initial public commit
This commit is contained in:
@ -0,0 +1,131 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.interceptor;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.apache.cxf.common.util.Base64Exception;
|
||||
import org.apache.cxf.common.util.Base64Utility;
|
||||
import org.apache.cxf.interceptor.Fault;
|
||||
import org.apache.cxf.interceptor.security.AuthenticationException;
|
||||
import org.apache.cxf.message.Message;
|
||||
import org.apache.cxf.phase.AbstractPhaseInterceptor;
|
||||
import org.apache.cxf.phase.Phase;
|
||||
import org.apache.cxf.transport.http.Headers;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.common.util.SystemHeadersConstants;
|
||||
|
||||
import java.util.Collections;
|
||||
import java.util.List;
|
||||
import java.util.Map;
|
||||
import java.util.Optional;
|
||||
|
||||
public class AuthenticationInterceptor extends AbstractPhaseInterceptor<Message> {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(AuthenticationInterceptor.class);
|
||||
|
||||
private boolean enabled = false;
|
||||
private BasicAuthService basicAuthService;
|
||||
|
||||
private static final String BASIC = "Basic";
|
||||
private static final String AUTHORIZATION = "Authorization";
|
||||
private static final String WWW_AUTHENTICATE = "WWW-Authenticate";
|
||||
private static final String WWW_AUTHENTICATE_MESSAGE = "Basic realm=\"Access to Entaxy\"";
|
||||
|
||||
|
||||
public AuthenticationInterceptor() {
|
||||
super(Phase.RECEIVE);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void handleMessage(Message message) throws Fault {
|
||||
LOG.debug("AuthenticationInterceptor enabled=" + enabled);
|
||||
if (!enabled) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
Map<String, List<String>> headers = Headers.getSetProtocolHeaders(message);
|
||||
//reset passed value
|
||||
headers.put(SystemHeadersConstants.HEADER_USER_LOGIN, Collections.emptyList());
|
||||
|
||||
Optional<String> auth = Optional.ofNullable(headers.get(AUTHORIZATION)).
|
||||
orElse(Collections.emptyList())
|
||||
.stream().findFirst();
|
||||
|
||||
if (auth.isPresent()) {
|
||||
String[] namePassword = prepareAuthData(message, auth);
|
||||
if (namePassword.length == 2 && isAuthenticated(namePassword[0], namePassword[1])) {
|
||||
// let request to continue
|
||||
LOG.trace(namePassword[0] + " authenticated");
|
||||
headers.put(SystemHeadersConstants.HEADER_USER_LOGIN, Collections.singletonList(namePassword[0]));
|
||||
} else {
|
||||
faultAction(message);
|
||||
}
|
||||
} else {
|
||||
faultAction(message);
|
||||
}
|
||||
}
|
||||
|
||||
private String[] prepareAuthData(Message message, Optional<String> auth) {
|
||||
String[] parts = auth.get().split(" ");
|
||||
if (parts.length != 2 || !BASIC.equals(parts[0])) {
|
||||
faultAction(message);
|
||||
}
|
||||
String decodedValue = null;
|
||||
try {
|
||||
decodedValue = new String(Base64Utility.decode(parts[1]));
|
||||
} catch (Base64Exception ex) {
|
||||
faultAction(message);
|
||||
}
|
||||
String[] namePassword = decodedValue.split(":");
|
||||
return namePassword;
|
||||
}
|
||||
|
||||
private void faultAction(Message message) {
|
||||
Map<String, List<String>> headers = Headers.getSetProtocolHeaders(message);
|
||||
headers.put(WWW_AUTHENTICATE, Collections.singletonList(WWW_AUTHENTICATE_MESSAGE));
|
||||
Fault fault = new Fault(new AuthenticationException("Unauthorized Access"));
|
||||
fault.setFaultCode(Fault.FAULT_CODE_CLIENT);
|
||||
fault.setStatusCode(401);
|
||||
throw fault;
|
||||
}
|
||||
|
||||
private boolean isAuthenticated(String name, String password) {
|
||||
return basicAuthService.check(name, password);
|
||||
}
|
||||
|
||||
public boolean isEnabled() {
|
||||
return enabled;
|
||||
}
|
||||
|
||||
public void setEnabled(boolean enabled) {
|
||||
this.enabled = enabled;
|
||||
}
|
||||
|
||||
public BasicAuthService getBasicAuthService() {
|
||||
return basicAuthService;
|
||||
}
|
||||
|
||||
public void setBasicAuthService(BasicAuthService basicAuthService) {
|
||||
this.basicAuthService = basicAuthService;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,110 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.interceptor;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.apache.cxf.interceptor.Fault;
|
||||
import org.apache.cxf.message.Message;
|
||||
import org.apache.cxf.phase.AbstractPhaseInterceptor;
|
||||
import org.apache.cxf.phase.Phase;
|
||||
import org.apache.cxf.transport.http.Headers;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
import ru.entaxy.esb.system.common.util.SystemHeadersConstants;
|
||||
import ru.entaxy.esb.system.jpa.SystemService;
|
||||
import ru.entaxy.esb.system.jpa.entity.System;
|
||||
|
||||
import javax.ws.rs.ForbiddenException;
|
||||
import java.util.Collections;
|
||||
import java.util.List;
|
||||
import java.util.Map;
|
||||
import java.util.Optional;
|
||||
|
||||
public class SystemInterceptor extends AbstractPhaseInterceptor<Message> {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(SystemInterceptor.class);
|
||||
|
||||
private BasicAuthService basicAuthService;
|
||||
|
||||
private SystemService systemService;
|
||||
|
||||
public SystemInterceptor() {
|
||||
super(Phase.PRE_PROTOCOL);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void handleMessage(Message message) throws Fault {
|
||||
Map<String, List<String>> headers = Headers.getSetProtocolHeaders(message);
|
||||
|
||||
Optional<String> login = Optional.ofNullable(headers.get(SystemHeadersConstants.HEADER_USER_LOGIN)).
|
||||
orElse(Collections.emptyList())
|
||||
.stream().findFirst();
|
||||
|
||||
//TEST
|
||||
// login = Optional.of("user");
|
||||
|
||||
LOG.trace(">>>>>>>>>>>>>>>>>>>>>>>>>>>>>SystemInterceptor <<< headers.get( HEADER_USER_LOGIN ) " + login.orElse("NULL"));
|
||||
|
||||
if (login.isPresent()) {
|
||||
Optional<BasicAuthAccount> accountOpt = basicAuthService.get(login.get());
|
||||
|
||||
if (accountOpt.isPresent()) {
|
||||
BasicAuthAccount account = accountOpt.get();
|
||||
headers.put(SystemHeadersConstants.HEADER_USER_ID, Collections.singletonList(String.valueOf(account.getId())));
|
||||
|
||||
headers.put(SystemHeadersConstants.HEADER_SYSTEM_UUID, Collections.singletonList(account.getSystemUUID()));
|
||||
|
||||
System system = account.getSystemUUID() != null && !account.getSystemUUID().isEmpty()
|
||||
? systemService.getByUuid(account.getSystemUUID())
|
||||
: null;
|
||||
if (system != null) {
|
||||
headers.put(SystemHeadersConstants.HEADER_SYSTEM_NAME, Collections.singletonList(system.getName()));
|
||||
headers.put(SystemHeadersConstants.HEADER_SYSTEM_ID, Collections.singletonList(String.valueOf(system.getId())));
|
||||
}
|
||||
} else {
|
||||
throw new ForbiddenException();
|
||||
}
|
||||
}
|
||||
|
||||
// It stops the process
|
||||
// else {
|
||||
// message.getInterceptorChain().abort();
|
||||
// }
|
||||
|
||||
}
|
||||
|
||||
public BasicAuthService getBasicAuthService() {
|
||||
return basicAuthService;
|
||||
}
|
||||
|
||||
public void setBasicAuthService(BasicAuthService basicAuthService) {
|
||||
this.basicAuthService = basicAuthService;
|
||||
}
|
||||
|
||||
public SystemService getSystemService() {
|
||||
return systemService;
|
||||
}
|
||||
|
||||
public void setSystemService(SystemService systemService) {
|
||||
this.systemService = systemService;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,247 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.impl;
|
||||
|
||||
import org.hibernate.Session;
|
||||
import org.hibernate.SessionFactory;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.field.EncryptionAlgorithm;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.exception.BadPasswordException;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.util.EncryptionHelper;
|
||||
import ru.entaxy.esb.system.core.permission.common.PermissionConstants;
|
||||
import ru.entaxy.esb.system.core.permission.jpa.PermissionService;
|
||||
|
||||
import javax.persistence.criteria.CriteriaBuilder;
|
||||
import javax.persistence.criteria.CriteriaQuery;
|
||||
import javax.persistence.criteria.Root;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.util.Date;
|
||||
import java.util.List;
|
||||
import java.util.Optional;
|
||||
|
||||
public class BasicAuthServiceImpl implements BasicAuthService {
|
||||
|
||||
private static final Logger LOG = LoggerFactory.getLogger(BasicAuthServiceImpl.class);
|
||||
|
||||
private SessionFactory sessionFactory;
|
||||
private String еncryptionAlgorithm;
|
||||
private String encryptionSalt;
|
||||
private PermissionService permissionService;
|
||||
|
||||
public void setSessionFactory(SessionFactory sessionFactory) {
|
||||
this.sessionFactory = sessionFactory;
|
||||
}
|
||||
|
||||
public Session getSession() {
|
||||
return sessionFactory.openSession();
|
||||
}
|
||||
|
||||
public void setЕncryptionAlgorithm(String еncryptionAlgorithm) {
|
||||
this.еncryptionAlgorithm = еncryptionAlgorithm;
|
||||
}
|
||||
|
||||
public void setEncryptionSalt(String encryptionSalt) {
|
||||
this.encryptionSalt = encryptionSalt;
|
||||
}
|
||||
|
||||
public PermissionService getPermissionService() {
|
||||
return permissionService;
|
||||
}
|
||||
|
||||
public void setPermissionService(PermissionService permissionService) {
|
||||
this.permissionService = permissionService;
|
||||
}
|
||||
|
||||
@Override
|
||||
public List<BasicAuthAccount> list() {
|
||||
List<BasicAuthAccount> list;
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
CriteriaQuery<BasicAuthAccount> cq = s.getCriteriaBuilder().createQuery(BasicAuthAccount.class);
|
||||
cq.from(BasicAuthAccount.class);
|
||||
list = s.createQuery(cq).getResultList();
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
|
||||
return list;
|
||||
}
|
||||
|
||||
@Override
|
||||
public Optional<BasicAuthAccount> get(String login) {
|
||||
Optional<BasicAuthAccount> basicAuthAccount;
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
|
||||
CriteriaBuilder builder = s.getCriteriaBuilder();
|
||||
CriteriaQuery<BasicAuthAccount> criteriaQuery = builder.createQuery(BasicAuthAccount.class);
|
||||
Root<BasicAuthAccount> root = criteriaQuery.from(BasicAuthAccount.class);
|
||||
criteriaQuery.where(builder.equal(root.get("login"), login));
|
||||
basicAuthAccount = s.createQuery(criteriaQuery).uniqueResultOptional();
|
||||
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
public Optional<BasicAuthAccount> get(Session session, String login) {
|
||||
Optional<BasicAuthAccount> basicAuthAccount;
|
||||
CriteriaBuilder builder = session.getCriteriaBuilder();
|
||||
CriteriaQuery<BasicAuthAccount> criteriaQuery = builder.createQuery(BasicAuthAccount.class);
|
||||
Root<BasicAuthAccount> root = criteriaQuery.from(BasicAuthAccount.class);
|
||||
criteriaQuery.where(builder.equal(root.get("login"), login));
|
||||
basicAuthAccount = session.createQuery(criteriaQuery).uniqueResultOptional();
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public Optional<BasicAuthAccount> getByAuthorizationHeaderHash(String authorizationHeaderHash) {
|
||||
Optional<BasicAuthAccount> basicAuthAccount;
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
|
||||
CriteriaBuilder builder = s.getCriteriaBuilder();
|
||||
CriteriaQuery<BasicAuthAccount> criteriaQuery = builder.createQuery(BasicAuthAccount.class);
|
||||
Root<BasicAuthAccount> root = criteriaQuery.from(BasicAuthAccount.class);
|
||||
criteriaQuery.where(builder.equal(root.get("authorizationHeaderHash"), authorizationHeaderHash));
|
||||
basicAuthAccount = s.createQuery(criteriaQuery).uniqueResultOptional();
|
||||
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount save(BasicAuthAccount basicAuthAccount, boolean isExist) {
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
if (isExist) {
|
||||
s.update(basicAuthAccount);
|
||||
} else {
|
||||
s.persist(basicAuthAccount);
|
||||
}
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount saveFull(String login, String passwordHash, String encryptionAlgorithm, String systemUUID,
|
||||
String authorizationHeaderHash, String description, String createdBy, String editedBy) {
|
||||
|
||||
LOG.debug("Parameters " + login + " " + passwordHash + " " + encryptionAlgorithm
|
||||
+ " " + systemUUID + " " + authorizationHeaderHash + " " + description + " " + createdBy + " " + editedBy);
|
||||
|
||||
Optional<BasicAuthAccount> existingBasicAuthAccount = get(login);
|
||||
|
||||
EncryptionAlgorithm encryptionAlgorithmObj = EncryptionAlgorithm.getByName(encryptionAlgorithm.toUpperCase());
|
||||
|
||||
BasicAuthAccount basicAuthAccount = existingBasicAuthAccount.orElseGet(BasicAuthAccount::new);
|
||||
settingBasicAuthAccount(login, passwordHash, encryptionAlgorithmObj, systemUUID, authorizationHeaderHash,
|
||||
description, createdBy, editedBy, basicAuthAccount, existingBasicAuthAccount.isPresent());
|
||||
|
||||
return save(basicAuthAccount, existingBasicAuthAccount.isPresent());
|
||||
}
|
||||
|
||||
private BasicAuthAccount settingBasicAuthAccount(String login, String passwordHash, EncryptionAlgorithm encryptionAlgorithm,
|
||||
String systemUUID, String authorizationHeaderHash,
|
||||
String description, String createdBy, String editedBy,
|
||||
BasicAuthAccount basicAuthAccount, boolean isExist) {
|
||||
if (!isExist) {
|
||||
basicAuthAccount.setLogin(login);
|
||||
basicAuthAccount.setCreateDate(new Date());
|
||||
basicAuthAccount.setCreatedBy(createdBy);
|
||||
} else {
|
||||
basicAuthAccount.setEditDate(new Date());
|
||||
basicAuthAccount.setEditedBy(editedBy);
|
||||
}
|
||||
|
||||
basicAuthAccount.setPasswordHash(passwordHash);
|
||||
basicAuthAccount.setEncryptionAlgorithm(encryptionAlgorithm);
|
||||
basicAuthAccount.setSystemUUID(systemUUID);
|
||||
basicAuthAccount.setAuthorizationHeaderHash(authorizationHeaderHash);
|
||||
basicAuthAccount.setDescription(description);
|
||||
return basicAuthAccount;
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount saveCommon(String login, String passwordHash, String systemUUID, String createdBy, String editedBy)
|
||||
throws NoSuchAlgorithmException, BadPasswordException {
|
||||
if (null != passwordHash && !passwordHash.isEmpty()) {
|
||||
passwordHash = EncryptionHelper.encrypt(passwordHash, this.еncryptionAlgorithm, this.encryptionSalt);
|
||||
} else {
|
||||
throw new BadPasswordException("Password not passed or empty!");
|
||||
}
|
||||
return saveFull(login, passwordHash, this.еncryptionAlgorithm, systemUUID, "", "", createdBy, editedBy);
|
||||
}
|
||||
|
||||
@Override
|
||||
public BasicAuthAccount saveShort(String login, String passwordHash, String createdBy, String editedBy)
|
||||
throws NoSuchAlgorithmException, BadPasswordException {
|
||||
return saveCommon(login, passwordHash, "", createdBy, editedBy);
|
||||
}
|
||||
|
||||
@Override
|
||||
public void remove(String login) {
|
||||
try (Session s = getSession()) {
|
||||
s.getTransaction().begin();
|
||||
|
||||
Optional<BasicAuthAccount> basicAuthAccount = get(s, login);
|
||||
basicAuthAccount.ifPresent((basicAuthAccount1) -> removeProc(s, basicAuthAccount1));
|
||||
s.getTransaction().commit();
|
||||
s.close();
|
||||
}
|
||||
}
|
||||
|
||||
private void removeProc(Session session, BasicAuthAccount account) {
|
||||
permissionService.removeAll(session, account.getId(), PermissionConstants.TYPE_ACCOUNT);
|
||||
session.flush();
|
||||
session.delete(BasicAuthAccount.class.getName(), account);
|
||||
}
|
||||
|
||||
@Override
|
||||
public boolean check(String login, String password) {
|
||||
if (login != null && password != null) {
|
||||
Optional<BasicAuthAccount> basicAuthAccountOpt = get(login);
|
||||
if (basicAuthAccountOpt.isPresent()) {
|
||||
BasicAuthAccount basicAuthAccount = basicAuthAccountOpt.get();
|
||||
try {
|
||||
String passedPasswordHash = EncryptionHelper.encrypt(password,
|
||||
basicAuthAccount.getEncryptionAlgorithm().getAlgorithmName(),
|
||||
this.encryptionSalt);
|
||||
if (passedPasswordHash.equals(basicAuthAccount.getPasswordHash())) {
|
||||
return true;
|
||||
}
|
||||
} catch (NoSuchAlgorithmException e) {
|
||||
LOG.error("Encription algorithm error", e);
|
||||
}
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
|
||||
}
|
||||
@ -0,0 +1,118 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.listener;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.hibernate.event.spi.*;
|
||||
import org.hibernate.persister.entity.EntityPersister;
|
||||
import ru.entaxy.esb.system.auth.basic.htpasswd.HtpasswdGenerator;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount;
|
||||
|
||||
import java.io.IOException;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import java.util.List;
|
||||
|
||||
public class BasicAuthPostEventListener implements PostCommitInsertEventListener, PostCommitUpdateEventListener, PostCommitDeleteEventListener {
|
||||
|
||||
private static final long serialVersionUID = -6603994118756820823L;
|
||||
private static final Log LOG = LogFactory.getLog(BasicAuthPostEventListener.class);
|
||||
|
||||
private BasicAuthService basicAuthService;
|
||||
private HtpasswdGenerator htpasswdGenerator;
|
||||
private String encryptionSalt;
|
||||
|
||||
public void setEncryptionSalt(String encryptionSalt) {
|
||||
this.encryptionSalt = encryptionSalt;
|
||||
}
|
||||
|
||||
@Override
|
||||
public boolean requiresPostCommitHanding(EntityPersister persister) {
|
||||
return true;
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostDelete(PostDeleteEvent event) {
|
||||
LOG.debug("Delete handler event " + event.getSession());
|
||||
LOG.debug("Delete handler event " + event.getEntity());
|
||||
if (event.getEntity() instanceof BasicAuthAccount) {
|
||||
generateHtpasswd();
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostUpdate(PostUpdateEvent event) {
|
||||
LOG.debug("Update handler event " + event);
|
||||
LOG.debug("Update handler event " + event.getEntity());
|
||||
generateHtpasswd();
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostInsert(PostInsertEvent event) {
|
||||
LOG.debug("Insert handler event " + event);
|
||||
LOG.debug("Insert handler event " + event.getEntity());
|
||||
generateHtpasswd();
|
||||
}
|
||||
|
||||
private void generateHtpasswd() {
|
||||
List<BasicAuthAccount> accounts = basicAuthService.list();
|
||||
|
||||
try {
|
||||
htpasswdGenerator.generateHtpasswd(accounts, encryptionSalt);
|
||||
} catch (NoSuchAlgorithmException | IOException e) {
|
||||
LOG.error(e);
|
||||
}
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostDeleteCommitFailed(PostDeleteEvent event) {
|
||||
LOG.debug("Delete failed event " + event.getEntity());
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostUpdateCommitFailed(PostUpdateEvent event) {
|
||||
LOG.debug("Update failed event " + event.getEntity());
|
||||
|
||||
}
|
||||
|
||||
@Override
|
||||
public void onPostInsertCommitFailed(PostInsertEvent event) {
|
||||
LOG.debug("Insert failed event " + event.getEntity());
|
||||
}
|
||||
|
||||
public BasicAuthService getBasicAuthService() {
|
||||
return basicAuthService;
|
||||
}
|
||||
|
||||
public void setBasicAuthService(BasicAuthService basicAuthService) {
|
||||
this.basicAuthService = basicAuthService;
|
||||
}
|
||||
|
||||
public HtpasswdGenerator getHtpasswdGenerator() {
|
||||
return htpasswdGenerator;
|
||||
}
|
||||
|
||||
public void setHtpasswdGenerator(HtpasswdGenerator htpasswdGenerator) {
|
||||
this.htpasswdGenerator = htpasswdGenerator;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,87 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.listener;
|
||||
|
||||
import org.apache.commons.logging.Log;
|
||||
import org.apache.commons.logging.LogFactory;
|
||||
import org.hibernate.SessionFactory;
|
||||
import org.hibernate.engine.spi.SessionFactoryImplementor;
|
||||
import org.hibernate.event.service.spi.EventListenerRegistry;
|
||||
import org.hibernate.event.spi.EventType;
|
||||
|
||||
public class EntityEventListenerRegistry {
|
||||
|
||||
private static final Log LOG = LogFactory.getLog(EntityEventListenerRegistry.class);
|
||||
private static final int SESSION_WAIT_TIMEOUT = 5000;
|
||||
|
||||
private SessionFactory sessionFactory;
|
||||
private BasicAuthPostEventListener basicAuthPostEventListener;
|
||||
private int initLimiter = 0;
|
||||
|
||||
|
||||
public void registerListeners() {
|
||||
LOG.info("Init EntityEventListenerRegistry " + sessionFactory.getClass().getName());
|
||||
|
||||
EventListenerRegistry registry = prepareRegistry();
|
||||
registry.getEventListenerGroup(EventType.POST_COMMIT_INSERT).appendListener(basicAuthPostEventListener);
|
||||
registry.getEventListenerGroup(EventType.POST_COMMIT_UPDATE).appendListener(basicAuthPostEventListener);
|
||||
registry.getEventListenerGroup(EventType.POST_COMMIT_DELETE).appendListener(basicAuthPostEventListener);
|
||||
}
|
||||
|
||||
private EventListenerRegistry prepareRegistry() {
|
||||
try {
|
||||
SessionFactoryImplementor sessionFactoryImpl = sessionFactory.unwrap(SessionFactoryImplementor.class);
|
||||
EventListenerRegistry registry = sessionFactoryImpl.getServiceRegistry().getService(EventListenerRegistry.class);
|
||||
return registry;
|
||||
} catch (Exception e) {
|
||||
LOG.error(e.getMessage());
|
||||
if (initLimiter == 10) {
|
||||
LOG.error(e);
|
||||
}
|
||||
try {
|
||||
LOG.warn("Wait sessionFactory initialization...");
|
||||
Thread.sleep(SESSION_WAIT_TIMEOUT);
|
||||
} catch (InterruptedException e1) {
|
||||
}
|
||||
|
||||
}
|
||||
return initLimiter++ <= 9
|
||||
? prepareRegistry()
|
||||
: null;
|
||||
}
|
||||
|
||||
|
||||
public SessionFactory getSessionFactory() {
|
||||
return sessionFactory;
|
||||
}
|
||||
|
||||
public BasicAuthPostEventListener getBasicAuthPostEventListener() {
|
||||
return basicAuthPostEventListener;
|
||||
}
|
||||
|
||||
public void setBasicAuthPostEventListener(BasicAuthPostEventListener basicAuthPostEventListener) {
|
||||
this.basicAuthPostEventListener = basicAuthPostEventListener;
|
||||
}
|
||||
|
||||
public void setSessionFactory(SessionFactory sessionFactory) {
|
||||
this.sessionFactory = sessionFactory;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,65 @@
|
||||
/*-
|
||||
* ~~~~~~licensing~~~~~~
|
||||
* basic-auth-impl
|
||||
* ==========
|
||||
* Copyright (C) 2020 - 2021 EmDev LLC
|
||||
* ==========
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
* ~~~~~~/licensing~~~~~~
|
||||
*/
|
||||
package ru.entaxy.esb.system.auth.basic.jpa.util;
|
||||
|
||||
import org.apache.commons.codec.binary.Base64;
|
||||
import org.apache.commons.codec.digest.DigestUtils;
|
||||
import org.apache.commons.codec.digest.Md5Crypt;
|
||||
import org.apache.commons.codec.digest.Sha2Crypt;
|
||||
import org.slf4j.Logger;
|
||||
import org.slf4j.LoggerFactory;
|
||||
import ru.entaxy.esb.system.auth.basic.jpa.api.entity.field.EncryptionAlgorithm;
|
||||
|
||||
import java.nio.charset.StandardCharsets;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
|
||||
public class EncryptionHelper {
|
||||
|
||||
private static final Logger LOG = LoggerFactory.getLogger(EncryptionHelper.class);
|
||||
|
||||
static final String APR1_PREFIX = "$apr1$";
|
||||
static final String SHA512_PREFIX = "$6$";
|
||||
|
||||
private EncryptionHelper() {
|
||||
throw new IllegalStateException("Utility class");
|
||||
}
|
||||
|
||||
public static String encrypt(String plaintext, String cipher, String salt) throws NoSuchAlgorithmException {
|
||||
String passwordHash;
|
||||
|
||||
if (EncryptionAlgorithm.MD5.equalsName(cipher)) {
|
||||
passwordHash = Md5Crypt.apr1Crypt((plaintext.getBytes(StandardCharsets.UTF_8)), salt);
|
||||
passwordHash = passwordHash.substring(passwordHash.lastIndexOf("$") + 1);
|
||||
} else if (EncryptionAlgorithm.SHA1.equalsName(cipher)) {
|
||||
passwordHash = Base64.encodeBase64String(
|
||||
DigestUtils.sha1((plaintext + salt).getBytes(StandardCharsets.UTF_8)));
|
||||
} else if (EncryptionAlgorithm.SHA512.equalsName(cipher)) {
|
||||
passwordHash = Sha2Crypt.sha512Crypt((plaintext.getBytes(StandardCharsets.UTF_8)), SHA512_PREFIX + salt);
|
||||
passwordHash = passwordHash.substring(passwordHash.lastIndexOf("$"));
|
||||
} else if (EncryptionAlgorithm.PLAIN.equalsName(cipher)) {
|
||||
passwordHash = plaintext;
|
||||
} else {
|
||||
throw new NoSuchAlgorithmException();
|
||||
}
|
||||
|
||||
return passwordHash;
|
||||
}
|
||||
|
||||
}
|
||||
@ -0,0 +1,99 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!--
|
||||
~~~~~~licensing~~~~~~
|
||||
basic-auth-impl
|
||||
==========
|
||||
Copyright (C) 2020 - 2021 EmDev LLC
|
||||
==========
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
~~~~~~/licensing~~~~~~
|
||||
-->
|
||||
|
||||
<blueprint xmlns="http://www.osgi.org/xmlns/blueprint/v1.0.0"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:cm="http://aries.apache.org/blueprint/xmlns/blueprint-cm/v1.1.0"
|
||||
xsi:schemaLocation="http://www.osgi.org/xmlns/blueprint/v1.0.0 https://www.osgi.org/xmlns/blueprint/v1.0.0/blueprint.xsd">
|
||||
|
||||
<cm:property-placeholder persistent-id="ru.entaxy.esb.system.basic_auth" update-strategy="reload">
|
||||
<cm:default-properties>
|
||||
<cm:property name="еncryption.algorithm" value="SHA-1"/>
|
||||
<cm:property name="еncryption.salt" value="kDfq0qZJ"/>
|
||||
<cm:property name="internal.authentication.enabled" value="false"/>
|
||||
</cm:default-properties>
|
||||
</cm:property-placeholder>
|
||||
|
||||
<reference id="sessionFactory"
|
||||
interface="org.hibernate.SessionFactory"
|
||||
timeout="30000"/>
|
||||
|
||||
<reference id="permissionService"
|
||||
interface="ru.entaxy.esb.system.core.permission.jpa.PermissionService"
|
||||
timeout="30000"
|
||||
availability="mandatory"/>
|
||||
|
||||
<service ref="basicAuthService" interface="ru.entaxy.esb.system.auth.basic.jpa.api.BasicAuthService"/>
|
||||
<bean id="basicAuthService" class="ru.entaxy.esb.system.auth.basic.jpa.impl.BasicAuthServiceImpl">
|
||||
<property name="sessionFactory" ref="sessionFactory"/>
|
||||
<property name="еncryptionAlgorithm" value="${еncryption.algorithm}"/>
|
||||
<property name="encryptionSalt" value="${еncryption.salt}"/>
|
||||
<property name="permissionService" ref="permissionService"/>
|
||||
</bean>
|
||||
|
||||
<reference xmlns:ext="http://aries.apache.org/blueprint/xmlns/blueprint-ext/v1.0.0"
|
||||
id="htpasswdGenerator"
|
||||
interface="ru.entaxy.esb.system.auth.basic.htpasswd.HtpasswdGenerator"
|
||||
timeout="30000"
|
||||
availability="mandatory"
|
||||
ext:proxy-method="classes"/>
|
||||
|
||||
<bean id="basicAuthPostEventListener"
|
||||
class="ru.entaxy.esb.system.auth.basic.jpa.listener.BasicAuthPostEventListener">
|
||||
<property name="basicAuthService" ref="basicAuthService"/>
|
||||
<property name="encryptionSalt" value="${еncryption.salt}"/>
|
||||
<property name="htpasswdGenerator" ref="htpasswdGenerator"/>
|
||||
</bean>
|
||||
<bean id="baseAuthPostDeleteEventListener"
|
||||
class="ru.entaxy.esb.system.auth.basic.jpa.listener.EntityEventListenerRegistry"
|
||||
init-method="registerListeners">
|
||||
<property name="sessionFactory" ref="sessionFactory"/>
|
||||
<property name="basicAuthPostEventListener" ref="basicAuthPostEventListener"/>
|
||||
</bean>
|
||||
|
||||
<reference id="systemService"
|
||||
interface="ru.entaxy.esb.system.jpa.SystemService"
|
||||
timeout="30000"
|
||||
availability="mandatory"/>
|
||||
|
||||
<bean id="systemInterceptor" class="ru.entaxy.esb.system.auth.basic.interceptor.SystemInterceptor">
|
||||
<property name="basicAuthService" ref="basicAuthService"/>
|
||||
<property name="systemService" ref="systemService"/>
|
||||
</bean>
|
||||
|
||||
<service ref="systemInterceptor" interface="org.apache.cxf.phase.PhaseInterceptor">
|
||||
<service-properties>
|
||||
<entry key="type" value="system"/>
|
||||
</service-properties>
|
||||
</service>
|
||||
|
||||
<bean id="authInterceptor" class="ru.entaxy.esb.system.auth.basic.interceptor.AuthenticationInterceptor">
|
||||
<property name="basicAuthService" ref="basicAuthService"/>
|
||||
<property name="enabled" value="${internal.authentication.enabled}"/>
|
||||
</bean>
|
||||
|
||||
<service ref="authInterceptor" interface="org.apache.cxf.phase.PhaseInterceptor">
|
||||
<service-properties>
|
||||
<entry key="type" value="authentication"/>
|
||||
</service-properties>
|
||||
</service>
|
||||
|
||||
</blueprint>
|
||||
@ -0,0 +1,38 @@
|
||||
<?xml version='1.0' encoding='utf-8'?>
|
||||
<!--
|
||||
~~~~~~licensing~~~~~~
|
||||
basic-auth-impl
|
||||
==========
|
||||
Copyright (C) 2020 - 2021 EmDev LLC
|
||||
==========
|
||||
Licensed under the Apache License, Version 2.0 (the "License");
|
||||
you may not use this file except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
|
||||
Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
~~~~~~/licensing~~~~~~
|
||||
-->
|
||||
|
||||
<!DOCTYPE hibernate-configuration PUBLIC
|
||||
"-//Hibernate/Hibernate Configuration DTD//EN"
|
||||
"http://hibernate.sourceforge.net/hibernate-configuration-3.0.dtd">
|
||||
|
||||
<hibernate-configuration>
|
||||
<session-factory>
|
||||
<property name="connection.datasource">osgi:service/entaxy.esb.storage</property>
|
||||
|
||||
<property name="hibernate.hbm2ddl.auto">validate</property>
|
||||
|
||||
<property name="hibernate.enable_lazy_load_no_trans">true</property>
|
||||
|
||||
<mapping class="ru.entaxy.esb.system.auth.basic.jpa.api.entity.BasicAuthAccount"/>
|
||||
<mapping class="ru.entaxy.esb.system.core.permission.jpa.entity.Permission"/>
|
||||
</session-factory>
|
||||
|
||||
</hibernate-configuration>
|
||||
@ -0,0 +1,30 @@
|
||||
###
|
||||
# ~~~~~~licensing~~~~~~
|
||||
# basic-auth-impl
|
||||
# ==========
|
||||
# Copyright (C) 2020 - 2021 EmDev LLC
|
||||
# ==========
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
# ~~~~~~/licensing~~~~~~
|
||||
###
|
||||
appender.file.type=File
|
||||
appender.file.name=file
|
||||
appender.file.fileName=target/camel-test.log
|
||||
appender.file.layout.type=PatternLayout
|
||||
appender.file.layout.pattern=%d %-5p %c{1} - %m %n
|
||||
appender.out.type=Console
|
||||
appender.out.name=out
|
||||
appender.out.layout.type=PatternLayout
|
||||
appender.out.layout.pattern=[%30.30t] %-30.30c{1} %-5p %m%n
|
||||
rootLogger.level=DEBUG
|
||||
rootLogger.appenderRef.out.ref=out
|
||||
Reference in New Issue
Block a user