Java SpnegoCredential类代码示例

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
/**
 * Sets the response header based on the retrieved tocken.
 *
 * @param context the context
 * @param credential the credential
 */
private void setResponseHeader(final RequestContext context,
        final Credential credential) {
    if (credential == null) {
        return;
    }

    final HttpServletResponse response = WebUtils
            .getHttpServletResponse(context);
    final SpnegoCredential spnegoCredentials = (SpnegoCredential) credential;
    final byte[] nextToken = spnegoCredentials.getNextToken();
    if (nextToken != null) {
        logger.debug("Obtained output token: {}", new String(nextToken, Charset.defaultCharset()));
        response.setHeader(SpnegoConstants.HEADER_AUTHENTICATE, (this.ntlm
                ? SpnegoConstants.NTLM : SpnegoConstants.NEGOTIATE)
                + ' ' + CompressionUtils.encodeBase64(nextToken));
    } else {
        logger.debug("Unable to obtain the output token required.");
    }

    if (spnegoCredentials.getPrincipal() == null && send401OnAuthenticationFailure) {
        logger.debug("Setting HTTP Status to 401");
        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
    }
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Override
protected Credential constructCredentialsFromRequest(
        final RequestContext context) {
    final HttpServletRequest request = WebUtils.getHttpServletRequest(context);

    final String authorizationHeader = request
            .getHeader(SpnegoConstants.HEADER_AUTHORIZATION);

    if (StringUtils.hasText(authorizationHeader)
            && authorizationHeader.startsWith(this.messageBeginPrefix)
            && authorizationHeader.length() > this.messageBeginPrefix.length()) {

        logger.debug("SPNEGO Authorization header found with {} bytes",
                authorizationHeader.length() - this.messageBeginPrefix.length());

        final byte[] token = CompressionUtils.decodeBase64ToByteArray(authorizationHeader.substring(this.messageBeginPrefix.length()));
        if (token == null) {
            logger.warn("Could not compress authorization header in base64");
            return null;
        }
        logger.debug("Obtained token: {}", new String(token, Charset.defaultCharset()));
        return new SpnegoCredential(token);
    }

    return null;
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
private void setResponseHeader(final RequestContext context,
        final Credential credential) {
    if (credential == null) {
        return;
    }

    final HttpServletResponse response = WebUtils
            .getHttpServletResponse(context);
    final SpnegoCredential spnegoCredentials = (SpnegoCredential) credential;
    final byte[] nextToken = spnegoCredentials.getNextToken();
    if (nextToken != null) {
        if (logger.isDebugEnabled()) {
            logger.debug("Obtained output token: " + new String(nextToken));
        }
        response.setHeader(SpnegoConstants.HEADER_AUTHENTICATE, (this.ntlm
                ? SpnegoConstants.NTLM : SpnegoConstants.NEGOTIATE)
                + " " + Base64.encode(nextToken));
    } else {
        logger.debug("Unable to obtain the output token required.");
    }

    if (spnegoCredentials.getPrincipal() == null && send401OnAuthenticationFailure) {
        logger.debug("Setting HTTP Status to 401");
        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
    }
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Override
protected Credential constructCredentialsFromRequest(final RequestContext context) {
    final HttpServletRequest request = WebUtils.getHttpServletRequest(context);

    final String authorizationHeader = request.getHeader(SpnegoConstants.HEADER_AUTHORIZATION);
    logger.debug("SPNEGO Authorization header located as {}", authorizationHeader);
    
    if (StringUtils.hasText(authorizationHeader)
            && authorizationHeader.startsWith(this.messageBeginPrefix)
            && authorizationHeader.length() > this.messageBeginPrefix.length()) {

        logger.debug("SPNEGO Authorization header found with {} bytes",
                authorizationHeader.length() - this.messageBeginPrefix.length());

        final byte[] token = CompressionUtils.decodeBase64ToByteArray(authorizationHeader.substring(this.messageBeginPrefix.length()));
        if (token == null) {
            logger.warn("Could not compress authorization header in base64");
            return null;
        }
        logger.debug("Obtained token: {}", new String(token, Charset.defaultCharset()));
        return new SpnegoCredential(token);
    }

    logger.warn("SPNEGO Authorization header not found under {} or it does not begin with the prefix {}",
            SpnegoConstants.HEADER_AUTHORIZATION, this.messageBeginPrefix);
    return null;
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Override
protected final HandlerResult doAuthentication(
        final Credential credential) throws GeneralSecurityException, PreventedException {

    final SpnegoCredential ntlmCredential = (SpnegoCredential) credential;
    final byte[] src = ntlmCredential.getInitToken();

    UniAddress dc = null;

    boolean success = false;
    try {
        if (this.loadBalance) {
            // find the first dc that matches the includepattern
            if (StringUtils.isNotBlank(this.includePattern)) {
                final NbtAddress[] dcs = NbtAddress.getAllByName(this.domainController, NBT_ADDRESS_TYPE, null, null);
                for (final NbtAddress dc2 : dcs) {
                    if(dc2.getHostAddress().matches(this.includePattern)){
                        dc = new UniAddress(dc2);
                        break;
                    }
                }
            } else {
                dc = new UniAddress(NbtAddress.getByName(this.domainController, NBT_ADDRESS_TYPE, null));
            }
        } else {
            dc = UniAddress.getByName(this.domainController, true);
        }
        final byte[] challenge = SmbSession.getChallenge(dc);

        switch (src[NTLM_TOKEN_TYPE_FIELD_INDEX]) {
            case NTLM_TOKEN_TYPE_ONE:
                logger.debug("Type 1 received");
                final Type1Message type1 = new Type1Message(src);
                final Type2Message type2 = new Type2Message(type1,
                        challenge, null);
                logger.debug("Type 2 returned. Setting next token.");
                ntlmCredential.setNextToken(type2.toByteArray());
                break;
            case NTLM_TOKEN_TYPE_THREE:
                logger.debug("Type 3 received");
                final Type3Message type3 = new Type3Message(src);
                final byte[] lmResponse = type3.getLMResponse() == null ? new byte[0] : type3.getLMResponse();
                final byte[] ntResponse = type3.getNTResponse() == null ? new byte[0] : type3.getNTResponse();
                final NtlmPasswordAuthentication ntlm = new NtlmPasswordAuthentication(
                        type3.getDomain(), type3.getUser(), challenge,
                        lmResponse, ntResponse);
                logger.debug("Trying to authenticate {} with domain controller", type3.getUser());
                try {
                    SmbSession.logon(dc, ntlm);
                    ntlmCredential.setPrincipal(this.principalFactory.createPrincipal(type3.getUser()));
                    success = true;
                } catch (final SmbAuthException sae) {
                    throw new FailedLoginException(sae.getMessage());
                }
                break;
            default:
                logger.debug("Unknown type: {}", src[NTLM_TOKEN_TYPE_FIELD_INDEX]);
        }
    } catch (final Exception e) {
        throw new FailedLoginException(e.getMessage());
    }

    if (!success) {
        throw new FailedLoginException();
    }
    return new DefaultHandlerResult(this, new BasicCredentialMetaData(ntlmCredential), ntlmCredential.getPrincipal());
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void verifySuccessfulAuthenticationWithDomainName() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setPrincipalWithDomainName(true);
    this.authenticationHandler.setAuthentication(new MockJcifsAuthentication(true));
    assertNotNull(this.authenticationHandler.authenticate(credentials));
    assertEquals("test", credentials.getPrincipal().getId());
    assertNotNull(credentials.getNextToken());
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void verifySuccessfulAuthenticationWithoutDomainName() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setPrincipalWithDomainName(false);
    this.authenticationHandler.setAuthentication(new MockJcifsAuthentication(true));
    assertNotNull(this.authenticationHandler.authenticate(credentials));
    assertEquals("test", credentials.getPrincipal().getId());
    assertNotNull(credentials.getNextToken());
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void verifyUnsuccessfulAuthentication() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setAuthentication(new MockJcifsAuthentication(false));
    try {
        this.authenticationHandler.authenticate(credentials);
        fail("An exception should have been thrown");
    } catch (final PreventedException e) {
        assertNull(credentials.getNextToken());
        assertNull(credentials.getPrincipal());
    }
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void verifySuccessfulAuthenticationWithDomainName() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setPrincipalWithDomainName(true);
    this.authenticationHandler.setAuthentication(new MockJCSIFAuthentication(true));
    assertNotNull(this.authenticationHandler.authenticate(credentials));
    assertEquals("test", credentials.getPrincipal().getId());
    assertNotNull(credentials.getNextToken());
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void verifySuccessfulAuthenticationWithoutDomainName() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setPrincipalWithDomainName(false);
    this.authenticationHandler.setAuthentication(new MockJCSIFAuthentication(true));
    assertNotNull(this.authenticationHandler.authenticate(credentials));
    assertEquals("test", credentials.getPrincipal().getId());
    assertNotNull(credentials.getNextToken());
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void verifyUnsuccessfulAuthentication() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setAuthentication(new MockJCSIFAuthentication(false));
    try {
        this.authenticationHandler.authenticate(credentials);
        fail("An AuthenticationException should have been thrown");
    } catch (final GeneralSecurityException e) {
        assertNull(credentials.getNextToken());
        assertNull(credentials.getPrincipal());
    }
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Override
protected Credential constructCredentialsFromRequest(
        final RequestContext context) {
    final HttpServletRequest request = WebUtils
            .getHttpServletRequest(context);

    final String authorizationHeader = request
            .getHeader(SpnegoConstants.HEADER_AUTHORIZATION);

    if (StringUtils.hasText(authorizationHeader)
            && authorizationHeader.startsWith(this.messageBeginPrefix)
            && authorizationHeader.length() > this.messageBeginPrefix.length()) {
        if (logger.isDebugEnabled()) {
            logger.debug("SPNEGO Authorization header found with "
                    + (authorizationHeader.length() - this.messageBeginPrefix
                            .length()) + " bytes");
        }
        final byte[] token = Base64.decode(authorizationHeader
                .substring(this.messageBeginPrefix.length()));
        if (logger.isDebugEnabled()) {
            logger.debug("Obtained token: " + new String(token));
        }
        return new SpnegoCredential(token);
    }

    return null;
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void testSuccessfulAuthenticationWithDomainName() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setPrincipalWithDomainName(true);
    this.authenticationHandler.setAuthentication(new MockJCSIFAuthentication(true));
    assertNotNull(this.authenticationHandler.authenticate(credentials));
    assertEquals("test", credentials.getPrincipal().getId());
    assertNotNull(credentials.getNextToken());
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void testSuccessfulAuthenticationWithoutDomainName() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setPrincipalWithDomainName(false);
    this.authenticationHandler.setAuthentication(new MockJCSIFAuthentication(true));
    assertNotNull(this.authenticationHandler.authenticate(credentials));
    assertEquals("test", credentials.getPrincipal().getId());
    assertNotNull(credentials.getNextToken());
}
 

import org.jasig.cas.support.spnego.authentication.principal.SpnegoCredential; //导入依赖的package包/类
@Test
public void testUnsuccessfulAuthentication() throws Exception {
    final SpnegoCredential credentials = new SpnegoCredential(new byte[] {0, 1, 2});
    this.authenticationHandler.setAuthentication(new MockJCSIFAuthentication(false));
    try {
        this.authenticationHandler.authenticate(credentials);
        fail("An AuthenticationException should have been thrown");
    } catch (final GeneralSecurityException e) {
        assertNull(credentials.getNextToken());
        assertNull(credentials.getPrincipal());
    }
}