initial public commit
This commit is contained in:
201
system/auth/basic-auth/LICENSE.txt
Normal file
201
system/auth/basic-auth/LICENSE.txt
Normal file
@ -0,0 +1,201 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright [yyyy] [name of copyright owner]
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
71
system/auth/basic-auth/README.md
Normal file
71
system/auth/basic-auth/README.md
Normal file
@ -0,0 +1,71 @@
|
||||
# SYSTEM :: ENTAXY :: AUTH BASIC
|
||||
|
||||
Реализация web-сервиса для загрузки актуальных или измененных пользователей и их параметры аутентификации (логин АД или данные Basic авторизации)
|
||||
|
||||
##Admin
|
||||
|
||||
Стартовый пользователь **admin/admin**, записывается через liquibase, без связанной системы.
|
||||
|
||||
По умолчанию выданы права на управленческий слой, сервисы:
|
||||
- system-management
|
||||
- basic-auth-management
|
||||
- permission-management
|
||||
- topic-management
|
||||
|
||||
!!!Требуется сменить пароль!!!
|
||||
|
||||
Файл Htpasswd не генерируется до первого обращения к сервису basic-auth-management.
|
||||
|
||||
## Сборка
|
||||
|
||||
Сборка осуществляется командой
|
||||
|
||||
```
|
||||
mvn clean install
|
||||
```
|
||||
По умолчанию запускается профиль dev, в котором прописаны параметры соединения к разработческой базе.
|
||||
|
||||
Запуск профиля для production:
|
||||
|
||||
```
|
||||
mvn clean install -Denv=prod
|
||||
```
|
||||
|
||||
Параметры соединения хранятся в свойствах профилей в pom.xml
|
||||
|
||||
## Установка в karaf
|
||||
|
||||
Добавление репозитория в karaf
|
||||
|
||||
```
|
||||
feature:repo-add mvn:ru.entaxy.esb/karaf-features/LATEST/xml/features
|
||||
```
|
||||
|
||||
Установка auth basic
|
||||
|
||||
```
|
||||
feature:install basic-auth
|
||||
```
|
||||
|
||||
## Подключение cxf interceptor для идентификации систем
|
||||
|
||||
```
|
||||
<reference id="serviceInterceptor" interface="org.apache.cxf.phase.PhaseInterceptor"
|
||||
filter="(type=service)"/>
|
||||
|
||||
<cxf:bus id="esb-entaxy">
|
||||
<cxf:inInterceptors>
|
||||
<ref component-id="serviceInterceptor"/>
|
||||
</cxf:inInterceptors>
|
||||
</cxf:bus>
|
||||
```
|
||||
|
||||
Интерцептор принимает заголовок с логином **X-ForwardedUser** от nginX
|
||||
|
||||
Данные по определённой системе записываются в заголовки
|
||||
|
||||
- **X-SystemName**
|
||||
- **X-SystemUuid**
|
||||
- **X-SystemId**
|
||||
|
||||
|
||||
201
system/auth/basic-auth/basic-auth-api/LICENSE.txt
Normal file
201
system/auth/basic-auth/basic-auth-api/LICENSE.txt
Normal file
@ -0,0 +1,201 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright [yyyy] [name of copyright owner]
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
53
system/auth/basic-auth/basic-auth-api/pom.xml
Normal file
53
system/auth/basic-auth/basic-auth-api/pom.xml
Normal file
@ -0,0 +1,53 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
||||
<modelVersion>4.0.0</modelVersion>
|
||||
|
||||
<parent>
|
||||
<groupId>ru.entaxy.esb.system.auth.basic</groupId>
|
||||
<artifactId>basic-auth</artifactId>
|
||||
<version>1.8.0</version>
|
||||
</parent>
|
||||
|
||||
<groupId>ru.entaxy.esb.system.auth.basic.api</groupId>
|
||||
<artifactId>basic-auth-api</artifactId>
|
||||
<packaging>bundle</packaging>
|
||||
|
||||
<name>SYSTEM :: ENTAXY :: BASIC AUTH SERVICE API</name>
|
||||
<description>SYSTEM :: ENTAXY :: BASIC AUTH SERVICE API</description>
|
||||
|
||||
<properties>
|
||||
<bundle.osgi.export.pkg>
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.entity,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.entity.field,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.exception
|
||||
</bundle.osgi.export.pkg>
|
||||
<bundle.osgi.import.pkg>
|
||||
javax.persistence;version="[2,3)",
|
||||
org.hibernate.proxy;version="[5,6)",
|
||||
javassist.util.proxy,
|
||||
*
|
||||
</bundle.osgi.import.pkg>
|
||||
</properties>
|
||||
|
||||
<dependencies>
|
||||
<dependency>
|
||||
<groupId>org.eclipse.persistence</groupId>
|
||||
<artifactId>javax.persistence</artifactId>
|
||||
<version>${jpa.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>org.hibernate</groupId>
|
||||
<artifactId>hibernate-core</artifactId>
|
||||
<version>${hibernate.version}</version>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.commons</groupId>
|
||||
<artifactId>system-commons</artifactId>
|
||||
<version>${project.version}</version>
|
||||
<scope>provided</scope>
|
||||
</dependency>
|
||||
</dependencies>
|
||||
</project>
|
||||
@ -0,0 +1,51 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-api
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.api;
|
||||
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.exception.BadPasswordException;
|
||||
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.util.List;
|
||||
import java.util.Optional;
|
||||
|
||||
public interface BasicAuthService {
|
||||
|
||||
List<BasicAuthAccount> list();
|
||||
|
||||
Optional<BasicAuthAccount> get(String login);
|
||||
|
||||
Optional<BasicAuthAccount> getByAuthorizationHeaderHash(String authorizationHeaderHash);
|
||||
|
||||
BasicAuthAccount save(BasicAuthAccount basicAuthAccount, boolean isExist);
|
||||
|
||||
public BasicAuthAccount saveFull(String login, String passwordHash, String encryptionAlgorithm, String systemUUID,
|
||||
String authorizationHeaderHash, String description, String createdBy, String editedBy);
|
||||
|
||||
BasicAuthAccount saveCommon(String login, String passwordHash, String systemUUID, String createdBy, String editedBy)
|
||||
throws NoSuchAlgorithmException, BadPasswordException;
|
||||
|
||||
BasicAuthAccount saveShort(String login, String passwordHash, String createdBy, String editedBy) throws NoSuchAlgorithmException, BadPasswordException;
|
||||
|
||||
void remove(String login);
|
||||
|
||||
boolean check(String login, String password);
|
||||
|
||||
}
|
||||
@ -0,0 +1,185 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-api
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.api.entity;
|
||||
|
||||
import com.sun.istack.NotNull;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.field.EncryptionAlgorithm;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.field.EncryptionAlgorithmAttributeConverter;
|
||||
|
||||
import javax.persistence.*;
|
||||
import java.util.Date;
|
||||
import java.util.Objects;
|
||||
|
||||
@Entity
|
||||
@Table(name = "basic_auth_account")
|
||||
public class BasicAuthAccount {
|
||||
|
||||
@Id
|
||||
@Column(name = "id")
|
||||
@GeneratedValue(strategy = GenerationType.IDENTITY)
|
||||
private Long id;
|
||||
@NotNull
|
||||
@Column(name = "login")
|
||||
private String login;
|
||||
@NotNull
|
||||
@Column(name = "password_hash")
|
||||
private String passwordHash;
|
||||
@Column(name = "encryption_algorithm")
|
||||
@Convert(converter = EncryptionAlgorithmAttributeConverter.class)
|
||||
private EncryptionAlgorithm encryptionAlgorithm;
|
||||
@Column(name = "system_uuid")
|
||||
private String systemUUID;
|
||||
@NotNull
|
||||
@Column(name = "authorization_header_hash")
|
||||
private String authorizationHeaderHash;
|
||||
@Column(name = "description")
|
||||
private String description;
|
||||
@NotNull
|
||||
@Column(name = "create_date")
|
||||
private Date createDate;
|
||||
@Column(name = "edit_date")
|
||||
private Date editDate;
|
||||
@NotNull
|
||||
@Column(name = "created_by")
|
||||
private String createdBy;
|
||||
@Column(name = "edited_by")
|
||||
private String editedBy;
|
||||
|
||||
public Long getId() {
|
||||
return id;
|
||||
}
|
||||
|
||||
public void setId(Long id) {
|
||||
this.id = id;
|
||||
}
|
||||
|
||||
public String getLogin() {
|
||||
return login;
|
||||
}
|
||||
|
||||
public void setLogin(String login) {
|
||||
this.login = login;
|
||||
}
|
||||
|
||||
public String getPasswordHash() {
|
||||
return passwordHash;
|
||||
}
|
||||
|
||||
public void setPasswordHash(String passwordHash) {
|
||||
this.passwordHash = passwordHash;
|
||||
}
|
||||
|
||||
public EncryptionAlgorithm getEncryptionAlgorithm() {
|
||||
return encryptionAlgorithm;
|
||||
}
|
||||
|
||||
public void setEncryptionAlgorithm(EncryptionAlgorithm encryptionAlgorithm) {
|
||||
this.encryptionAlgorithm = encryptionAlgorithm;
|
||||
}
|
||||
|
||||
public String getSystemUUID() {
|
||||
return systemUUID;
|
||||
}
|
||||
|
||||
public void setSystemUUID(String systemUUID) {
|
||||
this.systemUUID = systemUUID;
|
||||
}
|
||||
|
||||
public String getAuthorizationHeaderHash() {
|
||||
return authorizationHeaderHash;
|
||||
}
|
||||
|
||||
public void setAuthorizationHeaderHash(String authorizationHeaderHash) {
|
||||
this.authorizationHeaderHash = authorizationHeaderHash;
|
||||
}
|
||||
|
||||
public String getDescription() {
|
||||
return description;
|
||||
}
|
||||
|
||||
public void setDescription(String description) {
|
||||
this.description = description;
|
||||
}
|
||||
|
||||
public Date getCreateDate() {
|
||||
return createDate;
|
||||
}
|
||||
|
||||
public void setCreateDate(Date createDate) {
|
||||
this.createDate = createDate;
|
||||
}
|
||||
|
||||
public Date getEditDate() {
|
||||
return editDate;
|
||||
}
|
||||
|
||||
public void setEditDate(Date editDate) {
|
||||
this.editDate = editDate;
|
||||
}
|
||||
|
||||
public String getCreatedBy() {
|
||||
return createdBy;
|
||||
}
|
||||
|
||||
public void setCreatedBy(String createdBy) {
|
||||
this.createdBy = createdBy;
|
||||
}
|
||||
|
||||
public String getEditedBy() {
|
||||
return editedBy;
|
||||
}
|
||||
|
||||
public void setEditedBy(String editedBy) {
|
||||
this.editedBy = editedBy;
|
||||
}
|
||||
|
||||
@Override
|
||||
public int hashCode() {
|
||||
return Objects.hash(authorizationHeaderHash, createDate, createdBy, description, editDate, editedBy,
|
||||
encryptionAlgorithm, login, passwordHash, systemUUID);
|
||||
}
|
||||
|
||||
@Override
|
||||
public boolean equals(Object obj) {
|
||||
if (this == obj)
|
||||
return true;
|
||||
if (obj == null)
|
||||
return false;
|
||||
if (getClass() != obj.getClass())
|
||||
return false;
|
||||
BasicAuthAccount other = (BasicAuthAccount) obj;
|
||||
return Objects.equals(authorizationHeaderHash, other.authorizationHeaderHash)
|
||||
&& Objects.equals(createDate, other.createDate) && Objects.equals(createdBy, other.createdBy)
|
||||
&& Objects.equals(description, other.description) && Objects.equals(editDate, other.editDate)
|
||||
&& Objects.equals(editedBy, other.editedBy)
|
||||
&& Objects.equals(encryptionAlgorithm, other.encryptionAlgorithm) && Objects.equals(login, other.login)
|
||||
&& Objects.equals(passwordHash, other.passwordHash)
|
||||
&& Objects.equals(systemUUID, other.systemUUID);
|
||||
}
|
||||
|
||||
@Override
|
||||
public String toString() {
|
||||
return "BasicAuthAccount [login=" + login + ", passwordHash=" + passwordHash + ", encryptionAlgorithm="
|
||||
+ encryptionAlgorithm + ", systemUUID=" + systemUUID + ", authorizationHeaderHash=" + authorizationHeaderHash
|
||||
+ ", description=" + description + ", createDate=" + createDate + ", editDate=" + editDate
|
||||
+ ", createdBy=" + createdBy + ", editedBy=" + editedBy + "]";
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,59 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-api
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.api.entity.field;
|
||||
|
||||
import java.util.Arrays;
|
||||
import java.util.Map;
|
||||
import java.util.function.Function;
|
||||
import java.util.stream.Collectors;
|
||||
|
||||
public enum EncryptionAlgorithm {
|
||||
|
||||
PLAIN("PLAIN"),
|
||||
MD5("MD5"),
|
||||
SHA1("SHA-1"),
|
||||
SHA256("SHA-256"),
|
||||
SHA384("SHA-384"),
|
||||
SHA512("SHA-512");
|
||||
|
||||
private static Map<String, EncryptionAlgorithm> map = null;
|
||||
private final String name;
|
||||
|
||||
EncryptionAlgorithm(String name) {
|
||||
this.name = name;
|
||||
}
|
||||
|
||||
public String getAlgorithmName() {
|
||||
return name;
|
||||
}
|
||||
|
||||
public boolean equalsName(String checkingName) {
|
||||
return checkingName != null && this.name.equals(checkingName.toUpperCase());
|
||||
}
|
||||
|
||||
public static EncryptionAlgorithm getByName(String name) {
|
||||
return map.get(name.toUpperCase());
|
||||
}
|
||||
|
||||
static {
|
||||
map = Arrays.stream(EncryptionAlgorithm.values())
|
||||
.collect(Collectors.toMap(EncryptionAlgorithm::getAlgorithmName, Function.identity()));
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,38 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-api
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.api.entity.field;
|
||||
|
||||
import javax.persistence.AttributeConverter;
|
||||
import javax.persistence.Converter;
|
||||
|
||||
@Converter
|
||||
public class EncryptionAlgorithmAttributeConverter implements AttributeConverter<EncryptionAlgorithm, String> {
|
||||
|
||||
@Override
|
||||
public String convertToDatabaseColumn(EncryptionAlgorithm attribute) {
|
||||
return attribute.getAlgorithmName();
|
||||
}
|
||||
|
||||
@Override
|
||||
public EncryptionAlgorithm convertToEntityAttribute(String dbData) {
|
||||
return EncryptionAlgorithm.getByName(dbData.toUpperCase());
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,46 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-api
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.api.exception;
|
||||
|
||||
public class BadPasswordException extends Exception {
|
||||
|
||||
private static final long serialVersionUID = -1675249900871877617L;
|
||||
|
||||
public BadPasswordException() {
|
||||
}
|
||||
|
||||
public BadPasswordException(String message) {
|
||||
super(message);
|
||||
}
|
||||
|
||||
public BadPasswordException(Throwable cause) {
|
||||
super(cause);
|
||||
}
|
||||
|
||||
public BadPasswordException(String message, Throwable cause) {
|
||||
super(message, cause);
|
||||
}
|
||||
|
||||
public BadPasswordException(String message, Throwable cause, boolean enableSuppression,
|
||||
boolean writableStackTrace) {
|
||||
super(message, cause, enableSuppression, writableStackTrace);
|
||||
}
|
||||
|
||||
}
|
||||
201
system/auth/basic-auth/basic-auth-impl/LICENSE.txt
Normal file
201
system/auth/basic-auth/basic-auth-impl/LICENSE.txt
Normal file
@ -0,0 +1,201 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright [yyyy] [name of copyright owner]
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
141
system/auth/basic-auth/basic-auth-impl/pom.xml
Normal file
141
system/auth/basic-auth/basic-auth-impl/pom.xml
Normal file
@ -0,0 +1,141 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
||||
<modelVersion>4.0.0</modelVersion>
|
||||
|
||||
<parent>
|
||||
<groupId>ru.entaxy.esb.system.auth.basic</groupId>
|
||||
<artifactId>basic-auth</artifactId>
|
||||
<version>1.8.0</version>
|
||||
</parent>
|
||||
|
||||
<groupId>ru.entaxy.esb.system.auth.basic.impl</groupId>
|
||||
<artifactId>basic-auth-impl</artifactId>
|
||||
<packaging>bundle</packaging>
|
||||
|
||||
<name>SYSTEM :: ENTAXY :: BASIC AUTH SERVICE IMPL</name>
|
||||
<description>SYSTEM :: ENTAXY :: BASIC AUTH SERVICE IMPL</description>
|
||||
|
||||
<properties>
|
||||
<bundle.osgi.import.pkg>
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.entity,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.entity.field,
|
||||
ru.entaxy.esb.system.auth.basic.htpasswd,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.exception,
|
||||
ru.entaxy.esb.system.core.permission.jpa.entity,
|
||||
ru.entaxy.esb.system.common.util,
|
||||
javax.persistence;version="[2,3)",
|
||||
org.hibernate,
|
||||
org.hibernate.cfg,
|
||||
org.hibernate.service,
|
||||
org.hibernate.jpa,
|
||||
org.hibernate.proxy,
|
||||
javassist.util.proxy,
|
||||
org.apache.commons.codec.binary,
|
||||
*
|
||||
</bundle.osgi.import.pkg>
|
||||
</properties>
|
||||
|
||||
<dependencies>
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.auth.basic.api</groupId>
|
||||
<artifactId>basic-auth-api</artifactId>
|
||||
<version>${project.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.auth.basic.htpasswd</groupId>
|
||||
<artifactId>htpasswd</artifactId>
|
||||
<version>${project.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.registry.systems</groupId>
|
||||
<artifactId>system-api</artifactId>
|
||||
<version>${project.version}</version>
|
||||
<scope>compile</scope>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.core.permission</groupId>
|
||||
<artifactId>permission-api</artifactId>
|
||||
<version>${project.version}</version>
|
||||
<scope>provided</scope>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.core.permission</groupId>
|
||||
<artifactId>permission-common</artifactId>
|
||||
<version>${project.version}</version>
|
||||
<scope>provided</scope>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.commons</groupId>
|
||||
<artifactId>system-commons</artifactId>
|
||||
<version>${project.version}</version>
|
||||
<scope>provided</scope>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>org.osgi</groupId>
|
||||
<artifactId>osgi.core</artifactId>
|
||||
<version>${osgi.version}</version>
|
||||
<scope>provided</scope>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>org.eclipse.persistence</groupId>
|
||||
<artifactId>javax.persistence</artifactId>
|
||||
<version>${jpa.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>javax.transaction</groupId>
|
||||
<artifactId>javax.transaction-api</artifactId>
|
||||
<version>${javax.transaction.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>javax.interceptor</groupId>
|
||||
<artifactId>javax.interceptor-api</artifactId>
|
||||
<version>${javax.interceptor.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>org.hibernate</groupId>
|
||||
<artifactId>hibernate-core</artifactId>
|
||||
<version>${hibernate.version}</version>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>commons-codec</groupId>
|
||||
<artifactId>commons-codec</artifactId>
|
||||
<version>${commons-codec.version}</version>
|
||||
</dependency>
|
||||
|
||||
</dependencies>
|
||||
|
||||
<profiles>
|
||||
<!-- Development settings, -Denv=dev -->
|
||||
<profile>
|
||||
<id>dev</id>
|
||||
<activation>
|
||||
<property>
|
||||
<name>env</name>
|
||||
<value>dev</value>
|
||||
</property>
|
||||
</activation>
|
||||
<properties>
|
||||
<hibernate.show_sql>true</hibernate.show_sql>
|
||||
<hibernate.format_sql>true</hibernate.format_sql>
|
||||
</properties>
|
||||
</profile>
|
||||
<!-- Production settings, -Denv=prod -->
|
||||
<profile>
|
||||
<id>prod</id>
|
||||
<activation>
|
||||
<property>
|
||||
<name>env</name>
|
||||
<value>!dev</value>
|
||||
</property>
|
||||
</activation>
|
||||
<properties>
|
||||
<hibernate.show_sql>false</hibernate.show_sql>
|
||||
<hibernate.format_sql>false</hibernate.format_sql>
|
||||
</properties>
|
||||
</profile>
|
||||
</profiles>
|
||||
|
||||
</project>
|
||||
@ -0,0 +1,131 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.interceptor;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.apache.cxf.common.util.Base64Exception;
|
||||
import org.apache.cxf.common.util.Base64Utility;
|
||||
import org.apache.cxf.interceptor.Fault;
|
||||
import org.apache.cxf.interceptor.security.AuthenticationException;
|
||||
import org.apache.cxf.message.Message;
|
||||
import org.apache.cxf.phase.AbstractPhaseInterceptor;
|
||||
import org.apache.cxf.phase.Phase;
|
||||
import org.apache.cxf.transport.http.Headers;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.common.util.SystemHeadersConstants;
|
||||
|
||||
import java.util.Collections;
|
||||
import java.util.List;
|
||||
import java.util.Map;
|
||||
import java.util.Optional;
|
||||
|
||||
public class AuthenticationInterceptor extends AbstractPhaseInterceptor<Message> {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(AuthenticationInterceptor.class);
|
||||
|
||||
private boolean enabled = false;
|
||||
private BasicAuthService basicAuthService;
|
||||
|
||||
private static final String BASIC = "Basic";
|
||||
private static final String AUTHORIZATION = "Authorization";
|
||||
private static final String WWW_AUTHENTICATE = "WWW-Authenticate";
|
||||
private static final String WWW_AUTHENTICATE_MESSAGE = "Basic realm=\"Access to Entaxy\"";
|
||||
|
||||
|
||||
public AuthenticationInterceptor() {
|
||||
super(Phase.RECEIVE);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void handleMessage(Message message) throws Fault {
|
||||
LOG.debug("AuthenticationInterceptor enabled=" + enabled);
|
||||
if (!enabled) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
Map<String, List<String>> headers = Headers.getSetProtocolHeaders(message);
|
||||
//reset passed value
|
||||
headers.put(SystemHeadersConstants.HEADER_USER_LOGIN, Collections.emptyList());
|
||||
|
||||
Optional<String> auth = Optional.ofNullable(headers.get(AUTHORIZATION)).
|
||||
orElse(Collections.emptyList())
|
||||
.stream().findFirst();
|
||||
|
||||
if (auth.isPresent()) {
|
||||
String[] namePassword = prepareAuthData(message, auth);
|
||||
if (namePassword.length == 2 && isAuthenticated(namePassword[0], namePassword[1])) {
|
||||
// let request to continue
|
||||
LOG.trace(namePassword[0] + " authenticated");
|
||||
headers.put(SystemHeadersConstants.HEADER_USER_LOGIN, Collections.singletonList(namePassword[0]));
|
||||
} else {
|
||||
faultAction(message);
|
||||
}
|
||||
} else {
|
||||
faultAction(message);
|
||||
}
|
||||
}
|
||||
|
||||
private String[] prepareAuthData(Message message, Optional<String> auth) {
|
||||
String[] parts = auth.get().split(" ");
|
||||
if (parts.length != 2 || !BASIC.equals(parts[0])) {
|
||||
faultAction(message);
|
||||
}
|
||||
String decodedValue = null;
|
||||
try {
|
||||
decodedValue = new String(Base64Utility.decode(parts[1]));
|
||||
} catch (Base64Exception ex) {
|
||||
faultAction(message);
|
||||
}
|
||||
String[] namePassword = decodedValue.split(":");
|
||||
return namePassword;
|
||||
}
|
||||
|
||||
private void faultAction(Message message) {
|
||||
Map<String, List<String>> headers = Headers.getSetProtocolHeaders(message);
|
||||
headers.put(WWW_AUTHENTICATE, Collections.singletonList(WWW_AUTHENTICATE_MESSAGE));
|
||||
Fault fault = new Fault(new AuthenticationException("Unauthorized Access"));
|
||||
fault.setFaultCode(Fault.FAULT_CODE_CLIENT);
|
||||
fault.setStatusCode(401);
|
||||
throw fault;
|
||||
}
|
||||
|
||||
private boolean isAuthenticated(String name, String password) {
|
||||
return basicAuthService.check(name, password);
|
||||
}
|
||||
|
||||
public boolean isEnabled() {
|
||||
return enabled;
|
||||
}
|
||||
|
||||
public void setEnabled(boolean enabled) {
|
||||
this.enabled = enabled;
|
||||
}
|
||||
|
||||
public BasicAuthService getBasicAuthService() {
|
||||
return basicAuthService;
|
||||
}
|
||||
|
||||
public void setBasicAuthService(BasicAuthService basicAuthService) {
|
||||
this.basicAuthService = basicAuthService;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,110 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.interceptor;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.apache.cxf.interceptor.Fault;
|
||||
import org.apache.cxf.message.Message;
|
||||
import org.apache.cxf.phase.AbstractPhaseInterceptor;
|
||||
import org.apache.cxf.phase.Phase;
|
||||
import org.apache.cxf.transport.http.Headers;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
import ru.entaxy.esb.system.common.util.SystemHeadersConstants;
|
||||
import ru.entaxy.esb.system.jpa.SystemService;
|
||||
import ru.entaxy.esb.system.jpa.entity.System;
|
||||
|
||||
import javax.ws.rs.ForbiddenException;
|
||||
import java.util.Collections;
|
||||
import java.util.List;
|
||||
import java.util.Map;
|
||||
import java.util.Optional;
|
||||
|
||||
public class SystemInterceptor extends AbstractPhaseInterceptor<Message> {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(SystemInterceptor.class);
|
||||
|
||||
private BasicAuthService basicAuthService;
|
||||
|
||||
private SystemService systemService;
|
||||
|
||||
public SystemInterceptor() {
|
||||
super(Phase.PRE_PROTOCOL);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void handleMessage(Message message) throws Fault {
|
||||
Map<String, List<String>> headers = Headers.getSetProtocolHeaders(message);
|
||||
|
||||
Optional<String> login = Optional.ofNullable(headers.get(SystemHeadersConstants.HEADER_USER_LOGIN)).
|
||||
orElse(Collections.emptyList())
|
||||
.stream().findFirst();
|
||||
|
||||
//TEST
|
||||
// login = Optional.of("user");
|
||||
|
||||
LOG.trace(">>>>>>>>>>>>>>>>>>>>>>>>>>>>>SystemInterceptor <<< headers.get( HEADER_USER_LOGIN ) " + login.orElse("NULL"));
|
||||
|
||||
if (login.isPresent()) {
|
||||
Optional<BasicAuthAccount> accountOpt = basicAuthService.get(login.get());
|
||||
|
||||
if (accountOpt.isPresent()) {
|
||||
BasicAuthAccount account = accountOpt.get();
|
||||
headers.put(SystemHeadersConstants.HEADER_USER_ID, Collections.singletonList(String.valueOf(account.getId())));
|
||||
|
||||
headers.put(SystemHeadersConstants.HEADER_SYSTEM_UUID, Collections.singletonList(account.getSystemUUID()));
|
||||
|
||||
System system = account.getSystemUUID() != null && !account.getSystemUUID().isEmpty()
|
||||
? systemService.getByUuid(account.getSystemUUID())
|
||||
: null;
|
||||
if (system != null) {
|
||||
headers.put(SystemHeadersConstants.HEADER_SYSTEM_NAME, Collections.singletonList(system.getName()));
|
||||
headers.put(SystemHeadersConstants.HEADER_SYSTEM_ID, Collections.singletonList(String.valueOf(system.getId())));
|
||||
}
|
||||
} else {
|
||||
throw new ForbiddenException();
|
||||
}
|
||||
}
|
||||
|
||||
// It stops the process
|
||||
// else {
|
||||
// message.getInterceptorChain().abort();
|
||||
// }
|
||||
|
||||
}
|
||||
|
||||
public BasicAuthService getBasicAuthService() {
|
||||
return basicAuthService;
|
||||
}
|
||||
|
||||
public void setBasicAuthService(BasicAuthService basicAuthService) {
|
||||
this.basicAuthService = basicAuthService;
|
||||
}
|
||||
|
||||
public SystemService getSystemService() {
|
||||
return systemService;
|
||||
}
|
||||
|
||||
public void setSystemService(SystemService systemService) {
|
||||
this.systemService = systemService;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,247 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.impl;
|
||||
|
||||
import org.hibernate.Session;
|
||||
import org.hibernate.SessionFactory;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.field.EncryptionAlgorithm;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.exception.BadPasswordException;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.util.EncryptionHelper;
|
||||
import ru.entaxy.esb.system.core.permission.common.PermissionConstants;
|
||||
import ru.entaxy.esb.system.core.permission.jpa.PermissionService;
|
||||
|
||||
import javax.persistence.criteria.CriteriaBuilder;
|
||||
import javax.persistence.criteria.CriteriaQuery;
|
||||
import javax.persistence.criteria.Root;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.util.Date;
|
||||
import java.util.List;
|
||||
import java.util.Optional;
|
||||
|
||||
public class BasicAuthServiceImpl implements BasicAuthService {
|
||||
|
||||
private static final Logger LOG = LoggerFactory.getLogger(BasicAuthServiceImpl.class);
|
||||
|
||||
private SessionFactory sessionFactory;
|
||||
private String еncryptionAlgorithm;
|
||||
private String encryptionSalt;
|
||||
private PermissionService permissionService;
|
||||
|
||||
public void setSessionFactory(SessionFactory sessionFactory) {
|
||||
this.sessionFactory = sessionFactory;
|
||||
}
|
||||
|
||||
public Session getSession() {
|
||||
return sessionFactory.openSession();
|
||||
}
|
||||
|
||||
public void setЕncryptionAlgorithm(String еncryptionAlgorithm) {
|
||||
this.еncryptionAlgorithm = еncryptionAlgorithm;
|
||||
}
|
||||
|
||||
public void setEncryptionSalt(String encryptionSalt) {
|
||||
this.encryptionSalt = encryptionSalt;
|
||||
}
|
||||
|
||||
public PermissionService getPermissionService() {
|
||||
return permissionService;
|
||||
}
|
||||
|
||||
public void setPermissionService(PermissionService permissionService) {
|
||||
this.permissionService = permissionService;
|
||||
}
|
||||
|
||||
@Override
|
||||
public List<BasicAuthAccount> list() {
|
||||
List<BasicAuthAccount> list;
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
CriteriaQuery<BasicAuthAccount> cq = s.getCriteriaBuilder().createQuery(BasicAuthAccount.class);
|
||||
cq.from(BasicAuthAccount.class);
|
||||
list = s.createQuery(cq).getResultList();
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
|
||||
return list;
|
||||
}
|
||||
|
||||
@Override
|
||||
public Optional<BasicAuthAccount> get(String login) {
|
||||
Optional<BasicAuthAccount> basicAuthAccount;
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
|
||||
CriteriaBuilder builder = s.getCriteriaBuilder();
|
||||
CriteriaQuery<BasicAuthAccount> criteriaQuery = builder.createQuery(BasicAuthAccount.class);
|
||||
Root<BasicAuthAccount> root = criteriaQuery.from(BasicAuthAccount.class);
|
||||
criteriaQuery.where(builder.equal(root.get("login"), login));
|
||||
basicAuthAccount = s.createQuery(criteriaQuery).uniqueResultOptional();
|
||||
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
public Optional<BasicAuthAccount> get(Session session, String login) {
|
||||
Optional<BasicAuthAccount> basicAuthAccount;
|
||||
CriteriaBuilder builder = session.getCriteriaBuilder();
|
||||
CriteriaQuery<BasicAuthAccount> criteriaQuery = builder.createQuery(BasicAuthAccount.class);
|
||||
Root<BasicAuthAccount> root = criteriaQuery.from(BasicAuthAccount.class);
|
||||
criteriaQuery.where(builder.equal(root.get("login"), login));
|
||||
basicAuthAccount = session.createQuery(criteriaQuery).uniqueResultOptional();
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public Optional<BasicAuthAccount> getByAuthorizationHeaderHash(String authorizationHeaderHash) {
|
||||
Optional<BasicAuthAccount> basicAuthAccount;
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
|
||||
CriteriaBuilder builder = s.getCriteriaBuilder();
|
||||
CriteriaQuery<BasicAuthAccount> criteriaQuery = builder.createQuery(BasicAuthAccount.class);
|
||||
Root<BasicAuthAccount> root = criteriaQuery.from(BasicAuthAccount.class);
|
||||
criteriaQuery.where(builder.equal(root.get("authorizationHeaderHash"), authorizationHeaderHash));
|
||||
basicAuthAccount = s.createQuery(criteriaQuery).uniqueResultOptional();
|
||||
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount save(BasicAuthAccount basicAuthAccount, boolean isExist) {
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
if (isExist) {
|
||||
s.update(basicAuthAccount);
|
||||
} else {
|
||||
s.persist(basicAuthAccount);
|
||||
}
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount saveFull(String login, String passwordHash, String encryptionAlgorithm, String systemUUID,
|
||||
String authorizationHeaderHash, String description, String createdBy, String editedBy) {
|
||||
|
||||
LOG.debug("Parameters " + login + " " + passwordHash + " " + encryptionAlgorithm
|
||||
+ " " + systemUUID + " " + authorizationHeaderHash + " " + description + " " + createdBy + " " + editedBy);
|
||||
|
||||
Optional<BasicAuthAccount> existingBasicAuthAccount = get(login);
|
||||
|
||||
EncryptionAlgorithm encryptionAlgorithmObj = EncryptionAlgorithm.getByName(encryptionAlgorithm.toUpperCase());
|
||||
|
||||
BasicAuthAccount basicAuthAccount = existingBasicAuthAccount.orElseGet(BasicAuthAccount::new);
|
||||
settingBasicAuthAccount(login, passwordHash, encryptionAlgorithmObj, systemUUID, authorizationHeaderHash,
|
||||
description, createdBy, editedBy, basicAuthAccount, existingBasicAuthAccount.isPresent());
|
||||
|
||||
return save(basicAuthAccount, existingBasicAuthAccount.isPresent());
|
||||
}
|
||||
|
||||
private BasicAuthAccount settingBasicAuthAccount(String login, String passwordHash, EncryptionAlgorithm encryptionAlgorithm,
|
||||
String systemUUID, String authorizationHeaderHash,
|
||||
String description, String createdBy, String editedBy,
|
||||
BasicAuthAccount basicAuthAccount, boolean isExist) {
|
||||
if (!isExist) {
|
||||
basicAuthAccount.setLogin(login);
|
||||
basicAuthAccount.setCreateDate(new Date());
|
||||
basicAuthAccount.setCreatedBy(createdBy);
|
||||
} else {
|
||||
basicAuthAccount.setEditDate(new Date());
|
||||
basicAuthAccount.setEditedBy(editedBy);
|
||||
}
|
||||
|
||||
basicAuthAccount.setPasswordHash(passwordHash);
|
||||
basicAuthAccount.setEncryptionAlgorithm(encryptionAlgorithm);
|
||||
basicAuthAccount.setSystemUUID(systemUUID);
|
||||
basicAuthAccount.setAuthorizationHeaderHash(authorizationHeaderHash);
|
||||
basicAuthAccount.setDescription(description);
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount saveCommon(String login, String passwordHash, String systemUUID, String createdBy, String editedBy)
|
||||
throws NoSuchAlgorithmException, BadPasswordException {
|
||||
if (null != passwordHash && !passwordHash.isEmpty()) {
|
||||
passwordHash = EncryptionHelper.encrypt(passwordHash, this.еncryptionAlgorithm, this.encryptionSalt);
|
||||
} else {
|
||||
throw new BadPasswordException("Password not passed or empty!");
|
||||
}
|
||||
return saveFull(login, passwordHash, this.еncryptionAlgorithm, systemUUID, "", "", createdBy, editedBy);
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount saveShort(String login, String passwordHash, String createdBy, String editedBy)
|
||||
throws NoSuchAlgorithmException, BadPasswordException {
|
||||
return saveCommon(login, passwordHash, "", createdBy, editedBy);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void remove(String login) {
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
|
||||
Optional<BasicAuthAccount> basicAuthAccount = get(s, login);
|
||||
basicAuthAccount.ifPresent((basicAuthAccount1) -> removeProc(s, basicAuthAccount1));
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
}
|
||||
|
||||
private void removeProc(Session session, BasicAuthAccount account) {
|
||||
permissionService.removeAll(session, account.getId(), PermissionConstants.TYPE_ACCOUNT);
|
||||
session.flush();
|
||||
session.delete(BasicAuthAccount.class.getName(), account);
|
||||
}
|
||||
|
||||
@Override
|
||||
public boolean check(String login, String password) {
|
||||
if (login != null && password != null) {
|
||||
Optional<BasicAuthAccount> basicAuthAccountOpt = get(login);
|
||||
if (basicAuthAccountOpt.isPresent()) {
|
||||
BasicAuthAccount basicAuthAccount = basicAuthAccountOpt.get();
|
||||
try {
|
||||
String passedPasswordHash = EncryptionHelper.encrypt(password,
|
||||
basicAuthAccount.getEncryptionAlgorithm().getAlgorithmName(),
|
||||
this.encryptionSalt);
|
||||
if (passedPasswordHash.equals(basicAuthAccount.getPasswordHash())) {
|
||||
return true;
|
||||
}
|
||||
} catch (NoSuchAlgorithmException e) {
|
||||
LOG.error("Encription algorithm error", e);
|
||||
}
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
}
|
||||
@ -0,0 +1,118 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.listener;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.hibernate.event.spi.*;
|
||||
import org.hibernate.persister.entity.EntityPersister;
|
||||
import ru.entaxy.esb.system.auth.basic.htpasswd.HtpasswdGenerator;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
|
||||
import java.io.IOException;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.util.List;
|
||||
|
||||
public class BasicAuthPostEventListener implements PostCommitInsertEventListener, PostCommitUpdateEventListener, PostCommitDeleteEventListener {
|
||||
|
||||
private static final long serialVersionUID = -6603994118756820823L;
|
||||
private static final Log LOG = LogFactory.getLog(BasicAuthPostEventListener.class);
|
||||
|
||||
private BasicAuthService basicAuthService;
|
||||
private HtpasswdGenerator htpasswdGenerator;
|
||||
private String encryptionSalt;
|
||||
|
||||
public void setEncryptionSalt(String encryptionSalt) {
|
||||
this.encryptionSalt = encryptionSalt;
|
||||
}
|
||||
|
||||
@Override
|
||||
public boolean requiresPostCommitHanding(EntityPersister persister) {
|
||||
return true;
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostDelete(PostDeleteEvent event) {
|
||||
LOG.debug("Delete handler event " + event.getSession());
|
||||
LOG.debug("Delete handler event " + event.getEntity());
|
||||
if (event.getEntity() instanceof BasicAuthAccount) {
|
||||
generateHtpasswd();
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostUpdate(PostUpdateEvent event) {
|
||||
LOG.debug("Update handler event " + event);
|
||||
LOG.debug("Update handler event " + event.getEntity());
|
||||
generateHtpasswd();
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostInsert(PostInsertEvent event) {
|
||||
LOG.debug("Insert handler event " + event);
|
||||
LOG.debug("Insert handler event " + event.getEntity());
|
||||
generateHtpasswd();
|
||||
}
|
||||
|
||||
private void generateHtpasswd() {
|
||||
List<BasicAuthAccount> accounts = basicAuthService.list();
|
||||
|
||||
try {
|
||||
htpasswdGenerator.generateHtpasswd(accounts, encryptionSalt);
|
||||
} catch (NoSuchAlgorithmException | IOException e) {
|
||||
LOG.error(e);
|
||||
}
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostDeleteCommitFailed(PostDeleteEvent event) {
|
||||
LOG.debug("Delete failed event " + event.getEntity());
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostUpdateCommitFailed(PostUpdateEvent event) {
|
||||
LOG.debug("Update failed event " + event.getEntity());
|
||||
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostInsertCommitFailed(PostInsertEvent event) {
|
||||
LOG.debug("Insert failed event " + event.getEntity());
|
||||
}
|
||||
|
||||
public BasicAuthService getBasicAuthService() {
|
||||
return basicAuthService;
|
||||
}
|
||||
|
||||
public void setBasicAuthService(BasicAuthService basicAuthService) {
|
||||
this.basicAuthService = basicAuthService;
|
||||
}
|
||||
|
||||
public HtpasswdGenerator getHtpasswdGenerator() {
|
||||
return htpasswdGenerator;
|
||||
}
|
||||
|
||||
public void setHtpasswdGenerator(HtpasswdGenerator htpasswdGenerator) {
|
||||
this.htpasswdGenerator = htpasswdGenerator;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,87 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.listener;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.hibernate.SessionFactory;
|
||||
import org.hibernate.engine.spi.SessionFactoryImplementor;
|
||||
import org.hibernate.event.service.spi.EventListenerRegistry;
|
||||
import org.hibernate.event.spi.EventType;
|
||||
|
||||
public class EntityEventListenerRegistry {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(EntityEventListenerRegistry.class);
|
||||
private static final int SESSION_WAIT_TIMEOUT = 5000;
|
||||
|
||||
private SessionFactory sessionFactory;
|
||||
private BasicAuthPostEventListener basicAuthPostEventListener;
|
||||
private int initLimiter = 0;
|
||||
|
||||
|
||||
public void registerListeners() {
|
||||
LOG.info("Init EntityEventListenerRegistry " + sessionFactory.getClass().getName());
|
||||
|
||||
EventListenerRegistry registry = prepareRegistry();
|
||||
registry.getEventListenerGroup(EventType.POST_COMMIT_INSERT).appendListener(basicAuthPostEventListener);
|
||||
registry.getEventListenerGroup(EventType.POST_COMMIT_UPDATE).appendListener(basicAuthPostEventListener);
|
||||
registry.getEventListenerGroup(EventType.POST_COMMIT_DELETE).appendListener(basicAuthPostEventListener);
|
||||
}
|
||||
|
||||
private EventListenerRegistry prepareRegistry() {
|
||||
try {
|
||||
SessionFactoryImplementor sessionFactoryImpl = sessionFactory.unwrap(SessionFactoryImplementor.class);
|
||||
EventListenerRegistry registry = sessionFactoryImpl.getServiceRegistry().getService(EventListenerRegistry.class);
|
||||
return registry;
|
||||
} catch (Exception e) {
|
||||
LOG.error(e.getMessage());
|
||||
if (initLimiter == 10) {
|
||||
LOG.error(e);
|
||||
}
|
||||
try {
|
||||
LOG.warn("Wait sessionFactory initialization...");
|
||||
Thread.sleep(SESSION_WAIT_TIMEOUT);
|
||||
} catch (InterruptedException e1) {
|
||||
}
|
||||
|
||||
}
|
||||
return initLimiter++ <= 9
|
||||
? prepareRegistry()
|
||||
: null;
|
||||
}
|
||||
|
||||
|
||||
public SessionFactory getSessionFactory() {
|
||||
return sessionFactory;
|
||||
}
|
||||
|
||||
public BasicAuthPostEventListener getBasicAuthPostEventListener() {
|
||||
return basicAuthPostEventListener;
|
||||
}
|
||||
|
||||
public void setBasicAuthPostEventListener(BasicAuthPostEventListener basicAuthPostEventListener) {
|
||||
this.basicAuthPostEventListener = basicAuthPostEventListener;
|
||||
}
|
||||
|
||||
public void setSessionFactory(SessionFactory sessionFactory) {
|
||||
this.sessionFactory = sessionFactory;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,65 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.util;
|
||||
|
||||
import org.apache.commons.codec.binary.Base64;
|
||||
import org.apache.commons.codec.digest.DigestUtils;
|
||||
import org.apache.commons.codec.digest.Md5Crypt;
|
||||
import org.apache.commons.codec.digest.Sha2Crypt;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.field.EncryptionAlgorithm;
|
||||
|
||||
import java.nio.charset.StandardCharsets;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
|
||||
public class EncryptionHelper {
|
||||
|
||||
private static final Logger LOG = LoggerFactory.getLogger(EncryptionHelper.class);
|
||||
|
||||
static final String APR1_PREFIX = "$apr1$";
|
||||
static final String SHA512_PREFIX = "$6$";
|
||||
|
||||
private EncryptionHelper() {
|
||||
throw new IllegalStateException("Utility class");
|
||||
}
|
||||
|
||||
public static String encrypt(String plaintext, String cipher, String salt) throws NoSuchAlgorithmException {
|
||||
String passwordHash;
|
||||
|
||||
if (EncryptionAlgorithm.MD5.equalsName(cipher)) {
|
||||
passwordHash = Md5Crypt.apr1Crypt((plaintext.getBytes(StandardCharsets.UTF_8)), salt);
|
||||
passwordHash = passwordHash.substring(passwordHash.lastIndexOf("$") + 1);
|
||||
} else if (EncryptionAlgorithm.SHA1.equalsName(cipher)) {
|
||||
passwordHash = Base64.encodeBase64String(
|
||||
DigestUtils.sha1((plaintext + salt).getBytes(StandardCharsets.UTF_8)));
|
||||
} else if (EncryptionAlgorithm.SHA512.equalsName(cipher)) {
|
||||
passwordHash = Sha2Crypt.sha512Crypt((plaintext.getBytes(StandardCharsets.UTF_8)), SHA512_PREFIX + salt);
|
||||
passwordHash = passwordHash.substring(passwordHash.lastIndexOf("$"));
|
||||
} else if (EncryptionAlgorithm.PLAIN.equalsName(cipher)) {
|
||||
passwordHash = plaintext;
|
||||
} else {
|
||||
throw new NoSuchAlgorithmException();
|
||||
}
|
||||
|
||||
return passwordHash;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,99 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!--
|
||||
~~~~~~licensing~~~~~~
|
||||
basic-auth-impl
|
||||
==========
|
||||
Copyright (C) 2020 - 2021 EmDev LLC
|
||||
==========
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
~~~~~~/licensing~~~~~~
|
||||
-->
|
||||
|
||||
<blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:cm="http://aries.apache.org/blueprint/xmlns/blueprint-cm/v1.1.0"
|
||||
xsi:schemaLocation="http://www.osgi.org/xmlns/blueprint/v1.0.0 https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd">
|
||||
|
||||
<cm:property-placeholder persistent-id="ru.entaxy.esb.system.basic_auth" update-strategy="reload">
|
||||
<cm:default-properties>
|
||||
<cm:property name="еncryption.algorithm" value="SHA-1"/>
|
||||
<cm:property name="еncryption.salt" value="kDfq0qZJ"/>
|
||||
<cm:property name="internal.authentication.enabled" value="false"/>
|
||||
</cm:default-properties>
|
||||
</cm:property-placeholder>
|
||||
|
||||
<reference id="sessionFactory"
|
||||
interface="org.hibernate.SessionFactory"
|
||||
timeout="30000"/>
|
||||
|
||||
<reference id="permissionService"
|
||||
interface="ru.entaxy.esb.system.core.permission.jpa.PermissionService"
|
||||
timeout="30000"
|
||||
availability="mandatory"/>
|
||||
|
||||
<service ref="basicAuthService" interface="ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService"/>
|
||||
<bean id="basicAuthService" class="ru.entaxy.esb.system.auth.basic.jpa.impl.BasicAuthServiceImpl">
|
||||
<property name="sessionFactory" ref="sessionFactory"/>
|
||||
<property name="еncryptionAlgorithm" value="${еncryption.algorithm}"/>
|
||||
<property name="encryptionSalt" value="${еncryption.salt}"/>
|
||||
<property name="permissionService" ref="permissionService"/>
|
||||
</bean>
|
||||
|
||||
<reference xmlns:ext="http://aries.apache.org/blueprint/xmlns/blueprint-ext/v1.0.0"
|
||||
id="htpasswdGenerator"
|
||||
interface="ru.entaxy.esb.system.auth.basic.htpasswd.HtpasswdGenerator"
|
||||
timeout="30000"
|
||||
availability="mandatory"
|
||||
ext:proxy-method="classes"/>
|
||||
|
||||
<bean id="basicAuthPostEventListener"
|
||||
class="ru.entaxy.esb.system.auth.basic.jpa.listener.BasicAuthPostEventListener">
|
||||
<property name="basicAuthService" ref="basicAuthService"/>
|
||||
<property name="encryptionSalt" value="${еncryption.salt}"/>
|
||||
<property name="htpasswdGenerator" ref="htpasswdGenerator"/>
|
||||
</bean>
|
||||
<bean id="baseAuthPostDeleteEventListener"
|
||||
class="ru.entaxy.esb.system.auth.basic.jpa.listener.EntityEventListenerRegistry"
|
||||
init-method="registerListeners">
|
||||
<property name="sessionFactory" ref="sessionFactory"/>
|
||||
<property name="basicAuthPostEventListener" ref="basicAuthPostEventListener"/>
|
||||
</bean>
|
||||
|
||||
<reference id="systemService"
|
||||
interface="ru.entaxy.esb.system.jpa.SystemService"
|
||||
timeout="30000"
|
||||
availability="mandatory"/>
|
||||
|
||||
<bean id="systemInterceptor" class="ru.entaxy.esb.system.auth.basic.interceptor.SystemInterceptor">
|
||||
<property name="basicAuthService" ref="basicAuthService"/>
|
||||
<property name="systemService" ref="systemService"/>
|
||||
</bean>
|
||||
|
||||
<service ref="systemInterceptor" interface="org.apache.cxf.phase.PhaseInterceptor">
|
||||
<service-properties>
|
||||
<entry key="type" value="system"/>
|
||||
</service-properties>
|
||||
</service>
|
||||
|
||||
<bean id="authInterceptor" class="ru.entaxy.esb.system.auth.basic.interceptor.AuthenticationInterceptor">
|
||||
<property name="basicAuthService" ref="basicAuthService"/>
|
||||
<property name="enabled" value="${internal.authentication.enabled}"/>
|
||||
</bean>
|
||||
|
||||
<service ref="authInterceptor" interface="org.apache.cxf.phase.PhaseInterceptor">
|
||||
<service-properties>
|
||||
<entry key="type" value="authentication"/>
|
||||
</service-properties>
|
||||
</service>
|
||||
|
||||
</blueprint>
|
||||
@ -0,0 +1,38 @@
|
||||
<?xml version='1.0' encoding='utf-8'?>
|
||||
<!--
|
||||
~~~~~~licensing~~~~~~
|
||||
basic-auth-impl
|
||||
==========
|
||||
Copyright (C) 2020 - 2021 EmDev LLC
|
||||
==========
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
~~~~~~/licensing~~~~~~
|
||||
-->
|
||||
|
||||
<!DOCTYPE hibernate-configuration PUBLIC
|
||||
"-//Hibernate/Hibernate Configuration DTD//EN"
|
||||
"http://hibernate.sourceforge.net/hibernate-configuration-3.0.dtd">
|
||||
|
||||
<hibernate-configuration>
|
||||
<session-factory>
|
||||
<property name="connection.datasource">osgi:service/entaxy.esb.storage</property>
|
||||
|
||||
<property name="hibernate.hbm2ddl.auto">validate</property>
|
||||
|
||||
<property name="hibernate.enable_lazy_load_no_trans">true</property>
|
||||
|
||||
<mapping class="ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount"/>
|
||||
<mapping class="ru.entaxy.esb.system.core.permission.jpa.entity.Permission"/>
|
||||
</session-factory>
|
||||
|
||||
</hibernate-configuration>
|
||||
@ -0,0 +1,30 @@
|
||||
###
|
||||
# ~~~~~~licensing~~~~~~
|
||||
# basic-auth-impl
|
||||
# ==========
|
||||
# Copyright (C) 2020 - 2021 EmDev LLC
|
||||
# ==========
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
# ~~~~~~/licensing~~~~~~
|
||||
###
|
||||
appender.file.type=File
|
||||
appender.file.name=file
|
||||
appender.file.fileName=target/camel-test.log
|
||||
appender.file.layout.type=PatternLayout
|
||||
appender.file.layout.pattern=%d %-5p %c{1} - %m %n
|
||||
appender.out.type=Console
|
||||
appender.out.name=out
|
||||
appender.out.layout.type=PatternLayout
|
||||
appender.out.layout.pattern=[%30.30t] %-30.30c{1} %-5p %m%n
|
||||
rootLogger.level=DEBUG
|
||||
rootLogger.appenderRef.out.ref=out
|
||||
201
system/auth/basic-auth/basic-auth-soap/LICENSE.txt
Normal file
201
system/auth/basic-auth/basic-auth-soap/LICENSE.txt
Normal file
@ -0,0 +1,201 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright [yyyy] [name of copyright owner]
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
18
system/auth/basic-auth/basic-auth-soap/pom.xml
Normal file
18
system/auth/basic-auth/basic-auth-soap/pom.xml
Normal file
@ -0,0 +1,18 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project xmlns="http://maven.apache.org/POM/4.0.0"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
||||
<parent>
|
||||
<artifactId>basic-auth</artifactId>
|
||||
<groupId>ru.entaxy.esb.system.auth.basic</groupId>
|
||||
<version>1.8.0</version>
|
||||
</parent>
|
||||
<modelVersion>4.0.0</modelVersion>
|
||||
|
||||
<artifactId>basic-auth-soap</artifactId>
|
||||
<packaging>bundle</packaging>
|
||||
|
||||
<name>SYSTEM :: ENTAXY :: BASIC AUTH SOAP</name>
|
||||
<description>SYSTEM :: ENTAXY :: BASIC AUTH SOAP</description>
|
||||
|
||||
</project>
|
||||
@ -0,0 +1,242 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!--
|
||||
~~~~~~licensing~~~~~~
|
||||
basic-auth-soap
|
||||
==========
|
||||
Copyright (C) 2020 - 2021 EmDev LLC
|
||||
==========
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
~~~~~~/licensing~~~~~~
|
||||
-->
|
||||
|
||||
<blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:cm="http://aries.apache.org/blueprint/xmlns/blueprint-cm/v1.1.0"
|
||||
xmlns:cxf="http://cxf.apache.org/blueprint/core"
|
||||
xmlns:camelcxf="http://camel.apache.org/schema/blueprint/cxf"
|
||||
xmlns:bas="http://www.entaxy.ru/basic-auth-service/"
|
||||
xsi:schemaLocation="
|
||||
http://www.osgi.org/xmlns/blueprint/v1.0.0 https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd
|
||||
http://cxf.apache.org/blueprint/core http://cxf.apache.org/schemas/blueprint/core.xsd
|
||||
">
|
||||
|
||||
<cm:property-placeholder persistent-id="ru.entaxy.esb.system.basic_auth" update-strategy="reload">
|
||||
<cm:default-properties>
|
||||
<cm:property name="basic_auth_endpoint.address" value="/basic-auth-management"/>
|
||||
</cm:default-properties>
|
||||
</cm:property-placeholder>
|
||||
|
||||
<reference id="basicAuthService"
|
||||
interface="ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService"
|
||||
timeout="30000"/>
|
||||
<reference id="permissionService"
|
||||
interface="ru.entaxy.esb.system.core.permission.jpa.PermissionService"
|
||||
timeout="30000"/>
|
||||
|
||||
<reference id="serviceInterceptor" interface="org.apache.cxf.phase.PhaseInterceptor"
|
||||
filter="(type=service)"/>
|
||||
<reference id="authInterceptor" interface="org.apache.cxf.phase.PhaseInterceptor"
|
||||
filter="(type=authentication)"/>
|
||||
|
||||
<camelcxf:cxfEndpoint id="basic-auth-endpoint"
|
||||
address="${basic_auth_endpoint.address}"
|
||||
endpointName="bas:basic-auth-serviceSOAP"
|
||||
serviceName="bas:basic-auth-service"
|
||||
wsdlURL="wsdl/basic-auth-service.wsdl">
|
||||
<camelcxf:properties>
|
||||
<entry key="dataFormat" value="PAYLOAD"/>
|
||||
<entry key="mtom-enabled" value="false"/>
|
||||
</camelcxf:properties>
|
||||
<camelcxf:inInterceptors>
|
||||
<ref component-id="authInterceptor"/>
|
||||
<ref component-id="serviceInterceptor"/>
|
||||
</camelcxf:inInterceptors>
|
||||
</camelcxf:cxfEndpoint>
|
||||
|
||||
<camelContext id="basic-auth-service-camel-context" xmlns="http://camel.apache.org/schema/blueprint">
|
||||
|
||||
<route id="basic-auth-endpoint" streamCache="true">
|
||||
|
||||
<from uri="cxf:bean:basic-auth-endpoint"/>
|
||||
<log message="${body}" loggingLevel="INFO"/>
|
||||
|
||||
<choice>
|
||||
<when>
|
||||
<simple>${headers.operationName} in 'addAccount,updateAccount'</simple>
|
||||
<to uri="direct:update-account"/>
|
||||
</when>
|
||||
<when>
|
||||
<simple>${headers.operationName} == 'removeAccount'</simple>
|
||||
<to uri="direct:remove-account"/>
|
||||
</when>
|
||||
<when>
|
||||
<simple>${headers.operationName} in 'addAccountPermission,removeAccountPermission'</simple>
|
||||
<to uri="direct:update-account-permission"/>
|
||||
</when>
|
||||
</choice>
|
||||
</route>
|
||||
|
||||
<route id="updateAccount">
|
||||
<from uri="direct:update-account"/>
|
||||
<doTry>
|
||||
<split>
|
||||
<xpath>//bas:accountList/bas:account</xpath>
|
||||
|
||||
<log message="\r\n${body}\r\n" loggingLevel="DEBUG"/>
|
||||
|
||||
<setHeader name="NTX_AccountLogin">
|
||||
<xpath resultType="String">//bas:account/bas:login</xpath>
|
||||
</setHeader>
|
||||
<setHeader name="NTX_AccountPassword">
|
||||
<xpath resultType="String">//bas:account/bas:password</xpath>
|
||||
</setHeader>
|
||||
<setHeader name="NTX_AccountSystemUUID">
|
||||
<xpath resultType="String">//bas:account/bas:systemUUID</xpath>
|
||||
</setHeader>
|
||||
<log message="\r\n${headers.NTX_AccountLogin}\r\n" loggingLevel="DEBUG"/>
|
||||
<log message="\r\n${headers.NTX_AccountPassword}\r\n" loggingLevel="DEBUG"/>
|
||||
<log message="\r\n${headers.NTX_AccountSystemUUID}\r\n" loggingLevel="DEBUG"/>
|
||||
|
||||
<to uri="bean-fix:basicAuthService?method=saveCommon(${headers.NTX_AccountLogin}, ${headers.NTX_AccountPassword},
|
||||
${headers.NTX_AccountSystemUUID}, ${headers.X-ForwardedUser}, ${headers.X-ForwardedUser})"/>
|
||||
</split>
|
||||
<setBody>
|
||||
<constant><response xmlns="http://www.entaxy.ru/basic-auth-service/">true</response>
|
||||
</constant>
|
||||
</setBody>
|
||||
<doCatch>
|
||||
<exception>java.lang.Exception</exception>
|
||||
<log message="${exception.message}" loggingLevel="ERROR"/>
|
||||
<log message="${exception.stacktrace}" loggingLevel="DEBUG"/>
|
||||
<setBody>
|
||||
<constant><response xmlns="http://www.entaxy.ru/basic-auth-service/">false</response></constant>
|
||||
</setBody>
|
||||
</doCatch>
|
||||
</doTry>
|
||||
</route>
|
||||
|
||||
<route id="removeAccount">
|
||||
<from uri="direct:remove-account"/>
|
||||
|
||||
<doTry>
|
||||
<split>
|
||||
<xpath>//bas:loginList/bas:login</xpath>
|
||||
|
||||
<log message="\r\n${body}\r\n" loggingLevel="DEBUG"/>
|
||||
|
||||
<setHeader name="NTX_Login">
|
||||
<xpath resultType="String">//bas:login</xpath>
|
||||
</setHeader>
|
||||
<log message="\r\n${headers.NTX_Login}\r\n" loggingLevel="DEBUG"/>
|
||||
<to uri="bean-fix:basicAuthService?method=remove(${headers.NTX_Login})"/>
|
||||
</split>
|
||||
<setBody>
|
||||
<constant><response xmlns="http://www.entaxy.ru/basic-auth-service/">true</response>
|
||||
</constant>
|
||||
</setBody>
|
||||
<doCatch>
|
||||
<exception>java.lang.Exception</exception>
|
||||
<log message="${exception.message}" loggingLevel="ERROR"/>
|
||||
<setBody>
|
||||
<constant><response xmlns="http://www.entaxy.ru/basic-auth-service/">false</response></constant>
|
||||
</setBody>
|
||||
</doCatch>
|
||||
</doTry>
|
||||
</route>
|
||||
|
||||
<route id="addAccountPermission">
|
||||
<from uri="direct:update-account-permission"/>
|
||||
|
||||
<doTry>
|
||||
<split>
|
||||
<xpath>//bas:permissionList/bas:permission</xpath>
|
||||
<to uri="direct:permission-request"/>
|
||||
|
||||
<log message="${headers.operationName} for ${exchangeProperty.NTX_Login} by user ${headers.X-ForwardedUser}"/>
|
||||
<log message="\r\n${exchangeProperty.NTX_Login}\r\n" loggingLevel="DEBUG"/>
|
||||
<log message="\r\n${exchangeProperty.NTX_Subject}\r\n" loggingLevel="DEBUG"/>
|
||||
<log message="\r\n${exchangeProperty.NTX_SubjectType}\r\n" loggingLevel="DEBUG"/>
|
||||
<log message="\r\n${exchangeProperty.NTX_Action}\r\n" loggingLevel="DEBUG"/>
|
||||
|
||||
<to uri="bean-fix:basicAuthService?method=get(${exchangeProperty.NTX_Login})"/>
|
||||
|
||||
<choice>
|
||||
<when>
|
||||
<simple>${body.isPresent()}</simple>
|
||||
|
||||
<setProperty name="account">
|
||||
<simple>${body.get()}</simple>
|
||||
</setProperty>
|
||||
|
||||
<choice>
|
||||
<when>
|
||||
<simple>${headers.operationName} == 'addAccountPermission'</simple>
|
||||
<to uri="bean-fix:permissionService?method=addIfNotExist(${exchangeProperty.NTX_Action.id}, 'account', ${exchangeProperty.NTX_Subject},
|
||||
${exchangeProperty.NTX_SubjectType}, ${exchangeProperty.NTX_Action})"/>
|
||||
</when>
|
||||
<when>
|
||||
<simple>${headers.operationName} == 'removeAccountPermission'</simple>
|
||||
<to uri="bean-fix:permissionService?method=remove(${exchangeProperty.NTX_Action.id}, 'account', ${exchangeProperty.NTX_Subject},
|
||||
${exchangeProperty.NTX_SubjectType}, ${exchangeProperty.NTX_Action})"/>
|
||||
</when>
|
||||
</choice>
|
||||
|
||||
<to uri="bean-fix:basicAuthService?method=saveFull(${exchangeProperty.NTX_Action.login}, ${exchangeProperty.NTX_Action.passwordHash},
|
||||
${exchangeProperty.NTX_Action.encryptionAlgorithm.getAlgorithmName()},
|
||||
${exchangeProperty.NTX_Action.getSystemUUID()}, ${exchangeProperty.NTX_Action.authorizationHeaderHash},
|
||||
${exchangeProperty.NTX_Action.description}, ${exchangeProperty.NTX_Action.createdBy},
|
||||
${headers.X-ForwardedUser})"/>
|
||||
|
||||
</when>
|
||||
<otherwise>
|
||||
<throwException exceptionType="java.lang.IllegalArgumentException"
|
||||
message="Account with current login not found"/>
|
||||
</otherwise>
|
||||
</choice>
|
||||
</split>
|
||||
|
||||
<setBody>
|
||||
<constant><response xmlns="http://www.entaxy.ru/basic-auth-service/">true</response>
|
||||
</constant>
|
||||
</setBody>
|
||||
|
||||
<doCatch>
|
||||
<exception>java.lang.Exception</exception>
|
||||
<log message="${exception.message}" loggingLevel="ERROR"/>
|
||||
<log message="${exception.stacktrace}" loggingLevel="DEBUG"/>
|
||||
<setBody>
|
||||
<constant><response xmlns="http://www.entaxy.ru/basic-auth-service/">false</response></constant>
|
||||
</setBody>
|
||||
</doCatch>
|
||||
</doTry>
|
||||
</route>
|
||||
|
||||
<route id="permissionRequest">
|
||||
<from uri="direct:permission-request"/>
|
||||
|
||||
<setProperty name="NTX_Login">
|
||||
<xpath resultType="String">//bas:permission/bas:login</xpath>
|
||||
</setProperty>
|
||||
<setProperty name="NTX_Subject">
|
||||
<xpath resultType="String">//bas:permission/bas:subject</xpath>
|
||||
</setProperty>
|
||||
<setProperty name="NTX_SubjectType">
|
||||
<xpath resultType="String">//bas:permission/bas:subjectType</xpath>
|
||||
</setProperty>
|
||||
<setProperty name="NTX_Action">
|
||||
<xpath resultType="String">//bas:permission/bas:action</xpath>
|
||||
</setProperty>
|
||||
</route>
|
||||
|
||||
</camelContext>
|
||||
</blueprint>
|
||||
@ -0,0 +1,157 @@
|
||||
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
|
||||
<wsdl:definitions
|
||||
xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
|
||||
xmlns:tns="http://www.entaxy.ru/basic-auth-service/"
|
||||
xmlns:wsdl="http://schemas.xmlsoap.org/wsdl/"
|
||||
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
|
||||
name="basic-auth-service"
|
||||
targetNamespace="http://www.entaxy.ru/basic-auth-service/">
|
||||
<wsdl:types>
|
||||
<xsd:schema targetNamespace="http://www.entaxy.ru/basic-auth-service/" elementFormDefault="qualified">
|
||||
<xsd:element name="accountList" type="tns:accountListType"/>
|
||||
<xsd:element name="response" type="xsd:boolean"/>
|
||||
<xsd:complexType name="accountListType">
|
||||
<xsd:sequence>
|
||||
<xsd:element name="account" type="tns:accountType" maxOccurs="unbounded"/>
|
||||
</xsd:sequence>
|
||||
</xsd:complexType>
|
||||
<xsd:complexType name="accountType">
|
||||
<xsd:sequence>
|
||||
<xsd:element name="login" type="xsd:string"/>
|
||||
<xsd:element name="password" type="xsd:string"/>
|
||||
<xsd:element name="systemUUID" type="xsd:string" minOccurs="0"/>
|
||||
</xsd:sequence>
|
||||
</xsd:complexType>
|
||||
<xsd:element name="loginList" type="tns:loginListType"/>
|
||||
<xsd:complexType name="loginListType">
|
||||
<xsd:sequence>
|
||||
<xsd:element name="login" type="xsd:string" maxOccurs="unbounded"/>
|
||||
</xsd:sequence>
|
||||
</xsd:complexType>
|
||||
|
||||
<xsd:element name="permissionList" type="tns:permissionListType"/>
|
||||
<xsd:complexType name="permissionListType">
|
||||
<xsd:sequence>
|
||||
<xsd:element name="permission" type="tns:permissionType" maxOccurs="unbounded"/>
|
||||
</xsd:sequence>
|
||||
</xsd:complexType>
|
||||
<xsd:complexType name="permissionType">
|
||||
<xsd:sequence>
|
||||
<xsd:element name="login" type="xsd:string"/>
|
||||
<xsd:element name="subject" type="xsd:string"/>
|
||||
<xsd:element name="subjectType" type="xsd:string"/>
|
||||
<xsd:element name="action" type="xsd:string" minOccurs="0"/>
|
||||
</xsd:sequence>
|
||||
</xsd:complexType>
|
||||
</xsd:schema>
|
||||
</wsdl:types>
|
||||
|
||||
<wsdl:message name="addAccountRequest">
|
||||
<wsdl:part name="request" element="tns:accountList"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="addAccountResponse">
|
||||
<wsdl:part name="response" element="tns:response"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="updateAccountRequest">
|
||||
<wsdl:part name="request" element="tns:accountList"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="updateAccountResponse">
|
||||
<wsdl:part name="response" element="tns:response"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="removeAccountRequest">
|
||||
<wsdl:part name="request" element="tns:loginList"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="removeAccountResponse">
|
||||
<wsdl:part name="response" element="tns:response"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="addAccountPermissionRequest">
|
||||
<wsdl:part name="request" element="tns:permissionList"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="addAccountPermissionResponse">
|
||||
<wsdl:part name="response" element="tns:response"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="removeAccountPermissionRequest">
|
||||
<wsdl:part name="request" element="tns:permissionList"/>
|
||||
</wsdl:message>
|
||||
<wsdl:message name="removeAccountPermissionResponse">
|
||||
<wsdl:part name="response" element="tns:response"/>
|
||||
</wsdl:message>
|
||||
|
||||
<wsdl:portType name="basic-auth-service">
|
||||
<wsdl:operation name="addAccount">
|
||||
<wsdl:input message="tns:addAccountRequest"/>
|
||||
<wsdl:output message="tns:addAccountResponse"/>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="updateAccount">
|
||||
<wsdl:input message="tns:updateAccountRequest"/>
|
||||
<wsdl:output message="tns:updateAccountResponse"/>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="removeAccount">
|
||||
<wsdl:input message="tns:removeAccountRequest"/>
|
||||
<wsdl:output message="tns:removeAccountResponse"/>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="addAccountPermission">
|
||||
<wsdl:input message="tns:addAccountPermissionRequest"/>
|
||||
<wsdl:output message="tns:addAccountPermissionResponse"/>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="removeAccountPermission">
|
||||
<wsdl:input message="tns:removeAccountPermissionRequest"/>
|
||||
<wsdl:output message="tns:removeAccountPermissionResponse"/>
|
||||
</wsdl:operation>
|
||||
</wsdl:portType>
|
||||
|
||||
<wsdl:binding name="basic-auth-serviceSOAP" type="tns:basic-auth-service">
|
||||
<soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
|
||||
<wsdl:operation name="addAccount">
|
||||
<soap:operation soapAction="http://www.entaxy.ru/basic-auth-service/add-account"/>
|
||||
<wsdl:input>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:input>
|
||||
<wsdl:output>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:output>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="updateAccount">
|
||||
<soap:operation soapAction="http://www.entaxy.ru/basic-auth-service/update-account"/>
|
||||
<wsdl:input>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:input>
|
||||
<wsdl:output>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:output>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="removeAccount">
|
||||
<soap:operation soapAction="http://www.entaxy.ru/basic-auth-service/update-account"/>
|
||||
<wsdl:input>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:input>
|
||||
<wsdl:output>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:output>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="addAccountPermission">
|
||||
<soap:operation soapAction="http://www.entaxy.ru/basic-auth-service/add-account-permission"/>
|
||||
<wsdl:input>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:input>
|
||||
<wsdl:output>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:output>
|
||||
</wsdl:operation>
|
||||
<wsdl:operation name="removeAccountPermission">
|
||||
<soap:operation soapAction="http://www.entaxy.ru/basic-auth-service/remove-account-permission"/>
|
||||
<wsdl:input>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:input>
|
||||
<wsdl:output>
|
||||
<soap:body use="literal"/>
|
||||
</wsdl:output>
|
||||
</wsdl:operation>
|
||||
</wsdl:binding>
|
||||
|
||||
<wsdl:service name="basic-auth-service">
|
||||
<wsdl:port name="basic-auth-serviceSOAP" binding="tns:basic-auth-serviceSOAP">
|
||||
<soap:address location="http://dev.esbHost.ru/"/>
|
||||
</wsdl:port>
|
||||
</wsdl:service>
|
||||
</wsdl:definitions>
|
||||
201
system/auth/basic-auth/htpasswd/LICENSE.txt
Normal file
201
system/auth/basic-auth/htpasswd/LICENSE.txt
Normal file
@ -0,0 +1,201 @@
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
APPENDIX: How to apply the Apache License to your work.
|
||||
|
||||
To apply the Apache License to your work, attach the following
|
||||
boilerplate notice, with the fields enclosed by brackets "[]"
|
||||
replaced with your own identifying information. (Don't include
|
||||
the brackets!) The text should be enclosed in the appropriate
|
||||
comment syntax for the file format. We also recommend that a
|
||||
file or class name and description of purpose be included on the
|
||||
same "printed page" as the copyright notice for easier
|
||||
identification within third-party archives.
|
||||
|
||||
Copyright [yyyy] [name of copyright owner]
|
||||
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
78
system/auth/basic-auth/htpasswd/README.md
Normal file
78
system/auth/basic-auth/htpasswd/README.md
Normal file
@ -0,0 +1,78 @@
|
||||
# SYSTEM :: ENTAXY :: BASIC AUTH :: HTPASSWD
|
||||
|
||||
Генерация htpasswd файла, сервис выдачи файла и checksum
|
||||
Работает с nginX шифрования MD5 и SHA-1
|
||||
|
||||
Описание данного подхода аутентификации:
|
||||
1. Nginx по умолчанию собран с модулем
|
||||
ngx_http_auth_basic_module, который проводит
|
||||
базовую аутентификацию через файлы htpasswd.
|
||||
2. Файл passwd периодически или по событиям
|
||||
синхронизируется между нодами при помощи скрипта синхронизации,
|
||||
который вызывает Rest сервис
|
||||
шины. (Rsync использовать нельзя, так как порты
|
||||
закрыты.)
|
||||
3. Аутентификация делается только на Nginx без доп.
|
||||
нагрузки на шину
|
||||
4. Файл хранится на сервере nginx и аутентификация
|
||||
будет работать всегда
|
||||
5. Подход рассчитан на балансировщики реализующие basic аутентификацию
|
||||
с использованием htpasswd
|
||||
|
||||
|
||||
## Сборка
|
||||
|
||||
Сборка осуществляется командой
|
||||
|
||||
```
|
||||
mvn clean install
|
||||
```
|
||||
|
||||
Файл конфигурации модуля ru.entaxy.esb.system.basic_auth.htpasswd.cfg хранится в SYSTEM :: ENTAXY :: Features
|
||||
|
||||
## Сервис Htpasswd
|
||||
|
||||
**Настраивается свойствами**
|
||||
|
||||
htpasswd.service.host по умолчанию 0.0.0.0
|
||||
|
||||
htpasswd.service.port по умолчанию 9091
|
||||
|
||||
htpasswd.service.root.path по умолчанию /htpasswd
|
||||
|
||||
**Методы:**
|
||||
|
||||
GET http://localhost:9091/htpasswd - получение содержимого файла htpasswd
|
||||
|
||||
GET http://localhost:9091/htpasswd/checksum - получение checksum текущего htpasswd
|
||||
|
||||
**Кластер:**
|
||||
|
||||
Для избежания рассинхронизации файлов htpasswd на разных серверах требуется настроить шару между карафами и установить адрес этой папки в свойство
|
||||
|
||||
htpasswd.file.directory=/mnt/share
|
||||
|
||||
## Скрипт сихронизации htpasswd для nginX
|
||||
|
||||
Расположен в папке resources/script/htpasswd-checker.sh
|
||||
|
||||
Запускается из любой папки расположенной на сервере.
|
||||
|
||||
Перед запуском проверить и при необходимости поправить переменные в скрипте
|
||||
|
||||
* KARAF_HOST_NAMES=("http://192.168.122.93:9091" "http://192.168.122.94:9091") - караф сервера с запущеным сервисом htpasswd
|
||||
* HTPASSWD_STORAGE=/etc/nginx/htpasswd - адрес файла htpasswd, на который настроен nginX
|
||||
|
||||
Добавить запуск скрипта через cron
|
||||
sudo crontab -e
|
||||
|
||||
```
|
||||
раз в минут
|
||||
*/5 * * * * <path_to_script>
|
||||
|
||||
либо раз в минуту
|
||||
*/1 * * * * <path_to_script>
|
||||
```
|
||||
|
||||
|
||||
|
||||
57
system/auth/basic-auth/htpasswd/pom.xml
Normal file
57
system/auth/basic-auth/htpasswd/pom.xml
Normal file
@ -0,0 +1,57 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
||||
<modelVersion>4.0.0</modelVersion>
|
||||
|
||||
<parent>
|
||||
<groupId>ru.entaxy.esb.system.auth.basic</groupId>
|
||||
<artifactId>basic-auth</artifactId>
|
||||
<version>1.8.0</version>
|
||||
</parent>
|
||||
|
||||
<groupId>ru.entaxy.esb.system.auth.basic.htpasswd</groupId>
|
||||
<artifactId>htpasswd</artifactId>
|
||||
<packaging>bundle</packaging>
|
||||
|
||||
<name>SYSTEM :: ENTAXY :: BASIC AUTH :: HTPASSWD</name>
|
||||
<description>SYSTEM :: ENTAXY :: BASIC AUTH :: HTPASSWD</description>
|
||||
|
||||
<properties>
|
||||
<bundle.osgi.export.pkg>
|
||||
ru.entaxy.esb.system.auth.basic.htpasswd,
|
||||
</bundle.osgi.export.pkg>
|
||||
<bundle.osgi.import.pkg>
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.entity,
|
||||
ru.entaxy.esb.system.auth.basic.jpa.api.entity.field,
|
||||
org.apache.cxf.jaxrs.impl,
|
||||
org.apache.camel.component.cxf.jaxrs.blueprint,
|
||||
org.apache.camel.component.cxf.blueprint,
|
||||
org.apache.commons.codec.binary,
|
||||
*
|
||||
</bundle.osgi.import.pkg>
|
||||
</properties>
|
||||
|
||||
<dependencies>
|
||||
<dependency>
|
||||
<groupId>ru.entaxy.esb.system.auth.basic.api</groupId>
|
||||
<artifactId>basic-auth-api</artifactId>
|
||||
<version>${project.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>commons-codec</groupId>
|
||||
<artifactId>commons-codec</artifactId>
|
||||
<version>${commons-codec.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>org.apache.camel</groupId>
|
||||
<artifactId>camel-cxf</artifactId>
|
||||
<version>${camel.version}</version>
|
||||
</dependency>
|
||||
<dependency>
|
||||
<groupId>org.apache.camel.karaf</groupId>
|
||||
<artifactId>camel-cxf-blueprint</artifactId>
|
||||
<version>${camel.version}</version>
|
||||
</dependency>
|
||||
</dependencies>
|
||||
</project>
|
||||
@ -0,0 +1,93 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* htpasswd
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.htpasswd;
|
||||
|
||||
import org.apache.commons.codec.digest.DigestUtils;
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import ru.entaxy.esb.system.auth.basic.htpasswd.entity.Htpasswd;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
|
||||
import java.io.File;
|
||||
import java.io.IOException;
|
||||
import java.io.InputStream;
|
||||
import java.nio.file.Files;
|
||||
import java.nio.file.Path;
|
||||
import java.nio.file.Paths;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.util.List;
|
||||
|
||||
public class HtpasswdGenerator {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(HtpasswdGenerator.class);
|
||||
|
||||
private String checkSumFileName;
|
||||
|
||||
public Htpasswd htpasswd;
|
||||
|
||||
public void generateHtpasswd(List<BasicAuthAccount> accounts, String salt) throws IOException, NoSuchAlgorithmException {
|
||||
htpasswd.setMasterSalt(salt);
|
||||
htpasswd.prepare(accounts);
|
||||
createFile();
|
||||
}
|
||||
|
||||
private void createFile() throws IOException {
|
||||
String content = htpasswd.toString();
|
||||
LOG.trace("HTTPASSWD " + content);
|
||||
String storeFolder = htpasswd.getDirectory();
|
||||
File folder = new File(storeFolder);
|
||||
folder.mkdirs();
|
||||
|
||||
File htpasswdFile = new File(folder.getAbsolutePath() + File.separator + htpasswd.getFileName());
|
||||
|
||||
Path path = Paths.get(htpasswdFile.getAbsolutePath());
|
||||
Files.write(path, content.getBytes());
|
||||
|
||||
String checkSum = calculateCheckSum(path);
|
||||
File checkSumFile = new File(folder.getAbsolutePath() + File.separator + checkSumFileName);
|
||||
path = Paths.get(checkSumFile.getAbsolutePath());
|
||||
Files.write(path, checkSum.getBytes());
|
||||
}
|
||||
|
||||
private String calculateCheckSum(Path path) throws IOException {
|
||||
String md5;
|
||||
try (InputStream is = Files.newInputStream(path)) {
|
||||
md5 = DigestUtils.md5Hex(is);
|
||||
}
|
||||
return md5;
|
||||
}
|
||||
|
||||
public Htpasswd getHtpasswd() {
|
||||
return htpasswd;
|
||||
}
|
||||
|
||||
public void setHtpasswd(Htpasswd htpasswd) {
|
||||
this.htpasswd = htpasswd;
|
||||
}
|
||||
|
||||
public String getCheckSumFileName() {
|
||||
return checkSumFileName;
|
||||
}
|
||||
|
||||
public void setCheckSumFileName(String checkSumFileName) {
|
||||
this.checkSumFileName = checkSumFileName;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,98 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* htpasswd
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.htpasswd.entity;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.util.ArrayList;
|
||||
import java.util.List;
|
||||
|
||||
public class Htpasswd {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(Htpasswd.class);
|
||||
private String directory;
|
||||
private String fileName;
|
||||
private String masterSalt = null;
|
||||
private final List<HtpasswdEntry> entries = new ArrayList<>();
|
||||
|
||||
public Htpasswd() {
|
||||
}
|
||||
|
||||
public void prepare(List<BasicAuthAccount> accounts) throws NoSuchAlgorithmException {
|
||||
if (masterSalt == null || masterSalt.isEmpty()) {
|
||||
throw new IllegalArgumentException("masterSalt not setted!");
|
||||
}
|
||||
if (accounts != null && accounts.size() > 0) {
|
||||
entries.clear();
|
||||
for (BasicAuthAccount account : accounts) {
|
||||
entries.add(new HtpasswdEntry(
|
||||
account.getLogin(),
|
||||
account.getPasswordHash(),
|
||||
masterSalt,
|
||||
account.getEncryptionAlgorithm().getAlgorithmName()));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
public void addString(String login, String passwordHash, String encryptionAlgorithm) throws NoSuchAlgorithmException {
|
||||
entries.add(new HtpasswdEntry(
|
||||
login,
|
||||
passwordHash,
|
||||
masterSalt,
|
||||
encryptionAlgorithm));
|
||||
}
|
||||
|
||||
public String getDirectory() {
|
||||
return directory;
|
||||
}
|
||||
|
||||
public void setDirectory(String directory) {
|
||||
this.directory = directory;
|
||||
}
|
||||
|
||||
public String getFileName() {
|
||||
return fileName;
|
||||
}
|
||||
|
||||
public void setFileName(String fileName) {
|
||||
this.fileName = fileName;
|
||||
}
|
||||
|
||||
public String getMasterSalt() {
|
||||
return masterSalt;
|
||||
}
|
||||
|
||||
public void setMasterSalt(String masterSalt) {
|
||||
this.masterSalt = masterSalt;
|
||||
}
|
||||
|
||||
@Override
|
||||
public String toString() {
|
||||
StringBuilder builder = new StringBuilder();
|
||||
for (HtpasswdEntry entry : entries) {
|
||||
builder.append(entry.toString());
|
||||
}
|
||||
return builder.toString();
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,86 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* htpasswd
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.htpasswd.entity;
|
||||
|
||||
import org.apache.commons.codec.binary.Base64;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.field.EncryptionAlgorithm;
|
||||
|
||||
import java.nio.charset.StandardCharsets;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
|
||||
public class HtpasswdEntry {
|
||||
|
||||
private static final String APR1_PREFIX = "$apr1$";
|
||||
private static final String SHA512_PREFIX = "$6$";
|
||||
private static final String SALTED_SHA1_PREFIX = "{SSHA}";
|
||||
private static final String PLAIN_PREFIX = "{PLAIN}";
|
||||
|
||||
private static final String COLON = ":";
|
||||
private final String resultLine;
|
||||
|
||||
public HtpasswdEntry(String login, String passwordHash, String salt, String encryptionAlgorithm) throws NoSuchAlgorithmException {
|
||||
this(login, passwordHash, salt, encryptionAlgorithm, true);
|
||||
}
|
||||
|
||||
public HtpasswdEntry(String login, String passwordHash, String salt, String encryptionAlgorithm, boolean addLineSeparator) throws NoSuchAlgorithmException {
|
||||
StringBuilder content = new StringBuilder();
|
||||
content.append(login).append(COLON);
|
||||
|
||||
if (EncryptionAlgorithm.MD5.equalsName(encryptionAlgorithm)) {
|
||||
content
|
||||
.append(APR1_PREFIX)
|
||||
.append(salt)
|
||||
.append("$")
|
||||
.append(passwordHash);
|
||||
} else if (EncryptionAlgorithm.SHA1.equalsName(encryptionAlgorithm)) {
|
||||
content.append(SALTED_SHA1_PREFIX);
|
||||
byte[] digest = Base64.decodeBase64(passwordHash);
|
||||
byte[] saltBytes = salt.getBytes(StandardCharsets.UTF_8);
|
||||
|
||||
int l1 = digest.length;
|
||||
int l2 = saltBytes.length;
|
||||
byte[] resultArr = new byte[l1 + l2];
|
||||
System.arraycopy(digest, 0, resultArr, 0, l1);
|
||||
System.arraycopy(saltBytes, 0, resultArr, l1, l2);
|
||||
|
||||
content.append(Base64.encodeBase64String(resultArr));
|
||||
} else if (EncryptionAlgorithm.SHA512.equalsName(encryptionAlgorithm)) {
|
||||
content
|
||||
.append(SHA512_PREFIX)
|
||||
.append(salt)
|
||||
.append("$")
|
||||
.append(passwordHash);
|
||||
} else if (EncryptionAlgorithm.PLAIN.equalsName(encryptionAlgorithm)) {
|
||||
content
|
||||
.append(PLAIN_PREFIX)
|
||||
.append(passwordHash);
|
||||
} else {
|
||||
content.append(passwordHash);
|
||||
}
|
||||
content.append(System.lineSeparator());
|
||||
|
||||
this.resultLine = content.toString();
|
||||
}
|
||||
|
||||
@Override
|
||||
public String toString() {
|
||||
return resultLine;
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,43 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* htpasswd
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.htpasswd.rest;
|
||||
|
||||
import javax.ws.rs.GET;
|
||||
import javax.ws.rs.Path;
|
||||
import javax.ws.rs.Produces;
|
||||
import java.io.File;
|
||||
|
||||
@Path("/")
|
||||
public class HtpasswdService {
|
||||
|
||||
@GET
|
||||
@Produces("application/octet-stream")
|
||||
public File getFile() {
|
||||
return null;
|
||||
}
|
||||
|
||||
@GET
|
||||
@Path("/checksum")
|
||||
@Produces("plain/text")
|
||||
public String getCheckSum() {
|
||||
return null;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,95 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!--
|
||||
~~~~~~licensing~~~~~~
|
||||
htpasswd
|
||||
==========
|
||||
Copyright (C) 2020 - 2021 EmDev LLC
|
||||
==========
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
~~~~~~/licensing~~~~~~
|
||||
-->
|
||||
|
||||
<blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:cm="http://aries.apache.org/blueprint/xmlns/blueprint-cm/v1.1.0"
|
||||
xmlns:camelcxf="http://camel.apache.org/schema/blueprint/cxf"
|
||||
xsi:schemaLocation="http://www.osgi.org/xmlns/blueprint/v1.0.0 https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd">
|
||||
|
||||
<cm:property-placeholder persistent-id="ru.entaxy.esb.system.basic_auth.htpasswd" update-strategy="reload">
|
||||
<cm:default-properties>
|
||||
<cm:property name="htpasswd.file.directory" value="securityTest"/>
|
||||
<cm:property name="htpasswd.file.name" value="htpasswd"/>
|
||||
<cm:property name="htpasswd.file.checksum" value="MD5.md5"/>
|
||||
|
||||
<cm:property name="htpasswd.service.host" value="http://localhost"/>
|
||||
<cm:property name="htpasswd.service.port" value="9091"/>
|
||||
<cm:property name="htpasswd.service.root.path" value="/htpasswd"/>
|
||||
|
||||
</cm:default-properties>
|
||||
</cm:property-placeholder>
|
||||
|
||||
<bean id="htpasswd" class="ru.entaxy.esb.system.auth.basic.htpasswd.entity.Htpasswd">
|
||||
<property name="fileName" value="${htpasswd.file.name}"/>
|
||||
<property name="directory" value="${htpasswd.file.directory}"/>
|
||||
</bean>
|
||||
|
||||
<service ref="htpasswdGenerator" interface="ru.entaxy.esb.system.auth.basic.htpasswd.HtpasswdGenerator"/>
|
||||
<bean id="htpasswdGenerator" class="ru.entaxy.esb.system.auth.basic.htpasswd.HtpasswdGenerator">
|
||||
<property name="htpasswd" ref="htpasswd"/>
|
||||
<property name="checkSumFileName" value="${htpasswd.file.checksum}"/>
|
||||
</bean>
|
||||
|
||||
<!-- <reference id="phaseInterceptor" -->
|
||||
<!-- interface="org.apache.cxf.phase.PhaseInterceptor" -->
|
||||
<!-- filter="(type=system)" -->
|
||||
<!-- timeout="30000" -->
|
||||
<!-- availability="optional"/> -->
|
||||
|
||||
<!-- <cxf:bus id="entaxy"> -->
|
||||
<!-- <cxf:inInterceptors> -->
|
||||
<!-- <ref component-id="phaseInterceptor"/> -->
|
||||
<!-- </cxf:inInterceptors> -->
|
||||
<!-- </cxf:bus> -->
|
||||
|
||||
<camelcxf:rsServer id="rsServer"
|
||||
address="${htpasswd.service.host}:${htpasswd.service.port}${htpasswd.service.root.path}"
|
||||
serviceClass="ru.entaxy.esb.system.auth.basic.htpasswd.rest.HtpasswdService"
|
||||
loggingFeatureEnabled="false" loggingSizeLimit="20"/>
|
||||
|
||||
<camelContext id="htpasswd-camel-context" xmlns="http://camel.apache.org/schema/blueprint">
|
||||
|
||||
<route id="htpasswdServiceRouter">
|
||||
<from uri="cxfrs:bean:rsServer?bindingStyle=SimpleConsumer"/>
|
||||
<log message="Htpassed service operation ${header.operationName}" loggingLevel="DEBUG"/>
|
||||
<toD uri="direct:${header.operationName}"/>
|
||||
</route>
|
||||
|
||||
<route id="file">
|
||||
<from uri="direct:getFile"/>
|
||||
<log message="Request direct:getFile: type=${header.type}, active=${header.active}, customerData=${body}"/>
|
||||
<pollEnrich timeout="0">
|
||||
<simple>file:${properties:htpasswd.file.directory}?noop=true&fileName=${properties:htpasswd.file.name}&idempotent=false</simple>
|
||||
</pollEnrich>
|
||||
<convertBodyTo type="String"/>
|
||||
</route>
|
||||
|
||||
<route id="checkSum">
|
||||
<from uri="direct:getCheckSum"/>
|
||||
<log message="Request direct:getCheckSum: type=${header.type}, active=${header.active}, customerData=${body}"/>
|
||||
<pollEnrich timeout="0">
|
||||
<simple>file:${properties:htpasswd.file.directory}?noop=true&fileName=${properties:htpasswd.file.checksum}&idempotent=false</simple>
|
||||
</pollEnrich>
|
||||
<convertBodyTo type="String"/>
|
||||
</route>
|
||||
</camelContext>
|
||||
</blueprint>
|
||||
@ -0,0 +1,67 @@
|
||||
###
|
||||
# ~~~~~~licensing~~~~~~
|
||||
# htpasswd
|
||||
# ==========
|
||||
# Copyright (C) 2020 - 2021 EmDev LLC
|
||||
# ==========
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
# ~~~~~~/licensing~~~~~~
|
||||
###
|
||||
# !/bin/sh
|
||||
KARAF_HOST_NAMES=("http://192.168.122.93:9091" "http://192.168.122.94:9091")
|
||||
HTPASSWD_PATH=/htpasswd
|
||||
CHECKSUM_PATH=$HTPASSWD_PATH/checksum
|
||||
HTPASSWD_STORAGE=/etc/nginx/htpasswd
|
||||
LOGFILE="htpasswd-sync.log"
|
||||
TIMESTAMP=`date "+%Y-%m-%d %H:%M:%S"`
|
||||
|
||||
currentChecksum=`md5sum $HTPASSWD_STORAGE | awk '{ print $1 }'`
|
||||
|
||||
log(){
|
||||
echo "$TIMESTAMP $1" >> $LOGFILE
|
||||
}
|
||||
|
||||
#download actual checksum from karaf
|
||||
for actualHost in ${KARAF_HOST_NAMES[*]}; do
|
||||
wget -O checksum $actualHost$CHECKSUM_PATH
|
||||
newChecksum=`cat checksum`
|
||||
rm checksum
|
||||
if [[ -n $newChecksum ]]
|
||||
then
|
||||
log "checksum received from host $actualHost"
|
||||
break
|
||||
else
|
||||
log "host $actualHost did not give checksum data"
|
||||
fi
|
||||
done
|
||||
|
||||
log "newChecksum $newChecksum"
|
||||
log "currentChecksum $currentChecksum"
|
||||
|
||||
if [[ -n $newChecksum ]] && { [[ -z $currentChecksum ]] || [ $currentChecksum != $newChecksum ]; };
|
||||
then
|
||||
wget -O htpasswd $actualHost$HTPASSWD_PATH
|
||||
sudo mv htpasswd $HTPASSWD_STORAGE
|
||||
sudo chmod 644 $HTPASSWD_STORAGE
|
||||
sudo chown root:root $HTPASSWD_STORAGE
|
||||
sudo systemctl reload nginx
|
||||
log ">>>>>>>>>>>>>>>>> Htpasswd updated"
|
||||
else
|
||||
if [[ -n $newChecksum ]]
|
||||
then
|
||||
log ">>>>>>>>>>>>>>>>> Htpasswd is up to date"
|
||||
else
|
||||
log ">>>>>>>>>>>>>>>>> Script finished with error: new checksum not received!"
|
||||
#error action
|
||||
fi
|
||||
fi
|
||||
27
system/auth/basic-auth/pom.xml
Normal file
27
system/auth/basic-auth/pom.xml
Normal file
@ -0,0 +1,27 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
||||
|
||||
<modelVersion>4.0.0</modelVersion>
|
||||
|
||||
<parent>
|
||||
<groupId>ru.entaxy.esb.system.auth</groupId>
|
||||
<artifactId>system-auth</artifactId>
|
||||
<version>1.8.0</version>
|
||||
</parent>
|
||||
|
||||
<groupId>ru.entaxy.esb.system.auth.basic</groupId>
|
||||
<artifactId>basic-auth</artifactId>
|
||||
<packaging>pom</packaging>
|
||||
|
||||
<name>SYSTEM :: ENTAXY :: AUTH BASIC</name>
|
||||
<description>SYSTEM :: ENTAXY :: AUTH BASIC</description>
|
||||
|
||||
<modules>
|
||||
<module>basic-auth-api</module>
|
||||
<module>basic-auth-impl</module>
|
||||
<module>htpasswd</module>
|
||||
<module>basic-auth-soap</module>
|
||||
</modules>
|
||||
|
||||
</project>
|
||||
Reference in New Issue
Block a user