io.zbus.mq.server.auth.Token Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of zbus Show documentation
a lightweight yet powerful MQ and RPC to build service bus
There is a newer version: 1.0.0-b1
package io.zbus.mq.server.auth;

import java.util.ArrayList;
import java.util.HashMap;
import java.util.Map;
import java.util.Map.Entry;
import java.util.Set;
import java.util.TreeMap;
import java.util.TreeSet;

import io.zbus.kit.logging.Logger;
import io.zbus.kit.logging.LoggerFactory;
import io.zbus.mq.Protocol.ConsumeGroupInfo;
import io.zbus.mq.Protocol.ServerInfo;
import io.zbus.mq.Protocol.TopicInfo;

/**
 * Token use Operation(Command) + Resource(Topic/ConsumeGroup) model
 * 
 * Topic and ConsumeGroup are case-insensitive
 * 
 * @author Rushmore
 *
 */
public class Token { 
	
	public static class TopicResource {
		public String topic;
		public boolean allGroups = false;
		public Set consumeGroups = new TreeSet(String.CASE_INSENSITIVE_ORDER);
	}
	
	public final static Token ALLOW = new Token(true);
	public final static Token DENY = new Token(false);
	
	public String token;
	public String name = ""; //no use for authorization test, only for display if needed
	public boolean denyAll = false;
	//Operation
	public int operation;
	public boolean allOperations = false;
	
	//Resource 
	public Map topics = new TreeMap(String.CASE_INSENSITIVE_ORDER);
	public boolean allTopics = false; 
	
	public Token(){
		
	}
	
	public Token(boolean allowOrDenyAll){
		if(allowOrDenyAll){
			allOperations = true;
			allTopics = true;
		} else {
			denyAll = true;
		}
	} 
	
	private static final Logger log = LoggerFactory.getLogger(Token.class); 
	public void setOperation(String op){
		this.operation = 0;
		String[] bb = op.split("[,; ]");
		for(String cmd : bb){
			cmd = cmd.trim();
			if(cmd.equals("")) continue;
			
			try{
				Operation operation = Operation.find(cmd.toLowerCase());
				if(operation == null) continue;
				this.operation |= operation.getMask();
			} catch (Exception e) {
				log.warn(e.getMessage(), e);
				//ignore
			} 
		}
	}  
	
	public static ConsumeGroupInfo filter(ConsumeGroupInfo info, Token token){
		if(token == null) return null;
		
		if(Operation.isEnabled(token.operation, Operation.ADMIN)){
			return info;
		}
		
		if(token.allTopics){
			return info;
		} 
		
		TopicResource topicResource = token.topics.get(info.topicName);
		if(topicResource == null){  
			return null;
		} 
		
		if(topicResource.allGroups){
			return info;
		}
		
		if(topicResource.consumeGroups.contains(info.groupName)){
			return info;
		}
		
		return null;
	}
	
	public static TopicInfo filter(TopicInfo info, Token token){
		if(token == null) return null;
		
		if(Operation.isEnabled(token.operation, Operation.ADMIN)){
			return info;
		}
		
		if(token.allTopics){
			return info;
		} 
		
		TopicResource topicResource = token.topics.get(info.topicName);
		if(topicResource == null){  
			return null;
		} 
		
		if(topicResource.allGroups){
			return info;
		}
		
		TopicInfo newInfo = info.clone();
		newInfo.consumeGroupList = new ArrayList();
		for(ConsumeGroupInfo groupInfo : info.consumeGroupList){
			if(topicResource.consumeGroups.contains(groupInfo.groupName)){
				newInfo.consumeGroupList.add(groupInfo);
			}
		}
		return newInfo; 
	}
	
	public static ServerInfo filter(ServerInfo info, Token token){
		if(token == null){
			ServerInfo newInfo = info.clone();
			newInfo.topicTable = new HashMap();
			return newInfo;
		}
		
		if(Operation.isEnabled(token.operation, Operation.ADMIN)){
			return info;
		}
		
		if(token.allTopics){
			return info;
		}
		ServerInfo newInfo = info.clone();
		newInfo.topicTable = new HashMap(); 
		if(token.denyAll){  
			return newInfo;
		}  
		for(Entry e : info.topicTable.entrySet()){
			String topic = e.getKey(); 
			TopicInfo topicInfo = e.getValue();
			TopicResource topicResource = token.topics.get(topic);
			if(topicResource == null){ 
				continue;
			} 
			if(topicResource.allGroups){
				newInfo.topicTable.put(topic, topicInfo);
				continue;
			}
			
			TopicInfo newTopicInfo = topicInfo.clone();
			newTopicInfo.consumeGroupList = new ArrayList();
			for(ConsumeGroupInfo groupInfo : topicInfo.consumeGroupList){
				if(topicResource.consumeGroups.contains(groupInfo.groupName)){
					newTopicInfo.consumeGroupList.add(groupInfo);
				}
			}
			newInfo.topicTable.put(topic, newTopicInfo); 
		} 
		return newInfo;
	} 
	 
}