Java Credentials类代码示例

import com.hazelcast.security.Credentials; //导入依赖的package包/类
@Override
public void before(Credentials credentials, String objectType, String objectName,
                   String methodName, Parameters parameters) throws AccessControlException {
    if (objectName.equals(DENIED_MAP_NAME)) {
        throw new RuntimeException("Denied Map!!!");
    }
    if (methodName.equals(DENIED_METHOD)) {
        throw new RuntimeException("Denied Method!!!");
    }
    final Object firstParam = parameters.get(0);
    final Object secondParam = parameters.get(1);
    if (firstParam.equals(DENIED_KEY)) {
        throw new RuntimeException("Denied Key!!!");
    }
    if (secondParam.equals(DENIED_VALUE)) {
        throw new RuntimeException("Denied Value!!!");
    }
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
@Override
public void readData(DataInput in) throws IOException {
    packetVersion = in.readByte();
    buildNumber = in.readInt();
    boolean hasTo = in.readBoolean();
    if (hasTo) {
        to = new Address();
        to.readData(in);
    }
    address = new Address();
    address.readData(in);
    nodeType = NodeType.create(in.readInt());
    config = new Config();
    config.readData(in);
    uuid = in.readUTF();
    boolean hasCredentials = in.readBoolean();
    if (hasCredentials) {
        credentials = (Credentials) SerializationHelper.readObject(in);
        if (credentials != null) {
            credentials.setEndpoint(address.getHost());
        }
    }
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public void bind(Connection connection, Credentials credentials) throws IOException {
        logger.log(Level.FINEST, connection + " -> "
                + connection.getAddress().getHostName() + ":" + connection.getSocket().getLocalPort());
        auth(connection, credentials);
//        Bind b = null;
//        try {
//            b = new Bind(new Address(connection.getAddress().getHostName(), connection.getSocket().getLocalPort()));
//        } catch (UnknownHostException e) {
//            logger.log(Level.WARNING, e.getMessage() + " while creating the bind package.");
//            throw e;
//        }
//        System.out.println("Client Bind = " + b);
//        Packet bind = new Packet();
//        bind.set("remotelyProcess", ClusterOperation.REMOTELY_PROCESS, toByte(null), toByte(b));
//        write(connection, bind);
    }
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public JoinInfo createJoinInfo(boolean withCredentials) {
    final JoinInfo jr = new JoinInfo(this.getLogger(JoinInfo.class.getName()), true, address, config, getLocalNodeType(),
            Packet.PACKET_VERSION, buildNumber, clusterImpl.getMembers().size(), 0, localMember.getUuid());
    if (withCredentials && securityContext != null) {
        Credentials c = securityContext.getCredentialsFactory().newCredentials();
        jr.setCredentials(c);
    }
    return jr;
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
@Override
public void after(Credentials credentials, String objectType, String objectName,
                  String methodName, Parameters parameters) {
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public Credentials newCredentials() {
    return null;
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public void setCredentials(Credentials credentials) {
    this.credentials = credentials;
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public Credentials getCredentials() {
    return credentials;
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public void processCall(Node node, Packet packet) {
            final Credentials credentials = (Credentials) toObject(packet.getValueData());
            boolean authenticated = false;
            if (credentials == null) {
                authenticated = false;
                logger.log(Level.SEVERE, "Could not retrieve Credentials object!");
            } else if (node.securityContext != null) {
                final Socket endpointSocket = packet.conn.getSocketChannelWrapper().socket();
                // TODO: check!!!
                credentials.setEndpoint(endpointSocket.getInetAddress().getHostAddress());
                try {
                    LoginContext lc = node.securityContext.createClientLoginContext(credentials);
                    lc.login();
                    getClientEndpoint(packet.conn).setLoginContext(lc);
                    authenticated = true;
                } catch (LoginException e) {
                    logger.log(Level.WARNING, e.getMessage(), e);
                    authenticated = false;
                }
            } else {
                if (credentials instanceof UsernamePasswordCredentials) {
                    final UsernamePasswordCredentials usernamePasswordCredentials = (UsernamePasswordCredentials) credentials;
                    final String nodeGroupName = factory.getConfig().getGroupConfig().getName();
                    final String nodeGroupPassword = factory.getConfig().getGroupConfig().getPassword();
                    authenticated = (nodeGroupName.equals(usernamePasswordCredentials.getUsername())
                            && nodeGroupPassword.equals(usernamePasswordCredentials.getPassword()));
                } else {
                    authenticated = false;
                    logger.log(Level.SEVERE, "Hazelcast security is disabled.\nUsernamePasswordCredentials or cluster group-name" +
                            " and group-password should be used for authentication!\n" +
                            "Current credentials type is: " + credentials.getClass().getName());
                }
            }
            logger.log((authenticated ? Level.INFO : Level.WARNING), "received auth from " + packet.conn
//            		+ ", this group name:" + nodeGroupName + ", auth group name:" + groupName
                    + ", " + (authenticated ?
                    "successfully authenticated" : "authentication failed"));
            packet.clearForResponse();
            packet.setValue(toData(authenticated));
            if (!authenticated) {
                node.clientHandlerService.removeClientEndpoint(packet.conn);
            } else {
                ClientEndpoint clientEndpoint = node.clientHandlerService.getClientEndpoint(packet.conn);
                clientEndpoint.authenticated();
            }
        }
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public ClientConfig setCredentials(Credentials credentials) {
    this.credentials = credentials;
    return this;
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public void processCall(Node node, Packet packet) {
    final Credentials credentials = (Credentials) toObject(packet.getValueData());
    boolean authenticated = false;
    final Socket socket = packet.conn.getSocketChannelWrapper().socket();
    if (credentials == null) {
        authenticated = false;
        logger.log(Level.SEVERE, "Could not retrieve Credentials object!");
    } else if (node.securityContext != null) {
        credentials.setEndpoint(socket.getInetAddress().getHostAddress());
        try {
            LoginContext lc = node.securityContext.createClientLoginContext(credentials);
            lc.login();
            getClientEndpoint(packet.conn).setLoginContext(lc);
            authenticated = true;
        } catch (LoginException e) {
            logger.log(Level.WARNING, e.getMessage(), e);
            authenticated = false;
        }
    } else {
        if (credentials instanceof UsernamePasswordCredentials) {
            final UsernamePasswordCredentials usernamePasswordCredentials = (UsernamePasswordCredentials) credentials;
            final String nodeGroupName = factory.getConfig().getGroupConfig().getName();
            final String nodeGroupPassword = factory.getConfig().getGroupConfig().getPassword();
            authenticated = (nodeGroupName.equals(usernamePasswordCredentials.getUsername())
                    && nodeGroupPassword.equals(usernamePasswordCredentials.getPassword()));
        } else {
            authenticated = false;
            logger.log(Level.SEVERE, "Hazelcast security is disabled.\nUsernamePasswordCredentials or cluster group-name" +
                    " and group-password should be used for authentication!\n" +
                    "Current credentials type is: " + credentials.getClass().getName());
        }
    }
    logger.log((authenticated ? Level.INFO : Level.WARNING), "received auth from " + packet.conn
            + ", " + (authenticated ?
            "successfully authenticated" : "authentication failed"));
    packet.clearForResponse();
    packet.setValue(toData(authenticated));
    if (!authenticated) {
        node.clientHandlerService.removeClientEndpoint(packet.conn);
    } else {
        ClientEndpoint clientEndpoint = node.clientHandlerService.getClientEndpoint(packet.conn);
        clientEndpoint.authenticated();
        Bind bind = new Bind(new Address(socket.getInetAddress(), socket.getPort()));
        bind.setConnection(packet.conn);
        bind.setNode(node);
        node.clusterService.enqueueAndWait(bind);
    }
}
 

import com.hazelcast.security.Credentials; //导入依赖的package包/类
public void bind(Connection connection, Credentials credentials) throws IOException;