Java Code Examples for org.apache.catalina.Session#getPrincipal()

private void handleMatch(Request request, Principal principal)
{
    TomcatLoginHolder.setLogin(new TomcatLoginImpl(getContainer(), request));

    // Copy over user principal and auth type values, just like in AuthenticatorBase.invoke()
    if (principal != null)
        return;

    Session session = getSession(request, false);
    if (session == null)
        return;

    principal = session.getPrincipal();
    if (principal != null) 
    {
        request.setAuthType(session.getAuthType());
        request.setUserPrincipal(principal);
    }
}
 

private void handleMatch(Request request, Principal principal)
{
    TomcatLoginHolder.setLogin(new TomcatLoginImpl(this, request));

    // Copy over user principal and auth type values, just like in AuthenticatorBase.invoke()
    if (principal != null)
        return;

    Session session = getSession(request, false);
    if (session == null)
        return;

    principal = session.getPrincipal();
    if (principal != null) 
    {
        request.setAuthType(session.getAuthType());
        request.setUserPrincipal(principal);
    }
}
 

@Override
public void saveAccount(SamlSession account) {
    Session session = request.getSessionInternal(true);
    session.getSession().setAttribute(SamlSession.class.getName(), account);
    GenericPrincipal principal = (GenericPrincipal) session.getPrincipal();
    // in clustered environment in JBossWeb, principal is not serialized or saved
    if (principal == null) {
        principal = principalFactory.createPrincipal(request.getContext().getRealm(), account.getPrincipal(), account.getRoles());
        session.setPrincipal(principal);
        session.setAuthType("KEYCLOAK-SAML");

    }
    request.setUserPrincipal(principal);
    request.setAuthType("KEYCLOAK-SAML");
    String newId = changeSessionId(session);
    idMapperUpdater.map(idMapper, account.getSessionIndex(), account.getPrincipal().getSamlSubject(), newId);

}
 

@Override
public boolean isCached(RequestAuthenticator authenticator) {
    Session session = request.getSessionInternal(false);
    if (session == null) return false;
    SerializableKeycloakAccount account = (SerializableKeycloakAccount) session.getSession().getAttribute(SerializableKeycloakAccount.class.getName());
    if (account == null) {
        return false;
    }

    log.fine("remote logged in already. Establish state from session");

    RefreshableKeycloakSecurityContext securityContext = account.getKeycloakSecurityContext();

    if (!deployment.getRealm().equals(securityContext.getRealm())) {
        log.fine("Account from cookie is from a different realm than for the request.");
        cleanSession(session);
        return false;
    }

    securityContext.setCurrentRequestInfo(deployment, this);
    request.setAttribute(KeycloakSecurityContext.class.getName(), securityContext);
    GenericPrincipal principal = (GenericPrincipal) session.getPrincipal();
    // in clustered environment in JBossWeb, principal is not serialized or saved
    if (principal == null) {
        principal = principalFactory.createPrincipal(request.getContext().getRealm(), account.getPrincipal(), account.getRoles());
        session.setPrincipal(principal);
        session.setAuthType("KEYCLOAK");

    }
    request.setUserPrincipal(principal);
    request.setAuthType("KEYCLOAK");

    restoreRequest();
    return true;
}
 

public void sessionEvent(SessionEvent event) {
    // We only care about session destroyed events
    if (!Session.SESSION_DESTROYED_EVENT.equals(event.getType()))
        return;

    // Look up the single session id associated with this session (if any)
    Session session = event.getSession();
    log.debugf("Session %s destroyed", session.getId());

    GenericPrincipal principal = (GenericPrincipal) session.getPrincipal();
    if (principal == null) return;
    session.setPrincipal(null);
    session.setAuthType(null);
}
 

@Override
public boolean isLoggedIn() {
    Session session = request.getSessionInternal(false);
    if (session == null) {
        log.debug("session was null, returning null");
        return false;
    }
    final SamlSession samlSession = SamlUtil.validateSamlSession(session.getSession().getAttribute(SamlSession.class.getName()), deployment);
    if (samlSession == null) {
        return false;
    }

    GenericPrincipal principal = (GenericPrincipal) session.getPrincipal();
    // in clustered environment in JBossWeb, principal is not serialized or saved
    if (principal == null) {
        principal = principalFactory.createPrincipal(request.getContext().getRealm(), samlSession.getPrincipal(), samlSession.getRoles());
        session.setPrincipal(principal);
        session.setAuthType("KEYCLOAK-SAML");

    }
    else if (samlSession.getPrincipal().getName().equals(principal.getName())){
        if (!principal.getUserPrincipal().getName().equals(samlSession.getPrincipal().getName())) {
            throw new RuntimeException("Unknown State");
        }
        log.debug("************principal already in");
        if (log.isDebugEnabled()) {
            for (String role : principal.getRoles()) {
                log.debug("principal role: " + role);
            }
        }

    }
    request.setUserPrincipal(principal);
    request.setAuthType("KEYCLOAK-SAML");
    restoreRequest();
    return true;
}
 

public void invoke(Request request, Response response, ValveContext context)
        throws IOException, ServletException
{
    ServletRequest servRequest = request.getRequest();
    if (servRequest instanceof HttpServletRequest)
    {
        // we only set the TomcatLoginImpl for gateway paths

        HttpServletRequest hrequest = ((HttpServletRequest)servRequest);
        String path = hrequest.getServletPath();
        boolean match = false;
        if (path == null)
        {
            // We need to use a slighly-weaker uri match for 4.1
            String uri = hrequest.getRequestURI();
            match = (uri != null &&
                (uri.indexOf(MESSAGEBROKER_MATCH) != -1 ||
                uri.indexOf(AMF_MATCH) != -1 ||
                uri.indexOf(GATEWAY_MATCH) != -1 ||
                (CUSTOM_MATCH != null && uri.indexOf(CUSTOM_MATCH) != -1)));
        }
        else
        {
             match = (path.startsWith(MESSAGEBROKER_MATCH) ||
                     path.startsWith(AMF_MATCH) ||
                     path.startsWith(GATEWAY_MATCH) ||
                     (CUSTOM_MATCH != null && path.startsWith(CUSTOM_MATCH)));
        }

        if (match)
        {
            HttpRequest httpRequest = (HttpRequest)request;
            TomcatLoginHolder.setLogin(new TomcatLoginImpl(getContainer(), httpRequest));

            // copy over user princicpal and auth type values, just like in AuthenticatorBase.invoke()
            Principal principal = hrequest.getUserPrincipal();
            if (principal == null) 
            {
                Session session = getSession(httpRequest, false);
                if (session != null) 
                {
                    principal = session.getPrincipal();
                    if (principal != null) 
                    {
                        httpRequest.setAuthType(session.getAuthType());
                        httpRequest.setUserPrincipal(principal);
                    }
                }
            }
        }
    }
    context.invokeNext(request, response);
}