Examples with IdentityMapper org.apache.cxf.sts.IdentityMapper used on opensource projects

Example 1 with IdentityMapper

use of org.apache.cxf.sts.IdentityMapper in project cxf by apache.

the class AbstractOperation method processValidToken.

protected void processValidToken(TokenProviderParameters providerParameters, ReceivedToken validatedToken, TokenValidatorResponse tokenResponse) {
    // Map the principal (if it exists)
    Principal responsePrincipal = tokenResponse.getPrincipal();
    if (responsePrincipal != null) {
        String targetRealm = providerParameters.getRealm();
        String sourceRealm = tokenResponse.getTokenRealm();
        if (sourceRealm != null && targetRealm != null && !sourceRealm.equals(targetRealm)) {
            RelationshipResolver relRes = stsProperties.getRelationshipResolver();
            Relationship relationship = null;
            if (relRes != null) {
                relationship = relRes.resolveRelationship(sourceRealm, targetRealm);
                if (relationship != null) {
                    tokenResponse.getAdditionalProperties().put(Relationship.class.getName(), relationship);
                }
            }
            if (relationship == null || relationship.getType().equals(Relationship.FED_TYPE_IDENTITY)) {
                // federate identity
                IdentityMapper identityMapper = null;
                if (relationship == null) {
                    identityMapper = stsProperties.getIdentityMapper();
                } else {
                    identityMapper = relationship.getIdentityMapper();
                }
                if (identityMapper != null) {
                    Principal targetPrincipal = identityMapper.mapPrincipal(sourceRealm, responsePrincipal, targetRealm);
                    validatedToken.setPrincipal(targetPrincipal);
                } else {
                    LOG.log(Level.SEVERE, "No IdentityMapper configured in STSProperties or Relationship");
                    throw new STSException("Error in providing a token", STSException.REQUEST_FAILED);
                }
            } else if (relationship.getType().equals(Relationship.FED_TYPE_CLAIMS)) {
            // federate claims
            // Claims are transformed at the time when the claims are required to create a token
            // (ex. ClaimsAttributeStatementProvider)
            // principal remains unchanged
            } else {
                LOG.log(Level.SEVERE, "Unknown federation type: " + relationship.getType());
                throw new STSException("Error in providing a token", STSException.BAD_REQUEST);
            }
        }
    }
}

Example 2 with IdentityMapper

use of org.apache.cxf.sts.IdentityMapper in project cxf by apache.

the class EhCacheIdentityCacheTest method testTwoDistinctAndTwoRelatedMapping.

@org.junit.Test
public void testTwoDistinctAndTwoRelatedMapping() {
    IdentityMapper mapper = new CacheIdentityMapper();
    Bus bus = BusFactory.getDefaultBus();
    EHCacheIdentityCache cache = new EHCacheIdentityCache(mapper, bus);
    cache.mapPrincipal("REALM_A", new CustomTokenPrincipal("user_aaa"), "REALM_B");
    cache.mapPrincipal("REALM_D", new CustomTokenPrincipal("user_ddd"), "REALM_E");
    assertEquals(4, cache.size());
    // No Mapping occured between A,B and D,E (C not involved at all)
    assertEquals(2, cache.get("user_aaa", "REALM_A").size());
    assertEquals(2, cache.get("user_bbb", "REALM_B").size());
    assertEquals(2, cache.get("user_ddd", "REALM_D").size());
    assertEquals(2, cache.get("user_eee", "REALM_E").size());
    cache.mapPrincipal("REALM_B", new CustomTokenPrincipal("user_bbb"), "REALM_C");
    assertEquals(5, cache.size());
    assertNotNull(cache.get("user_aaa", "REALM_A"));
    assertNotNull(cache.get("user_bbb", "REALM_B"));
    assertNotNull(cache.get("user_ccc", "REALM_C"));
    assertNotNull(cache.get("user_ddd", "REALM_D"));
    assertNotNull(cache.get("user_eee", "REALM_E"));
    assertEquals(3, cache.get("user_aaa", "REALM_A").size());
    assertEquals(3, cache.get("user_bbb", "REALM_B").size());
    assertEquals(3, cache.get("user_ccc", "REALM_C").size());
    // No mapping occurred between A,B,C and D,E -> distinct
    assertEquals(2, cache.get("user_ddd", "REALM_D").size());
    assertEquals(2, cache.get("user_eee", "REALM_E").size());
    cache.mapPrincipal("REALM_C", new CustomTokenPrincipal("user_ccc"), "REALM_E");
    // All mappings are known now
    assertEquals(5, cache.size());
    assertNotNull(cache.get("user_aaa", "REALM_A"));
    assertNotNull(cache.get("user_bbb", "REALM_B"));
    assertNotNull(cache.get("user_ccc", "REALM_C"));
    assertNotNull(cache.get("user_ddd", "REALM_D"));
    assertNotNull(cache.get("user_eee", "REALM_E"));
    assertEquals(5, cache.get("user_aaa", "REALM_A").size());
    assertEquals(5, cache.get("user_bbb", "REALM_B").size());
    assertEquals(5, cache.get("user_ccc", "REALM_C").size());
    assertEquals(5, cache.get("user_ddd", "REALM_D").size());
    assertEquals(5, cache.get("user_eee", "REALM_E").size());
    cache.close();
}

Example 3 with IdentityMapper

use of org.apache.cxf.sts.IdentityMapper in project cxf by apache.

the class EhCacheIdentityCacheTest method testOneMapping.

// tests TokenStore apis for storing in the cache.
@org.junit.Test
public void testOneMapping() throws Exception {
    IdentityMapper mapper = new CacheIdentityMapper();
    Bus bus = BusFactory.getDefaultBus();
    EHCacheIdentityCache cache = new EHCacheIdentityCache(mapper, bus);
    cache.mapPrincipal("REALM_A", new CustomTokenPrincipal("user_aaa"), "REALM_B");
    assertEquals(2, cache.size());
    assertNotNull(cache.get("user_aaa", "REALM_A"));
    assertNotNull(cache.get("user_bbb", "REALM_B"));
    cache.close();
}

Example 4 with IdentityMapper

use of org.apache.cxf.sts.IdentityMapper in project cxf by apache.

the class MemoryIdentityCacheTest method testTwoDistinctAndTwoRelatedMapping.

@org.junit.Test
public void testTwoDistinctAndTwoRelatedMapping() {
    IdentityMapper mapper = new CacheIdentityMapper();
    MemoryIdentityCache cache = new MemoryIdentityCache(mapper);
    cache.mapPrincipal("REALM_A", new CustomTokenPrincipal("user_aaa"), "REALM_B");
    cache.mapPrincipal("REALM_D", new CustomTokenPrincipal("user_ddd"), "REALM_E");
    assertEquals(4, cache.size());
    // No Mapping occured between A,B and D,E (C not involved at all)
    assertEquals(2, cache.get("user_aaa", "REALM_A").size());
    assertEquals(2, cache.get("user_bbb", "REALM_B").size());
    assertEquals(2, cache.get("user_ddd", "REALM_D").size());
    assertEquals(2, cache.get("user_eee", "REALM_E").size());
    cache.mapPrincipal("REALM_B", new CustomTokenPrincipal("user_bbb"), "REALM_C");
    assertEquals(5, cache.size());
    assertNotNull(cache.get("user_aaa", "REALM_A"));
    assertNotNull(cache.get("user_bbb", "REALM_B"));
    assertNotNull(cache.get("user_ccc", "REALM_C"));
    assertNotNull(cache.get("user_ddd", "REALM_D"));
    assertNotNull(cache.get("user_eee", "REALM_E"));
    assertEquals(3, cache.get("user_aaa", "REALM_A").size());
    assertEquals(3, cache.get("user_bbb", "REALM_B").size());
    assertEquals(3, cache.get("user_ccc", "REALM_C").size());
    // No mapping occurred between A,B,C and D,E -> distinct
    assertEquals(2, cache.get("user_ddd", "REALM_D").size());
    assertEquals(2, cache.get("user_eee", "REALM_E").size());
    cache.mapPrincipal("REALM_C", new CustomTokenPrincipal("user_ccc"), "REALM_E");
    // All mappings are known now
    assertEquals(5, cache.size());
    assertNotNull(cache.get("user_aaa", "REALM_A"));
    assertNotNull(cache.get("user_bbb", "REALM_B"));
    assertNotNull(cache.get("user_ccc", "REALM_C"));
    assertNotNull(cache.get("user_ddd", "REALM_D"));
    assertNotNull(cache.get("user_eee", "REALM_E"));
    assertEquals(5, cache.get("user_aaa", "REALM_A").size());
    assertEquals(5, cache.get("user_bbb", "REALM_B").size());
    assertEquals(5, cache.get("user_ccc", "REALM_C").size());
    assertEquals(5, cache.get("user_ddd", "REALM_D").size());
    assertEquals(5, cache.get("user_eee", "REALM_E").size());
}

Example 5 with IdentityMapper

use of org.apache.cxf.sts.IdentityMapper in project cxf by apache.

the class EhCacheIdentityCacheTest method testTwoDistinctAndOneRelatedMapping.

@org.junit.Test
public void testTwoDistinctAndOneRelatedMapping() {
    IdentityMapper mapper = new CacheIdentityMapper();
    Bus bus = BusFactory.getDefaultBus();
    EHCacheIdentityCache cache = new EHCacheIdentityCache(mapper, bus);
    cache.mapPrincipal("REALM_A", new CustomTokenPrincipal("user_aaa"), "REALM_B");
    cache.mapPrincipal("REALM_C", new CustomTokenPrincipal("user_ccc"), "REALM_D");
    cache.mapPrincipal("REALM_A", new CustomTokenPrincipal("user_aaa"), "REALM_D");
    // now, mapping from A -> D and B -> D are cached as well
    assertEquals(4, cache.size());
    assertNotNull(cache.get("user_aaa", "REALM_A"));
    assertNotNull(cache.get("user_bbb", "REALM_B"));
    assertNotNull(cache.get("user_ccc", "REALM_C"));
    assertNotNull(cache.get("user_ddd", "REALM_D"));
    assertEquals(4, cache.get("user_aaa", "REALM_A").size());
    assertEquals(4, cache.get("user_bbb", "REALM_B").size());
    assertEquals(4, cache.get("user_ccc", "REALM_C").size());
    assertEquals(4, cache.get("user_ddd", "REALM_D").size());
    cache.close();
}