io.milton.http.annotated.AuthenticateAnnotationHandler Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of milton-server-ce Show documentation
Show all versions of milton-server-ce Show documentation
Milton Community Edition: Supports DAV level 1 and is available on Apache2 license
/*
*
* Copyright 2014 McEvoy Software Ltd.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package io.milton.http.annotated;
import io.milton.annotations.Authenticate;
import io.milton.http.http11.auth.DigestGenerator;
import io.milton.http.http11.auth.DigestResponse;
import java.lang.reflect.Method;
import java.util.List;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
/**
*
* @author brad
*/
public class AuthenticateAnnotationHandler extends AbstractAnnotationHandler {
private static final Logger log = LoggerFactory.getLogger(AuthenticateAnnotationHandler.class);
public static final String NOT_ATTEMPTED = "NotAttempted";
public AuthenticateAnnotationHandler(final AnnotationResourceFactory outer) {
super(outer, Authenticate.class);
}
public boolean canAuthenticate(Object source) {
List availMethods = getMethods(source.getClass());
return !availMethods.isEmpty();
}
public Boolean authenticate(AnnoPrincipalResource userRes, String requestedPassword) {
Object source = userRes.getSource();
List availMethods = getMethods(source.getClass());
if (availMethods.isEmpty()) {
if (!controllerMethods.isEmpty()) {
if (log.isInfoEnabled()) {
log.warn("No @Authenticate methods were found for user object: " + source + " located at: " + userRes.getHref());
}
}
return null;
}
for (ControllerMethod cm : availMethods) {
// if it returns String then it returns a password. Otherwise is authenticate method
if (cm.method.getReturnType().equals(String.class)) {
try {
String result = (String) invoke(cm, userRes, cm.method, userRes);
if (result == null) {
log.warn("Null password from: " + cm + " for user: " + userRes.getHref());
return false;
} else {
return result.equals(requestedPassword);
}
} catch (Exception ex) {
throw new RuntimeException("Exception invoking @Authenticate method: " + cm.method, ex);
}
} else if (cm.method.getReturnType().equals(Boolean.class)) {
if (hasParamType(cm.method, String.class)) { // Must have a string parameter for the password
try {
Boolean result = (Boolean) invoke(cm, userRes, requestedPassword);
if (result != null) {
return result;
}
} catch (Exception ex) {
throw new RuntimeException("Exception invoking @Authenticate method: " + cm.method, ex);
}
}
} else {
throw new RuntimeException("@Authenticate method does not return either String or Boolean: " + cm);
}
}
return null;
}
public Boolean authenticate(AnnoPrincipalResource userRes, DigestResponse digestRequest) {
Object source = userRes.getSource();
List availMethods = getMethods(source.getClass());
if (availMethods.isEmpty()) {
return null;
}
try {
for (ControllerMethod cm : availMethods) {
if (cm.method.getReturnType().equals(String.class)) {
try {
String actualPassword = (String) invoke(cm, userRes, cm.method, userRes);
if (actualPassword == null) {
log.warn("Null password from: " + cm + " for user: " + userRes.getHref());
return false;
} else {
DigestGenerator gen = new DigestGenerator();
String expectedResp = gen.generateDigest(digestRequest, actualPassword);
if (expectedResp.equals(digestRequest.getResponseDigest())) {
return true;
} else {
log.info("Digest authentication failed, given digest response is not equal to expected");
return false;
}
}
} catch (Exception ex) {
throw new RuntimeException("Exception invoking @Authenticate method: " + cm.method, ex);
}
} else if (hasParamType(cm.method, DigestResponse.class)) {
// if it returns String then it returns a password. Otherwise is authenticate method
if (cm.method.getReturnType().equals(String.class)) {
// Object[] args = annoResourceFactory.buildInvokeArgs(userRes, cm.method, userRes);
// String result = (String) cm.method.invoke(cm.controller, args);
String result = (String) invoke(cm, userRes, userRes);
if (result == null) {
log.warn("Null password from: " + cm + " for user: " + userRes.getHref());
return false;
} else {
DigestGenerator gen = new DigestGenerator();
String actual = gen.generateDigest(digestRequest, result);
if (actual.equals(digestRequest.getResponseDigest())) {
return true;
} else {
log.warn("Password digest's dont match");
return false;
}
}
} else if (cm.method.getReturnType().equals(Boolean.class)) {
// Object[] args = annoResourceFactory.buildInvokeArgs(userRes, cm.method, digestRequest);
// Boolean result = (Boolean) cm.method.invoke(cm.controller, args);
Boolean result = (Boolean) invoke(cm, userRes, digestRequest);
if (result != null) {
return result;
}
} else {
throw new RuntimeException("@Authenticate method does not return either String or Boolean: " + cm);
}
}
}
log.warn("Could not find any @Authentication methods compatible with Digest authentication");
return null;
} catch (Exception e) {
throw new RuntimeException(e);
}
}
private boolean hasParamType(Method method, Class type) {
for (Class c : method.getParameterTypes()) {
if (c.isAssignableFrom(type)) {
return true;
}
}
return false;
}
}