com.evasion.sam.MyCBH Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of evasion-sam-modul Show documentation

API de l'application modulaire evasion-en-ligne

There is a newer version: 2.0.0.2

package com.evasion.sam;

import java.io.IOException;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.callback.UnsupportedCallbackException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import sun.misc.BASE64Decoder;

/**
 * CallbackHandler to parse the HTTP Authorization header in order to get the username and password,
 * @author nasradu8
 */
class MyCBH implements CallbackHandler {

    private HttpServletRequest request = null;

    public MyCBH(HttpServletRequest request, HttpServletResponse response) {
        this.request = request;
    }

    public void setRequest(HttpServletRequest request) {
        this.request = request;
    }

    public MyCBH() {
    }

    @Override
    public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        String username = null;
        String password = null;
        String authorization = request.getHeader("authorization");
        //Get credentials from authourization header.
        if (authorization != null
                && authorization.toLowerCase().startsWith("basic ")) {
            authorization = authorization.substring(6).trim();
            BASE64Decoder decoder = new BASE64Decoder();
            byte[] bs = decoder.decodeBuffer(authorization);
            String decodedString = new String(bs);
            int ind = decodedString.indexOf(':');
            if (ind > 0) {
                username = decodedString.substring(0, ind);
                password = decodedString.substring(ind + 1);
            }
        } else if (authorization ==null) {
            username = request.getParameter(Constants.USERNAME_PARAMETER);
            password = request.getParameter(Constants.PASSWORD_PARAMETER);
        }
        for (Callback callback : callbacks) {
            if (callback instanceof NameCallback) {
                ((NameCallback) callback).setName(username);
                continue;
            } else if (callback instanceof PasswordCallback) {
                ((PasswordCallback) callback).setPassword((password != null)
                        ? password.toCharArray() : null);
                continue;
            } else {
                throw new UnsupportedCallbackException(callback);
            }
        }
    }
}