Examples with UserIdentity io.cdap.cdap.security.auth.UserIdentity used on opensource projects

Example 16 with UserIdentity

use of io.cdap.cdap.security.auth.UserIdentity in project cdap by caskdata.

the class MockAccessTokenIdentityExtractor method extract.

@Override
public UserIdentityExtractionResponse extract(HttpRequest request) throws UserIdentityExtractionException {
    String auth = request.headers().get(HttpHeaderNames.AUTHORIZATION);
    String accessToken = null;
    if (auth != null) {
        int idx = auth.trim().indexOf(' ');
        if (idx < 0) {
            return new UserIdentityExtractionResponse(UserIdentityExtractionState.ERROR_MISSING_CREDENTIAL, "No access token found");
        }
        accessToken = auth.substring(idx + 1).trim();
    }
    if (accessToken == null || accessToken.length() == 0) {
        return new UserIdentityExtractionResponse(UserIdentityExtractionState.ERROR_MISSING_CREDENTIAL, "No access token found");
    }
    TokenState state = validator.validate(accessToken);
    if (!state.isValid()) {
        return new UserIdentityExtractionResponse(UserIdentityExtractionState.ERROR_INVALID_TOKEN, String.format("Failed to validate access token with reason: %s", state));
    }
    UserIdentityPair pair = new UserIdentityPair(accessToken, new UserIdentity("dummy", UserIdentity.IdentifierType.EXTERNAL, new LinkedHashSet<>(), System.currentTimeMillis(), System.currentTimeMillis() + 100000));
    return new UserIdentityExtractionResponse(pair);
}

Example 17 with UserIdentity

use of io.cdap.cdap.security.auth.UserIdentity in project cdap by caskdata.

the class RemoteExecutionTwillRunnerService method generateAndSaveRuntimeToken.

/**
 * Generates a runtime token to talk back from the execution cluster to CDAP instance.
 */
private Location generateAndSaveRuntimeToken(ProgramRunId programRunId, Location keysDir) {
    try {
        long currentTimestamp = System.currentTimeMillis();
        // TODO: Use a better identity & expiration
        UserIdentity identity = new UserIdentity(Constants.Security.Authentication.RUNTIME_IDENTITY, UserIdentity.IdentifierType.INTERNAL, Collections.emptyList(), currentTimestamp, currentTimestamp + DEFAULT_EXPIRATION);
        AccessToken accessToken = tokenManager.signIdentifier(identity);
        byte[] encodedAccessToken = Base64.getEncoder().encode(accessTokenCodec.encode(accessToken));
        Location location = keysDir.append(Constants.Security.Authentication.RUNTIME_TOKEN_FILE);
        try (OutputStream os = location.getOutputStream()) {
            os.write(encodedAccessToken);
        }
        return location;
    } catch (IOException e) {
        throw new RuntimeException("Failed to generate runtime token for " + programRunId, e);
    }
}