org.apache.hbase.thirdparty.org.eclipse.jetty.security.authentication.SessionAuthentication Maven / Gradle / Ivy
//
// ========================================================================
// Copyright (c) 1995-2021 Mort Bay Consulting Pty Ltd and others.
// ------------------------------------------------------------------------
// All rights reserved. This program and the accompanying materials
// are made available under the terms of the Eclipse Public License v1.0
// and Apache License v2.0 which accompanies this distribution.
//
// The Eclipse Public License is available at
// http://www.eclipse.org/legal/epl-v10.html
//
// The Apache License v2.0 is available at
// http://www.opensource.org/licenses/apache2.0.php
//
// You may elect to redistribute this code under either of these licenses.
// ========================================================================
//
package org.apache.hbase.thirdparty.org.eclipse.jetty.security.authentication;
import java.io.IOException;
import java.io.ObjectInputStream;
import java.io.Serializable;
import javax.servlet.http.HttpSession;
import javax.servlet.http.HttpSessionActivationListener;
import javax.servlet.http.HttpSessionBindingEvent;
import javax.servlet.http.HttpSessionBindingListener;
import javax.servlet.http.HttpSessionEvent;
import org.apache.hbase.thirdparty.org.eclipse.jetty.security.AbstractUserAuthentication;
import org.apache.hbase.thirdparty.org.eclipse.jetty.security.LoginService;
import org.apache.hbase.thirdparty.org.eclipse.jetty.security.SecurityHandler;
import org.apache.hbase.thirdparty.org.eclipse.jetty.server.UserIdentity;
import org.apache.hbase.thirdparty.org.eclipse.jetty.util.log.Log;
import org.apache.hbase.thirdparty.org.eclipse.jetty.util.log.Logger;
/**
* SessionAuthentication
*
* When a user has been successfully authenticated with some types
* of Authenticator, the Authenticator stashes a SessionAuthentication
* into an HttpSession to remember that the user is authenticated.
*/
public class SessionAuthentication extends AbstractUserAuthentication
implements Serializable, HttpSessionActivationListener, HttpSessionBindingListener
{
private static final Logger LOG = Log.getLogger(SessionAuthentication.class);
private static final long serialVersionUID = -4643200685888258706L;
public static final String __J_AUTHENTICATED = "org.apache.hbase.thirdparty.org.eclipse.jetty.security.UserIdentity";
private final String _name;
private final Object _credentials;
private transient HttpSession _session;
public SessionAuthentication(String method, UserIdentity userIdentity, Object credentials)
{
super(method, userIdentity);
_name = userIdentity.getUserPrincipal().getName();
_credentials = credentials;
}
@Override
public UserIdentity getUserIdentity()
{
if (_userIdentity == null)
throw new IllegalStateException("!UserIdentity");
return super.getUserIdentity();
}
private void readObject(ObjectInputStream stream)
throws IOException, ClassNotFoundException
{
stream.defaultReadObject();
SecurityHandler security = SecurityHandler.getCurrentSecurityHandler();
if (security == null)
{
if (LOG.isDebugEnabled())
LOG.debug("!SecurityHandler");
return;
}
LoginService loginService = security.getLoginService();
if (loginService == null)
{
if (LOG.isDebugEnabled())
LOG.debug("!LoginService");
return;
}
_userIdentity = loginService.login(_name, _credentials, null);
LOG.debug("Deserialized and relogged in {}", this);
}
@Override
@Deprecated
public void logout()
{
}
@Override
public String toString()
{
return String.format("%s@%x{%s,%s}", this.getClass().getSimpleName(), hashCode(), _session == null ? "-" : _session.getId(), _userIdentity);
}
@Override
public void sessionWillPassivate(HttpSessionEvent se)
{
}
@Override
public void sessionDidActivate(HttpSessionEvent se)
{
if (_session == null)
{
_session = se.getSession();
}
}
@Override
@Deprecated
public void valueBound(HttpSessionBindingEvent event)
{
}
@Override
@Deprecated
public void valueUnbound(HttpSessionBindingEvent event)
{
}
}