Styjun

Are actors contractually obligated to certain things like going nude/ Sensual Scenes/ Gory Scenes?

Can the U.S. president make military decisions without consulting anyone?

Algorithm that spans orthogonal vectors: Python

What can a pilot do if an air traffic controller is incapacitated?

How do I extract code from an arduino?

Cheap antenna for new HF HAM

How could artificial intelligence harm us?

What is the need of methods like GET and POST in the HTTP protocol?

Can Northern Ireland's border issue be solved by repartition?

Debussy as term for bathroom?

What is the most damaging one handed melee weapon?

Is there any actual security benefit to restricting foreign IPs?

Name of cleat-style tripod mounting head

I reverse the source code, you negate the input!

When does removing Goblin Warchief affect its cost reduction ability?

What did the controller say during my approach to land (audio clip)?

How do I clean sealant/silicon from a glass mirror?

What are these pixel-level discolored specks? How can I fix it?

Can multiple wall timers turn lights on or off when required?

Repeat elements in list, but the number of times each element is repeated is provided by a separate list

How does IBM's 53-bit quantum computer compares to classical ones for cryptanalytic tasks?

How use custom order in folder on Windows 7 and 10

Writing a letter of recommendation for a mediocre student

Nanomachines exist that enable Axolotl-levels of regeneration - So how can crippling injuries exist as well?

Spring Security: Custom LdapAuthenticationProvider

What's the difference between @Component, @Repository & @Service annotations in Spring?How to configure port for a Spring Boot applicationSecurity configuration with Spring-bootSpring Security: AuthenticationProvider and UserDetailsService not working as expectedSpring Security Thymleaf static resources don't loadSpring boot security consider case insensitive username check for loginCustomize Spring Security for trusted spaceHow to pass custom creds to spring boot ldapSpring-Security 5 always 302Spring boot security cannot log in after invalid credentials

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

0

I need to use a custom LdapAuthenticationProvider, with only one minor change, in order to execute the authentication, a certain precondition needs to be met.

What I want basically:

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException 
 if (!precondition) 
 throw new DisabledException("");
 

 return super.authenticate(authentication);

My WebSecurityConfigurerAdapter:

@Autowired
protected void configureGlobal(AuthenticationManagerBuilder auth) throws Exception 
 auth
 .userDetailsService(userDetailsService)
 .passwordEncoder(encoder);

 if (ldapSecurityConfig.isLdapEnabled()) 
 auth
 .ldapAuthentication()
 .contextSource(ldapContextSource)
 .userSearchFilter(ldapSecurityConfig.getUserSearchFilter())
 .ldapAuthoritiesPopulator(ldapAuthoritiesPopulator)
 .userDetailsContextMapper(userDetailsContextMapper);
 

The problem is, that the line

auth.ldapAuthentication()

creates an LdapAuthenticationProviderConfigurer object, and its build method instantiates an LdapAuthenticationProvider object:

LdapAuthenticationProvider ldapAuthenticationProvider = new LdapAuthenticationProvider(ldapAuthenticator, authoritiesPopulator);

It looks like I don't have control over which LdapAuthenticationProvider will be used at the end.

As a workaround, I could check the precondition in my UserDetailsContextMapper object and throw an exception if it is not met, but it is not optimal, since in this case the LDAP server will be queried even if it's not needed.

My question is, how can I force that my custom provider will be used, or is there any other "simple" way to achieve the behaviour I want?

java spring spring-boot spring-security

share|improve this question

edited Mar 28 at 15:07

lebigmac

asked Mar 28 at 15:01

lebigmaclebigmac

133 bronze badges

add a comment
 | 

0

I need to use a custom LdapAuthenticationProvider, with only one minor change, in order to execute the authentication, a certain precondition needs to be met.

What I want basically:

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException 
 if (!precondition) 
 throw new DisabledException("");
 

 return super.authenticate(authentication);

My WebSecurityConfigurerAdapter:

@Autowired
protected void configureGlobal(AuthenticationManagerBuilder auth) throws Exception 
 auth
 .userDetailsService(userDetailsService)
 .passwordEncoder(encoder);

 if (ldapSecurityConfig.isLdapEnabled()) 
 auth
 .ldapAuthentication()
 .contextSource(ldapContextSource)
 .userSearchFilter(ldapSecurityConfig.getUserSearchFilter())
 .ldapAuthoritiesPopulator(ldapAuthoritiesPopulator)
 .userDetailsContextMapper(userDetailsContextMapper);
 

The problem is, that the line

auth.ldapAuthentication()

creates an LdapAuthenticationProviderConfigurer object, and its build method instantiates an LdapAuthenticationProvider object:

LdapAuthenticationProvider ldapAuthenticationProvider = new LdapAuthenticationProvider(ldapAuthenticator, authoritiesPopulator);

It looks like I don't have control over which LdapAuthenticationProvider will be used at the end.

As a workaround, I could check the precondition in my UserDetailsContextMapper object and throw an exception if it is not met, but it is not optimal, since in this case the LDAP server will be queried even if it's not needed.

My question is, how can I force that my custom provider will be used, or is there any other "simple" way to achieve the behaviour I want?

java spring spring-boot spring-security

share|improve this question

edited Mar 28 at 15:07

lebigmac

asked Mar 28 at 15:01

lebigmaclebigmac

133 bronze badges

add a comment
 | 

I need to use a custom LdapAuthenticationProvider, with only one minor change, in order to execute the authentication, a certain precondition needs to be met.

What I want basically:

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException 
 if (!precondition) 
 throw new DisabledException("");
 

 return super.authenticate(authentication);

My WebSecurityConfigurerAdapter:

@Autowired
protected void configureGlobal(AuthenticationManagerBuilder auth) throws Exception 
 auth
 .userDetailsService(userDetailsService)
 .passwordEncoder(encoder);

 if (ldapSecurityConfig.isLdapEnabled()) 
 auth
 .ldapAuthentication()
 .contextSource(ldapContextSource)
 .userSearchFilter(ldapSecurityConfig.getUserSearchFilter())
 .ldapAuthoritiesPopulator(ldapAuthoritiesPopulator)
 .userDetailsContextMapper(userDetailsContextMapper);
 

The problem is, that the line

auth.ldapAuthentication()

creates an LdapAuthenticationProviderConfigurer object, and its build method instantiates an LdapAuthenticationProvider object:

LdapAuthenticationProvider ldapAuthenticationProvider = new LdapAuthenticationProvider(ldapAuthenticator, authoritiesPopulator);

It looks like I don't have control over which LdapAuthenticationProvider will be used at the end.

As a workaround, I could check the precondition in my UserDetailsContextMapper object and throw an exception if it is not met, but it is not optimal, since in this case the LDAP server will be queried even if it's not needed.

My question is, how can I force that my custom provider will be used, or is there any other "simple" way to achieve the behaviour I want?

java spring spring-boot spring-security

share|improve this question

edited Mar 28 at 15:07

lebigmac

asked Mar 28 at 15:01

lebigmaclebigmac

133 bronze badges

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException 
 if (!precondition) 
 throw new DisabledException("");
 

 return super.authenticate(authentication);

@Autowired
protected void configureGlobal(AuthenticationManagerBuilder auth) throws Exception 
 auth
 .userDetailsService(userDetailsService)
 .passwordEncoder(encoder);

 if (ldapSecurityConfig.isLdapEnabled()) 
 auth
 .ldapAuthentication()
 .contextSource(ldapContextSource)
 .userSearchFilter(ldapSecurityConfig.getUserSearchFilter())
 .ldapAuthoritiesPopulator(ldapAuthoritiesPopulator)
 .userDetailsContextMapper(userDetailsContextMapper);
 

auth.ldapAuthentication()

LdapAuthenticationProvider ldapAuthenticationProvider = new LdapAuthenticationProvider(ldapAuthenticator, authoritiesPopulator);

share|improve this question

edited Mar 28 at 15:07

lebigmac

asked Mar 28 at 15:01

lebigmaclebigmac

133 bronze badges

share|improve this question

edited Mar 28 at 15:07

lebigmac

asked Mar 28 at 15:01

lebigmaclebigmac

133 bronze badges

asked Mar 28 at 15:01

lebigmaclebigmac

133 bronze badges

asked Mar 28 at 15:01

lebigmaclebigmac

133 bronze badges