View Javadoc
1   /**
2    * This file Copyright (c) 2003-2018 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License.
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.cms.security.auth.callback;
35  
36  import info.magnolia.cms.security.User;
37  
38  import java.io.IOException;
39  
40  import javax.security.auth.callback.Callback;
41  import javax.security.auth.callback.CallbackHandler;
42  import javax.security.auth.callback.NameCallback;
43  import javax.security.auth.callback.PasswordCallback;
44  import javax.security.auth.callback.TextOutputCallback;
45  import javax.security.auth.callback.UnsupportedCallbackException;
46  
47  import org.slf4j.Logger;
48  import org.slf4j.LoggerFactory;
49  
50  
51  /**
52   * A JAAS {@link CallbackHandler} using plain text passwords.
53   */
54  public class CredentialsCallbackHandler implements CallbackHandler {
55  
56      protected static Logger log = LoggerFactory.getLogger(CredentialsCallbackHandler.class);
57  
58      protected String name;
59  
60      protected char[] pswd;
61  
62      /**
63       * The realm to which we login.
64       */
65      protected String realm;
66  
67      protected User user;
68  
69      /**
70       * Default constructor required by java security framework.
71       */
72      public CredentialsCallbackHandler() {
73          // do not instanciate with this constructor
74      }
75  
76      public CredentialsCallbackHandler(String name, char[] pswd) {
77          this.name = name;
78          this.pswd = pswd;
79      }
80  
81      public CredentialsCallbackHandler(String name, char[] pswd, String realm) {
82          this(name, pswd);
83          this.realm = realm;
84      }
85  
86      /**
87       * Handle name and password callbacks called during the JAAS login processing.
88       */
89      @Override
90      public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
91          for (int i = 0; i < callbacks.length; i++) {
92              if (callbacks[i] instanceof NameCallback) {
93                  ((NameCallback) callbacks[i]).setName(this.name);
94              } else if (callbacks[i] instanceof PasswordCallback) {
95                  ((PasswordCallback) callbacks[i]).setPassword(this.pswd);
96              } else if (callbacks[i] instanceof RealmCallback) {
97                  ((RealmCallback) callbacks[i]).setRealm(this.realm);
98              } else if (callbacks[i] instanceof UserCallback) {
99                  user = ((UserCallback) callbacks[i]).getUser();
100             } else if (callbacks[i] instanceof TextOutputCallback) {
101                 TextOutputCallback outputCallback = (TextOutputCallback) callbacks[i];
102                 switch (outputCallback.getMessageType()) {
103                 case TextOutputCallback.INFORMATION:
104                     log.info(outputCallback.getMessage());
105                     break;
106                 case TextOutputCallback.ERROR:
107                     log.error(outputCallback.getMessage());
108                     break;
109                 case TextOutputCallback.WARNING:
110                     log.warn(outputCallback.getMessage());
111                     break;
112                 default:
113                     log.debug("Unsupported message type : {} - Message:", outputCallback.getMessageType(), outputCallback.getMessage());
114                 }
115             }
116         }
117     }
118 
119 
120     public User getUser() {
121         return this.user;
122     }
123 }