org.apache.wss4j.common.spnego.DefaultSpnegoServiceAction Maven / Gradle / Ivy
/**
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.apache.wss4j.common.spnego;
import org.ietf.jgss.GSSContext;
import org.ietf.jgss.GSSException;
import org.ietf.jgss.GSSManager;
import org.ietf.jgss.GSSName;
import org.ietf.jgss.Oid;
/**
* This class represents a PrivilegedAction implementation to validate a received (SPNEGO) ticket
* to a KDC.
*/
public class DefaultSpnegoServiceAction implements SpnegoServiceAction {
private static final org.slf4j.Logger LOG =
org.slf4j.LoggerFactory.getLogger(DefaultSpnegoServiceAction.class);
private byte[] ticket;
private String serviceName;
private boolean isUsernameServiceNameForm;
private GSSContext secContext;
/**
* Set the ticket to validate
*/
public void setTicket(byte[] ticket) {
this.ticket = ticket;
}
/**
* The Service Name
*/
public void setServiceName(String serviceName) {
this.serviceName = serviceName;
}
/**
* Validate a service ticket
*/
public byte[] run() {
try {
GSSManager gssManager = GSSManager.getInstance();
Oid oid = new Oid("1.3.6.1.5.5.2");
GSSName gssService =
gssManager.createName(serviceName, isUsernameServiceNameForm ? GSSName.NT_USER_NAME
: GSSName.NT_HOSTBASED_SERVICE);
secContext = gssManager.createContext(gssService, oid, null, GSSContext.DEFAULT_LIFETIME);
return secContext.acceptSecContext(ticket, 0, ticket.length);
} catch (GSSException e) {
LOG.debug("Error in obtaining a Kerberos token", e);
}
return new byte[0];
}
/**
* Get the GSSContext that was created after a service ticket was obtained
*/
public GSSContext getContext() {
return secContext;
}
@Override
public void setUsernameServiceNameForm(boolean isUsernameServiceNameForm) {
this.isUsernameServiceNameForm = isUsernameServiceNameForm;
}
}