org.jboss.security.auth.container.modules.DelegatingServerAuthModule Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of jbosssx-bare
PicketBox is a security project for Java Applications.
There is a newer version: 5.1.0.Final
/*
  * JBoss, Home of Professional Open Source
  * Copyright 2007, JBoss Inc., and individual contributors as indicated
  * by the @authors tag. See the copyright.txt in the distribution for a
  * full listing of individual contributors.
  *
  * This is free software; you can redistribute it and/or modify it
  * under the terms of the GNU Lesser General Public License as
  * published by the Free Software Foundation; either version 2.1 of
  * the License, or (at your option) any later version.
  *
  * This software is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  * Lesser General Public License for more details.
  *
  * You should have received a copy of the GNU Lesser General Public
  * License along with this software; if not, write to the Free
  * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
  * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
  */
package org.jboss.security.auth.container.modules;

import javax.security.auth.Subject;
import javax.security.auth.login.LoginContext;
import javax.security.auth.login.LoginException;
import javax.security.auth.message.AuthException;
import javax.security.auth.message.AuthStatus;
import javax.security.auth.message.MessageInfo;
 
/**
 *  Server Auth Module that delegates work to a login context 
 *  @author [email protected]
 *  @since  Jul 25, 2007 
 *  @version $Revision$
 */
@SuppressWarnings({"rawtypes"})
public class DelegatingServerAuthModule extends AbstractServerAuthModule
{  
   private LoginContext loginContext = null;
   private String loginContextName = null;

   public DelegatingServerAuthModule()
   {  
      this.supportedTypes.add(Object.class);
   }
   
   public DelegatingServerAuthModule(String loginModuleStackHolderName)
   {
      this();
      this.loginContextName = loginModuleStackHolderName;
   }
   
   public Class[] getSupportedMessageTypes()
   { 
      Class[] clarr = new Class[this.supportedTypes.size()];
      this.supportedTypes.toArray(clarr);
      return clarr;
   }

   public void cleanSubject(MessageInfo messageInfo, Subject subject) throws AuthException
   {
      if(loginContext != null)
         try
         {
            loginContext.logout();
         }
         catch (LoginException e)
         {
            throw new AuthException(e.getLocalizedMessage());
         } 
   }

   public AuthStatus secureResponse(MessageInfo messageInfo, Subject arg1) throws AuthException
   { 
      throw new UnsupportedOperationException();
   } 
   
   @Override
   protected boolean validate(Subject clientSubject, MessageInfo messageInfo) throws AuthException
   {
      try
      {
         loginContext = SecurityActions.createLoginContext(getSecurityDomainName(), clientSubject, this.callbackHandler);
         loginContext.login();
         return true;
      }
      catch (Exception e)
      {
          throw new AuthException(e.getLocalizedMessage());
      }   
   }

   private String getSecurityDomainName()
   {
      if(loginContextName != null)
         return loginContextName;
      
      //Check if it is passed in the options
      String domainName = (String) options.get("javax.security.auth.login.LoginContext");
      if(domainName == null)
      {
         domainName = getClass().getName();  
      }
      return domainName;
   }
}