javax.security.auth.message.config.ServerAuthConfig Java Examples

private JaspicState getJaspicState(AuthConfigProvider jaspicProvider, Request request,
        Response response, boolean authMandatory) throws IOException {
    JaspicState jaspicState = new JaspicState();

    jaspicState.messageInfo =
            new MessageInfoImpl(request.getRequest(), response.getResponse(), authMandatory);

    try {
        CallbackHandler callbackHandler = createCallbackHandler();
        ServerAuthConfig serverAuthConfig = jaspicProvider.getServerAuthConfig(
                "HttpServlet", jaspicAppContextID, callbackHandler);
        String authContextID = serverAuthConfig.getAuthContextID(jaspicState.messageInfo);
        jaspicState.serverAuthContext = serverAuthConfig.getAuthContext(authContextID, null, null);
    } catch (AuthException e) {
        log.warn(sm.getString("authenticator.jaspicServerAuthContextFail"), e);
        response.sendError(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
        return null;
    }

    return jaspicState;
}
 

/**
 * @see AuthConfigProvider#getServerAuthConfig(String, String, CallbackHandler)
 */
public ServerAuthConfig getServerAuthConfig(String layer, String appContext, 
      CallbackHandler handler) throws AuthException
{ 
   //TODO: Throw SecurityException if user has no perms
   if(handler == null)
   {
      try
      {
          handler = this.instantiateCallbackHandler();  
      } 
      catch(Exception e)
      {
         throw new AuthException(e.getLocalizedMessage());
      }
   }
   return new JBossServerAuthConfig(layer,appContext, handler, contextProperties);
}
 

@Override
public void logout(Request request) {
    AuthConfigProvider provider = getJaspicProvider();
    if (provider != null) {
        MessageInfo messageInfo = new MessageInfoImpl(request, request.getResponse(), true);
        Subject client = (Subject) request.getNote(Constants.REQ_JASPIC_SUBJECT_NOTE);
        if (client != null) {
            ServerAuthContext serverAuthContext;
            try {
                ServerAuthConfig serverAuthConfig = provider.getServerAuthConfig("HttpServlet",
                        jaspicAppContextID, CallbackHandlerImpl.getInstance());
                String authContextID = serverAuthConfig.getAuthContextID(messageInfo);
                serverAuthContext = serverAuthConfig.getAuthContext(authContextID, null, null);
                serverAuthContext.cleanSubject(messageInfo, client);
            } catch (AuthException e) {
                log.debug(sm.getString("authenticator.jaspicCleanSubjectFail"), e);
            }
        }
    }

    Principal p = request.getPrincipal();
    if (p instanceof TomcatPrincipal) {
        try {
            ((TomcatPrincipal) p).logout();
        } catch (Throwable t) {
            ExceptionUtils.handleThrowable(t);
            log.debug(sm.getString("authenticator.tomcatPrincipalLogoutFail"), t);
        }
    }

    register(request, request.getResponse(), null, null, null, null);
}
 

@Override
public ServerAuthConfig getServerAuthConfig(String layer, String appContext,
        CallbackHandler handler) throws AuthException {
    ServerAuthConfig serverAuthConfig = this.serverAuthConfig;
    if (serverAuthConfig == null) {
        synchronized (this) {
            if (this.serverAuthConfig == null) {
                this.serverAuthConfig = createServerAuthConfig(layer, appContext, handler, properties);
            }
            serverAuthConfig = this.serverAuthConfig;
        }
    }
    return serverAuthConfig;
}
 

@Override
public void refresh() {
    ServerAuthConfig serverAuthConfig = this.serverAuthConfig;
    if (serverAuthConfig != null) {
        serverAuthConfig.refresh();
    }
}
 

@Test
public void testConfigOnServerAuthConfig() throws Exception {
    ServerAuthConfig serverAuthConfig =
            new SimpleServerAuthConfig(null,  null, null, CONFIG_PROPERTIES);
    ServerAuthContext serverAuthContext = serverAuthConfig.getAuthContext(null, null, null);

    validateServerAuthContext(serverAuthContext);
}
 

@Test
public void testConfigOnGetAuthContext() throws Exception {
    ServerAuthConfig serverAuthConfig = new SimpleServerAuthConfig(null,  null, null, null);
    ServerAuthContext serverAuthContext =
            serverAuthConfig.getAuthContext(null, null, CONFIG_PROPERTIES);

    validateServerAuthContext(serverAuthContext);
}
 

private ServerAuthContext getServerAuthContext(final HttpServletRequest request) throws AuthException {
    final String appContext = request.getServletContext().getVirtualServerName() + " " + request.getContextPath();

    final AuthConfigProvider authConfigProvider =
            AuthConfigFactory.getFactory().getConfigProvider("HttpServlet", appContext, null);
    final ServerAuthConfig serverAuthConfig =
            authConfigProvider.getServerAuthConfig("HttpServlet", appContext, CallbackHandlerImpl.getInstance());

    return serverAuthConfig.getAuthContext(null, null, null);
}
 

@Override
public ServerAuthConfig getServerAuthConfig(String layer, String appContext, CallbackHandler handler)
        throws AuthException {
    return null;
}
 

protected ServerAuthConfig createServerAuthConfig(String layer, String appContext,
        CallbackHandler handler, Map<String,String> properties) {
    return new SimpleServerAuthConfig(layer, appContext, handler, properties);
}
 

@Test(expected=AuthException.class)
public void testConfigNone() throws Exception {
    ServerAuthConfig serverAuthConfig = new SimpleServerAuthConfig(null,  null, null, null);
    serverAuthConfig.getAuthContext(null, null, null);
}
 

@Override
public ServerAuthConfig getServerAuthConfig(String layer, String appContext, CallbackHandler callbackHandler) throws AuthException {
    return new CustomServerAuthConfig(authConfig, layer, appContext, callbackHandler);
}
 

@Override
public ServerAuthConfig getServerAuthConfig(final String layer, final String appContext,
                                            final CallbackHandler handler)
        throws AuthException, SecurityException {
    return new TomEESecurityServerAuthConfig(layer, appContext, handler);
}
 

@Override
public ServerAuthConfig getServerAuthConfig(String layer, String appContext, CallbackHandler handler) throws AuthException,
        SecurityException {
    return new TheServerAuthConfig(layer, appContext, handler == null ? createDefaultCallbackHandler() : handler,
            providerProperties, serverAuthModule);
}