Examples with TomcatSecurityService org.apache.tomee.catalina.TomcatSecurityService used on opensource projects

Example 1 with TomcatSecurityService

use of org.apache.tomee.catalina.TomcatSecurityService in project tomee by apache.

the class MPJWTFilter method doFilter.

@Override
public void doFilter(final ServletRequest request, final ServletResponse response, final FilterChain chain) throws IOException, ServletException {
    final Optional<JWTAuthConfiguration> authContextInfo = getAuthContextInfo();
    if (!authContextInfo.isPresent()) {
        chain.doFilter(request, response);
        return;
    }
    final HttpServletRequest httpServletRequest = (HttpServletRequest) request;
    // now wrap the httpServletRequest and override the principal so CXF can propagate into the SecurityContext
    try {
        final MPJWTServletRequestWrapper wrappedRequest = new MPJWTServletRequestWrapper(httpServletRequest, authContextInfo.get());
        chain.doFilter(wrappedRequest, response);
        Object state = request.getAttribute("MP_JWT_PRE_LOGIN_STATE");
        final SecurityService securityService = SystemInstance.get().getComponent(SecurityService.class);
        if (TomcatSecurityService.class.isInstance(securityService) && state != null) {
            final TomcatSecurityService tomcatSecurityService = TomcatSecurityService.class.cast(securityService);
            tomcatSecurityService.exitWebApp(state);
        }
    } catch (final Exception e) {
        // or users to add it into their webapp for scanning or into the Application itself
        if (MPJWTException.class.isInstance(e)) {
            final MPJWTException jwtException = MPJWTException.class.cast(e);
            HttpServletResponse.class.cast(response).sendError(jwtException.getStatus(), jwtException.getMessage());
        } else if (MPJWTException.class.isInstance(e.getCause())) {
            final MPJWTException jwtException = MPJWTException.class.cast(e.getCause());
            HttpServletResponse.class.cast(response).sendError(jwtException.getStatus(), jwtException.getMessage());
        } else {
            throw e;
        }
    }
}

Example 2 with TomcatSecurityService

use of org.apache.tomee.catalina.TomcatSecurityService in project tomee by apache.

the class TomEESecurityContext method registerContainerAboutLogin.

public static void registerContainerAboutLogin(final Principal principal, final Set<String> groups) {
    final SecurityService securityService = SystemInstance.get().getComponent(SecurityService.class);
    if (securityService instanceof TomcatSecurityService) {
        final TomcatSecurityService tomcatSecurityService = (TomcatSecurityService) securityService;
        final Request request = OpenEJBSecurityListener.requests.get();
        final GenericPrincipal genericPrincipal = new GenericPrincipal(principal.getName(), null, groups == null ? Collections.emptyList() : new ArrayList<>(groups), principal);
        // todo should it be done in the enterWebApp?
        JavaSecurityManagers.setContextID(toAppContext(request.getServletContext(), request.getContextPath()));
        tomcatSecurityService.enterWebApp(request.getWrapper().getRealm(), genericPrincipal, request.getWrapper().getRunAs());
    }
}

Example 3 with TomcatSecurityService

use of org.apache.tomee.catalina.TomcatSecurityService in project tomee by apache.

the class TomEESecurityContext method init.

@PostConstruct
private void init() {
    final SecurityService securityService = SystemInstance.get().getComponent(SecurityService.class);
    if (securityService instanceof TomcatSecurityService) {
        this.securityService = (TomcatSecurityService) securityService;
    }
    jaccProvider = JaccProvider.get();
}