Java ConnectionContext.getSecurityContext方法代码示例

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
/**
 * Overridden to allow for authentication using different Jaas
 * configurations depending on if the connection is SSL or not.
 *
 * @param context The context for the incoming Connection.
 * @param info The ConnectionInfo Command representing the incoming
 *                connection.
 */
@Override
public void addConnection(ConnectionContext context, ConnectionInfo info) throws Exception {
    if (context.getSecurityContext() == null) {
        boolean isSSL;
        Connector connector = context.getConnector();
        if (connector instanceof TransportConnector) {
            TransportConnector transportConnector = (TransportConnector) connector;
            isSSL = transportConnector.getServer().isSslServer();
        } else {
            isSSL = false;
        }

        if (isSSL) {
            this.sslBroker.addConnection(context, info);
        } else {
            this.nonSslBroker.addConnection(context, info);
        }
        super.addConnection(context, info);
    }
}
 

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
@Override
public void addConnection(ConnectionContext context, ConnectionInfo info) throws Exception {
    SecurityContext securityContext = context.getSecurityContext();
    if (securityContext == null) {
        securityContext = authenticate(info.getUserName(), info.getPassword(), null);
        context.setSecurityContext(securityContext);
        securityContexts.add(securityContext);
    }

    try {
        super.addConnection(context, info);
    } catch (Exception e) {
        securityContexts.remove(securityContext);
        context.setSecurityContext(null);
        throw e;
    }
}
 

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
@Override
public void addConnection(ConnectionContext context, ConnectionInfo info)
        throws Exception {
    if (context.getSecurityContext() == null) {
        // Set the TCCL since it seems JAAS needs it to find the login
        // module classes.
        ClassLoader original = Thread.currentThread()
                .getContextClassLoader();
        Thread.currentThread().setContextClassLoader(
                JaasAuthenticationBroker.class.getClassLoader());

        try {
            CommunoteMQCallbackHandler callback = new CommunoteMQCallbackHandler(
                    info.getUserName(), info.getPassword(), context
                            .getConnection().getRemoteAddress(),
                    ((TransportConnector) context.getConnector()).getUri()
                            .toString());
            LoginContext lc = new LoginContext(jaasConfiguration, callback);
            lc.login();
            Subject subject = lc.getSubject();
            SecurityContext s = new JaasSecurityContext(info.getUserName(),
                    subject);
            context.setSecurityContext(s);
            securityContexts.add(s);
        } catch (Exception e) {
            LOGGER.debug(e.getMessage(), e);
            throw new SecurityException(e.getMessage(), e);
        } finally {
            Thread.currentThread().setContextClassLoader(original);
        }
    }
    super.addConnection(context, info);
}
 

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
/**
 * Overridden to allow for authentication using different Jaas configurations depending on if
 * the connection is SSL or not.
 * 
 * @param context
 *            The context for the incoming Connection.
 * @param info
 *            The ConnectionInfo Command representing the incoming connection.
 * @throws Exception
 *             in case of an error
 */
@Override
public void addConnection(ConnectionContext context, ConnectionInfo info) throws Exception {
    try {
        if (context.getSecurityContext() == null) {

            Connector connector = context.getConnector();

            if (isEmbeddedConnection(context, info)) {

                handleEmbeddedConnection(context, info);
                super.addConnection(context, info);
            } else if (useCertificateAuthentication(connector, info)) {

                this.handleCertificateConnection(context, info);
                super.addConnection(context, info);
            } else if (assertForceSsl(context, info)) {
                this.usernamePasswordBroker.addConnection(context, info);
            } else {
                throw new SecurityException(
                        "Cannot add connection since no authentication could be appled. Check the configurations");
            }
        }
    } catch (Exception e) {
        LOGGER.error(e.getMessage(), e);
        throw new SecurityException("Error in authentication " + e.getMessage(), e);
    }
}
 

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
protected SecurityContext checkSecurityContext(ConnectionContext context) throws SecurityException {
    final SecurityContext securityContext = context.getSecurityContext();
    if (securityContext == null) {
        throw new SecurityException("User is not authenticated.");
    }
    return securityContext;
}
 

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
/**
 * Overridden to allow for authentication based on client certificates.
 * Connections being added will be authenticated based on their certificate
 * chain and the JAAS module specified through the JAAS framework. NOTE: The
 * security context's username will be set to the first UserPrincipal
 * created by the login module.
 * 
 * @param context The context for the incoming Connection.
 * @param info The ConnectionInfo Command representing the incoming
 *                connection.
 */
public void addConnection(ConnectionContext context, ConnectionInfo info) throws Exception {

    if (context.getSecurityContext() == null) {
        if (!(info.getTransportContext() instanceof X509Certificate[])) {
            throw new SecurityException("Unable to authenticate transport without SSL certificate.");
        }

        // Set the TCCL since it seems JAAS needs it to find the login
        // module classes.
        ClassLoader original = Thread.currentThread().getContextClassLoader();
        Thread.currentThread().setContextClassLoader(JaasAuthenticationBroker.class.getClassLoader());
        try {
            // Do the login.
            try {
                CallbackHandler callback = new JaasCertificateCallbackHandler((X509Certificate[])info.getTransportContext());
                LoginContext lc = new LoginContext(jaasConfiguration, callback);
                lc.login();
                Subject subject = lc.getSubject();

                String dnName = "";

                for (Principal principal : subject.getPrincipals()) {
                    if (principal instanceof UserPrincipal) {
                        dnName = ((UserPrincipal)principal).getName();
                        break;
                    }
                }
                SecurityContext s = new JaasCertificateSecurityContext(dnName, subject, (X509Certificate[])info.getTransportContext());
                context.setSecurityContext(s);
            } catch (Exception e) {
                throw new SecurityException("User name [" + info.getUserName() + "] or password is invalid. " + e.getMessage(), e);
            }
        } finally {
            Thread.currentThread().setContextClassLoader(original);
        }
    }
    super.addConnection(context, info);
}
 

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
@Override
public void addConnection(ConnectionContext context, ConnectionInfo info) throws Exception {

    if (context.getSecurityContext() == null) {
        // Set the TCCL since it seems JAAS needs it to find the login
        // module classes.
        ClassLoader original = Thread.currentThread().getContextClassLoader();
        Thread.currentThread().setContextClassLoader(JaasAuthenticationBroker.class.getClassLoader());
        try {
            // Do the login.
            try {
                JassCredentialCallbackHandler callback = new JassCredentialCallbackHandler(info
                    .getUserName(), info.getPassword());
                LoginContext lc = new LoginContext(jassConfiguration, callback);
                lc.login();
                Subject subject = lc.getSubject();

                SecurityContext s = new JaasSecurityContext(info.getUserName(), subject);
                context.setSecurityContext(s);
                securityContexts.add(s);
            } catch (Exception e) {
                throw (SecurityException)new SecurityException("User name [" + info.getUserName() + "] or password is invalid.")
                    .initCause(e);
            }
        } finally {
            Thread.currentThread().setContextClassLoader(original);
        }
    }
    super.addConnection(context, info);
}
 

import org.apache.activemq.broker.ConnectionContext; //导入方法依赖的package包/类
@Override
public void addConnection(ConnectionContext context, ConnectionInfo info) throws Exception {

    SecurityContext s = context.getSecurityContext();
    if (s == null) {
        // Check the username and password.
        if (anonymousAccessAllowed && info.getUserName() == null && info.getPassword() == null) {
            info.setUserName(anonymousUser);
            s = new SecurityContext(info.getUserName()) {
                @Override
                public Set<Principal> getPrincipals() {
                    Set<Principal> groups = new HashSet<Principal>();
                    groups.add(new GroupPrincipal(anonymousGroup));
                    return groups;
                }
            };
        } else {
            String pw = userPasswords.get(info.getUserName());
            if (pw == null || !pw.equals(info.getPassword())) {
                throw new SecurityException(
                        "User name [" + info.getUserName() + "] or password is invalid.");
            }

            final Set<Principal> groups = userGroups.get(info.getUserName());
            s = new SecurityContext(info.getUserName()) {
                @Override
                public Set<Principal> getPrincipals() {
                    return groups;
                }
            };
        }

        context.setSecurityContext(s);
        securityContexts.add(s);
    }

    try {
        super.addConnection(context, info);
    } catch (Exception e) {
        securityContexts.remove(s);
        context.setSecurityContext(null);
        throw e;
    }
}