sirius.biz.storage.vfs.ftp.BridgeUserManager Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of sirius-biz Show documentation
Provides a framework for building web based business applications
There is a newer version: 9.6
/*
 * Made with all the love in the world
 * by scireum in Remshalden, Germany
 *
 * Copyright by scireum GmbH
 * http://www.scireum.de - [email protected]
 */

package sirius.biz.storage.vfs.ftp;

import org.apache.ftpserver.ftplet.Authentication;
import org.apache.ftpserver.ftplet.AuthenticationFailedException;
import org.apache.ftpserver.ftplet.FtpException;
import org.apache.ftpserver.ftplet.User;
import org.apache.ftpserver.ftplet.UserManager;
import org.apache.ftpserver.usermanager.UsernamePasswordAuthentication;
import sirius.biz.storage.vfs.VirtualFileSystem;
import sirius.web.security.MaintenanceInfo;
import sirius.web.security.UserContext;
import sirius.web.security.UserInfo;

/**
 * Provides a bridge between {@link UserContext} and the FTP server.
 */
class BridgeUserManager implements UserManager {

    @Override
    public User getUserByName(String s) throws FtpException {
        return null;
    }

    @Override
    public String[] getAllUserNames() throws FtpException {
        throw new UnsupportedOperationException("getAllUserNames");
    }

    @Override
    public void delete(String s) throws FtpException {
        throw new UnsupportedOperationException("delete");
    }

    @Override
    public void save(User user) throws FtpException {
        throw new UnsupportedOperationException("save");
    }

    @Override
    public boolean doesExist(String s) throws FtpException {
        throw new UnsupportedOperationException("doesExist");
    }

    @Override
    public User authenticate(Authentication authentication) throws AuthenticationFailedException {
        if (VirtualFileSystem.LOG.isFINE()) {
            VirtualFileSystem.LOG.FINE("Incoming auth-request: " + authentication);
        }
        if (!(authentication instanceof UsernamePasswordAuthentication)) {
            VirtualFileSystem.LOG.FINE("Not a UsernamePasswordAuthentication...aborting");
            throw new AuthenticationFailedException("Please use username/password to authenticate.");
        }
        boolean locked =
                UserContext.getCurrentScope().tryAs(MaintenanceInfo.class).map(MaintenanceInfo::isLocked).orElse(false);
        if (locked) {
            throw new AuthenticationFailedException("The system is currently locked for maintenance reasons.");
        }

        UsernamePasswordAuthentication auth = (UsernamePasswordAuthentication) authentication;
        VirtualFileSystem.LOG.FINE("Trying to authenticate user: " + auth.getUsername());
        // Since @ cannot be used in ftp-urls we replace _AT_ with @.
        // If systems like OXOMI use email addresses to login, one can
        // build an url like
        // ftp://user_AT_scireum.de:password@localhost/uploads/test
        try {
            String effectiveUserName = auth.getUsername().replace("_AT_", "@");

            UserInfo authUser = UserContext.get()
                                           .getUserManager()
                                           .findUserByCredentials(null, effectiveUserName, auth.getPassword());
            if (authUser == null) {
                VirtualFileSystem.LOG.FINE("Invalid credentails...");
                throw new AuthenticationFailedException("Invalid credentials.");
            }
            VirtualFileSystem.LOG.FINE("User is authorized...");
            return new BridgeUser(authUser);
        } catch (Exception e) {
            throw new AuthenticationFailedException(e.getMessage());
        }
    }

    @Override
    public String getAdminName() throws FtpException {
        throw new UnsupportedOperationException("getAdminName");
    }

    @Override
    public boolean isAdmin(String s) throws FtpException {
        throw new UnsupportedOperationException("isAdmin");
    }
}