import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
/**
 * Creates an acls page and opens the permission target for editing.
 *
 * @param ptiToEdit Permission target to edit
 */
public AclsPage(final MutablePermissionTargetInfo ptiToEdit) {
    // only admins can reach here
    if (!authService.isAdmin()) {
        throw new UnauthorizedInstantiationException(AclsPage.class);
    }
    // create the panel
    final PermissionTargetListPanel panel = new PermissionTargetListPanel("permissionTargetList");
    add(panel);

    if (ptiToEdit != null) {
        // use very short ajax timer to open the edit panel
        add(new AbstractAjaxTimerBehavior(Duration.milliseconds(1)) {
            @Override
            protected void onTimer(AjaxRequestTarget target) {
                stop(); // don't fire again
                ModalHandler modalHandler = ModalHandler.getInstanceFor(AclsPage.this);
                modalHandler.setModalPanel(panel.newUpdateItemPanel(ptiToEdit));
                modalHandler.show(target);
            }
        });
    }
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
public AdminPage() {
    if (authService.isAdmin()) {
        // for now redirect all valid admin requests to the general configuration tab
        throw new RestartResponseException(GeneralConfigPage.class);
    } else if (authService.hasPermission(ArtifactoryPermission.MANAGE)) {
        throw new RestartResponseException(AclsPage.class);
    }

    // In this special condition when no license is installed we allow non-admin to visit the license page
    addonsWebManager.onNoInstalledLicense(false, new NoInstalledLicenseAction() {
        @Override
        public void act() {
            throw new RestartResponseException(LicensePage.class);
        }
    });

    // If non of the above is applicable, then the user is unauthorized!
    throw new UnauthorizedInstantiationException(getClass());
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
public LicensePage() {
    Form form = new SecureForm("form");
    add(form);

    LicensePanel licensePanel = new LicensePanel("licensePanel");
    form.add(licensePanel);

    form.add(licensePanel.createSaveButton(form));
    form.add(createCancelButton());

    if (addonsManager.isLicenseInstalled() && !authService.isAdmin()) {
        throw new UnauthorizedInstantiationException(getClass());
    }

    CookieUtils.setCookie(LicensePage.COOKIE_LICENSE_PAGE_VISITED, "true");
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
/**
 * @see IUnauthorizedComponentInstantiationListener#onUnauthorizedInstantiation(Component)
 */
@Override
public final void onUnauthorizedInstantiation(final Component component) {
    // If there is a sign in page class declared, and the unauthorized
    // component is a page, but it's not the sign in page
    if (component instanceof Page) {
        if (!AbstractAuthenticatedWebSession.get().isSignedIn()) {
            // Redirect to intercept page to let the user sign in
            restartResponseAtSignInPage();
        } else {
            onUnauthorizedPage((Page) component);
        }
    } else {
        // The component was not a page, so throw an exception
        throw new UnauthorizedInstantiationException(component.getClass());
    }
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
@Override
public void onUnauthorizedInstantiation(final Component component) {
    SyncopeSession.get().invalidate();

    if (component instanceof Page) {
        throw new UnauthorizedInstantiationException(component.getClass());
    }

    throw new RestartResponseAtInterceptPageException(Login.class);
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
private void checkUnauthArea(AreaKeys area, String type, String... users) throws OmException {
	for (String user : users) {
		log.debug("Positive test:: area: {}, type: {} for user: {}", area, type, user);
		testArea(user, p -> {
			tester.getRequest().setParameter(area.name(), type);
			try {
				tester.executeBehavior((AbstractAjaxBehavior)p.getBehaviorById(1));
				fail("Not authorized");
			} catch (UnauthorizedInstantiationException e) {
				assertTrue("Exception is expected", true);
			}
		});
	}
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
private List<LocalRepoDescriptor> getRepos() {
    List<LocalRepoDescriptor> repos = repoService.getDeployableRepoDescriptors();
    if (repos.isEmpty()) {
        throw new UnauthorizedInstantiationException(DeployArtifactPage.class);
    }
    Collections.sort(repos, new LocalRepoAlphaComparator());
    return repos;
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
@Test(expected=UnauthorizedInstantiationException.class)
public void testStaticPageForSigned()
{
	WicketOrientDbTester tester = wicket.getTester();
	assertEquals(tester.getApplication().getOrientDbSettings().getGuestUserName(), tester.getDatabase().getUser().getName());
	assertTrue(tester.signIn("reader", "reader"));
	tester.startPage(StaticSecuredPage.class);
	tester.signOut();
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
@Test(expected=UnauthorizedInstantiationException.class)
public void testDynamicPageForSigned()
{
	WicketOrientDbTester tester = wicket.getTester();
	assertEquals(tester.getApplication().getOrientDbSettings().getGuestUserName(), tester.getDatabase().getUser().getName());
	assertTrue(tester.signIn("reader", "reader"));
	tester.startPage(DynamicSecuredPage.class);
	tester.signOut();
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
protected void onUnauthorizedComponentInstantiation(Component component) {
	throw new UnauthorizedInstantiationException(component.getClass());
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
@Override
public void onUnauthorizedInstantiation(Component component) {
	throw new UnauthorizedInstantiationException(component.getClass());
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public IRequestHandler onException(final RequestCycle cycle,
        final Exception e) {

    LOG.error("Exception found", e);

    final Page errorPage;
    PageParameters errorParameters = new PageParameters();
    errorParameters.add("errorTitle",
            new StringResourceModel("alert", null).getString());

    if (e instanceof UnauthorizedInstantiationException) {
        errorParameters.add("errorMessage", new StringResourceModel(
                "unauthorizedInstantiationException", null).getString());

        errorPage = new ErrorPage(errorParameters);
    } else if (e instanceof HttpClientErrorException) {
        errorParameters.add("errorMessage",
                new StringResourceModel("httpClientException", null).
                getString());

        errorPage = new ErrorPage(errorParameters);
    } else if (e instanceof PageExpiredException
            || !(SyncopeSession.get()).isAuthenticated()) {

        errorParameters.add("errorMessage",
                new StringResourceModel("pageExpiredException", null).
                getString());

        errorPage = new ErrorPage(errorParameters);
    } else if (e.getCause() != null && e.getCause().getCause() != null
            && e.getCause().getCause() instanceof RestClientException) {

        errorParameters.add("errorMessage",
                new StringResourceModel("restClientException", null).
                getString());

        errorPage = new ErrorPage(errorParameters);
    } else {
        // redirect to default Wicket error page
        errorPage = new ExceptionErrorPage(e, null);
    }

    return new ComponentRenderingRequestHandler(errorPage);
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
private void checkAuthorization() {
    if (!authorizationService.canDeployToLocalRepository()) {
        throw new UnauthorizedInstantiationException(DeployArtifactPage.class);
    }
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
@Override
public IRequestHandler onException(final RequestCycle cycle, final Exception e) {
    LOG.error("Exception found", e);

    PageParameters errorParameters = new PageParameters();

    IRequestablePage errorPage = null;
    if (instanceOf(e, UnauthorizedInstantiationException.class) != null) {
        errorParameters.add("errorMessage", MISSING_AUTHORIZATION);
        errorPage = new Login(errorParameters);
    } else if (instanceOf(e, AccessControlException.class) != null) {
        if (instanceOf(e, AccessControlException.class).getMessage().contains("expired")) {
            errorParameters.add("errorMessage", PAGE_EXPIRED);
        } else {
            errorParameters.add("errorMessage", MISSING_AUTHORIZATION_CORE);
        }
        errorPage = new Login(errorParameters);
    } else if (instanceOf(e, PageExpiredException.class) != null || !SyncopeConsoleSession.get().isSignedIn()) {
        errorParameters.add("errorMessage", PAGE_EXPIRED);
        errorPage = new Login(errorParameters);
    } else if (instanceOf(e, BadRequestException.class) != null
            || instanceOf(e, WebServiceException.class) != null
            || instanceOf(e, SyncopeClientException.class) != null) {

        errorParameters.add("errorMessage", REST);
        errorPage = new Login(errorParameters);
    } else {
        Throwable cause = instanceOf(e, ForbiddenException.class);
        if (cause == null) {
            // redirect to default Wicket error page
            errorPage = new ExceptionErrorPage(e, null);
        } else {
            errorParameters.add("errorMessage", cause.getMessage());
            errorPage = new Login(errorParameters);
        }
    }

    if (errorPage instanceof Login) {
        try {
            SyncopeConsoleSession.get().cleanup();
            SyncopeConsoleSession.get().invalidateNow();
        } catch (Throwable t) {
            // ignore
            LOG.debug("Unexpected error while forcing logout after error", t);
        }
    }

    return new RenderPageRequestHandler(new PageProvider(errorPage));
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
/**
 * Constructor.
 * 
 * @param throwable
 *            The exception to show
 * @param page
 *            The page being rendered when the exception was thrown
 */
public ExceptionErrorPage(final Throwable throwable, final Page page) {
    ErrorLayout layout = new ErrorLayout("layout");
    add(layout);

    this.throwable = throwable;

    WebMarkupContainer accessDeniedException = new WebMarkupContainer("accessDeniedException");
    layout.add(accessDeniedException);

    WebMarkupContainer unknownException = new WebMarkupContainer("unknownException");
    layout.add(unknownException);

    BookmarkablePageLink<Void> loginLink = null;

    AbstractWebApplication authenticatedWebApplication = (AbstractWebApplication) getApplication();
    loginLink = new BookmarkablePageLink<Void>("loginLink", authenticatedWebApplication.getSignInPageClass());

    accessDeniedException.add(loginLink);

    Label message = new Label("message", throwable.getMessage());
    accessDeniedException.add(message);

    if (throwable instanceof UnauthorizedInstantiationException) {
        accessDeniedException.setVisible(true);
        unknownException.setVisible(false);
    } else {
        accessDeniedException.setVisible(false);
        unknownException.setVisible(true);
    }

    // Add exception label
    unknownException.add(new MultiLineLabel("exception", getErrorMessage(throwable)));
    unknownException.add(new BookmarkablePageLink<Void>("homePageLink", getApplication().getHomePage()));

    // Get values
    String resource = "";
    String markup = "";
    MarkupStream markupStream = null;

    if (throwable instanceof MarkupException) {
        markupStream = ((MarkupException) throwable).getMarkupStream();

        if (markupStream != null) {
            markup = markupStream.toHtmlDebugString();
            resource = markupStream.getResource().toString();
        }
    }

    // Create markup label
    MultiLineLabel markupLabel = new MultiLineLabel("markup", markup);

    markupLabel.setEscapeModelStrings(false);

    // Add container with markup highlighted
    WebMarkupContainer markupHighlight = new WebMarkupContainer("markupHighlight");

    markupHighlight.add(markupLabel);
    markupHighlight.add(new Label("resource", resource));
    layout.add(markupHighlight);

    // Show container if markup stream is available
    markupHighlight.setVisible(markupStream != null);

    layout.add(new MultiLineLabel("stacktrace", getStackTrace(throwable)));
}
 

import org.apache.wicket.authorization.UnauthorizedInstantiationException; //导入依赖的package包/类
/**
 * Called when an AUTHENTICATED user tries to navigate to a page that they
 * are not authorized to access. You might want to override this to navigate
 * to some explanatory page or to the application's home page.
 * 
 * @param page
 *            The page
 */
protected void onUnauthorizedPage(final Page page) {
    // The component was not a page, so throw an exception
    throw new UnauthorizedInstantiationException(page.getClass());
}