Examples with UserPasswordCredential me.vertretungsplan.objects.credential.UserPasswordCredential used on opensource projects

Example 1 with UserPasswordCredential

use of me.vertretungsplan.objects.credential.UserPasswordCredential in project substitution-schedule-parser by vertretungsplanme.

the class LegionBoardParser method getAuthenticationKey.

/**
 * Returns authentication key as shown
 * <a href="https://gitlab.com/legionboard/heart/blob/master/doc/README.md">in the documentation</a>.
 */
private String getAuthenticationKey(Credential credential) {
    final UserPasswordCredential userPasswordCredential = (UserPasswordCredential) credential;
    final String username = userPasswordCredential.getUsername();
    final String password = userPasswordCredential.getPassword();
    return DigestUtils.sha256Hex(username.toLowerCase() + "//" + password);
}

Example 2 with UserPasswordCredential

use of me.vertretungsplan.objects.credential.UserPasswordCredential in project substitution-schedule-parser by vertretungsplanme.

the class LoginHandler method handleLogin.

private String handleLogin(Executor executor, CookieStore cookieStore, boolean needsResponse) throws JSONException, IOException, CredentialInvalidException {
    if (auth == null)
        return null;
    if (!(auth instanceof UserPasswordCredential || auth instanceof PasswordCredential)) {
        throw new IllegalArgumentException("Wrong authentication type");
    }
    String login;
    String password;
    if (auth instanceof UserPasswordCredential) {
        login = ((UserPasswordCredential) auth).getUsername();
        password = ((UserPasswordCredential) auth).getPassword();
    } else {
        login = null;
        password = ((PasswordCredential) auth).getPassword();
    }
    JSONObject data = scheduleData.getData();
    JSONObject loginConfig = data.getJSONObject(LOGIN_CONFIG);
    String type = loginConfig.optString(PARAM_TYPE, "post");
    switch(type) {
        case "post":
            List<Cookie> cookieList = cookieProvider != null ? cookieProvider.getCookies(auth) : null;
            String checkUrl = loginConfig.optString(PARAM_CHECK_URL, null);
            String checkText = loginConfig.optString(PARAM_CHECK_TEXT, null);
            if (cookieList != null && !needsResponse && !(checkUrl == null && checkText != null)) {
                for (Cookie cookie : cookieList) cookieStore.addCookie(cookie);
                if (checkUrl != null && checkText != null) {
                    try {
                        String response = executor.execute(Request.Get(checkUrl)).returnContent().asString();
                        if (!response.contains(checkText)) {
                            return null;
                        }
                    } catch (HttpResponseException e) {
                        return null;
                    }
                } else {
                    return null;
                }
            }
            executor.clearCookies();
            Document preDoc = null;
            if (loginConfig.has(PARAM_PRE_URL)) {
                String preUrl = loginConfig.getString(PARAM_PRE_URL);
                String preHtml = executor.execute(Request.Get(preUrl)).returnContent().asString();
                preDoc = Jsoup.parse(preHtml);
            }
            String postUrl = loginConfig.getString(PARAM_URL);
            JSONObject loginData = loginConfig.getJSONObject(PARAM_DATA);
            List<NameValuePair> nvps = new ArrayList<>();
            String typo3Challenge = null;
            BigInteger typo3RsaN = null;
            BigInteger typo3RsaE = null;
            if (loginData.has("_hiddeninputs") && preDoc != null) {
                for (Element hidden : preDoc.select(loginData.getString("_hiddeninputs") + " input[type=hidden]")) {
                    if (loginData.has(hidden.attr("name")))
                        continue;
                    nvps.add(new BasicNameValuePair(hidden.attr("name"), hidden.attr("value")));
                    if (hidden.attr("name").equals("challenge")) {
                        typo3Challenge = hidden.attr("value");
                    } else if (hidden.attr("name").equals("n") && hidden.attr("id").equals("rsa_n")) {
                        typo3RsaN = new BigInteger(hidden.attr("value"), 16);
                    } else if (hidden.attr("name").equals("e") && hidden.attr("id").equals("rsa_e")) {
                        typo3RsaE = new BigInteger(hidden.attr("value"), 16);
                    }
                }
            }
            for (String name : JSONObject.getNames(loginData)) {
                String value = loginData.getString(name);
                if (name.equals("_hiddeninputs"))
                    continue;
                switch(value) {
                    case "_login":
                        value = login;
                        break;
                    case "_password":
                        value = password;
                        break;
                    case "_password_md5":
                        value = DigestUtils.md5Hex(password);
                        break;
                    case "_password_md5_typo3":
                        value = DigestUtils.md5Hex(login + ":" + DigestUtils.md5Hex(password) + ":" + typo3Challenge);
                        break;
                    case "_password_rsa_typo3":
                        try {
                            final Cipher cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding");
                            if (typo3RsaE == null && typo3RsaN == null) {
                                String key = executor.execute(Request.Get(new URL(new URL(postUrl), "/index.php?eID=FrontendLoginRsaPublicKey").toString())).returnContent().asString();
                                typo3RsaN = new BigInteger(key.split(":")[0], 16);
                                typo3RsaE = new BigInteger(key.split(":")[1], 16);
                            }
                            cipher.init(Cipher.ENCRYPT_MODE, KeyFactory.getInstance("RSA").generatePublic(new RSAPublicKeySpec(typo3RsaN, typo3RsaE)));
                            byte[] result = cipher.doFinal(password.getBytes());
                            value = "rsa:" + new Base64().encodeAsString(result);
                        } catch (NoSuchAlgorithmException | NoSuchPaddingException | InvalidKeyException | BadPaddingException | IllegalBlockSizeException | InvalidKeySpecException e) {
                            e.printStackTrace();
                        }
                        break;
                }
                nvps.add(new BasicNameValuePair(name, value));
            }
            Request request = Request.Post(postUrl);
            if (loginConfig.optBoolean("form-data", false)) {
                MultipartEntityBuilder builder = MultipartEntityBuilder.create();
                for (NameValuePair nvp : nvps) {
                    builder.addTextBody(nvp.getName(), nvp.getValue());
                }
                request.body(builder.build());
            } else {
                request.bodyForm(nvps, Charset.forName("UTF-8"));
            }
            String html = executor.execute(request).returnContent().asString();
            if (cookieProvider != null)
                cookieProvider.saveCookies(auth, cookieStore.getCookies());
            if (checkUrl != null && checkText != null) {
                try {
                    String response = executor.execute(Request.Get(checkUrl)).returnContent().asString();
                    if (response.contains(checkText))
                        throw new CredentialInvalidException();
                } catch (HttpResponseException e) {
                    throw new CredentialInvalidException();
                }
            } else if (checkText != null) {
                if (html.contains(checkText))
                    throw new CredentialInvalidException();
            }
            return html;
        case "basic":
            if (login == null)
                throw new IOException("wrong auth type");
            executor.auth(login, password);
            if (loginConfig.has(PARAM_URL)) {
                String url = loginConfig.getString(PARAM_URL);
                if (executor.execute(Request.Get(url)).returnResponse().getStatusLine().getStatusCode() != 200) {
                    throw new CredentialInvalidException();
                }
            }
            break;
        case "ntlm":
            if (login == null)
                throw new IOException("wrong auth type");
            executor.auth(login, password, null, null);
            if (loginConfig.has(PARAM_URL)) {
                String url = loginConfig.getString(PARAM_URL);
                if (executor.execute(Request.Get(url)).returnResponse().getStatusLine().getStatusCode() != 200) {
                    throw new CredentialInvalidException();
                }
            }
            break;
        case "fixed":
            String loginFixed = loginConfig.optString(PARAM_LOGIN, null);
            String passwordFixed = loginConfig.getString(PARAM_PASSWORD);
            if (!Objects.equals(loginFixed, login) || !Objects.equals(passwordFixed, password)) {
                throw new CredentialInvalidException();
            }
            break;
    }
    return null;
}

Example 3 with UserPasswordCredential

use of me.vertretungsplan.objects.credential.UserPasswordCredential in project substitution-schedule-parser by vertretungsplanme.

the class IndiwareStundenplan24Parser method getSubstitutionSchedule.

@Override
public SubstitutionSchedule getSubstitutionSchedule() throws IOException, JSONException, CredentialInvalidException {
    String baseurl;
    if (data.has("schoolNumber")) {
        baseurl = "https://www.stundenplan24.de/" + data.getString("schoolNumber") + "/vplan/";
        if (credential == null || !(credential instanceof UserPasswordCredential)) {
            throw new IOException("no login");
        }
        String login = ((UserPasswordCredential) credential).getUsername();
        String password = ((UserPasswordCredential) credential).getPassword();
        executor.auth(login, password);
    } else {
        baseurl = data.getString("baseurl") + "/";
        new LoginHandler(scheduleData, credential, cookieProvider).handleLogin(executor, cookieStore);
    }
    List<Document> docs = new ArrayList<>();
    for (int i = 0; i < MAX_DAYS; i++) {
        LocalDate date = LocalDate.now().plusDays(i);
        String dateStr = DateTimeFormat.forPattern("yyyyMMdd").print(date);
        String url = baseurl + "vdaten/VplanKl" + dateStr + ".xml?_=" + System.currentTimeMillis();
        try {
            String xml = httpGet(url, ENCODING);
            Document doc = Jsoup.parse(xml, url, Parser.xmlParser());
            if (doc.select("kopf datei").text().equals("VplanKl" + dateStr + ".xml")) {
                docs.add(doc);
            }
        } catch (HttpResponseException e) {
            if (e.getStatusCode() != 404 && e.getStatusCode() != 300)
                throw e;
        }
    }
    SubstitutionSchedule v = SubstitutionSchedule.fromData(scheduleData);
    for (Document doc : docs) {
        v.addDay(parseIndiwareDay(doc, false));
    }
    v.setWebsite(baseurl);
    v.setClasses(getAllClasses());
    v.setTeachers(getAllTeachers());
    return v;
}

Example 4 with UserPasswordCredential

use of me.vertretungsplan.objects.credential.UserPasswordCredential in project substitution-schedule-parser by vertretungsplanme.

the class IphisParser method login.

private Boolean login() throws CredentialInvalidException, IOException {
    final UserPasswordCredential userPasswordCredential = (UserPasswordCredential) credential;
    final String username = userPasswordCredential.getUsername();
    final String password = userPasswordCredential.getPassword();
    JSONObject payload = new JSONObject();
    try {
        payload.put("school", kuerzel);
        payload.put("user", username);
        payload.put("type", scheduleData.getType());
        payload.put("password", password);
    } catch (JSONException e) {
        e.printStackTrace();
    }
    httpPost(api + "/login", "UTF-8", payload.toString(), ContentType.APPLICATION_JSON);
    final String httpResponse = httpPost(api + "/login", "UTF-8", payload.toString(), ContentType.APPLICATION_JSON);
    final JSONObject token;
    try {
        token = new JSONObject(httpResponse);
        final String key = Base64.encodeBase64String(jwt_key.getBytes());
        final Claims jwtToken = Jwts.parser().setSigningKey(key).parseClaimsJws(token.getString("token")).getBody();
        assert jwtToken.getSubject().equals("vertretungsplan.me");
        authToken = token.getString("token");
        website = jwtToken.getIssuer();
        lastUpdate = new LocalDateTime(token.getLong("stand") * 1000);
    } catch (SignatureException | JSONException e) {
        throw new CredentialInvalidException();
    }
    return true;
}

Example 5 with UserPasswordCredential

use of me.vertretungsplan.objects.credential.UserPasswordCredential in project substitution-schedule-parser by vertretungsplanme.

the class SchoolJoomlaParser method executeTask.

@NotNull
private JSONObject executeTask(String task) throws JSONException, IOException, CredentialInvalidException {
    String baseurl = scheduleData.getData().getString(PARAM_BASEURL);
    String username = "";
    String password = "";
    if (credential != null) {
        if (credential instanceof UserPasswordCredential) {
            if (scheduleData.getType() != SubstitutionSchedule.Type.TEACHER) {
                throw new IOException("student schedules only have passwords or no password");
            }
            username = ((UserPasswordCredential) credential).getUsername();
            password = ((UserPasswordCredential) credential).getPassword();
        } else if (credential instanceof PasswordCredential) {
            if (scheduleData.getType() != SubstitutionSchedule.Type.STUDENT) {
                throw new IOException("teacher schedules need a username");
            }
            password = ((PasswordCredential) credential).getPassword();
        }
    }
    String json = httpGet(baseurl + "/components/com_school_mobile/wserv/service" + ".php?select=&user=" + username + "&pw=" + password + "&task=" + task, "UTF-8");
    if (!json.startsWith("{") && json.contains("{")) {
        // sometimes the server gives error messages above the JSON
        json = json.substring(json.indexOf("{"));
    }
    final JSONObject data = new JSONObject(json);
    final int error = data.getInt("error");
    if (error != 0 || data.getJSONArray("errors").length() > 0) {
        switch(error) {
            // wrong teacher password
            case 12:
            case // wrong student password
            17:
                throw new CredentialInvalidException();
            case // teacher auth failed
            3002:
                if (scheduleData.getType() == SubstitutionSchedule.Type.TEACHER) {
                    throw new CredentialInvalidException();
                }
                break;
            default:
                throw new IOException(data.getString("error_desc"));
        }
    }
    return data;
}