org.openksavi.sponge.restapi.security.BaseInMemoryKnowledgeBaseProvidedSecurityService Maven / Gradle / Ivy

Go to download
/*
 * Copyright 2016-2018 The Sponge authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.openksavi.sponge.restapi.security;

import java.util.Collections;
import java.util.LinkedHashSet;
import java.util.Objects;
import java.util.Optional;
import java.util.Set;
import java.util.stream.Collectors;

import org.apache.commons.codec.digest.DigestUtils;
import org.apache.commons.lang3.Validate;

public abstract class BaseInMemoryKnowledgeBaseProvidedSecurityService extends KnowledgeBaseProvidedSecurityService {

    private static final String HASH_SALT = "sponge";

    protected Set users = Collections.synchronizedSet(new LinkedHashSet<>());

    protected BaseInMemoryKnowledgeBaseProvidedSecurityService() {
        //
    }

    public Set getUsers() {
        return users;
    }

    public void addUser(User user) {
        Validate.isTrue(users.add(user), "User %s already exists", user.getName());
    }

    public void removeUser(String username) {
        users.removeAll(users.stream().filter(user -> Objects.equals(user.getName(), username)).collect(Collectors.toSet()));
    }

    public User getUser(String username) {
        Optional userO = users.stream().filter(user -> Objects.equals(user.getName(), username)).findFirst();

        Validate.isTrue(userO.isPresent(), "User %s not found", username);

        return userO.get();
    }

    public void updateUser(User user) {
        getUser(user.getName()).copyFrom(user);
    }

    protected String hashPassword(String password) {
        return password != null ? DigestUtils.sha256Hex(HASH_SALT + password) : null;
    }

    /**
     * Returns {@code null} if the user doesn't exist or the password is incorrect.
     *
     * @param username the user name.
     * @param password the password
     * @return the user.
     */
    protected User verifyInMemory(String username, String password) {
        // Hash the password.
        String hashedPassword = hashPassword(password);

        return users.stream().filter(user -> Objects.equals(user.getName(), username))
                .filter(user -> Objects.equals(user.getPassword(), hashedPassword)).findAny().orElse(null);
    }
}