Java HttpBasedServiceCredential类代码示例

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Override
public HandlerResult authenticate(final Credential credential) throws GeneralSecurityException {
    final HttpBasedServiceCredential httpCredential = (HttpBasedServiceCredential) credential;
    if (!httpCredential.getService().getProxyPolicy().isAllowedProxyCallbackUrl(httpCredential.getCallbackUrl())) {
        logger.warn("Proxy policy for service [{}] cannot authorize the requested callback url [{}].",
                httpCredential.getService().getServiceId(), httpCredential.getCallbackUrl());
        throw new FailedLoginException(httpCredential.getCallbackUrl() + " cannot be authorized");
    }

    logger.debug("Attempting to authenticate {}", httpCredential);
    final URL callbackUrl = httpCredential.getCallbackUrl();
    if (!this.httpClient.isValidEndPoint(callbackUrl)) {
        throw new FailedLoginException(callbackUrl.toExternalForm() + " sent an unacceptable response status code");
    }
    return new DefaultHandlerResult(this, httpCredential, this.principalFactory.createPrincipal(httpCredential.getId()));
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
/**
 * Instantiates a new SAML authentication meta data populator.
 */
public SamlAuthenticationMetaDataPopulator() {
    this.authenticationMethods.put(
            HttpBasedServiceCredential.class.getName(),
            AUTHN_METHOD_SSL_TLS_CLIENT);
    this.authenticationMethods.put(
            UsernamePasswordCredential.class.getName(),
            AUTHN_METHOD_PASSWORD);

    // Next two classes are in other modules, so avoid using Class#getName() to prevent circular dependency
    this.authenticationMethods.put(
            "org.jasig.cas.adaptors.trusted.authentication.principal.PrincipalBearingCredentials",
            AUTHN_METHOD_UNSPECIFIED);
    this.authenticationMethods.put(
            "org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentials",
            AUTHN_METHOD_X509_PUBLICKEY);
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Override
public HandlerResult authenticate(final Credential credential) throws GeneralSecurityException {
    final HttpBasedServiceCredential httpCredential = (HttpBasedServiceCredential) credential;
    if (!httpCredential.getService().getProxyPolicy().isAllowedProxyCallbackUrl(httpCredential.getCallbackUrl())) {
        logger.warn("Proxy policy for service [{}] cannot authorize the requested callbackurl [{}]",
                httpCredential.getService(), httpCredential.getCallbackUrl());
        throw new FailedLoginException(httpCredential.getCallbackUrl() + " cannot be authorized");
    }

    logger.debug("Attempting to authenticate {}", httpCredential);
    final URL callbackUrl = httpCredential.getCallbackUrl();
    if (!this.httpClient.isValidEndPoint(callbackUrl)) {
        throw new FailedLoginException(callbackUrl.toExternalForm() + " sent an unacceptable response status code");
    }
    return new DefaultHandlerResult(this, httpCredential, this.principalFactory.createPrincipal(httpCredential.getId()));
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
public SamlAuthenticationMetaDataPopulator() {
    this.authenticationMethods.put(
            HttpBasedServiceCredential.class.getName(),
            AUTHN_METHOD_SSL_TLS_CLIENT);
    this.authenticationMethods.put(
            UsernamePasswordCredential.class.getName(),
            AUTHN_METHOD_PASSWORD);

    // Next two classes are in other modules, so avoid using Class#getName() to prevent circular dependency
    this.authenticationMethods.put(
            "org.jasig.cas.adaptors.trusted.authentication.principal.PrincipalBearingCredentials",
            AUTHN_METHOD_UNSPECIFIED);
    this.authenticationMethods.put(
            "org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentials",
            AUTHN_METHOD_X509_PUBLICKEY);
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
/**
 * Overrideable method to determine which credentials to use to grant a
 * proxy granting ticket. Default is to use the pgtUrl.
 *
 * @param service the webapp service requesting proxy
 * @param request the HttpServletRequest object.
 * @return the credentials or null if there was an error or no credentials
 * provided.
 */
protected Credential getServiceCredentialsFromRequest(final WebApplicationService service, final HttpServletRequest request) {
    final String pgtUrl = request.getParameter(CasProtocolConstants.PARAMETER_PROXY_CALLBACK_URL);
    if (StringUtils.hasText(pgtUrl)) {
        try {
            final RegisteredService registeredService = this.servicesManager.findServiceBy(service);
            verifyRegisteredServiceProperties(registeredService, service);
            return new HttpBasedServiceCredential(new URL(pgtUrl), registeredService);
        } catch (final Exception e) {
            logger.error("Error constructing pgtUrl", e);
        }
    }

    return null;
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Test
public void verifyDoesntSupportBadUserCredentials() {
    try {
        assertFalse(this.authenticationHandler
            .supports(new HttpBasedServiceCredential(new URL(
                "http://www.rutgers.edu"), org.jasig.cas.authentication.TestUtils.getRegisteredService())));
    } catch (final MalformedURLException e) {
        fail("Could not resolve URL.");
    }
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Test
public void verifyDoesntSupportBadUserCredentials() {
    try {
        final HttpBasedServiceCredential c = new HttpBasedServiceCredential(
            new URL("http://www.rutgers.edu"), org.jasig.cas.authentication.TestUtils.getRegisteredService());
        assertFalse(this.authenticationHandler.supports(c));
    } catch (final MalformedURLException e) {
        fail("MalformedURLException caught.");
    }
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
public static HttpBasedServiceCredential getHttpBasedServiceCredentials(
        final String url) {
    try {
        return new HttpBasedServiceCredential(new URL(url),
                TestUtils.getRegisteredService(url));
    } catch (final MalformedURLException e) {
        throw new IllegalArgumentException();
    }
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Override
public String handle(final Credential credential, final TicketGrantingTicket proxyGrantingTicketId) {
    final HttpBasedServiceCredential serviceCredentials = (HttpBasedServiceCredential) credential;
    final String proxyIou = this.uniqueTicketIdGenerator.getNewTicketId(ProxyGrantingTicket.PROXY_GRANTING_TICKET_IOU_PREFIX);

    final URL callbackUrl = serviceCredentials.getCallbackUrl();
    final String serviceCredentialsAsString = callbackUrl.toExternalForm();
    final int bufferLength = serviceCredentialsAsString.length() + proxyIou.length()
            + proxyGrantingTicketId.getId().length() + BUFFER_LENGTH_ADDITIONAL_CHARGE;
    final StringBuilder stringBuffer = new StringBuilder(bufferLength);

    stringBuffer.append(serviceCredentialsAsString);

    if (callbackUrl.getQuery() != null) {
        stringBuffer.append('&');
    } else {
        stringBuffer.append('?');
    }

    stringBuffer.append(PARAMETER_PROXY_GRANTING_TICKET_IOU);
    stringBuffer.append('=');
    stringBuffer.append(proxyIou);
    stringBuffer.append('&');
    stringBuffer.append(PARAMETER_PROXY_GRANTING_TICKET_ID);
    stringBuffer.append('=');
    stringBuffer.append(proxyGrantingTicketId);

    if (this.httpClient.isValidEndPoint(stringBuffer.toString())) {
        logger.debug("Sent ProxyIou of {} for service: {}", proxyIou, serviceCredentials);
        return proxyIou;
    }

    logger.debug("Failed to send ProxyIou of {} for service: {}", proxyIou, serviceCredentials);
    return null;
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Test
public void verifyValidProxyTicketWithQueryString() throws Exception {
    assertNotNull(this.handler.handle(new HttpBasedServiceCredential(
        new URL("https://www.google.com/?test=test"),
                    org.jasig.cas.authentication.TestUtils.getRegisteredService("https://some.app.edu")),
            proxyGrantingTicket));
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Test
public void verifyNonValidProxyTicket() throws Exception {
    final SimpleHttpClientFactoryBean clientFactory = new SimpleHttpClientFactoryBean();
    clientFactory.setAcceptableCodes(new int[] {900});
    final HttpClient httpClient = clientFactory.getObject();
    this.handler.setHttpClient(httpClient);
    assertNull(this.handler.handle(new HttpBasedServiceCredential(new URL(
        "http://www.rutgers.edu"),
            org.jasig.cas.authentication.TestUtils.getRegisteredService("https://some.app.edu")), proxyGrantingTicket));
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Override
public DefaultHandlerResult authenticate(final Credential credential) throws GeneralSecurityException, PreventedException {
    if (credential instanceof HttpBasedServiceCredential) {
        return new DefaultHandlerResult(this, (HttpBasedServiceCredential) credential);
    } else {
        return new DefaultHandlerResult(this, new BasicCredentialMetaData(credential));
    }
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Override
public String handle(final Credential credential, final TicketGrantingTicket proxyGrantingTicketId) {
    final HttpBasedServiceCredential serviceCredentials = (HttpBasedServiceCredential) credential;
    final String proxyIou = this.uniqueTicketIdGenerator.getNewTicketId(TicketGrantingTicket.PROXY_GRANTING_TICKET_IOU_PREFIX);

    final URL callbackUrl = serviceCredentials.getCallbackUrl();
    final String serviceCredentialsAsString = callbackUrl.toExternalForm();
    final int bufferLength = serviceCredentialsAsString.length() + proxyIou.length()
            + proxyGrantingTicketId.getId().length() + BUFFER_LENGTH_ADDITIONAL_CHARGE;
    final StringBuilder stringBuffer = new StringBuilder(bufferLength);

    stringBuffer.append(serviceCredentialsAsString);

    if (callbackUrl.getQuery() != null) {
        stringBuffer.append('&');
    } else {
        stringBuffer.append('?');
    }

    stringBuffer.append(PARAMETER_PROXY_GRANTING_TICKET_IOU);
    stringBuffer.append('=');
    stringBuffer.append(proxyIou);
    stringBuffer.append('&');
    stringBuffer.append(PARAMETER_PROXY_GRANTING_TICKET_ID);
    stringBuffer.append('=');
    stringBuffer.append(proxyGrantingTicketId);

    if (this.httpClient.isValidEndPoint(stringBuffer.toString())) {
        logger.debug("Sent ProxyIou of {} for service: {}", proxyIou, serviceCredentials);
        return proxyIou;
    }

    logger.debug("Failed to send ProxyIou of {} for service: {}", proxyIou, serviceCredentials);
    return null;
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
@Test
public void verifyNonValidProxyTicket() throws Exception {
    final SimpleHttpClientFactoryBean clientFactory = new SimpleHttpClientFactoryBean();
    clientFactory.setAcceptableCodes(new int[] {900});
    final HttpClient httpClient = clientFactory.getObject();
    this.handler.setHttpClient(httpClient);
    assertNull(this.handler.handle(new HttpBasedServiceCredential(new URL(
        "http://www.rutgers.edu"), TestUtils.getRegisteredService("https://some.app.edu")), proxyGrantingTicket));
}
 

import org.jasig.cas.authentication.HttpBasedServiceCredential; //导入依赖的package包/类
public static HttpBasedServiceCredential getHttpBasedServiceCredentials(
    final String url) {
    try {
        return new HttpBasedServiceCredential(new URL(url), TestUtils.getRegisteredService(url));
    } catch (final MalformedURLException e) {
        throw new IllegalArgumentException();
    }
}