Search in sources :

Example 1 with UsernameTokenValidator

use of org.apache.wss4j.dom.validate.UsernameTokenValidator in project cxf by apache.

the class CallbackHandlerLoginHandler method createSubject.

@Override
public UserSubject createSubject(Client client, String user, String pass) {
    Document doc = DOMUtils.getEmptyDocument();
    UsernameToken token = new UsernameToken(false, doc, WSS4JConstants.PASSWORD_TEXT);
    token.setName(user);
    token.setPassword(pass);
    Credential credential = new Credential();
    credential.setUsernametoken(token);
    RequestData data = new RequestData();
    data.setMsgContext(PhaseInterceptorChain.getCurrentMessage());
    data.setCallbackHandler(callbackHandler);
    UsernameTokenValidator validator = new UsernameTokenValidator();
    try {
        credential = validator.validate(credential, data);
        UserSubject subject = new UserSubject();
        subject.setLogin(user);
        return subject;
    } catch (Exception ex) {
        throw ExceptionUtils.toInternalServerErrorException(ex, null);
    }
}
Also used : Credential(org.apache.wss4j.dom.validate.Credential) UserSubject(org.apache.cxf.rs.security.oauth2.common.UserSubject) UsernameTokenValidator(org.apache.wss4j.dom.validate.UsernameTokenValidator) RequestData(org.apache.wss4j.dom.handler.RequestData) UsernameToken(org.apache.wss4j.dom.message.token.UsernameToken) Document(org.w3c.dom.Document)

Aggregations

UserSubject (org.apache.cxf.rs.security.oauth2.common.UserSubject)1 RequestData (org.apache.wss4j.dom.handler.RequestData)1 UsernameToken (org.apache.wss4j.dom.message.token.UsernameToken)1 Credential (org.apache.wss4j.dom.validate.Credential)1 UsernameTokenValidator (org.apache.wss4j.dom.validate.UsernameTokenValidator)1 Document (org.w3c.dom.Document)1