Search in sources :

Example 6 with ApplicationPolicy

use of org.jboss.security.config.ApplicationPolicy in project jbossws-cxf by jbossws.

the class DefaultJASPIAuthenticationProvider method enableServerAuthentication.

public boolean enableServerAuthentication(Object target, Endpoint endpoint) {
    if (!(target instanceof EndpointImpl)) {
        Loggers.ROOT_LOGGER.cannotEnableJASPIAuthentication(target.getClass().getSimpleName());
        return false;
    }
    EndpointImpl endpointImpl = (EndpointImpl) target;
    String securityDomain = (String) endpointImpl.getProperties().get(JaspiServerAuthenticator.JASPI_SECURITY_DOMAIN);
    if (securityDomain == null) {
        return false;
    }
    ApplicationPolicy appPolicy = SecurityConfiguration.getApplicationPolicy(securityDomain);
    if (appPolicy == null) {
        Loggers.ROOT_LOGGER.noApplicationPolicy(securityDomain);
        return false;
    }
    BaseAuthenticationInfo bai = appPolicy.getAuthenticationInfo();
    if (bai == null || bai instanceof AuthenticationInfo) {
        Loggers.ROOT_LOGGER.noJaspiApplicationPolicy(securityDomain);
        return false;
    }
    JASPIAuthenticationInfo jai = (JASPIAuthenticationInfo) bai;
    String contextRoot = endpoint.getService().getContextRoot();
    String appId = "localhost " + contextRoot;
    AuthConfigFactory factory = AuthConfigFactory.getFactory();
    Properties properties = new Properties();
    AuthConfigProvider provider = new JBossWSAuthConfigProvider(properties, factory);
    provider = factory.getConfigProvider(JBossWSAuthConstants.SOAP_LAYER, appId, null);
    JBossCallbackHandler callbackHandler = new JBossCallbackHandler();
    JaspiServerAuthenticator serverAuthenticator = null;
    try {
        ServerAuthConfig serverConfig = provider.getServerAuthConfig(JBossWSAuthConstants.SOAP_LAYER, appId, callbackHandler);
        Properties serverContextProperties = new Properties();
        serverContextProperties.put("security-domain", securityDomain);
        serverContextProperties.put("jaspi-policy", jai);
        serverContextProperties.put(javax.xml.ws.Endpoint.class, endpointImpl);
        String authContextID = endpointImpl.getBeanName();
        ServerAuthContext sctx = serverConfig.getAuthContext(authContextID, null, serverContextProperties);
        serverAuthenticator = new JaspiServerAuthenticator(sctx);
        endpointImpl.getInInterceptors().add(new JaspiSeverInInterceptor(serverAuthenticator));
        endpointImpl.getOutInterceptors().add(new JaspiSeverOutInterceptor(serverAuthenticator));
        return true;
    } catch (Exception e) {
        Loggers.DEPLOYMENT_LOGGER.cannotCreateServerAuthContext(securityDomain, e);
    }
    return false;
}
Also used : JBossWSAuthConfigProvider(org.jboss.wsf.stack.cxf.jaspi.config.JBossWSAuthConfigProvider) AuthConfigProvider(javax.security.auth.message.config.AuthConfigProvider) EndpointImpl(org.apache.cxf.jaxws.EndpointImpl) JASPIAuthenticationInfo(org.jboss.security.auth.login.JASPIAuthenticationInfo) JBossWSAuthConfigProvider(org.jboss.wsf.stack.cxf.jaspi.config.JBossWSAuthConfigProvider) Properties(java.util.Properties) BaseAuthenticationInfo(org.jboss.security.auth.login.BaseAuthenticationInfo) JASPIAuthenticationInfo(org.jboss.security.auth.login.JASPIAuthenticationInfo) AuthenticationInfo(org.jboss.security.auth.login.AuthenticationInfo) ServerAuthContext(javax.security.auth.message.config.ServerAuthContext) JaspiSeverInInterceptor(org.jboss.wsf.stack.cxf.jaspi.interceptor.JaspiSeverInInterceptor) JaspiSeverOutInterceptor(org.jboss.wsf.stack.cxf.jaspi.interceptor.JaspiSeverOutInterceptor) BaseAuthenticationInfo(org.jboss.security.auth.login.BaseAuthenticationInfo) ApplicationPolicy(org.jboss.security.config.ApplicationPolicy) AuthConfigFactory(javax.security.auth.message.config.AuthConfigFactory) JBossCallbackHandler(org.jboss.security.auth.callback.JBossCallbackHandler) ServerAuthConfig(javax.security.auth.message.config.ServerAuthConfig)

Aggregations

ApplicationPolicy (org.jboss.security.config.ApplicationPolicy)6 JASPIAuthenticationInfo (org.jboss.security.auth.login.JASPIAuthenticationInfo)4 Properties (java.util.Properties)3 AuthConfigFactory (javax.security.auth.message.config.AuthConfigFactory)3 AuthConfigProvider (javax.security.auth.message.config.AuthConfigProvider)3 JBossCallbackHandler (org.jboss.security.auth.callback.JBossCallbackHandler)3 AuthenticationInfo (org.jboss.security.auth.login.AuthenticationInfo)3 BaseAuthenticationInfo (org.jboss.security.auth.login.BaseAuthenticationInfo)3 JBossWSAuthConfigProvider (org.jboss.wsf.stack.cxf.jaspi.config.JBossWSAuthConfigProvider)3 ServerAuthConfig (javax.security.auth.message.config.ServerAuthConfig)2 ServerAuthContext (javax.security.auth.message.config.ServerAuthContext)2 JaspiSeverInInterceptor (org.jboss.wsf.stack.cxf.jaspi.interceptor.JaspiSeverInInterceptor)2 JaspiSeverOutInterceptor (org.jboss.wsf.stack.cxf.jaspi.interceptor.JaspiSeverOutInterceptor)2 LoginConfig (io.undertow.servlet.api.LoginConfig)1 ClientAuthConfig (javax.security.auth.message.config.ClientAuthConfig)1 Bus (org.apache.cxf.Bus)1 Client (org.apache.cxf.endpoint.Client)1 EndpointImpl (org.apache.cxf.jaxws.EndpointImpl)1 SecurityDomainContext (org.jboss.as.security.plugins.SecurityDomainContext)1 SecurityDomainService (org.jboss.as.security.service.SecurityDomainService)1