org.argeo.ext.jackrabbit/src/org/argeo/security/jackrabbit/SystemJackrabbitLoginModule.java

   1 package org.argeo.security.jackrabbit;
   2
   3 import java.util.Map;
   4 import java.util.Set;
   5
   6 import javax.security.auth.Subject;
   7 import javax.security.auth.callback.CallbackHandler;
   8 import javax.security.auth.login.LoginException;
   9 import javax.security.auth.spi.LoginModule;
  10 import javax.security.auth.x500.X500Principal;
  11
  12 import org.apache.jackrabbit.core.security.SecurityConstants;
  13 import org.apache.jackrabbit.core.security.principal.AdminPrincipal;
  14 import org.argeo.node.DataAdminPrincipal;
  15
  16 public class SystemJackrabbitLoginModule implements LoginModule {
  17
  18         private Subject subject;
  19
  20         @Override
  21         public void initialize(Subject subject, CallbackHandler callbackHandler, Map<String, ?> sharedState,
  22                         Map<String, ?> options) {
  23                 this.subject = subject;
  24         }
  25
  26         @Override
  27         public boolean login() throws LoginException {
  28                 return true;
  29         }
  30
  31         @Override
  32         public boolean commit() throws LoginException {
  33                 Set<DataAdminPrincipal> initPrincipal = subject.getPrincipals(DataAdminPrincipal.class);
  34                 if (!initPrincipal.isEmpty()) {
  35                         subject.getPrincipals().add(new AdminPrincipal(SecurityConstants.ADMIN_ID));
  36                         return true;
  37                 }
  38
  39                 Set<X500Principal> userPrincipal = subject.getPrincipals(X500Principal.class);
  40                 if (userPrincipal.isEmpty())
  41                         throw new LoginException("Subject must be pre-authenticated");
  42                 if (userPrincipal.size() > 1)
  43                         throw new LoginException("Multiple user principals " + userPrincipal);
  44
  45                 return true;
  46         }
  47
  48         @Override
  49         public boolean abort() throws LoginException {
  50                 return true;
  51         }
  52
  53         @Override
  54         public boolean logout() throws LoginException {
  55                 Set<DataAdminPrincipal> initPrincipal = subject.getPrincipals(DataAdminPrincipal.class);
  56                 if (!initPrincipal.isEmpty()) {
  57                         subject.getPrincipals(AdminPrincipal.class);
  58                         return true;
  59                 }
  60                 return true;
  61         }
  62 }