org.argeo.cms/src/org/argeo/cms/internal/http/client/SpnegoHttpClient.java

   1 package org.argeo.cms.internal.http.client;
   2
   3 import java.net.MalformedURLException;
   4 import java.net.URL;
   5 import java.net.http.HttpClient;
   6 import java.net.http.HttpRequest;
   7 import java.net.http.HttpResponse;
   8 import java.net.http.HttpResponse.BodyHandler;
   9 import java.net.http.HttpResponse.BodyHandlers;
  10 import java.security.KeyManagementException;
  11 import java.security.NoSuchAlgorithmException;
  12 import java.security.cert.X509Certificate;
  13
  14 import javax.net.ssl.SSLContext;
  15 import javax.net.ssl.TrustManager;
  16 import javax.net.ssl.X509TrustManager;
  17 import javax.security.auth.Subject;
  18 import javax.security.auth.login.LoginContext;
  19
  20 import org.argeo.cms.auth.RemoteAuthUtils;
  21
  22 public class SpnegoHttpClient {
  23         public static void main(String[] args) throws MalformedURLException {
  24                 String principal = System.getProperty("javax.security.auth.login.name");
  25                 if (args.length == 0 || principal == null) {
  26                         System.err.println("usage: java -Djavax.security.auth.login.name=<principal@REALM> "
  27                                         + SpnegoHttpClient.class.getName() + " <url>");
  28                         System.exit(1);
  29                         return;
  30                 }
  31                 String url = args[0];
  32                 URL u = new URL(url);
  33                 String server = u.getHost();
  34
  35                 URL jaasUrl = SpnegoAuthScheme.class.getResource("jaas.cfg");
  36                 System.setProperty("java.security.auth.login.config", jaasUrl.toExternalForm());
  37                 try {
  38                         LoginContext lc = new LoginContext("SINGLE_USER");
  39                         lc.login();
  40
  41 //                      int responseCode = Subject.doAs(lc.getSubject(), new PrivilegedExceptionAction<Integer>() {
  42 //
  43 //                              public Integer run() throws Exception {
  44
  45 //                                      InputStream ins = u.openConnection().getInputStream();
  46 //                                      BufferedReader reader = new BufferedReader(new InputStreamReader(ins));
  47 //                                      String str;
  48 //                                      while ((str = reader.readLine()) != null)
  49 //                                              System.out.println(str);
  50 //                                      return 666;
  51
  52                         HttpClient httpClient = openHttpClient(lc.getSubject());
  53                         String token = RemoteAuthUtils.getGssToken(lc.getSubject(), "HTTP", server);
  54
  55                         HttpRequest request = HttpRequest.newBuilder().uri(u.toURI()) //
  56                                         .header("Authorization", "Negotiate " + token) //
  57                                         .build();
  58                         BodyHandler<String> bodyHandler = BodyHandlers.ofString();
  59                         HttpResponse<String> response = httpClient.send(request, bodyHandler);
  60                         System.out.println(response.body());
  61                         int responseCode = response.statusCode();
  62 //                                      return response.statusCode();
  63 //                              }
  64 //                      });
  65                         System.out.println("Reponse code: " + responseCode);
  66                 } catch (Exception e) {
  67                         e.printStackTrace();
  68                 }
  69         }
  70
  71         private static HttpClient openHttpClient(Subject subject) {
  72                 // disable https check
  73                 // jdk.internal.httpclient.disableHostnameVerification=true
  74                 HttpClient client = HttpClient.newBuilder().sslContext(insecureContext())
  75 //                              .authenticator(new Authenticator() {
  76 //                      public PasswordAuthentication getPasswordAuthentication() {
  77 //                              return null;
  78 //                      }
  79 //
  80 //              })
  81                                 .version(HttpClient.Version.HTTP_1_1).build();
  82
  83                 return client;
  84
  85                 // return client;
  86 //                      AuthPolicy.registerAuthScheme(SpnegoAuthScheme.NAME, SpnegoAuthScheme.class);
  87 //                      HttpParams params = DefaultHttpParams.getDefaultParams();
  88 //                      ArrayList<String> schemes = new ArrayList<>();
  89 //                      schemes.add(SpnegoAuthScheme.NAME);
  90 //                      params.setParameter(AuthPolicy.AUTH_SCHEME_PRIORITY, schemes);
  91 //                      params.setParameter(CredentialsProvider.PROVIDER, new HttpCredentialProvider());
  92 //                      HttpClient httpClient = new HttpClient();
  93 //                      httpClient.executeMethod(new GetMethod(("https://" + server + "/ipa/session/json")));
  94 //                      return httpClient;
  95
  96         }
  97
  98         private static SSLContext insecureContext() {
  99                 TrustManager[] noopTrustManager = new TrustManager[] { new X509TrustManager() {
 100                         public void checkClientTrusted(X509Certificate[] xcs, String string) {
 101                         }
 102
 103                         public void checkServerTrusted(X509Certificate[] xcs, String string) {
 104                         }
 105
 106                         public X509Certificate[] getAcceptedIssuers() {
 107                                 return null;
 108                         }
 109                 } };
 110                 try {
 111                         SSLContext sc = SSLContext.getInstance("ssl");
 112                         sc.init(null, noopTrustManager, null);
 113                         return sc;
 114                 } catch (KeyManagementException | NoSuchAlgorithmException e) {
 115                         throw new IllegalStateException("Cannot create insecure SSL context ", e);
 116                 }
 117         }
 118
 119 }