net.lightbody.bmp.proxy.jetty.util.Credential Maven / Gradle / Ivy
// ========================================================================
// $Id: Credential.java,v 1.7 2005/08/13 00:01:28 gregwilkins Exp $
// Copyright 1998-2004 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
// http://www.apache.org/licenses/LICENSE-2.0
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// ========================================================================
package net.lightbody.bmp.proxy.jetty.util;
import net.lightbody.bmp.proxy.jetty.log.LogFactory;
import org.apache.commons.logging.Log;
import java.security.MessageDigest;
/* ------------------------------------------------------------ */
/** Credentials.
* The Credential class represents an abstract mechanism for checking
* authentication credentials. A credential instance either represents a
* secret, or some data that could only be derived from knowing the secret.
*
* Often a Credential is related to a Password via a one way algorithm, so
* while a Password itself is a Credential, a UnixCrypt or MD5 digest of a
* a password is only a credential that can be checked against the password.
*
* This class includes an implementation for unix Crypt an MD5 digest.
* @see Password
* @version $Id: Credential.java,v 1.7 2005/08/13 00:01:28 gregwilkins Exp $
* @author Greg Wilkins (gregw)
*/
public abstract class Credential
{
static Log log = LogFactory.getLog(Credential.class);
/* ------------------------------------------------------------ */
/** Check a credential
* @param credentials The credential to check against. This may either be
* another Credential object, a Password object or a String which is
* interpreted by this credential.
* @return True if the credentials indicated that the shared secret is
* known to both this Credential and the passed credential.
*/
public abstract boolean check(Object credentials);
/* ------------------------------------------------------------ */
/** Get a credential from a String.
* If the credential String starts with a known Credential type (eg
* "CRYPT:" or "MD5:" ) then a Credential of that type is returned. Else the
* credential is assumed to be a Password.
* @param credential String representation of the credential
* @return A Credential or Password instance.
*/
public static Credential getCredential(String credential)
{
if (credential.startsWith(Crypt.__TYPE))
return new Crypt(credential);
if (credential.startsWith(MD5.__TYPE))
return new MD5(credential);
return new Password(credential);
}
/* ------------------------------------------------------------ */
/** Unix Crypt Credentials
*/
public static class Crypt extends Credential
{
public static final String __TYPE="CRYPT:";
private String _cooked;
Crypt(String cooked)
{
_cooked=cooked.startsWith(Crypt.__TYPE)
?cooked.substring(__TYPE.length())
:cooked;
}
public boolean check(Object credentials)
{
if (!(credentials instanceof String) &&
!(credentials instanceof Password))
log.warn("Can't check "+credentials.getClass()+" against CRYPT");
String passwd = credentials.toString();
return _cooked.equals(UnixCrypt.crypt(passwd,_cooked));
}
public static String crypt(String user,String pw)
{
return "CRYPT:"+UnixCrypt.crypt(pw,user);
}
}
/* ------------------------------------------------------------ */
/** MD5 Credentials
*/
public static class MD5 extends Credential
{
public static final String __TYPE="MD5:";
private static MessageDigest __md;
private byte[] _digest;
/* ------------------------------------------------------------ */
MD5(String digest)
{
digest=digest.startsWith(__TYPE)
?digest.substring(__TYPE.length())
:digest;
_digest=TypeUtil.parseBytes(digest,16);
}
/* ------------------------------------------------------------ */
public byte[] getDigest()
{
return _digest;
}
/* ------------------------------------------------------------ */
public boolean check(Object credentials)
{
try
{
byte[] digest=null;
if (credentials instanceof Password ||
credentials instanceof String)
{
synchronized(__TYPE)
{
if (__md==null)
__md = MessageDigest.getInstance("MD5");
__md.reset();
__md.update(credentials.toString().getBytes(StringUtil.__ISO_8859_1));
digest=__md.digest();
}
if (digest==null || digest.length!=_digest.length)
return false;
for (int i=0;i