com.sun.xml.rpc.plugins.SecurityPlugin Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of webservices-rt Show documentation
Show all versions of webservices-rt Show documentation
This module contains the Metro runtime code.
/*
* Copyright (c) 2010, 2018 Oracle and/or its affiliates. All rights reserved.
*
* This program and the accompanying materials are made available under the
* terms of the Eclipse Distribution License v. 1.0, which is available at
* http://www.eclipse.org/org/documents/edl-v10.php.
*
* SPDX-License-Identifier: BSD-3-Clause
*/
/*
* $Id: SecurityPlugin.java,v 1.2 2010-10-21 15:35:43 snajper Exp $
*/
package com.sun.xml.rpc.plugins;
import java.io.File;
import java.io.IOException;
import java.io.InputStream;
import java.io.PrintStream;
import java.io.FileInputStream;
import java.io.DataInputStream;
import java.io.ByteArrayInputStream;
import java.util.StringTokenizer;
import com.sun.xml.rpc.tools.plugin.ToolPlugin;
import com.sun.xml.rpc.tools.wscompile.UsageIf;
import com.sun.xml.rpc.tools.wscompile.ModelIf;
import com.sun.xml.rpc.tools.wscompile.TieHooksIf;
import com.sun.xml.rpc.tools.wscompile.StubHooksIf;
import com.sun.xml.rpc.tools.wscompile.ModelIf.ModelProperty;
import com.sun.xml.rpc.util.localization.Localizable;
import com.sun.xml.rpc.util.localization.LocalizableMessageFactory;
import com.sun.xml.rpc.processor.model.Port;
import com.sun.xml.rpc.processor.model.Model;
import com.sun.xml.rpc.processor.util.IndentingWriter;
import com.sun.xml.wss.WSITXMLFactory;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
import org.xml.sax.SAXException;
import org.xml.sax.SAXParseException;
import org.xml.sax.helpers.DefaultHandler;
public class SecurityPlugin extends ToolPlugin implements UsageIf, ModelIf,
StubHooksIf, TieHooksIf {
private File securityFile = null;
private LocalizableMessageFactory messageFactory;
private static final String sec_util = "secPgUtil";
private static final String sec_util_pkg = "com.sun.xml.rpc.security";
private static final String SECURITY_PROPERTY = "com.sun.xml.rpc.security";
public SecurityPlugin() {
messageFactory = new LocalizableMessageFactory("com.sun.xml.rpc.plugins.sec");
}
public Localizable getOptionsUsage() {
return messageFactory.getMessage("sec.usage.options", (Object[]) null);
}
public Localizable getFeaturesUsage() {
return null;
}
public Localizable getInternalUsage() {
return null;
}
public Localizable getExamplesUsage() {
return null;
}
public boolean parseArguments(String[] args, UsageError err) {
securityFile = null;
for (int i = 0; i < args.length; i++) {
if (args[i] != null && args[i].equals("-security")) {
if ((i + 1) < args.length) {
if (securityFile != null) {
err.msg =
messageFactory.getMessage(
"sec.duplicateOption",
new Object[] { "-security" });
return false;
}
args[i] = null;
securityFile = new File(args[++i]);
args[i] = null;
} else {
err.msg =
messageFactory.getMessage(
"sec.missingOptionArgument",
new Object[] { "-security" });
return false;
}
}
}
return true;
}
public void updateModel(ModelProperty property) {
if (securityFile != null) {
property.attr = SECURITY_PROPERTY;
try {
DataInputStream in = new DataInputStream(new FileInputStream(securityFile));
byte[] xmlBytes = new byte[(int)securityFile.length()];
in.readFully(xmlBytes);
in.close();
/* validate security configuration */
DocumentBuilderFactory factory =
WSITXMLFactory.createDocumentBuilderFactory(WSITXMLFactory.DISABLE_SECURE_PROCESSING);
factory.setAttribute("http://apache.org/xml/features/validation/dynamic", Boolean.FALSE);
factory.setAttribute("http://java.sun.com/xml/jaxp/properties/schemaLanguage",
"http://www.w3.org/2001/XMLSchema");
InputStream is = SecurityPlugin.class.getResourceAsStream("xwssconfig.xsd");
boolean validate = true;
try {
InputStream isV = SecurityPlugin.class.getResourceAsStream("disablevalidation.xml");
if (isV != null)
validate = false;
} catch (Exception e) {
//ignore
}
if (validate) {
factory.setAttribute("http://java.sun.com/xml/jaxp/properties/schemaSource", is);
factory.setValidating(true);
factory.setIgnoringComments(true);
factory.setNamespaceAware(true);
DocumentBuilder builder = factory.newDocumentBuilder();
builder.setErrorHandler(new ErrorHandler(System.out));
ByteArrayInputStream inputStream = new ByteArrayInputStream(xmlBytes);
builder.parse(inputStream);
}
property.value = processString(new String(xmlBytes));
} catch (Exception e) {
throw new RuntimeException(e);
}
}
}
public void _preHandlingHook(Model model,
IndentingWriter p,
StubHooksState state)
throws IOException {
String config = (String)model.getProperty(SECURITY_PROPERTY);
if (config != null) {
p.pln("//Generated by security plugin");
writeCheckMustUnderstandInStub(p);
p.pln(sec_util + "._preHandlingHook(state);");
p.pln("super._preHandlingHook(state);");
p.flush();
state.superDone = true;
}
}
public void _preRequestSendingHook(Model model,
IndentingWriter p,
StubHooksState state)
throws IOException {
String config = (String)model.getProperty(SECURITY_PROPERTY);
if (config != null) {
p.pln("//Generated by security plugin");
p.pln("super._preRequestSendingHook(state);");
p.pln("bool = " + sec_util + "._preRequestSendingHook(state);");
p.flush();
state.superDone = true;
}
}
public void preHandlingHook(Model model,
IndentingWriter p,
TieHooksState state)
throws IOException {
String config = (String)model.getProperty(SECURITY_PROPERTY);
if (config != null) {
p.pln("//Generated by security plugin");
writeCheckMustUnderstandInTie(p);
p.plnI("try {");
p.pln("if (!" + sec_util + ".preHandlingHook(state)) return false;");
p.pOlnI("} catch (javax.xml.rpc.soap.SOAPFaultException sfe) {");
p.pln("SOAPFaultInfo fault = new SOAPFaultInfo(sfe.getFaultCode(), sfe.getFaultString(), sfe.getFaultActor());");
p.pln("reportFault(fault, state);");
p.pln("return false;");
p.pOln("}");
p.pln("bool = super.preHandlingHook(state);");
p.flush();
state.superDone = true;
}
}
public void postResponseWritingHook(Model model,
IndentingWriter p,
TieHooksState state)
throws IOException {
String config = (String)model.getProperty(SECURITY_PROPERTY);
if (config != null) {
p.pln("//Generated by security plugin");
p.pln("super.postResponseWritingHook(state);");
p.pln(sec_util + ".postResponseWritingHook(state);");
p.flush();
state.superDone = true;
}
}
public void writeStubStatic(Model model, IndentingWriter p) throws IOException {
// nop
}
public void writeTieStatic(Model model, IndentingWriter p) throws IOException {
// nop
}
public void writeStubStatic(Model model, Port port, IndentingWriter p) throws IOException {
writeStatics(model, port, p, true);
}
public void writeTieStatic(Model model, Port port, IndentingWriter p) throws IOException {
writeStatics(model, port, p, false);
}
private void writeStatics(Model model, Port port, IndentingWriter p, boolean isStub) throws IOException {
String config = (String)model.getProperty(SECURITY_PROPERTY);
if (config != null) {
config = "\"[version 1.0 FCS]" + config + "\"";
String decl = "private static " +
sec_util_pkg + ".SecurityPluginUtil " +
sec_util + ";";
String block_begin = "static {";
String block_body1 = "try {";
String block_body2 = sec_util +
" = new " +
sec_util_pkg + ".SecurityPluginUtil(" +
config +
", \"" + port.getName() + "\"" +
", " + Boolean.valueOf(isStub) + ");";
String block_body3 = "} catch (Exception e) {";
String block_body4 = "e.printStackTrace();";
String block_body5 = "throw new RuntimeException(e);";
String block_body6 = "}";
String block_end = "}";
p.pln(decl);
p.pln();
p.plnI(block_begin);
p.plnI(block_body1);
p.flush();
char[] array = block_body2.toCharArray();
for (int i =0; i