Examples with Configuration javax.security.auth.login.Configuration used on opensource projects

Example 26 with Configuration

use of javax.security.auth.login.Configuration in project storm by apache.

the class ClientAuthUtilsTest method getNonExistentSectionTest.

@Test
public void getNonExistentSectionTest() throws IOException {
    Map<String, String> optionMap = new HashMap<String, String>();
    AppConfigurationEntry entry = Mockito.mock(AppConfigurationEntry.class);
    Mockito.<Map<String, ?>>when(entry.getOptions()).thenReturn(optionMap);
    String section = "bogus-section";
    Configuration mockConfig = Mockito.mock(Configuration.class);
    Mockito.when(mockConfig.getAppConfigurationEntry(section)).thenReturn(new AppConfigurationEntry[] { entry });
    Assert.assertNull(ClientAuthUtils.get(mockConfig, section, "nonexistent-key"));
}

Example 27 with Configuration

use of javax.security.auth.login.Configuration in project storm by apache.

the class ClientAuthUtilsTest method getFirstValueForValidKeyTest.

@Test
public void getFirstValueForValidKeyTest() throws IOException {
    String k = "the-key";
    String expected = "good-value";
    Map<String, String> optionMap = new HashMap<String, String>();
    optionMap.put(k, expected);
    Map<String, String> badOptionMap = new HashMap<String, String>();
    badOptionMap.put(k, "bad-value");
    AppConfigurationEntry emptyEntry = Mockito.mock(AppConfigurationEntry.class);
    AppConfigurationEntry badEntry = Mockito.mock(AppConfigurationEntry.class);
    AppConfigurationEntry goodEntry = Mockito.mock(AppConfigurationEntry.class);
    Mockito.<Map<String, ?>>when(emptyEntry.getOptions()).thenReturn(new HashMap<String, String>());
    Mockito.<Map<String, ?>>when(badEntry.getOptions()).thenReturn(badOptionMap);
    Mockito.<Map<String, ?>>when(goodEntry.getOptions()).thenReturn(optionMap);
    String section = "bogus-section";
    Configuration mockConfig = Mockito.mock(Configuration.class);
    Mockito.when(mockConfig.getAppConfigurationEntry(section)).thenReturn(new AppConfigurationEntry[] { emptyEntry, goodEntry, badEntry });
    Assert.assertEquals(ClientAuthUtils.get(mockConfig, section, k), expected);
}

Example 28 with Configuration

use of javax.security.auth.login.Configuration in project storm by apache.

the class ClientAuthUtilsTest method getOptionsThrowsOnMissingSectionTest.

@Test(expected = IOException.class)
public void getOptionsThrowsOnMissingSectionTest() throws IOException {
    Configuration mockConfig = Mockito.mock(Configuration.class);
    ClientAuthUtils.get(mockConfig, "bogus-section", "");
}

Example 29 with Configuration

use of javax.security.auth.login.Configuration in project tomcat by apache.

the class JAASRealm method authenticate.

// -------------------------------------------------------- Package Methods
// ------------------------------------------------------ Protected Methods
/**
 * Perform the actual JAAS authentication.
 * @param username The user name
 * @param callbackHandler The callback handler
 * @return the associated principal, or <code>null</code> if there is none.
 */
protected Principal authenticate(String username, CallbackHandler callbackHandler) {
    // Establish a LoginContext to use for authentication
    try {
        LoginContext loginContext = null;
        if (appName == null) {
            appName = "Tomcat";
        }
        if (log.isDebugEnabled()) {
            log.debug(sm.getString("jaasRealm.beginLogin", username, appName));
        }
        // What if the LoginModule is in the container class loader ?
        ClassLoader ocl = null;
        if (!isUseContextClassLoader()) {
            ocl = Thread.currentThread().getContextClassLoader();
            Thread.currentThread().setContextClassLoader(this.getClass().getClassLoader());
        }
        try {
            Configuration config = getConfig();
            loginContext = new LoginContext(appName, null, callbackHandler, config);
        } catch (Throwable e) {
            ExceptionUtils.handleThrowable(e);
            log.error(sm.getString("jaasRealm.unexpectedError"), e);
            // There is configuration issue with JAAS so mark the realm as
            // unavailable
            invocationSuccess = false;
            return null;
        } finally {
            if (!isUseContextClassLoader()) {
                Thread.currentThread().setContextClassLoader(ocl);
            }
        }
        if (log.isDebugEnabled()) {
            log.debug("Login context created " + username);
        }
        // Negotiate a login via this LoginContext
        Subject subject = null;
        try {
            loginContext.login();
            subject = loginContext.getSubject();
            // We were able to perform login successfully so mark JAAS realm as
            // available as it could have been set to false in prior attempts.
            // Change invocationSuccess variable only when we know the outcome
            // of the JAAS operation to keep variable consistent.
            invocationSuccess = true;
            if (subject == null) {
                if (log.isDebugEnabled()) {
                    log.debug(sm.getString("jaasRealm.failedLogin", username));
                }
                return null;
            }
        } catch (AccountExpiredException e) {
            if (log.isDebugEnabled()) {
                log.debug(sm.getString("jaasRealm.accountExpired", username));
            }
            // JAAS checked LoginExceptions are successful authentication
            // invocations so mark JAAS realm as available
            invocationSuccess = true;
            return null;
        } catch (CredentialExpiredException e) {
            if (log.isDebugEnabled()) {
                log.debug(sm.getString("jaasRealm.credentialExpired", username));
            }
            // JAAS checked LoginExceptions are successful authentication
            // invocations so mark JAAS realm as available
            invocationSuccess = true;
            return null;
        } catch (FailedLoginException e) {
            if (log.isDebugEnabled()) {
                log.debug(sm.getString("jaasRealm.failedLogin", username));
            }
            // JAAS checked LoginExceptions are successful authentication
            // invocations so mark JAAS realm as available
            invocationSuccess = true;
            return null;
        } catch (LoginException e) {
            log.warn(sm.getString("jaasRealm.loginException", username), e);
            // JAAS checked LoginExceptions are successful authentication
            // invocations so mark JAAS realm as available
            invocationSuccess = true;
            return null;
        } catch (Throwable e) {
            ExceptionUtils.handleThrowable(e);
            log.error(sm.getString("jaasRealm.unexpectedError"), e);
            // JAAS throws exception different than LoginException so mark the
            // realm as unavailable
            invocationSuccess = false;
            return null;
        }
        if (log.isDebugEnabled()) {
            log.debug(sm.getString("jaasRealm.loginContextCreated", username));
        }
        // Return the appropriate Principal for this authenticated Subject
        Principal principal = createPrincipal(username, subject, loginContext);
        if (principal == null) {
            log.debug(sm.getString("jaasRealm.authenticateFailure", username));
            return null;
        }
        if (log.isDebugEnabled()) {
            log.debug(sm.getString("jaasRealm.authenticateSuccess", username, principal));
        }
        return principal;
    } catch (Throwable t) {
        log.error("error ", t);
        // JAAS throws exception different than LoginException so mark the realm as unavailable
        invocationSuccess = false;
        return null;
    }
}

Example 30 with Configuration

use of javax.security.auth.login.Configuration in project jstorm by alibaba.

the class ThriftClient method reconnect.

public synchronized void reconnect() {
    close();
    try {
        TSocket socket = new TSocket(host, port);
        if (timeout != null) {
            socket.setTimeout(timeout);
        } else {
        // @@@ Todo
        // set the socket default Timeout as xxxx
        }
        // locate login configuration
        Configuration login_conf = AuthUtils.GetConfiguration(conf);
        // construct a transport plugin
        ITransportPlugin transportPlugin = AuthUtils.GetTransportPlugin(type, conf, login_conf);
        final TTransport underlyingTransport = socket;
        // TODO get this from type instead of hardcoding to Nimbus.
        // establish client-server transport via plugin
        // do retries if the connect fails
        TBackoffConnect connectionRetry = new TBackoffConnect(Utils.getInt(conf.get(Config.STORM_NIMBUS_RETRY_TIMES)), Utils.getInt(conf.get(Config.STORM_NIMBUS_RETRY_INTERVAL)), Utils.getInt(conf.get(Config.STORM_NIMBUS_RETRY_INTERVAL_CEILING)));
        _transport = connectionRetry.doConnectWithRetry(transportPlugin, underlyingTransport, host, asUser);
    } catch (IOException ex) {
        throw new RuntimeException(ex);
    }
    _protocol = null;
    if (_transport != null) {
        _protocol = new TBinaryProtocol(_transport);
    }
}