io.fabric8.apiman.Fabric8ManagerApiMicroService Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of apiman Show documentation
Apiman deployed on Jetty
There is a newer version: 2.3.0
/*
 * Copyright 2015 JBoss Inc
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package io.fabric8.apiman;

import io.apiman.manager.api.micro.ManagerApiMicroService;

import java.util.EnumSet;

import javax.servlet.DispatcherType;

import org.eclipse.jetty.security.ConstraintSecurityHandler;
import org.eclipse.jetty.security.HashLoginService;
import org.eclipse.jetty.security.SecurityHandler;
import org.eclipse.jetty.security.authentication.BasicAuthenticator;
import org.eclipse.jetty.servlet.ServletContextHandler;
import org.eclipse.jetty.util.resource.Resource;

public class Fabric8ManagerApiMicroService extends ManagerApiMicroService {

    /**
     * @see io.apiman.manager.api.micro.ManagerApiMicroService#getConfigResource(java.lang.String)
     */
    @Override
    protected Resource getConfigResource(String path) {
        return super.getConfigResource("/apimanui/apiman/f8-config.js");
    }

	@Override
	protected void addAuthFilter(ServletContextHandler apiManServer) {
		apiManServer.addFilter(BootstrapFilter.class,  "/*", EnumSet.of(DispatcherType.REQUEST));
		apiManServer.addFilter(BearerTokenFilter.class, "/*", EnumSet.of(DispatcherType.REQUEST));
	}

	@Override
	protected SecurityHandler createSecurityHandler() {
	    // Security should be handled through the BearerTokenFilter.  No need for a valid
	    // login service.
        HashLoginService l = new HashLoginService();

        // Don't add users to the service!
//        for (User user : Users.getUsers()) {
//            String[] roles = user.getRolesAsArray();
//            if (user.getId().startsWith("admin"))
//                roles = new String[] { "apiuser", "apiadmin"};
//            l.putUser(user.getId(), Credential.getCredential(user.getPassword()), roles);
//        }
        l.setName("apimanrealm");

        ConstraintSecurityHandler csh = new ConstraintSecurityHandler();
        csh.setAuthenticator(new BasicAuthenticator());
        csh.setRealmName("apimanrealm");
        csh.setLoginService(l);

        return csh;
	}


}