mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-07 17:49:17 +00:00
49ea3ef394
svn merge svn://svn.alfresco.com:3691/alfresco/BRANCHES/V2.0@5141 svn://svn.alfresco.com:3691/alfresco/BRANCHES/V2.0@51352 .
- FLOSS
- Some files will need a follow-up
-root/projects/repository/source/java/org/alfresco/repo/avm/wf/AVMRemoveWFStoreHandler.java (not yet on HEAD: 5094)
-root/projects/repository/source/java/org/alfresco/filesys/server/state/FileStateLockManager.java (not yet on HEAD: 5093)
-onContentUpdateRecord (not on HEAD)
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@5167 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
109 lines
4.3 KiB
Java
109 lines
4.3 KiB
Java
/*
|
|
* Copyright (C) 2005 Alfresco, Inc.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
* As a special exception to the terms and conditions of version 2.0 of
|
|
* the GPL, you may redistribute this Program in connection with Free/Libre
|
|
* and Open Source Software ("FLOSS") applications as described in Alfresco's
|
|
* FLOSS exception. You should have recieved a copy of the text describing
|
|
* the FLOSS exception, and it is also available here:
|
|
* http://www.alfresco.com/legal/licensing"
|
|
*/
|
|
package org.alfresco.repo.webservice.axis;
|
|
|
|
import java.io.IOException;
|
|
|
|
import javax.security.auth.callback.Callback;
|
|
import javax.security.auth.callback.CallbackHandler;
|
|
import javax.security.auth.callback.UnsupportedCallbackException;
|
|
|
|
import org.alfresco.repo.security.authentication.AuthenticationException;
|
|
import org.alfresco.repo.webservice.authentication.AuthenticationFault;
|
|
import org.alfresco.service.cmr.security.AuthenticationService;
|
|
import org.apache.commons.logging.Log;
|
|
import org.apache.commons.logging.LogFactory;
|
|
import org.apache.ws.security.WSPasswordCallback;
|
|
|
|
/**
|
|
* CallbackHandler that verifies the given ticket in the password element of the UsernameToken
|
|
* header is still a valid ticket
|
|
*
|
|
* @author gavinc
|
|
*/
|
|
public class TicketCallbackHandler implements CallbackHandler
|
|
{
|
|
private static final Log logger = LogFactory.getLog(TicketCallbackHandler.class);
|
|
|
|
private AuthenticationService authenticationService;
|
|
|
|
/**
|
|
* Sets the AuthenticationService instance to use
|
|
*
|
|
* @param authenticationService The AuthenticationService
|
|
*/
|
|
public void setAuthenticationService(AuthenticationService authenticationService)
|
|
{
|
|
this.authenticationService = authenticationService;
|
|
}
|
|
|
|
/**
|
|
* @see javax.security.auth.callback.CallbackHandler#handle(javax.security.auth.callback.Callback[])
|
|
*/
|
|
public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException
|
|
{
|
|
for (int i = 0; i < callbacks.length; i++)
|
|
{
|
|
if (callbacks[i] instanceof WSPasswordCallback)
|
|
{
|
|
WSPasswordCallback pc = (WSPasswordCallback)callbacks[i];
|
|
String ticket = pc.getPassword();
|
|
|
|
if (logger.isDebugEnabled())
|
|
{
|
|
logger.debug("Verifying ticket for: " + pc.getIdentifer());
|
|
logger.debug("Ticket: " + ticket);
|
|
}
|
|
|
|
// ensure the ticket is valid
|
|
try
|
|
{
|
|
this.authenticationService.validate(ticket);
|
|
}
|
|
catch (AuthenticationException ae)
|
|
{
|
|
if (logger.isDebugEnabled())
|
|
logger.debug("Ticket validation failed: " + ae.getMessage());
|
|
|
|
// NOTE: Throwing AuthenticationFault just gets consumed and the ws-security handler
|
|
// reports a missing password; we would need to modify the WSS4J code to let
|
|
// the exception bubble up so for now just let the default message get thrown
|
|
throw new AuthenticationFault(701, "Authentication failed due to an invalid ticket");
|
|
}
|
|
|
|
if (logger.isDebugEnabled())
|
|
logger.debug("Ticket validated successfully");
|
|
|
|
// if all is well set the password to return as the given ticket
|
|
pc.setPassword(pc.getPassword());
|
|
}
|
|
else
|
|
{
|
|
throw new UnsupportedCallbackException(callbacks[i], "Unrecognized Callback");
|
|
}
|
|
}
|
|
}
|
|
}
|