1 |
|
|
2 |
|
|
3 |
|
|
4 |
|
|
5 |
|
|
6 |
|
|
7 |
|
|
8 |
|
|
9 |
|
|
10 |
|
|
11 |
|
|
12 |
|
|
13 |
|
|
14 |
|
|
15 |
|
|
16 |
|
|
17 |
|
package org.apache.jetspeed.security.impl; |
18 |
|
|
19 |
|
import java.security.Principal; |
20 |
|
import java.sql.Date; |
21 |
|
import java.util.ArrayList; |
22 |
|
import java.util.HashSet; |
23 |
|
import java.util.LinkedList; |
24 |
|
import java.util.List; |
25 |
|
import java.util.Set; |
26 |
|
|
27 |
|
import org.apache.jetspeed.security.AuthenticationProvider; |
28 |
|
import org.apache.jetspeed.security.AuthenticationProviderProxy; |
29 |
|
import org.apache.jetspeed.security.SecurityException; |
30 |
|
import org.apache.jetspeed.security.UserPrincipal; |
31 |
|
|
32 |
|
|
33 |
|
|
34 |
|
|
35 |
|
|
36 |
|
|
37 |
|
public class AuthenticationProviderProxyImpl implements AuthenticationProviderProxy |
38 |
|
{ |
39 |
|
|
40 |
|
|
41 |
0 |
private List authenticationProviders = new ArrayList(); |
42 |
|
|
43 |
|
|
44 |
0 |
private String defaultAuthenticationProvider = null; |
45 |
|
|
46 |
|
|
47 |
|
|
48 |
|
|
49 |
|
|
50 |
|
|
51 |
|
|
52 |
|
|
53 |
|
|
54 |
|
|
55 |
|
public AuthenticationProviderProxyImpl(List authenticationProviders, String defaultAuthenticationProvider) |
56 |
0 |
{ |
57 |
0 |
this.authenticationProviders = authenticationProviders; |
58 |
0 |
this.defaultAuthenticationProvider = defaultAuthenticationProvider; |
59 |
0 |
} |
60 |
|
|
61 |
|
protected AuthenticationProvider getAuthenticationProviderByName(String providerName) |
62 |
|
{ |
63 |
0 |
AuthenticationProvider provider = null; |
64 |
|
|
65 |
0 |
for (int i = 0; i < authenticationProviders.size(); i++) |
66 |
|
{ |
67 |
0 |
provider = (AuthenticationProvider) authenticationProviders.get(i); |
68 |
0 |
if (providerName.equals(provider.getProviderName())) |
69 |
|
{ |
70 |
0 |
break; |
71 |
|
} |
72 |
|
else |
73 |
|
{ |
74 |
0 |
provider = null; |
75 |
|
} |
76 |
|
} |
77 |
0 |
return provider; |
78 |
|
} |
79 |
|
|
80 |
|
|
81 |
|
|
82 |
|
|
83 |
|
public String getDefaultAuthenticationProvider() |
84 |
|
{ |
85 |
0 |
return this.defaultAuthenticationProvider; |
86 |
|
} |
87 |
|
|
88 |
|
|
89 |
|
|
90 |
|
|
91 |
|
|
92 |
|
public String getAuthenticationProvider(String userName) |
93 |
|
{ |
94 |
|
AuthenticationProvider authenticationProvider; |
95 |
0 |
String providerName = null; |
96 |
|
|
97 |
0 |
for (int i = 0; i < authenticationProviders.size(); i++) |
98 |
|
{ |
99 |
0 |
authenticationProvider = (AuthenticationProvider)authenticationProviders.get(i); |
100 |
0 |
if (authenticationProvider.getUserSecurityHandler().isUserPrincipal(userName)) |
101 |
|
{ |
102 |
0 |
providerName = authenticationProvider.getProviderName(); |
103 |
0 |
break; |
104 |
|
} |
105 |
|
} |
106 |
0 |
return providerName; |
107 |
|
} |
108 |
|
|
109 |
|
|
110 |
|
|
111 |
|
|
112 |
|
public boolean isUserPrincipal(String userName) |
113 |
|
{ |
114 |
0 |
boolean exists = false; |
115 |
|
|
116 |
0 |
for (int i = 0; i < authenticationProviders.size(); i++) |
117 |
|
{ |
118 |
0 |
exists = ((AuthenticationProvider)authenticationProviders.get(i)).getUserSecurityHandler().isUserPrincipal(userName); |
119 |
0 |
if (exists) |
120 |
|
{ |
121 |
0 |
break; |
122 |
|
} |
123 |
|
} |
124 |
0 |
return exists; |
125 |
|
} |
126 |
|
|
127 |
|
|
128 |
|
|
129 |
|
|
130 |
|
|
131 |
|
|
132 |
|
public Principal getUserPrincipal(String username) |
133 |
|
{ |
134 |
0 |
Principal userPrincipal = null; |
135 |
0 |
for (int i = 0; i < authenticationProviders.size(); i++) |
136 |
|
{ |
137 |
0 |
userPrincipal = ((AuthenticationProvider)authenticationProviders.get(i)).getUserSecurityHandler().getUserPrincipal(username); |
138 |
0 |
if (null != userPrincipal) |
139 |
|
{ |
140 |
0 |
break; |
141 |
|
} |
142 |
|
} |
143 |
0 |
return userPrincipal; |
144 |
|
} |
145 |
|
|
146 |
|
|
147 |
|
|
148 |
|
|
149 |
|
public List getUserPrincipals(String filter) |
150 |
|
{ |
151 |
0 |
List userPrincipals = new LinkedList(); |
152 |
0 |
for (int i = 0; i < authenticationProviders.size(); i++) |
153 |
|
{ |
154 |
0 |
userPrincipals.addAll(((AuthenticationProvider)authenticationProviders.get(i)).getUserSecurityHandler().getUserPrincipals(filter)); |
155 |
|
} |
156 |
0 |
return userPrincipals; |
157 |
|
} |
158 |
|
|
159 |
|
|
160 |
|
|
161 |
|
|
162 |
|
|
163 |
|
public void addUserPrincipal(UserPrincipal userPrincipal, String authenticationProvider) throws SecurityException |
164 |
|
{ |
165 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
166 |
0 |
if ( provider != null ) |
167 |
|
{ |
168 |
0 |
provider.getUserSecurityHandler().addUserPrincipal(userPrincipal); |
169 |
|
} |
170 |
|
else |
171 |
|
{ |
172 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
173 |
|
} |
174 |
0 |
} |
175 |
|
|
176 |
|
|
177 |
|
|
178 |
|
|
179 |
|
public void addUserPrincipal(UserPrincipal userPrincipal) throws SecurityException |
180 |
|
{ |
181 |
0 |
String providerName = getAuthenticationProvider(userPrincipal.getName()); |
182 |
0 |
if ( providerName == null ) |
183 |
|
{ |
184 |
0 |
addUserPrincipal(userPrincipal, defaultAuthenticationProvider); |
185 |
|
} |
186 |
|
else |
187 |
|
{ |
188 |
0 |
addUserPrincipal(userPrincipal, providerName); |
189 |
|
} |
190 |
0 |
} |
191 |
|
|
192 |
|
|
193 |
|
|
194 |
|
|
195 |
|
|
196 |
|
public void updateUserPrincipal(UserPrincipal userPrincipal, String authenticationProvider) throws SecurityException |
197 |
|
{ |
198 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
199 |
0 |
if ( provider != null ) |
200 |
|
{ |
201 |
0 |
provider.getUserSecurityHandler().updateUserPrincipal(userPrincipal); |
202 |
|
} |
203 |
|
else |
204 |
|
{ |
205 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
206 |
|
} |
207 |
0 |
} |
208 |
|
|
209 |
|
|
210 |
|
|
211 |
|
|
212 |
|
public void updateUserPrincipal(UserPrincipal userPrincipal) throws SecurityException |
213 |
|
{ |
214 |
0 |
String providerName = getAuthenticationProvider(userPrincipal.getName()); |
215 |
0 |
if ( providerName != null ) |
216 |
|
{ |
217 |
0 |
updateUserPrincipal(userPrincipal, providerName); |
218 |
|
} |
219 |
|
else |
220 |
|
{ |
221 |
0 |
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userPrincipal.getName())); |
222 |
|
} |
223 |
0 |
} |
224 |
|
|
225 |
|
|
226 |
|
|
227 |
|
|
228 |
|
|
229 |
|
public void removeUserPrincipal(UserPrincipal userPrincipal, String authenticationProvider) throws SecurityException |
230 |
|
{ |
231 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
232 |
0 |
if ( provider != null ) |
233 |
|
{ |
234 |
0 |
provider.getUserSecurityHandler().removeUserPrincipal(userPrincipal); |
235 |
|
} |
236 |
|
else |
237 |
|
{ |
238 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
239 |
|
} |
240 |
0 |
} |
241 |
|
|
242 |
|
|
243 |
|
|
244 |
|
|
245 |
|
public void removeUserPrincipal(UserPrincipal userPrincipal) throws SecurityException |
246 |
|
{ |
247 |
0 |
String providerName = getAuthenticationProvider(userPrincipal.getName()); |
248 |
0 |
if ( providerName != null ) |
249 |
|
{ |
250 |
0 |
removeUserPrincipal(userPrincipal, providerName); |
251 |
|
} |
252 |
0 |
} |
253 |
|
|
254 |
|
|
255 |
|
|
256 |
|
|
257 |
|
public Set getPublicCredentials(String username) |
258 |
|
{ |
259 |
0 |
Set publicCredentials = new HashSet(); |
260 |
0 |
String providerName = getAuthenticationProvider(username); |
261 |
0 |
if ( providerName != null ) |
262 |
|
{ |
263 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(providerName); |
264 |
0 |
publicCredentials.addAll(provider.getCredentialHandler().getPublicCredentials(username)); |
265 |
|
} |
266 |
0 |
return publicCredentials; |
267 |
|
} |
268 |
|
|
269 |
|
|
270 |
|
|
271 |
|
|
272 |
|
public void setPassword(String userName, String oldPassword, String newPassword, String authenticationProvider) throws SecurityException |
273 |
|
{ |
274 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
275 |
0 |
if ( provider != null ) |
276 |
|
{ |
277 |
0 |
provider.getCredentialHandler().setPassword(userName,oldPassword,newPassword); |
278 |
|
} |
279 |
|
else |
280 |
|
{ |
281 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
282 |
|
} |
283 |
0 |
} |
284 |
|
|
285 |
|
|
286 |
|
|
287 |
|
|
288 |
|
public void setPassword(String userName, String oldPassword, String newPassword) throws SecurityException |
289 |
|
{ |
290 |
0 |
String providerName = getAuthenticationProvider(userName); |
291 |
0 |
if ( providerName != null ) |
292 |
|
{ |
293 |
0 |
setPassword(userName, oldPassword, newPassword, providerName); |
294 |
|
} |
295 |
|
else |
296 |
|
{ |
297 |
0 |
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userName)); |
298 |
|
} |
299 |
0 |
} |
300 |
|
|
301 |
|
|
302 |
|
|
303 |
|
|
304 |
|
|
305 |
|
public void importPassword(String userName, String newPassword, String authenticationProvider) throws SecurityException |
306 |
|
{ |
307 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
308 |
0 |
if ( provider != null ) |
309 |
|
{ |
310 |
0 |
provider.getCredentialHandler().importPassword(userName,newPassword); |
311 |
|
} |
312 |
|
else |
313 |
|
{ |
314 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
315 |
|
} |
316 |
0 |
} |
317 |
|
|
318 |
|
|
319 |
|
|
320 |
|
|
321 |
|
public void importPassword(String userName, String newPassword) throws SecurityException |
322 |
|
{ |
323 |
0 |
String providerName = getAuthenticationProvider(userName); |
324 |
0 |
if ( providerName != null ) |
325 |
|
{ |
326 |
0 |
importPassword(userName, newPassword, providerName); |
327 |
|
} |
328 |
|
else |
329 |
|
{ |
330 |
0 |
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userName)); |
331 |
|
} |
332 |
0 |
} |
333 |
|
|
334 |
|
|
335 |
|
|
336 |
|
|
337 |
|
|
338 |
|
public Set getPrivateCredentials(String username) |
339 |
|
{ |
340 |
0 |
Set privateCredentials = new HashSet(); |
341 |
0 |
String providerName = getAuthenticationProvider(username); |
342 |
0 |
if ( providerName != null ) |
343 |
|
{ |
344 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(providerName); |
345 |
0 |
privateCredentials.addAll(provider.getCredentialHandler().getPrivateCredentials(username)); |
346 |
|
} |
347 |
0 |
return privateCredentials; |
348 |
|
} |
349 |
|
|
350 |
|
|
351 |
|
|
352 |
|
|
353 |
|
public void setPasswordEnabled(String userName, boolean enabled, String authenticationProvider) |
354 |
|
throws SecurityException |
355 |
|
{ |
356 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
357 |
0 |
if ( provider != null ) |
358 |
|
{ |
359 |
0 |
provider.getCredentialHandler().setPasswordEnabled(userName,enabled); |
360 |
|
} |
361 |
|
else |
362 |
|
{ |
363 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
364 |
|
} |
365 |
0 |
} |
366 |
|
|
367 |
|
|
368 |
|
|
369 |
|
|
370 |
|
public void setPasswordEnabled(String userName, boolean enabled) throws SecurityException |
371 |
|
{ |
372 |
0 |
String providerName = getAuthenticationProvider(userName); |
373 |
0 |
if ( providerName != null ) |
374 |
|
{ |
375 |
0 |
setPasswordEnabled(userName, enabled, providerName); |
376 |
|
} |
377 |
|
else |
378 |
|
{ |
379 |
0 |
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userName)); |
380 |
|
} |
381 |
0 |
} |
382 |
|
|
383 |
|
|
384 |
|
|
385 |
|
|
386 |
|
public void setPasswordUpdateRequired(String userName, boolean updateRequired, String authenticationProvider) |
387 |
|
throws SecurityException |
388 |
|
{ |
389 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
390 |
0 |
if ( provider != null ) |
391 |
|
{ |
392 |
0 |
provider.getCredentialHandler().setPasswordUpdateRequired(userName,updateRequired); |
393 |
|
} |
394 |
|
else |
395 |
|
{ |
396 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
397 |
|
} |
398 |
0 |
} |
399 |
|
|
400 |
|
|
401 |
|
|
402 |
|
|
403 |
|
public void setPasswordUpdateRequired(String userName, boolean updateRequired) throws SecurityException |
404 |
|
{ |
405 |
0 |
String providerName = getAuthenticationProvider(userName); |
406 |
0 |
if ( providerName != null ) |
407 |
|
{ |
408 |
0 |
setPasswordUpdateRequired(userName, updateRequired, providerName); |
409 |
|
} |
410 |
|
else |
411 |
|
{ |
412 |
0 |
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userName)); |
413 |
|
} |
414 |
0 |
} |
415 |
|
|
416 |
|
|
417 |
|
|
418 |
|
|
419 |
|
public void setPasswordExpiration(String userName, Date expirationDate, String authenticationProvider) throws SecurityException |
420 |
|
{ |
421 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
422 |
0 |
if ( provider != null ) |
423 |
|
{ |
424 |
0 |
provider.getCredentialHandler().setPasswordExpiration(userName,expirationDate); |
425 |
|
} |
426 |
|
else |
427 |
|
{ |
428 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
429 |
|
} |
430 |
0 |
} |
431 |
|
|
432 |
|
|
433 |
|
|
434 |
|
|
435 |
|
public void setPasswordExpiration(String userName, Date expirationDate) throws SecurityException |
436 |
|
{ |
437 |
0 |
String providerName = getAuthenticationProvider(userName); |
438 |
0 |
if ( providerName != null ) |
439 |
|
{ |
440 |
0 |
setPasswordExpiration(userName, expirationDate, providerName); |
441 |
|
} |
442 |
|
else |
443 |
|
{ |
444 |
0 |
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userName)); |
445 |
|
} |
446 |
0 |
} |
447 |
|
|
448 |
|
|
449 |
|
|
450 |
|
|
451 |
|
public boolean authenticate(String userName, String password, String authenticationProvider) throws SecurityException |
452 |
|
{ |
453 |
0 |
AuthenticationProvider provider = getAuthenticationProviderByName(authenticationProvider); |
454 |
0 |
if ( provider != null ) |
455 |
|
{ |
456 |
0 |
return provider.getCredentialHandler().authenticate(userName, password); |
457 |
|
} |
458 |
|
else |
459 |
|
{ |
460 |
0 |
throw new SecurityException(SecurityException.INVALID_AUTHENTICATION_PROVIDER.create(authenticationProvider)); |
461 |
|
} |
462 |
|
} |
463 |
|
|
464 |
|
|
465 |
|
|
466 |
|
|
467 |
|
public boolean authenticate(String userName, String password) throws SecurityException |
468 |
|
{ |
469 |
0 |
String providerName = getAuthenticationProvider(userName); |
470 |
0 |
if ( providerName != null ) |
471 |
|
{ |
472 |
0 |
return authenticate(userName, password, providerName); |
473 |
|
} |
474 |
|
else |
475 |
|
{ |
476 |
0 |
throw new SecurityException(SecurityException.USER_DOES_NOT_EXIST.create(userName)); |
477 |
|
} |
478 |
|
} |
479 |
|
} |