net.unicon.cas.mfa.authentication.OrderedMultiFactorMethodRankingStrategy Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of cas-mfa-java Show documentation

This module is intended to include all the Java you need to add to a CAS implementation to take advantage of the extended multifactor authentication features in this project.

There is a newer version: 2.0.0-RC3

Show newest version

package net.unicon.cas.mfa.authentication;

import net.unicon.cas.mfa.web.support.MultiFactorAuthenticationSupportingWebApplicationService;
import org.springframework.core.annotation.AnnotationAwareOrderComparator;
import org.springframework.util.Assert;

import javax.validation.constraints.NotNull;
import java.util.ArrayList;
import java.util.List;
import java.util.Set;

/**
 * Ranking strategy implementation that utilizes {@link org.springframework.core.Ordered} abstraction
 * of {@link net.unicon.cas.mfa.authentication.MultiFactorAuthenticationRequestContext}.
 *
 * @author Dmitriy Kopylenko
 * @author Unicon, inc.
 */
public class OrderedMultiFactorMethodRankingStrategy implements RequestedAuthenticationMethodRankingStrategy {

    /**
     * The authn method loader.
     */
    private final AuthenticationMethodConfigurationProvider authenticationMethodConfiguration;

    /**
     * Ctor.
     *
     * @param authenticationMethodConfiguration the authentication method loader
     */
    public OrderedMultiFactorMethodRankingStrategy(final AuthenticationMethodConfigurationProvider authenticationMethodConfiguration) {
        this.authenticationMethodConfiguration = authenticationMethodConfiguration;
    }

    @Override
    public MultiFactorAuthenticationSupportingWebApplicationService
    computeHighestRankingAuthenticationMethod(@NotNull final MultiFactorAuthenticationTransactionContext mfaTransaction) {
        final List sortedRequests =
                new ArrayList(mfaTransaction.getMfaRequests());

        AnnotationAwareOrderComparator.sort(sortedRequests);
        return sortedRequests.get(0).getMfaService();
    }

    /**
     * Sort the list of requests.
     *
     * @param sortedRequests the sorted requests
     * @return the list
     */
    protected List sortRequests(
            final List sortedRequests) {
        AnnotationAwareOrderComparator.sort(sortedRequests);
        return sortedRequests;
    }

    @Override
    public boolean anyPreviouslyAchievedAuthenticationMethodsStrongerThanRequestedOne(
            final Set previouslyAchievedAuthenticationMethods, final String requestedAuthenticationMethod) {

        Assert.notNull(previouslyAchievedAuthenticationMethods);
        Assert.notNull(requestedAuthenticationMethod);

        if (previouslyAchievedAuthenticationMethods.isEmpty()) {
            return false;
        }

        final Integer requestedRank = getRank(requestedAuthenticationMethod);
        Integer prevRank = null;
        for (final String prevMethod : previouslyAchievedAuthenticationMethods) {
            prevRank = getRank(prevMethod);
            //Lower rank value == stronger (higher order)
            //We also treat equal ranks as 'not stronger'
            if (prevRank <= requestedRank) {
                return true;
            }
        }
        return false;
    }

    /**
     * Retrieve rank value from the internal Map instance variable for the provided mfa method key.
     *
     * @param mfaMethod key to retrieve the rank value for
     *
     * @return rank value
     *
     * @throws IllegalStateException if the Map is mis-configured i.e. does not hold valid (mfaMethod -> rank) configuration data.
     *                               This is totally a config/deployment error as opposed to external input validation error.
     */
    private Integer getRank(final String mfaMethod) {
        final Integer rank = this.authenticationMethodConfiguration.getAuthenticationMethod(mfaMethod).getRank();
        if (rank == null) {
            throw new IllegalStateException("The [mfaRankingConfig] Map is mis-configured. It does not have a ranking value mapping for the"
                    + " [" + mfaMethod + "] authentication method.");
        }
        return rank;
    }
}