com.wavemaker.runtime.security.handler.WMApplicationAuthenticationSuccessHandler Maven / Gradle / Ivy

Go to download
/**
 * Copyright (C) 2020 WaveMaker, Inc.
 * 
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 

 * http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package com.wavemaker.runtime.security.handler;

import java.io.IOException;
import java.util.ArrayList;
import java.util.List;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.collections4.CollectionUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.BeansException;
import org.springframework.beans.factory.config.BeanPostProcessor;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.security.web.authentication.AuthenticationSuccessHandler;

import com.wavemaker.commons.WMRuntimeException;
import com.wavemaker.runtime.security.WMAuthentication;

/**
 * Created by srujant on 31/10/18.
 */
public class WMApplicationAuthenticationSuccessHandler implements AuthenticationSuccessHandler, BeanPostProcessor {

    private static final Logger logger = LoggerFactory.getLogger(WMApplicationAuthenticationSuccessHandler.class);
    private List defaultSuccessHandlerList = new ArrayList<>();
    private List customSuccessHandlerList = new ArrayList<>();
    private WMAuthenticationRedirectionHandler authenticationSuccessRedirectionHandler;

    @Override
    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws ServletException, IOException {
        authentication = new WMAuthentication(authentication);
        SecurityContextHolder.getContext().setAuthentication(authentication);
        try {
            invokeDefaultAuthenticationSuccessHandlers(request, response, authentication);
            invokeCustomWMAuthenticationSuccessHandler(request, response, (WMAuthentication) authentication);
            invokeRedirectionHandler(request, response, (WMAuthentication) authentication);
        } catch (Exception e) {
            SecurityContextHolder.clearContext();
            if (e instanceof RuntimeException) {
                throw e;
            }
            throw new WMRuntimeException(e);
        }
    }

    @Override
    public Object postProcessBeforeInitialization(Object bean, String beanName) throws BeansException {
        if (bean instanceof WMAuthenticationSuccessHandler) {
            customSuccessHandlerList.add((WMAuthenticationSuccessHandler) bean);
        }
        if (bean instanceof WMAuthenticationRedirectionHandler) {
            authenticationSuccessRedirectionHandler = (WMAuthenticationRedirectionHandler) bean;
        }
        return bean;
    }

    private void invokeCustomWMAuthenticationSuccessHandler(HttpServletRequest request, HttpServletResponse response, WMAuthentication authentication) throws IOException, ServletException {
        if (CollectionUtils.isNotEmpty(customSuccessHandlerList)) {
            logger.info("Invoking CustomAuthenticationSuccessHandlers");
            for (WMAuthenticationSuccessHandler authenticationSuccessHandler : customSuccessHandlerList) {
                authenticationSuccessHandler.onAuthenticationSuccess(request, response, authentication);
            }
        }
    }

    private void invokeDefaultAuthenticationSuccessHandlers(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        if (CollectionUtils.isNotEmpty(defaultSuccessHandlerList)) {
            logger.info("Invoking DefaultAuthenticationSuccessHandlers");
            for (AuthenticationSuccessHandler authenticationSuccessHandler : defaultSuccessHandlerList) {
                authenticationSuccessHandler.onAuthenticationSuccess(request, response, authentication);
            }
        }
    }

    private void invokeRedirectionHandler(HttpServletRequest request, HttpServletResponse response, WMAuthentication authentication) throws IOException, ServletException {
        if (authenticationSuccessRedirectionHandler != null) {
            logger.info("Invoking authenticationSuccessRedirectionHandler");
            authenticationSuccessRedirectionHandler.onAuthenticationSuccess(request, response, authentication);
        }
    }


    public void setDefaultSuccessHandlerList(List defaultSuccessHandlerList) {
        this.defaultSuccessHandlerList = defaultSuccessHandlerList;
    }


    public void setAuthenticationSuccessRedirectionHandler(WMAuthenticationRedirectionHandler authenticationSuccessRedirectionHandler) {
        this.authenticationSuccessRedirectionHandler = authenticationSuccessRedirectionHandler;
    }

    @Override
    public Object postProcessAfterInitialization(Object bean, String beanName) throws BeansException {
        return bean;
    }
}