org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of undertow-server
Integration project for integrating Elytron based HTTP authentication with Undertow.
There is a newer version: 4.1.0.Final
/*
 * JBoss, Home of Professional Open Source.
 * Copyright 2015 Red Hat, Inc., and individual contributors
 * as indicated by the @author tags.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.wildfly.elytron.web.undertow.server;

import static org.wildfly.common.Assert.checkNotNullParam;

import java.util.concurrent.Callable;
import java.util.function.BiFunction;

import org.wildfly.security.auth.server.FlexibleIdentityAssociation;
import org.wildfly.security.auth.server.SecurityIdentity;

import io.undertow.security.idm.Account;
import io.undertow.server.HttpHandler;
import io.undertow.server.HttpServerExchange;

/**
 * A {@link HttpHandler} to be placed after the request has switched to blocking mode to associate the {@link SecurityIdentity}
 * with the current thread.
 *
 * @author Darran Lofthouse
 */
public class ElytronRunAsHandler implements HttpHandler {

    private final HttpHandler next;
    private final BiFunction identityTransformer;

    public ElytronRunAsHandler(HttpHandler next) {
        this(next, (s, e) -> s);
    }

    public ElytronRunAsHandler(HttpHandler next, BiFunction identityTransformer) {
        this.next = checkNotNullParam("next", next);
        this.identityTransformer = checkNotNullParam("identityTransformer", identityTransformer);
    }

    /**
     * @see io.undertow.server.HttpHandler#handleRequest(io.undertow.server.HttpServerExchange)
     */
    @Override
    public void handleRequest(HttpServerExchange exchange) throws Exception {
        SecurityContextImpl securityContext = (SecurityContextImpl) exchange.getSecurityContext();
        Account account = securityContext != null ? securityContext.getAuthenticatedAccount() : null;
        SecurityIdentity securityIdentity = (account instanceof ElytronAccount) ? ((ElytronAccount)account).getSecurityIdentity() : null;

        securityIdentity = identityTransformer.apply(securityIdentity, exchange);
        FlexibleIdentityAssociation flexibleIdentityAssociation = securityContext.getFlexibleIdentityAssociation();
        if (flexibleIdentityAssociation != null) {
            if(securityIdentity != null){
                flexibleIdentityAssociation.setIdentity(securityIdentity);
            }
            flexibleIdentityAssociation.runAs((Callable) () -> {
                next.handleRequest(exchange);
                return null;
            });
        } else if(securityIdentity != null) {
            securityIdentity.runAs((Callable) () -> {
                next.handleRequest(exchange);
                return null;
            });
        } else {
            next.handleRequest(exchange);
        }
    }

}