com.meltmedia.cadmium.servlets.jersey.AuthenticationManagerService Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of cadmium-servlets Show documentation
The newest version!
/**
 *    Copyright 2012 meltmedia
 *
 *    Licensed under the Apache License, Version 2.0 (the "License");
 *    you may not use this file except in compliance with the License.
 *    You may obtain a copy of the License at
 *
 *        http://www.apache.org/licenses/LICENSE-2.0
 *
 *    Unless required by applicable law or agreed to in writing, software
 *    distributed under the License is distributed on an "AS IS" BASIS,
 *    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *    See the License for the specific language governing permissions and
 *    limitations under the License.
 */
package com.meltmedia.cadmium.servlets.jersey;

import com.google.gson.Gson;
import com.google.inject.Inject;
import com.meltmedia.cadmium.core.CadmiumSystemEndpoint;
import com.meltmedia.cadmium.core.messaging.Message;
import com.meltmedia.cadmium.core.messaging.MessageSender;
import com.meltmedia.cadmium.servlets.shiro.AuthenticationManagerCommandAction;
import com.meltmedia.cadmium.servlets.shiro.AuthenticationManagerRequest;
import com.meltmedia.cadmium.servlets.shiro.AuthenticationManagerRequest.RequestType;
import com.meltmedia.cadmium.servlets.shiro.PersistablePropertiesRealm;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.ws.rs.*;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.Response.Status;
import java.net.URI;
import java.util.ArrayList;
import java.util.List;

/**
 * 
 * Authentication management for site access.
 * 
 * @author John McEntire
 *
 */
@CadmiumSystemEndpoint
@Path("/auth")
public class AuthenticationManagerService extends AuthorizationService {
  
  private final Logger log = LoggerFactory.getLogger(getClass());
  
  @Inject
  protected MessageSender sender;
  
  @Inject(optional=true)
  protected PersistablePropertiesRealm realm;
  
  /**
   * Returns a list of users specific to this site only.
   * 
   * @param auth
   * @return
   * @throws Exception
   */
  @GET
  public Response getConfigurableUsers(@HeaderParam("Authorization") @DefaultValue("no token") String auth) throws Exception {
    if(!this.isAuth(auth)) {
      throw new Exception("Unauthorized!");
    }
    if( realm != null ) {
      List usernames = new ArrayList();
      usernames = realm.listUsers();
      return Response.ok(new Gson().toJson(usernames), MediaType.APPLICATION_JSON).build();
    }
    return Response.status(Status.NOT_FOUND).build();
  }
  
  /**
   * Adds user credentials for access to this site only.
   * 
   * @param username
   * @param auth
   * @param message
   * @return
   * @throws Exception
   */
  @PUT
  @Path("{user}")
  @Consumes(MediaType.TEXT_PLAIN)
  public Response addUser(@PathParam("user") String username, @HeaderParam("Authorization") @DefaultValue("no token") String auth, String message) throws Exception {
    if(!this.isAuth(auth)) {
      throw new Exception("Unauthorized!");
    }
    if( realm != null ){
      AuthenticationManagerRequest req = new AuthenticationManagerRequest();
      req.setAccountName(username);
      req.setPassword(message);
      req.setRequestType(RequestType.ADD);
      
      sendMessage(req);
      return Response.created(new URI("")).build();
    }
    return Response.status(Status.NOT_FOUND).build();
  }
  
  /**
   * Deletes an user from the user acounts specific to this site only.
   * @param username
   * @param auth
   * @return
   * @throws Exception
   */
  @DELETE
  @Path("{user}")
  public Response deleteUser(@PathParam("user") String username, @HeaderParam("Authorization") @DefaultValue("no token") String auth) throws Exception {
    if(!this.isAuth(auth)) {
      throw new Exception("Unauthorized!");
    }
    if( realm != null ){
      AuthenticationManagerRequest req = new AuthenticationManagerRequest();
      req.setAccountName(username);
      req.setRequestType(RequestType.REMOVE);
      
      sendMessage(req);
      return Response.status(Status.GONE).build();
    }
    return Response.status(Status.NOT_FOUND).build();
  }
  
  /**
   * Generically send a JGroups message to the cluster.
   * 
   * @param req
   */
  private void sendMessage(AuthenticationManagerRequest req) {
    Message msg = new Message(AuthenticationManagerCommandAction.COMMAND_NAME, req);
    try {
      sender.sendMessage(msg, null);
    } catch (Exception e) {
      log.error("Failed to update authentication.", e);
    }
  }

  /**
   * Get the list of github team ids that are allowed to access this instance.
   * @param auth
   * @return
   * @throws Exception
   */
  @GET
  @Path("teams")
  public Response authorizedTeams(@HeaderParam("Authorization") @DefaultValue("no token") String auth) throws Exception {
    if(!this.isAuth(auth)) {
      return Response.status(Status.FORBIDDEN).build();
    }
    Integer teams[] = getAuthorizedTeams();
    return Response.ok(new Gson().toJson(teams), MediaType.APPLICATION_JSON).build();
  }
  
}