org.teiid.spring.identity.SpringSecurityHelper Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of teiid-spring-boot-starter Show documentation
There is a newer version: 1.7.2
Show newest version
/*
 * Copyright 2012-2017 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.teiid.spring.identity;

import javax.security.auth.Subject;
import javax.security.auth.login.LoginException;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.context.SecurityContextHolder;
import org.teiid.security.Credentials;
import org.teiid.security.GSSResult;
import org.teiid.security.SecurityHelper;

public class SpringSecurityHelper implements SecurityHelper {
    private static final String ANONYMOUS = "anonymous";
    private static final Log logger = LogFactory.getLog(SpringSecurityHelper.class);

    private AuthenticationManager authenticationManager;

    @Override
    public Object associateSecurityContext(Object newContext) {
        Authentication context = SecurityContextHolder.getContext().getAuthentication();
        if (newContext != context) {
            SecurityContextHolder.getContext().setAuthentication((Authentication)newContext);
        }
        return context;
    }

    @Override
    public void clearSecurityContext() {
        SecurityContextHolder.getContext().setAuthentication(null);
    }

    @Override
    public Object getSecurityContext(String securityDomain) {
        return SecurityContextHolder.getContext().getAuthentication();
    }

    @Override
    public Subject getSubjectInContext(Object context) {
        if (!(context instanceof Authentication)) {
            return null;
        }
        Authentication sc = (Authentication)context;
        return buildSubject(sc);
    }

    @Override
    public Object authenticate(String securityDomain, String baseUserName,
            Credentials credentials, String applicationName) throws LoginException {
        Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
        if (authenticationManager != null) {
            //if authentication is not null, we'll logically treat as caller identity
            if (authentication == null) {
                UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(baseUserName,
                        credentials == null ? null
                                : new String(credentials.getCredentialsAsCharArray()));
                try {
                    authentication = authenticationManager.authenticate(token);
                } catch (AuthenticationException e) {
                    throw new LoginException(e.getMessage());
                }
            }
            baseUserName = authentication.getName();
        } else {
            return null;
        }
        if (logger.isTraceEnabled()) {
            logger.trace("Logged in user: " + baseUserName);
        }
        return authentication;
    }

    @Override
    public GSSResult negotiateGssLogin(String securityDomain, byte[] serviceTicket) throws LoginException {
        return null;
    }

    private Subject buildSubject(final Authentication authentication) {
        Subject s = new Subject();
        s.getPrincipals().add(new SimplePrincipal(authentication == null ? ANONYMOUS:authentication.getName()));
        if (authentication != null) {
            SimpleGroup g = new SimpleGroup("Roles");
            for (GrantedAuthority ga : authentication.getAuthorities()) {
                String role = ga.getAuthority();
                g.addMember(new SimplePrincipal(role));
            }
            s.getPrincipals().add(g);
        }
        return s;
    }

    public void setAuthenticationManager(AuthenticationManager authenticationManager) {
        this.authenticationManager = authenticationManager;
    }

}