org.beangle.ids.cas.service.DBLdapCredentialChecker.scala Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of beangle-ids-cas_2.13 Show documentation

The newest version!

/*
 * Beangle, Agile Development Scaffold and Toolkits.
 *
 * Copyright © 2005, The Beangle Software.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program.  If not, see .
 */
package org.beangle.ids.cas.service

import org.beangle.security.authc.{CredentialChecker, DBCredentialStore}
import org.beangle.security.codec.DefaultPasswordEncoder
import org.beangle.security.realm.ldap.LdapCredentialStore

class DBLdapCredentialChecker extends CredentialChecker {
  var dbStore: DBCredentialStore = _
  var ldapStore: Option[LdapCredentialStore] = None

  override def check(principal: Any, credential: Any): Boolean = {
    dbStore.getPassword(principal) match {
      case None => false
      case Some(dbpwd) =>
        ldapStore match {
          case Some(ldap) =>
            ldap.getPassword(principal) match {
              case Some(p) =>
                val ldapCorrect = DefaultPasswordEncoder.verify(p, credential.toString)
                if (ldapCorrect && p != dbpwd) {
                  dbStore.updatePassword(principal, p)
                }
                ldapCorrect
              case None =>
                DefaultPasswordEncoder.verify(dbpwd, credential.toString)
            }
          case None =>
            DefaultPasswordEncoder.verify(dbpwd, credential.toString)
        }
    }
  }
}