org.beangle.security.realm.cas.CasConfig.scala Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of beangle-security-cas_2.12 Show documentation
There is a newer version: 4.2.7
Show newest version
/*
 * Beangle, Agile Development Scaffold and Toolkits.
 *
 * Copyright © 2005, The Beangle Software.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program.  If not, see .
 */
package org.beangle.security.realm.cas

import org.beangle.commons.bean.Initializing
import org.beangle.commons.lang.{ Assert, Strings }

import javax.servlet.http.HttpServletRequest

object CasConfig {

  def getLocalServer(request: HttpServletRequest): String = {
    val sb = new StringBuilder()
    val scheme = request.getScheme()
    val port = request.getServerPort()
    val serverName = request.getServerName()
    var includePort = true
    if (null != scheme) {
      sb.append(scheme).append("://")
      includePort = (port != (if (scheme.equals("http")) 80 else 443))
    }
    if (null != serverName) {
      sb.append(serverName)
      if (includePort && port > 0) sb.append(':').append(port)
    }
    sb.toString
  }

  val TicketName = "ticket"
}

class CasConfig(server: String) extends Initializing {
  val casServer = Strings.stripEnd(server, "/")
  /**
   * Indicates whether the renew parameter should be sent to the
   * CAS login URL and CAS validation URL.
   * 
   * If true, it will force CAS to authenticate the user again (even if the user has
   * previously authenticated). During ticket validation it will require the ticket was generated as
   * a consequence of an explicit login. High security applications would probably set this to
   * true. Defaults to false, providing automated single sign on.
   */
  var renew = false

  var artifactName = CasConfig.TicketName

  var loginUri = "/login"

  var logoutUri = "/logout"

  var validateUri = "/serviceValidate"

  var checkAliveUri = "/checkAlive"

  def init() {
    Assert.notEmpty(this.loginUri, "loginUri must be specified. like /login")
    Assert.notEmpty(this.artifactName, "artifact name  must be specified.etc. ticket")
  }
  /**
   * The enterprise-wide CAS login URL. Usually something like
   * https://www.mycompany.com/cas/login.
   */
  def loginUrl: String = casServer + loginUri

  def logoutUrl: String = casServer + logoutUri
}