Examples with INVALID_RESULT javax.security.enterprise.identitystore.CredentialValidationResult.INVALID_RESULT used on opensource projects

Example 1 with INVALID_RESULT

use of javax.security.enterprise.identitystore.CredentialValidationResult.INVALID_RESULT in project Payara by payara.

the class SignedJWTIdentityStore method validate.

public CredentialValidationResult validate(SignedJWTCredential signedJWTCredential) {
    final JwtTokenParser jwtTokenParser = new JwtTokenParser(enabledNamespace, customNamespace, disableTypeVerification);
    try {
        JsonWebTokenImpl jsonWebToken = jwtTokenParser.parse(signedJWTCredential.getSignedJWT(), isEncryptionRequired, publicKeyStore, acceptedIssuer, privateKeyStore);
        // verifyAndParseEncryptedJWT audience
        final Set<String> recipientsOfThisJWT = jsonWebToken.getAudience();
        // find if any recipient is in the allowed audience
        Boolean recipientInAudience = allowedAudience.map(recipient -> recipient.stream().anyMatch(a -> recipientsOfThisJWT != null && recipientsOfThisJWT.contains(a))).orElse(true);
        if (!recipientInAudience) {
            throw new Exception("The intended audience " + recipientsOfThisJWT + " is not a part of allowed audience.");
        }
        Set<String> groups = new HashSet<>();
        Collection<String> groupClaims = jsonWebToken.getClaim("groups");
        if (groupClaims != null) {
            groups.addAll(groupClaims);
        }
        return new CredentialValidationResult(jsonWebToken, groups);
    } catch (Exception e) {
        LOGGER.log(INFO, "Exception trying to parse JWT token.", e);
    }
    return INVALID_RESULT;
}

Example 2 with INVALID_RESULT

use of javax.security.enterprise.identitystore.CredentialValidationResult.INVALID_RESULT in project Payara by payara.

the class RealmIdentityStore method validate.

protected CredentialValidationResult validate(UsernamePasswordCredential credential, String realmName) {
    try {
        Subject subject = login(credential, realmName);
        Set<String> groups = subject.getPrincipals(Group.class).stream().map(g -> g.getName()).collect(toSet());
        if (!groups.isEmpty()) {
            return new CredentialValidationResult(new CallerPrincipal(credential.getCaller()), groups);
        }
    } catch (LoginException ex) {
        return INVALID_RESULT;
    }
    return INVALID_RESULT;
}

Example 3 with INVALID_RESULT

use of javax.security.enterprise.identitystore.CredentialValidationResult.INVALID_RESULT in project Payara by payara.

the class CertificateRealmIdentityStore method validate.

public static CredentialValidationResult validate(CertificateCredential credential, String realmName) {
    try {
        Subject subject = login(credential, realmName);
        Set<String> groups = subject.getPrincipals(Group.class).stream().map(g -> g.getName()).collect(toSet());
        return new CredentialValidationResult(credential.getPrincipal(), groups);
    } catch (LoginException ex) {
        return INVALID_RESULT;
    }
}