com.sap.xs2.security.container.SecurityContext Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of spring-xsuaa Show documentation

There is a newer version: 3.5.3

package com.sap.xs2.security.container;

import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.util.Assert;

import com.sap.cloud.security.xsuaa.token.Token;

public class SecurityContext {
	/**
	 * Obtain the UserInfo object from the Spring SecurityContext
	 *
	 * @return UserInfo object
	 * @throws UserInfoException
	 *             in case of error
	 * @deprecated use {@link #getToken()} instead.
	 */
	@Deprecated
	static public UserInfo getUserInfo() throws UserInfoException {
		if (SecurityContextHolder.getContext().getAuthentication() != null) {
			if (SecurityContextHolder.getContext().getAuthentication().getPrincipal() instanceof UserInfo) {
				return (UserInfo) SecurityContextHolder.getContext().getAuthentication().getPrincipal();
			} else {
				throw new UserInfoException("Unexpected principal type");
			}
		} else {
			throw new UserInfoException("Not authenticated");
		}
	}

	/**
	 * Obtain the Token object from the Spring SecurityContext
	 *
	 * @return Token object
	 */
	static public Token getToken() {
		Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
		Assert.state(authentication != null, "Access forbidden: not authenticated");

		Object principal = SecurityContextHolder.getContext().getAuthentication().getPrincipal();
		Assert.state(principal != null, "Principal must not be null");
		Assert.state(principal instanceof Token, "Unexpected principal type");

		return (Token) principal;
	}

}