com.hubspot.singularity.auth.authenticator.SingularityHeaderPassthroughAuthenticator Maven / Gradle / Ivy

Go to download
package com.hubspot.singularity.auth.authenticator;

import java.util.Optional;

import javax.ws.rs.container.ContainerRequestContext;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.google.common.base.Strings;
import com.google.inject.Inject;
import com.google.inject.ProvisionException;
import com.google.inject.Singleton;
import com.hubspot.singularity.SingularityUser;
import com.hubspot.singularity.WebExceptions;
import com.hubspot.singularity.auth.datastore.SingularityAuthDatastore;
import com.hubspot.singularity.config.SingularityConfiguration;

@Singleton
public class SingularityHeaderPassthroughAuthenticator implements SingularityAuthenticator {
  private static final Logger LOG = LoggerFactory.getLogger(SingularityHeaderPassthroughAuthenticator.class);

  private final SingularityAuthDatastore authDatastore;
  private final String requestUserHeaderName;

  @Inject
  public SingularityHeaderPassthroughAuthenticator(SingularityAuthDatastore authDatastore, SingularityConfiguration configuration) {
    this.authDatastore = authDatastore;
    this.requestUserHeaderName = configuration.getAuthConfiguration().getRequestUserHeaderName();
  }

  private Optional getUserId(ContainerRequestContext context) {
    try {
      return Optional.ofNullable(Strings.emptyToNull(context.getHeaderString(requestUserHeaderName)));
    } catch (ProvisionException pe) {
      return Optional.empty();
    }
  }

  @Override
  public Optional getUser(ContainerRequestContext context) {
    final Optional maybeUsername = getUserId(context);

    if (!maybeUsername.isPresent()) {
      throw WebExceptions.unauthorized("(HeaderPassthrough) Could not determine username from header");
    }

    return authDatastore.getUser(maybeUsername.get());
  }
}