com.facebook.airlift.http.client.spnego.SpnegoAuthenticationProtocolHandler Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of http-client Show documentation

The newest version!

package com.facebook.airlift.http.client.spnego;

import org.eclipse.jetty.client.AuthenticationProtocolHandler;
import org.eclipse.jetty.client.HttpClient;
import org.eclipse.jetty.client.WWWAuthenticationProtocolHandler;
import org.eclipse.jetty.client.api.Response;
import org.eclipse.jetty.client.api.Result;
import org.eclipse.jetty.http.HttpFields;
import org.eclipse.jetty.http.HttpHeader;

/**
 * Jetty {@link AuthenticationProtocolHandler} requires that the
 * {@code "WWW-Authenticate"} header contains a realm, but the
 * {@code "Negotiate"} scheme will not have one. This hacks around that by
 * adding a new header value for that scheme which contains a dummy realm,
 * allowing the rest of the authentication handling to work as normal.
 * Unfortunately, there is no easier way as all of the related code in
 * that class is private.
 */
public class SpnegoAuthenticationProtocolHandler
        extends WWWAuthenticationProtocolHandler
{
    private static final String NEGOTIATE = HttpHeader.NEGOTIATE.asString();

    public SpnegoAuthenticationProtocolHandler(HttpClient client)
    {
        super(client);
    }

    @Override
    public String getName()
    {
        return "spnego";
    }

    @Override
    public Response.Listener getResponseListener()
    {
        return new ForwardingResponseListener(super.getResponseListener())
        {
            @Override
            public void onComplete(Result result)
            {
                HttpHeader header = getAuthenticateHeader();
                HttpFields headers = result.getResponse().getHeaders();
                // There is no need to check for a SPNEGO token because it can't exist here:
                // * SPNEGO token only exist if the client successfully authenticated
                // * This authenticate handler is not called when already authenticated
                if (headers.getValuesList(header).stream().anyMatch(NEGOTIATE::equalsIgnoreCase)) {
                    headers.put(header, NEGOTIATE + " realm=\"dummy\"");
                }
                super.onComplete(result);
            }
        };
    }
}