Java AuthorizationPolicy.getUserName方法代码示例

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
public Response handleRequest(Message m, ClassResourceInfo resourceClass) {
    AuthorizationPolicy policy = m.get(AuthorizationPolicy.class);
    if (policy != null) {
        String username = policy.getUserName();
        String password = policy.getPassword();
        try {
            session = JcrSessionUtil.createSession(username, password);
            if (isAuthenticated(session)) {
                HttpServletRequest request = (HttpServletRequest) m.get(AbstractHTTPDestination.HTTP_REQUEST);
                request.setAttribute(AuthenticationConstants.HIPPO_SESSION, session);
                return null;
            } else {
                throw new UnauthorizedException();
            }
        } catch (LoginException e) {
            log.debug("Login failed: {}", e);
            throw new UnauthorizedException(e.getMessage());
        }
    }
    throw new UnauthorizedException();
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
public URI getCurrentSystemAgentUri() throws RMapApiException {
    AuthorizationPolicy policy = getCurrentAuthPolicy();
	String key = policy.getUserName();
	String secret = policy.getPassword();
	URI sysAgentUri = getSystemAgentUri(key, secret);
	return sysAgentUri;
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
@Override
public URI getApiKeyForEvent() throws RMapApiException {
    AuthorizationPolicy policy = getCurrentAuthPolicy();
	String key = policy.getUserName();
	String secret = policy.getPassword();
	return getApiKeyUriForEvent(key, secret);
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
/**
 * Gets basic authentication information from request and validates key
 * throws an error if key is invalid.
 *
 * @param message http message
 */
public void handleMessage(Message message) {

 try {   
 	//only authenticate if you are trying to write to the db... 
 	HttpServletRequest req = (HttpServletRequest) message.get("HTTP.REQUEST");
 	String method = req.getMethod();
 	
 	if (method!=HttpMethod.GET && method!=HttpMethod.OPTIONS && method!=HttpMethod.HEAD){
	 
  	AuthorizationPolicy policy = apiUserService.getCurrentAuthPolicy();
  	String accessKey = policy.getUserName();
  	String secret = policy.getPassword();
  
if (accessKey==null || accessKey.length()==0
		|| secret==null || secret.length()==0)	{
   	throw new RMapApiException(ErrorCode.ER_NO_USER_TOKEN_PROVIDED);
}		
			
apiUserService.validateKey(accessKey, secret);
 	}
 	
 } catch (RMapApiException ex){ 
 	//generate a response to intercept default message
 	Response response = exceptionHandler.toResponse(ex);
 	message.getExchange().put(Response.class, response);   	
 }
		
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
protected Response handleBasicAuth(AuthorizationPolicy policy) {
    String username = policy.getUserName();
    String password = policy.getPassword();

    try {
        if (authenticate(username, password)) {
            return null;
        }
    } catch (RestApiBasicAuthenticationException e) {
        log.error("Could not authenticate user : " + username + "against carbon userStore", e);
    }
    return authenticationFail();
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
@Override
public void handleMessage(Message message) throws Fault
{

    LOGGER.info("In handleMessage");
    LOGGER.info("Message --> " + message);

    String name = null;
    String password = null;

    AuthUser user = null;

    AuthorizationPolicy policy = (AuthorizationPolicy) message.get(AuthorizationPolicy.class);
    if (policy != null)
    {
        name = policy.getUserName();
        password = policy.getPassword();

        LOGGER.info("Requesting user: " + name);
        // TODO: read user from DB
        // if user and pw do not match, throw new AuthenticationException("Unauthorized");

        user = new AuthUser();
        user.setName(name);

    }
    else
    {
        LOGGER.info("No requesting user -- GUEST access");
    }

    GeofenceSecurityContext securityContext = new GeofenceSecurityContext();
    GeofencePrincipal principal = (user != null) ? new GeofencePrincipal(user) : GeofencePrincipal.createGuest();
    securityContext.setPrincipal(principal);

    message.put(SecurityContext.class, securityContext);
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
@Override
public void handleMessage(Message message) throws Fault
{
    AuthorizationPolicy policy = (AuthorizationPolicy) message.get(AuthorizationPolicy.class);

    //
    // TODO: To manage the public access (guest).
    //
    if (policy == null)
    {
        sendErrorResponse(message, HttpURLConnection.HTTP_UNAUTHORIZED);

        return;
    }

    String username = policy.getUserName();
    String password = policy.getPassword();

    if (isAuthenticated(username, password))
    {
        // ////////////////////////////////////////
        // let request to continue
        // ////////////////////////////////////////
        return;
    }
    else
    {
        // /////////////////////////////////////////////////////////////////////
        // authentication failed, request the authetication,
        // add the realm name if needed to the value of WWW-Authenticate
        // /////////////////////////////////////////////////////////////////////
        sendErrorResponse(message, HttpURLConnection.HTTP_UNAUTHORIZED);

        return;
    }
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
protected Response handleBasicAuth(AuthorizationPolicy policy, Message message) {
    String username = policy.getUserName();
    String password = policy.getPassword();
    String tenantDomain = getTenantDomain(username , message);
    try {
        if (authenticate(username, password, tenantDomain)) {
            return null;
        }
    } catch (RestApiBasicAuthenticationException e) {
        log.error("Could not authenticate user : " + username + "against carbon userStore", e);
    }
    return authenticationFail();
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
@Override
public String getAccessKey() throws RMapApiException {
    AuthorizationPolicy policy = getCurrentAuthPolicy();
    return policy.getUserName();
}
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
@Override 
  public void handleMessage(Message message) throws Fault {
  	log.debug("BasicAuthAuthorizationInterceptor - handleMessage init");
  	
  	// Verificamos si esta marcado la activacion mediante xml o es mediante propiedades
  	if (activar != null) {
  		// Activacion mediante XML
  		if ("false".equals(activar)) {
  			log.debug("BasicAuthAuthorizationInterceptor - handleMessage end (no basic auth)");
  			return;
  		}
  	} else {
   		 // Activacion mediante propiedades (para SISTRA)
   	 String auth = null;
	 try{		
		 Properties propiedades = ConfigurationUtil.getInstance().obtenerPropiedades();							
		 auth = propiedades.getProperty("sistra.ws.authenticacion");
	 }catch (Exception ex){
		 log.debug("BasicAuthAuthorizationInterceptor - exception: " + ex.getMessage(), ex);
		 throw new Fault(ex);
	 }
	 if (!"BASIC".equals(auth)) {
		 log.debug("BasicAuthAuthorizationInterceptor - handleMessage end (no basic auth: " + auth + ")");
		 return;
	 }
  	}
  	
  	
      // This is set by CXF
  	try {
   	AuthorizationPolicy policy = message.get(AuthorizationPolicy.class);
       
       // If the policy is not set, the user did not specify credentials
       // A 401 is sent to the client to indicate that authentication is required
       if (policy == null) {
       	log.error("BasicAuthAuthorizationInterceptor - handleMessage: suario intentando acceder sin las credenciales");
           sendErrorResponse(message, HttpURLConnection.HTTP_UNAUTHORIZED);
           return;
       }
       log.debug("BasicAuthAuthorizationInterceptor - handleMessage: accede el usuario " + policy.getUserName());
              
       // double check does not work on multiple processors, unfortunately
       if (!isInitialised) {
          synchronized (this) {
             if (!isInitialised) {
                initialise();
             }
          }
       }
       
       if (authMgr == null) {
       	log.debug("BasicAuthAuthorizationInterceptor - handleMessage: no hay ning�n dominio de seguridad asociado.");
       	sendErrorResponse(message, HttpURLConnection.HTTP_UNAUTHORIZED);
           return;
        }
  
	
       // we take the id out of the        
       String userID = policy.getUserName();
       // convert into a principal
       Principal userPrincipal = getPrincipal(userID);
       // the password that has been provided
       String passwd = policy.getPassword();
       // validate the user
       validate(userPrincipal, passwd);
       // associate the context 
       Subject subject = associate(userPrincipal, passwd);
       // with the security subject
       
       log.debug("BasicAuthAuthorizationInterceptor - handleMessage end");
       
} catch (Exception e) {
	log.error(e.getMessage()+"  "+ e.getCause());
	sendErrorResponse(message, HttpURLConnection.HTTP_UNAUTHORIZED);
          return;
}

  }
 

import org.apache.cxf.configuration.security.AuthorizationPolicy; //导入方法依赖的package包/类
@Override
protected PasswordAuthenticationContext createAuthenticationContext(AuthorizationPolicy policy, ContainerRequestContext requestCtx){
	return new PasswordAuthenticationContext(policy.getUserName(), policy.getPassword());
}