1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28 package org.apache.hc.client5.http.impl;
29
30 import java.util.ArrayList;
31 import java.util.Arrays;
32 import java.util.Collection;
33 import java.util.Collections;
34 import java.util.List;
35 import java.util.Locale;
36 import java.util.Map;
37
38 import org.apache.hc.client5.http.AuthenticationStrategy;
39 import org.apache.hc.client5.http.auth.AuthChallenge;
40 import org.apache.hc.client5.http.auth.AuthScheme;
41 import org.apache.hc.client5.http.auth.AuthSchemeFactory;
42 import org.apache.hc.client5.http.auth.ChallengeType;
43 import org.apache.hc.client5.http.auth.StandardAuthScheme;
44 import org.apache.hc.client5.http.config.RequestConfig;
45 import org.apache.hc.client5.http.protocol.HttpClientContext;
46 import org.apache.hc.core5.annotation.Contract;
47 import org.apache.hc.core5.annotation.ThreadingBehavior;
48 import org.apache.hc.core5.http.config.Lookup;
49 import org.apache.hc.core5.http.protocol.HttpContext;
50 import org.apache.hc.core5.util.Args;
51 import org.slf4j.Logger;
52 import org.slf4j.LoggerFactory;
53
54
55
56
57
58
59 @Contract(threading = ThreadingBehavior.STATELESS)
60 public class DefaultAuthenticationStrategy implements AuthenticationStrategy {
61
62 private static final Logger LOG = LoggerFactory.getLogger(DefaultAuthenticationStrategy.class);
63
64 public static final DefaultAuthenticationStrategy INSTANCE = new DefaultAuthenticationStrategy();
65
66 private static final List<String> DEFAULT_SCHEME_PRIORITY =
67 Collections.unmodifiableList(Arrays.asList(
68 StandardAuthScheme.BEARER,
69 StandardAuthScheme.DIGEST,
70 StandardAuthScheme.BASIC));
71
72 @Override
73 public List<AuthScheme> select(
74 final ChallengeType challengeType,
75 final Map<String, AuthChallenge> challenges,
76 final HttpContext context) {
77 Args.notNull(challengeType, "ChallengeType");
78 Args.notNull(challenges, "Map of auth challenges");
79 Args.notNull(context, "HTTP context");
80 final HttpClientContext clientContext = HttpClientContext.adapt(context);
81 final String exchangeId = clientContext.getExchangeId();
82
83 final List<AuthScheme> options = new ArrayList<>();
84 final Lookup<AuthSchemeFactory> registry = clientContext.getAuthSchemeRegistry();
85 if (registry == null) {
86 if (LOG.isDebugEnabled()) {
87 LOG.debug("{} Auth scheme registry not set in the context", exchangeId);
88 }
89 return options;
90 }
91 final RequestConfig config = clientContext.getRequestConfig();
92 Collection<String> authPrefs = challengeType == ChallengeType.TARGET ?
93 config.getTargetPreferredAuthSchemes() : config.getProxyPreferredAuthSchemes();
94 if (authPrefs == null) {
95 authPrefs = DEFAULT_SCHEME_PRIORITY;
96 }
97 if (LOG.isDebugEnabled()) {
98 LOG.debug("{} Authentication schemes in the order of preference: {}", exchangeId, authPrefs);
99 }
100
101 for (final String schemeName: authPrefs) {
102 final AuthChallenge challenge = challenges.get(schemeName.toLowerCase(Locale.ROOT));
103 if (challenge != null) {
104 final AuthSchemeFactory authSchemeFactory = registry.lookup(schemeName);
105 if (authSchemeFactory == null) {
106 if (LOG.isWarnEnabled()) {
107 LOG.warn("{} Authentication scheme {} not supported", exchangeId, schemeName);
108
109 }
110 continue;
111 }
112 final AuthScheme authScheme = authSchemeFactory.create(context);
113 options.add(authScheme);
114 } else {
115 if (LOG.isDebugEnabled()) {
116 LOG.debug("{} Challenge for {} authentication scheme not available", exchangeId, schemeName);
117 }
118 }
119 }
120 return options;
121 }
122
123 }