import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
/**
 * Gets the authentication satisfied by policy.
 *
 * @param ticket the ticket
 * @param context the context
 * @return the authentication satisfied by policy
 * @throws AbstractTicketException the ticket exception
 */
protected final Authentication getAuthenticationSatisfiedByPolicy(
        final TicketGrantingTicket ticket, final ServiceContext context) throws AbstractTicketException {

    final ContextualAuthenticationPolicy<ServiceContext> policy =
            serviceContextAuthenticationPolicyFactory.createPolicy(context);
    if (policy.isSatisfiedBy(ticket.getAuthentication())) {
        return ticket.getAuthentication();
    }
    for (final Authentication auth : ticket.getSupplementalAuthentications()) {
        if (policy.isSatisfiedBy(auth)) {
            return auth;
        }
    }
    throw new UnsatisfiedAuthenticationPolicyException(policy);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
/**
 * Gets the authentication satisfied by policy.
 *
 * @param ticket the ticket
 * @param context the context
 * @return the authentication satisfied by policy
 * @throws org.jasig.cas.ticket.TicketException the ticket exception
 */
private Authentication getAuthenticationSatisfiedByPolicy(
        final TicketGrantingTicket ticket, final ServiceContext context) throws TicketException {

    final ContextualAuthenticationPolicy<ServiceContext> policy =
            serviceContextAuthenticationPolicyFactory.createPolicy(context);
    if (policy.isSatisfiedBy(ticket.getAuthentication())) {
        return ticket.getAuthentication();
    }
    for (final Authentication auth : ticket.getSupplementalAuthentications()) {
        if (policy.isSatisfiedBy(auth)) {
            return auth;
        }
    }
    throw new UnsatisfiedAuthenticationPolicyException(policy);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
/**
 * Gets the authentication satisfied by policy.
 *
 * @param ticket the ticket
 * @param context the context
 * @return the authentication satisfied by policy
 * @throws TicketException the ticket exception
 */
private Authentication getAuthenticationSatisfiedByPolicy(
        final TicketGrantingTicket ticket, final ServiceContext context) throws TicketException {

    final ContextualAuthenticationPolicy<ServiceContext> policy =
            serviceContextAuthenticationPolicyFactory.createPolicy(context);
    if (policy.isSatisfiedBy(ticket.getAuthentication())) {
        return ticket.getAuthentication();
    }
    for (final Authentication auth : ticket.getSupplementalAuthentications()) {
        if (policy.isSatisfiedBy(auth)) {
            return auth;
        }
    }
    throw new UnsatisfiedAuthenticationPolicyException(policy);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
@Test(expected = UnsatisfiedAuthenticationPolicyException.class)
public void verifyDeniesAccessToHighSecurityServiceWithPassword() throws Exception {
    final AuthenticationContext ctx = processAuthenticationAttempt(HIGH_SERVICE, newUserPassCredentials("alice", "alice"));

    final TicketGrantingTicket tgt = cas.createTicketGrantingTicket(ctx);
    assertNotNull(tgt);
    cas.grantServiceTicket(tgt.getId(), HIGH_SERVICE, ctx);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
@Test(expected = UnsatisfiedAuthenticationPolicyException.class)
public void verifyDeniesAccessToHighSecurityServiceWithOTP() throws Exception {
    final AuthenticationContext ctx =  processAuthenticationAttempt(HIGH_SERVICE, new OneTimePasswordCredential("alice", "31415"));

    final TicketGrantingTicket tgt = cas.createTicketGrantingTicket(ctx);
    assertNotNull(tgt);
    final ServiceTicket st = cas.grantServiceTicket(tgt.getId(), HIGH_SERVICE, ctx);
    assertNotNull(st);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
@Test(expected = UnsatisfiedAuthenticationPolicyException.class)
public void verifyDeniesAccessToHighSecurityServiceWithOTP() throws Exception {
    final TicketGrantingTicket tgt = cas.createTicketGrantingTicket(new OneTimePasswordCredential("alice", "31415"));
    assertNotNull(tgt);
    final ServiceTicket st = cas.grantServiceTicket(tgt.getId(), newService("https://example.com/high/"));
    assertNotNull(st);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
private Authentication getAuthenticationSatisfiedByPolicy(
        final TicketGrantingTicket ticket, final ServiceContext context) throws TicketException {

    final ContextualAuthenticationPolicy<ServiceContext> policy =
            serviceContextAuthenticationPolicyFactory.createPolicy(context);
    if (policy.isSatisfiedBy(ticket.getAuthentication())) {
        return ticket.getAuthentication();
    }
    for (final Authentication auth : ticket.getSupplementalAuthentications()) {
        if (policy.isSatisfiedBy(auth)) {
            return auth;
        }
    }
    throw new UnsatisfiedAuthenticationPolicyException(policy);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
@Test(expected = UnsatisfiedAuthenticationPolicyException.class)
public void testDeniesAccessToHighSecurityServiceWithOTP() throws Exception {
    final String tgt = cas.createTicketGrantingTicket(new OneTimePasswordCredential("alice", "31415"));
    assertNotNull(tgt);
    final String st = cas.grantServiceTicket(tgt, newService("https://example.com/high/"));
    assertNotNull(st);
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
@Test(expected = UnsatisfiedAuthenticationPolicyException.class)
public void verifyDeniesAccessToHighSecurityServiceWithPassword() throws Exception {
    final TicketGrantingTicket tgt = cas.createTicketGrantingTicket(newUserPassCredentials("alice", "alice"));
    assertNotNull(tgt);
    cas.grantServiceTicket(tgt.getId(), newService("https://example.com/high/"));
}
 

import org.jasig.cas.ticket.UnsatisfiedAuthenticationPolicyException; //导入依赖的package包/类
@Test(expected = UnsatisfiedAuthenticationPolicyException.class)
public void testDeniesAccessToHighSecurityServiceWithPassword() throws Exception {
    final String tgt = cas.createTicketGrantingTicket(newUserPassCredentials("alice", "alice"));
    assertNotNull(tgt);
    cas.grantServiceTicket(tgt, newService("https://example.com/high/"));
}