven it supported…
0
votes
0 answers

Creating Pre-Authenticated Request in OCI

I've an object storage bucket in OCI and I'm trying to create a Pre-Authenticated Request for an object in that bucket. It gives me an error - "Metadata must be no more than 3500 bytes when encoded as JSON in UTF-8. (MetadataTooLarge)". I get the…
0
votes
1 answer

IllegalStateException after trying to access a specific URL with AbstractPreAuthenticatedProcessingFilter implementation

We have extended AbstractPreAuthenticatedProcessingFilter to authenticate shibboleth users, it does nothing special but obtain the user name from a specific request attribute and return a PreAuthenticatedAuthenticationToken. If we access the root…
diminuta
  • 1,545
  • 8
  • 32
  • 55
0
votes
1 answer

How do I create Request-Header Authentication (Siteminder) java config class

My spring boot (2.2.4) application is using siteminder as authentication provider. Upon successful authentication siteminder sends user details (Roles) in Http header. Inside the application I need to use spring security for role based…
Bikram Das
  • 21
  • 2
0
votes
1 answer

per-authentication exceptions are not triggers

I have implemented the pre authentication class and working fine, when authentication success, but when custom exception throw error not displays but redirects to the login page. I want to redirect to the error page when custom exception occurred. I…
0
votes
1 answer

Spring preAuthorize log result of the SpEL query?

I have a method that can be executed when either of the authentication methods return true. @PreAuthorize("canExec('ROLE_A') || canExec('ROLE_B')") public String getSomething() { return "Something"; } How can I log whether the authentication…
Gábor DANI
  • 2,063
  • 2
  • 22
  • 40
0
votes
1 answer

How to skip pre_auth_filter

I have a Grails 3 application using spring security. I am using pre_auth_filter for preauthentication purpose. For some urls I want to bypass pre_auth filter alone. Any help is highly appreciated.
Anna
  • 83
  • 2
  • 7
0
votes
0 answers

Spring Security WebSecurityConfigurerAdapter Configuration

I have a simple Spring Boot application with the following 2 endpoints: int: requires Shibboleth SSO && Authorized Role ext: no SSO, no authorization required I've implemented a PreAuthenticationFilter to work with SSO. Below is the configuration…