Java AuthorizationPolicy类代码示例

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
/**
 * Gets the System Agent URI to assign to an Event where user has no Agent
 * Should return exception saying the user has no Agent
 **/
@Test
public void testGetCurrentSystemAgentUriNoAgent() throws Exception {
	User user = new User(testUserName2, testUserEmail2);
	user.setAuthKeyUri(testAuthKeyUri2);
	user.setDoRMapAgentSync(false);
	int userId = rmapAuthService.addUser(user);

	ApiKey apiKey = new ApiKey(); 
	apiKey.setUserId(userId);
	apiKey.setLabel("test");
	rmapAuthService.addApiKey(apiKey);
	
	//set up default authpolicy
	AuthorizationPolicy authPolicy2 = new AuthorizationPolicy();
	authPolicy2.setUserName(apiKey.getAccessKey());
	authPolicy2.setPassword(apiKey.getSecret());	
	
	doReturn(authPolicy2).when(spyApiUserService).getCurrentAuthPolicy();
	URI currSystemAgent = spyApiUserService.getCurrentSystemAgentUri();
	assertTrue(currSystemAgent==null);
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
private static void setClientAuthentication(Object client, String userName, String password) {
	// Properties p = new Properties(); //PropertiesLoader.getPropertiesFromFile("config.properties");
	ClientConfiguration config = WebClient.getConfig(client);
	HTTPConduit httpConduit = (HTTPConduit) config.getConduit();

	AuthorizationPolicy authorization = new AuthorizationPolicy();
	authorization.setUserName(userName);
	authorization.setPassword(password);
	httpConduit.setAuthorization(authorization);

	TLSClientParameters tlsParams = new TLSClientParameters();
	TrustManager[] trustAllCerts = new TrustManager[] { new TrustManager() };
	tlsParams.setTrustManagers(trustAllCerts);

	// disables verification of the common name (the host for which the certificate has been issued)
	tlsParams.setDisableCNCheck(true);
	httpConduit.setTlsClientParameters(tlsParams);
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
/**
 * Implementation of RequestHandler.handleRequest method.
 * This method retrieves userName and password from Basic auth header,
 * and tries to authenticate against carbon user store
 *
 * Upon successful authentication allows process to proceed to retrieve requested REST resource
 * Upon invalid credentials returns a HTTP 401 UNAUTHORIZED response to client
 * Upon receiving a userStoreExceptions or IdentityException returns HTTP 500 internal server error to client
 *
 * @param message
 * @param classResourceInfo
 * @return Response
 */
public Response handleRequest(Message message, ClassResourceInfo classResourceInfo) {
    if (log.isDebugEnabled()) {
        log.debug("Registry REST API Basic authentication handler execution started");
    }

    AuthorizationPolicy policy = message.get(AuthorizationPolicy.class);
    if (policy != null && HttpAuthHeader.AUTH_TYPE_BASIC.equals(policy.getAuthorizationType())) {
        try {
            if (authenticate(policy.getUserName(), policy.getPassword())) {
                return null;
            }
        } catch (RestApiBasicAuthenticationException e) {
            /* Upon an occurrence of exception log the caught exception
             * and return a HTTP response with 500 server error response */
            log.error("Could not authenticate user : " + policy.getUserName() + "against carbon userStore", e);
            return Response.status(Response.Status.INTERNAL_SERVER_ERROR).build();
        }

        return Response.status(Response.Status.UNAUTHORIZED).header("WWW-Authenticate", HttpAuthHeader.AUTH_TYPE_BASIC).build();
    }

    return Response.status(Response.Status.UNAUTHORIZED).header("WWW-Authenticate", HttpAuthHeader.AUTH_TYPE_BASIC).build();
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
public Response handleRequest(Message m, ClassResourceInfo resourceClass) {
    AuthorizationPolicy policy = m.get(AuthorizationPolicy.class);
    if (policy != null) {
        String username = policy.getUserName();
        String password = policy.getPassword();
        try {
            session = JcrSessionUtil.createSession(username, password);
            if (isAuthenticated(session)) {
                HttpServletRequest request = (HttpServletRequest) m.get(AbstractHTTPDestination.HTTP_REQUEST);
                request.setAttribute(AuthenticationConstants.HIPPO_SESSION, session);
                return null;
            } else {
                throw new UnauthorizedException();
            }
        } catch (LoginException e) {
            log.debug("Login failed: {}", e);
            throw new UnauthorizedException(e.getMessage());
        }
    }
    throw new UnauthorizedException();
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
@Bean
public AuthorizationPolicy basicAuthorization() {
  AuthorizationPolicy authorizationPolicy =
      new AuthorizationPolicy();
  authorizationPolicy.setUserName(userName);
  authorizationPolicy.setPassword(password);
  authorizationPolicy.setAuthorizationType("Basic");

  return authorizationPolicy;
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
@Override
public AuthorizationPolicy getCurrentAuthPolicy() throws RMapApiException {
	AuthorizationPolicy authorizationPolicy = null;
	Message message = JAXRSUtils.getCurrentMessage();
	authorizationPolicy = message.get(AuthorizationPolicy.class);
    if (authorizationPolicy == null) {
        throw new RMapApiException(ErrorCode.ER_COULD_NOT_RETRIEVE_AUTHPOLICY);
        }
    LOG.debug("Authorization policy retrieved with username {}", authorizationPolicy.getUserName());
    return authorizationPolicy;
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
public URI getCurrentSystemAgentUri() throws RMapApiException {
    AuthorizationPolicy policy = getCurrentAuthPolicy();
	String key = policy.getUserName();
	String secret = policy.getPassword();
	URI sysAgentUri = getSystemAgentUri(key, secret);
	return sysAgentUri;
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
@Override
public URI getApiKeyForEvent() throws RMapApiException {
    AuthorizationPolicy policy = getCurrentAuthPolicy();
	String key = policy.getUserName();
	String secret = policy.getPassword();
	return getApiKeyUriForEvent(key, secret);
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
/**
 * Gets basic authentication information from request and validates key
 * throws an error if key is invalid.
 *
 * @param message http message
 */
public void handleMessage(Message message) {

 try {   
 	//only authenticate if you are trying to write to the db... 
 	HttpServletRequest req = (HttpServletRequest) message.get("HTTP.REQUEST");
 	String method = req.getMethod();
 	
 	if (method!=HttpMethod.GET && method!=HttpMethod.OPTIONS && method!=HttpMethod.HEAD){
	 
  	AuthorizationPolicy policy = apiUserService.getCurrentAuthPolicy();
  	String accessKey = policy.getUserName();
  	String secret = policy.getPassword();
  
if (accessKey==null || accessKey.length()==0
		|| secret==null || secret.length()==0)	{
   	throw new RMapApiException(ErrorCode.ER_NO_USER_TOKEN_PROVIDED);
}		
			
apiUserService.validateKey(accessKey, secret);
 	}
 	
 } catch (RMapApiException ex){ 
 	//generate a response to intercept default message
 	Response response = exceptionHandler.toResponse(ex);
 	message.getExchange().put(Response.class, response);   	
 }
		
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
/**
 * Sets the up.
 *
 * @throws Exception the exception
 */
@Before
public void setUp() throws Exception {
	super.setUp(); 
	//going to spy on ApiUserService so that we can simulate basic auth.
	String testAccessKey = "uah2CKDaBsEw3cEQ";
	String testSecret = "NSbdzctrP46ZvhTi";
	AuthorizationPolicy authPolicy = new AuthorizationPolicy();
	authPolicy.setUserName(testAccessKey);
	authPolicy.setPassword(testSecret);	
	spyApiUserService = spy((ApiUserServiceImpl) apiUserService);
	doReturn(authPolicy).when(spyApiUserService).getCurrentAuthPolicy();
	discoResponseManager = new DiscoResponseManager(rmapService, rdfHandler, spyApiUserService, timegate);
	discoResponseManager.setPathUtils(pathUtils);
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
@Before
public void setup() throws Exception {
	authPolicy = new AuthorizationPolicy();
	authPolicy.setUserName(testAccessKey);
	authPolicy.setPassword(testSecret);		
	
	spyApiUserService = spy(apiUserService);				
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
/**
 * Tests retrieval of a key URI to be associated with an event.
 * Should retrieve a key URI.
 */
@Test
public void getKeyUriForEventWhereIncludeInEventTest() throws Exception {

	String TESTKEY = "rmap:fakermaptestkey";
	
	//create agent with key that should include uri
	User user = new User(testUserName2, testUserEmail2);
	user.setAuthKeyUri(testAuthKeyUri2);
	user.setDoRMapAgentSync(true);
	int userId = rmapAuthService.addUser(user);

	ApiKey apiKey = new ApiKey(); 
	apiKey.setUserId(userId);
	apiKey.setLabel("test");
	apiKey.setKeyUri(TESTKEY);
	apiKey.setIncludeInEvent(true);
	rmapAuthService.addApiKey(apiKey);

	//set up default authpolicy
	AuthorizationPolicy authPolicy2 = new AuthorizationPolicy();
	authPolicy2.setUserName(apiKey.getAccessKey());
	authPolicy2.setPassword(apiKey.getSecret());	
	
	doReturn(authPolicy2).when(spyApiUserService).getCurrentAuthPolicy();
	URI apiKeyUri = spyApiUserService.getApiKeyForEvent();
	assertTrue(apiKeyUri.toString().equals(TESTKEY));
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
private SupplierPushInterface createSupplierPush(PushTarget target) {
	SupplierPushService pushService = new SupplierPushService(
			target.getUrl());
	SupplierPushInterface push = pushService.getSupplierPushSoapEndPoint();

	if (target.getUsername() != null) {
		Client client = ClientProxy.getClient(push);
		HTTPConduit http = (HTTPConduit) client.getConduit();
		AuthorizationPolicy authorization = http.getAuthorization();
		authorization.setUserName(target.getUsername());
		authorization.setPassword(target.getPassword());
	}

	return push;
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
private void setBasicAuthentication(String userName, String password) {
    Client client = ClientProxy.getClient(helloWorldJaxWsProxy);
    HTTPConduit conduit = (HTTPConduit) client.getConduit();

    AuthorizationPolicy authorizationPolicy = new AuthorizationPolicy();
    authorizationPolicy.setUserName(userName);
    authorizationPolicy.setPassword(password);

    conduit.setAuthorization(authorizationPolicy);
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入依赖的package包/类
public HttpBasicAuthenticator(String username, String password) {
    // like the spring beans at http://cxf.apache.org/docs/client-http-transport-including-ssl-support.html
    auth = new AuthorizationPolicy();
    auth.setUserName(username);
    auth.setPassword(password);
    auth.setAuthorizationType("Basic"); // FIXME: use a CXF constant instead
}