javax.security.jacc.PolicyContext Java Examples

@Override
protected void doFilter(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws IOException, ServletException {
    WebApplication context = (WebApplication) request.getServletContext();
    PolicyContext.setContextID(context.getServletContextId());
    
    if (!securityManager.isRequestSecurityAsRequired(request, response)) {
        response.setStatus(SC_FORBIDDEN);
        return;
    }
    
    localServletRequest.set(request);
    try {
        chain.doFilter(request, response);
    } finally {
        localServletRequest.remove();
    }
}
 

public boolean implies(final ProtectionDomain domain, final Permission permission) {
    final String contextID = PolicyContext.getContextID();

    if (contextID != null && JACC_PERMISSIONS.contains(permission.getClass())) {
        try {
            final BasicPolicyConfiguration configuration = configurations.get(contextID);

            if (configuration == null || !configuration.inService()) {
                return false;
            }

            return configuration.implies(domain, permission);
        } catch (final PolicyContextException e) {
            // no-op
        }
    }

    return systemPolicy != null ? systemPolicy.implies(domain, permission) : false;
}
 

private String getTimeBasedOTPFromRequest()
{
   String totp = null;

   //This is JBoss AS specific mechanism 
   String WEB_REQUEST_KEY = "javax.servlet.http.HttpServletRequest";

   try
   {
      HttpServletRequest request = (HttpServletRequest) PolicyContext.getContext(WEB_REQUEST_KEY);
      totp = request.getParameter( TOTP );
   }
   catch (PolicyContextException e)
   {
      PicketBoxLogger.LOGGER.debugErrorGettingRequestFromPolicyContext(e);
   }
   return totp; 
}
 

private String getSubject(HttpServletResponse response) throws IOException {
    try {
        Subject subject = (Subject) PolicyContext.getContext("javax.security.auth.Subject.container");
        Set<? extends Principal> principalSet = subject.getPrincipals(JsonWebToken.class);
        if(principalSet.size() > 0) {
            return "subject.getPrincipals(JsonWebToken.class) ok";
        }
        response.sendError(500, "subject.getPrincipals(JsonWebToken.class) == 0");
    }
    catch (PolicyContextException e) {
        e.printStackTrace();
        response.sendError(500, e.getMessage());
    }
    throw new IllegalStateException("subject.getPrincipals(JsonWebToken.class) == 0");
}
 

public static void setContextID(final String moduleID) {
    if (System.getSecurityManager() == null) {
        PolicyContext.setContextID(moduleID);
    } else {
        AccessController.doPrivileged(new PrivilegedAction<String>() {
            @Override
            public String run() {
                PolicyContext.setContextID(moduleID);
                return null;
            }
        });
    }
}
 

/**
 * Process the web request
 * @param request
 * @param callerRoles
 * @return
 */ 
private int process(HttpServletRequest request, RoleGroup callerRoles ) 
{ 
   Principal userP = request.getUserPrincipal();
   if(userP == null)
      throw PicketBoxMessages.MESSAGES.invalidNullProperty("userPrincipal");

   int result = AuthorizationContext.DENY;
   WebXACMLUtil util = new WebXACMLUtil();
   try
   {
      RequestContext requestCtx = util.createXACMLRequest(request,callerRoles);
      if(this.policyContextID == null)
        this.policyContextID = PolicyContext.getContextID();
       
      PolicyDecisionPoint pdp = util.getPDP(this.policyRegistration, this.policyContextID);
      ResponseContext response = pdp.evaluate(requestCtx);
      result = response.getDecision() == XACMLConstants.DECISION_PERMIT ? 
            AuthorizationContext.PERMIT : AuthorizationContext.DENY; 
   }
   catch(Exception e)
   {
      PicketBoxLogger.LOGGER.debugIgnoredException(e);
      result = AuthorizationContext.DENY;
   }  
   return result;
}
 

@Override
public Subject getContextSubject() {
	try {
		return (Subject) PolicyContext.getContext( SUBJECT_CONTEXT_KEY );
	}
	catch (PolicyContextException e) {
		throw new HibernateException( "Unable to access JACC PolicyContext in order to locate calling Subject", e );
	}
}
 

@RolesAllowed("Tester")
public String getSubjectClass() throws Exception {
    Subject subject = (Subject) PolicyContext.getContext("javax.security.auth.Subject.container");
    System.out.printf("ServiceEJB.getSubjectClass, subject=%s\n", subject);
    Set<? extends Principal> principalSet = subject.getPrincipals(JsonWebToken.class);
    if (principalSet.size() > 0) {
        return "subject.getPrincipals(JsonWebToken.class) ok";
    }
    throw new IllegalStateException("subject.getPrincipals(JsonWebToken.class) == 0");
}
 

@GET
@Path("/getSubjectClass")
@RolesAllowed("Tester")
public String getSubjectClass(@Context SecurityContext sec) throws Exception {
    Subject subject = (Subject) PolicyContext.getContext("javax.security.auth.Subject.container");
    Set<? extends Principal> principalSet = subject.getPrincipals(JsonWebToken.class);
    if (principalSet.size() > 0) {
        return "subject.getPrincipals(JWTPrincipal.class) ok";
    }
    throw new IllegalStateException("subject.getPrincipals(JWTPrincipal.class) == 0");
}
 

public CallbackHandler run() throws Exception
{
   return (CallbackHandler) PolicyContext.getContext(SecurityConstants.CALLBACK_HANDLER_KEY);
}
 

public CallbackHandler getContextCallbackHandler()
   throws PolicyContextException
{
   return (CallbackHandler) PolicyContext.getContext(SecurityConstants.CALLBACK_HANDLER_KEY);
}
 

@Override
public String run() {
	String previousID = PolicyContext.getContextID();
	PolicyContext.setContextID( contextId );
	return previousID;
}
 

public boolean isValid(MessageInfo requestMessage,Subject clientSubject, String layer,
      CallbackHandler handler)
{
   return this.isValid(requestMessage, clientSubject, layer, PolicyContext.getContextID(), handler);
}
 

public Subject run() throws PolicyContextException
{
   return (Subject) PolicyContext.getContext(SecurityConstants.SUBJECT_CONTEXT_KEY);  
}
 

public Object run() throws Exception {
	return (Subject) PolicyContext.getContext( SUBJECT_CONTEXT_KEY );
}
 

public Subject getContextSubject() throws PolicyContextException {
	return (Subject) PolicyContext.getContext( SUBJECT_CONTEXT_KEY );
}
 

public Object run() {
	String previousID = PolicyContext.getContextID();
	PolicyContext.setContextID( contextID );
	return previousID;
}