org.argeo.cms/src/org/argeo/cms/auth/SingleUserLoginModule.java

   1 package org.argeo.cms.auth;
   2
   3 import java.security.Principal;
   4 import java.util.Map;
   5 import java.util.Set;
   6
   7 import javax.security.auth.Subject;
   8 import javax.security.auth.callback.CallbackHandler;
   9 import javax.security.auth.login.LoginException;
  10 import javax.security.auth.spi.LoginModule;
  11 import javax.security.auth.x500.X500Principal;
  12
  13 import org.apache.jackrabbit.core.security.SecurityConstants;
  14 import org.apache.jackrabbit.core.security.principal.AdminPrincipal;
  15 import org.argeo.cms.internal.auth.ImpliedByPrincipal;
  16
  17 public class SingleUserLoginModule implements LoginModule, AuthConstants {
  18         private Subject subject;
  19
  20         @Override
  21         public void initialize(Subject subject, CallbackHandler callbackHandler,
  22                         Map<String, ?> sharedState, Map<String, ?> options) {
  23                 this.subject = subject;
  24         }
  25
  26         @Override
  27         public boolean login() throws LoginException {
  28                 return true;
  29         }
  30
  31         @Override
  32         public boolean commit() throws LoginException {
  33                 String username = System.getProperty("user.name");
  34                 X500Principal principal = new X500Principal("uid=" + username
  35                                 + ",dc=localhost,dc=localdomain");
  36                 Set<Principal> principals = subject.getPrincipals();
  37                 principals.add(principal);
  38                 principals.add(new ImpliedByPrincipal(ROLE_ADMIN, principal));
  39                 // Jackrabbit
  40                 principals.add(new AdminPrincipal(SecurityConstants.ADMIN_ID));
  41                 return true;
  42         }
  43
  44         @Override
  45         public boolean abort() throws LoginException {
  46                 return true;
  47         }
  48
  49         @Override
  50         public boolean logout() throws LoginException {
  51                 // TODO Auto-generated method stub
  52                 return true;
  53         }
  54
  55 }