com.sun.syndication.propono.atom.client.OAuthStrategy Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of rome-propono Show documentation
The ROME Propono subproject is a Java class library that supports publishing protocols, specifically the Atom Publishing Protocol and the legacy MetaWeblog API. Propono includes an Atom client library, Atom server framework and a Blog client that supports both Atom protocol and the MetaWeblog API.
The newest version!
/*
 * Copyright 2009 Dave Johnson (Blogapps project)
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package com.sun.syndication.propono.atom.client;

import com.sun.syndication.propono.utils.ProponoException;
import java.util.ArrayList;
import java.util.Date;
import java.util.HashMap;
import java.util.Iterator;
import java.util.List;
import java.util.Map;
import java.util.UUID;
import net.oauth.OAuth;
import net.oauth.OAuthAccessor;
import net.oauth.OAuthConsumer;
import net.oauth.OAuthMessage;
import net.oauth.OAuthServiceProvider;
import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.HttpMethodBase;
import org.apache.commons.httpclient.NameValuePair;
import org.apache.commons.httpclient.methods.GetMethod;
import org.apache.commons.httpclient.methods.PostMethod;
import org.apache.commons.httpclient.util.ParameterParser;


/**
 * Strategy for using OAuth.
 */
public class OAuthStrategy implements AuthStrategy {

    private State state = State.UNAUTHORIZED;

    private enum State {
        UNAUTHORIZED,  // have not sent any requests
        REQUEST_TOKEN, // have a request token
        AUTHORIZED,    // are authorized
        ACCESS_TOKEN   // have access token, ready to make calls
    }

    private String username;
    private String consumerKey;
    private String consumerSecret;
    private String keyType;

    private String reqUrl;
    private String authzUrl;
    private String accessUrl;

    private String nonce;
    private long timestamp;

    private String requestToken = null;
    private String accessToken = null;
    private String tokenSecret = null;

    /**
     * Create OAuth authentcation strategy and negotiate with services to
     * obtain access token to be used in subsequent calls.
     * 
     * @param username  Username to be used in authentication
     * @param key       Consumer key
     * @param secret    Consumer secret
     * @param keyType   Key type (e.g. "HMAC-SHA1")
     * @param reqUrl    URL of request token service
     * @param authzUrl  URL of authorize service
     * @param accessUrl URL of acess token service
     * @throws ProponoException on any sort of initialization error
     */
    public OAuthStrategy(
        String username, String key, String secret, String keyType,
        String reqUrl, String authzUrl, String accessUrl) throws ProponoException {

        this.username       = username;
        this.reqUrl         = reqUrl;
        this.authzUrl       = authzUrl;
        this.accessUrl      = accessUrl;
        this.consumerKey    = key;
        this.consumerSecret = secret;
        this.keyType        = keyType;

        this.nonce = UUID.randomUUID().toString();
        this.timestamp = (long)(new Date().getTime()/1000L);

        init();
    }

    private void init() throws ProponoException {
        callOAuthUri(reqUrl);
        callOAuthUri(authzUrl);
        callOAuthUri(accessUrl);
    }

    public void addAuthentication(HttpClient httpClient, HttpMethodBase method) throws ProponoException {

        if (state != State.ACCESS_TOKEN) {
            throw new ProponoException("ERROR: authentication strategy failed init");
        }

        // add OAuth name/values to request query string

        // wish we didn't have to parse them apart first, ugh
        List originalqlist = null;
        if (method.getQueryString() != null) {
            String qstring = method.getQueryString().trim();
            qstring = qstring.startsWith("?") ? qstring.substring(1) : qstring;
            originalqlist = new ParameterParser().parse(qstring, '&');
        } else {
            originalqlist = new ArrayList();
        }

        // put query string into hashmap form to please OAuth.net classes
        Map params = new HashMap();
        for (Iterator it = originalqlist.iterator(); it.hasNext();) {
            NameValuePair pair = (NameValuePair)it.next();
            params.put(pair.getName(), pair.getValue());
        }

        // add OAuth params to query string
        params.put("xoauth_requestor_id", username);
        params.put("oauth_consumer_key", consumerKey);
        params.put("oauth_signature_method", keyType);
        params.put("oauth_timestamp", Long.toString(timestamp));
        params.put("oauth_nonce", nonce);
        params.put("oauth_token", accessToken);
        params.put("oauth_token_secret", tokenSecret);

        // sign complete URI
        String finalUri = null;
        OAuthServiceProvider provider =
            new OAuthServiceProvider(reqUrl, authzUrl, accessUrl);
        OAuthConsumer consumer =
            new OAuthConsumer(null, consumerKey, consumerSecret, provider);
        OAuthAccessor accessor = new OAuthAccessor(consumer);
        accessor.tokenSecret = tokenSecret;
        OAuthMessage message;
        try {
            message = new OAuthMessage(
               method.getName(), method.getURI().toString(), params.entrySet());
            message.sign(accessor);
            
            finalUri = OAuth.addParameters(message.URL, message.getParameters());

        } catch (Exception ex) {
            throw new ProponoException("ERROR: OAuth signing request", ex);
        }

        // pull query string off and put it back onto method
        method.setQueryString(finalUri.substring(finalUri.lastIndexOf("?")));
    }


    private void callOAuthUri(String uri) throws ProponoException {

        final HttpClient httpClient = new HttpClient();

        final HttpMethodBase method;
        final String content;

        Map params = new HashMap();
        if (params == null) {
            params = new HashMap();
        }
        params.put("oauth_version", "1.0");
        if (username != null) {
            params.put("xoauth_requestor_id", username);
        }
        params.put("oauth_consumer_key", consumerKey);
        params.put("oauth_signature_method", keyType);
        params.put("oauth_timestamp", Long.toString(timestamp));
        params.put("oauth_nonce", nonce);
        params.put("oauth_callback", "none");

        OAuthServiceProvider provider =
            new OAuthServiceProvider(reqUrl, authzUrl, accessUrl);
        OAuthConsumer consumer =
            new OAuthConsumer(null, consumerKey, consumerSecret, provider);
        OAuthAccessor accessor = new OAuthAccessor(consumer);

        if (state == State.UNAUTHORIZED) {

            try {
                OAuthMessage message = new OAuthMessage("GET", uri, params.entrySet());
                message.sign(accessor);

                String finalUri = OAuth.addParameters(message.URL, message.getParameters());
                method = new GetMethod(finalUri);
                httpClient.executeMethod(method);
                content = method.getResponseBodyAsString();

            } catch (Exception e) {
                throw new ProponoException("ERROR fetching request token", e);
            }

        } else if (state == State.REQUEST_TOKEN) {

            try {
                params.put("oauth_token", requestToken);
                params.put("oauth_token_secret", tokenSecret);
                accessor.tokenSecret = tokenSecret;

                OAuthMessage message = new OAuthMessage("POST", uri, params.entrySet());
                message.sign(accessor);

                String finalUri = OAuth.addParameters(message.URL, message.getParameters());
                method = new PostMethod(finalUri);
                httpClient.executeMethod(method);
                content = method.getResponseBodyAsString();

            } catch (Exception e) {
                throw new ProponoException("ERROR fetching request token", e);
            }

        } else if (state == State.AUTHORIZED) {
            
            try {
                params.put("oauth_token", accessToken);
                params.put("oauth_token_secret", tokenSecret);
                accessor.tokenSecret = tokenSecret;

                OAuthMessage message = new OAuthMessage("GET", uri, params.entrySet());
                message.sign(accessor);

                String finalUri = OAuth.addParameters(message.URL, message.getParameters());
                method = new GetMethod(finalUri);
                httpClient.executeMethod(method);
                content = method.getResponseBodyAsString();
                
            } catch (Exception e) {
                throw new ProponoException("ERROR fetching request token", e);
            }
            
        } else {
            method = null;
            content = null;
            return;
        }


        String token = null;
        String secret = null;

        if (content != null) {
            String[] settings = content.split("&");
            for (int i=0; i 1) {
                    if ("oauth_token".equals(setting[0])) {
                        token = setting[1];
                    } else if ("oauth_token_secret".equals(setting[0])) {
                        secret = setting[1];
                    }
                }
            }
        }

        switch (state) {

            case UNAUTHORIZED:
                if (token != null && secret != null) {
                    requestToken = token;
                    tokenSecret = secret;
                    state = State.REQUEST_TOKEN;
                } else {
                    throw new ProponoException("ERROR: requestToken or tokenSecret is null");
                }
                break;

            case REQUEST_TOKEN:
                if (method.getStatusCode() == 200) {
                    state = State.AUTHORIZED;
                } else {
                    throw new ProponoException("ERROR: authorization returned code: " + method.getStatusCode());
                }
                break;

            case AUTHORIZED:
                if (token != null && secret != null) {
                    accessToken = token;
                    tokenSecret = secret;
                    state = State.ACCESS_TOKEN;
                } else {
                    throw new ProponoException("ERROR: accessToken or tokenSecret is null");
                }
                break;
        }
    }
}