X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Fintegration%2FCmsTokenServlet.java;fp=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Fintegration%2FCmsTokenServlet.java;h=0000000000000000000000000000000000000000;hb=72788789268d2ac01dcb817d134c057307ba6de8;hp=11a6944b29efc2fc739d3dc52e653e193fb4f55b;hpb=55f74279d7d684988be6e2752dbaa658c76f11e7;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/integration/CmsTokenServlet.java b/org.argeo.cms/src/org/argeo/cms/integration/CmsTokenServlet.java
deleted file mode 100644
index 11a6944b2..000000000
--- a/org.argeo.cms/src/org/argeo/cms/integration/CmsTokenServlet.java
+++ /dev/null
@@ -1,114 +0,0 @@
-package org.argeo.cms.integration;
-
-import java.io.IOException;
-import java.time.ZonedDateTime;
-import java.util.Set;
-import java.util.UUID;
-
-import javax.security.auth.Subject;
-import javax.security.auth.callback.Callback;
-import javax.security.auth.callback.UnsupportedCallbackException;
-import javax.security.auth.login.LoginContext;
-import javax.security.auth.login.LoginException;
-import javax.servlet.ServletException;
-import javax.servlet.http.HttpServlet;
-import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-
-import org.argeo.api.NodeConstants;
-import org.argeo.cms.CmsUserManager;
-import org.argeo.cms.auth.HttpRequestCallback;
-import org.argeo.cms.auth.HttpRequestCallbackHandler;
-import org.argeo.naming.NamingUtils;
-import org.osgi.service.useradmin.Authorization;
-
-import com.fasterxml.jackson.core.JsonGenerator;
-import com.fasterxml.jackson.databind.ObjectMapper;
-
-/** Provides access to tokens. */
-public class CmsTokenServlet extends HttpServlet {
-	private static final long serialVersionUID = 302918711430864140L;
-
-	public final static String PARAM_EXPIRY_DATE = "expiryDate";
-	public final static String PARAM_TOKEN = "token";
-
-	private final static int DEFAULT_HOURS = 24;
-
-	private CmsUserManager userManager;
-	private ObjectMapper objectMapper = new ObjectMapper();
-
-	@Override
-	protected void doPost(HttpServletRequest request, HttpServletResponse response)
-			throws ServletException, IOException {
-		LoginContext lc = null;
-		try {
-			lc = new LoginContext(NodeConstants.LOGIN_CONTEXT_USER, new HttpRequestCallbackHandler(request, response) {
-				public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
-					for (Callback callback : callbacks) {
-						if (callback instanceof HttpRequestCallback) {
-							((HttpRequestCallback) callback).setRequest(request);
-							((HttpRequestCallback) callback).setResponse(response);
-						}
-					}
-				}
-			});
-			lc.login();
-		} catch (LoginException e) {
-			// ignore
-		}
-
-		try {
-			Subject subject = lc.getSubject();
-			Authorization authorization = extractFrom(subject.getPrivateCredentials(Authorization.class));
-			String token = UUID.randomUUID().toString();
-			String expiryDateStr = request.getParameter(PARAM_EXPIRY_DATE);
-			ZonedDateTime expiryDate;
-			if (expiryDateStr != null) {
-				expiryDate = NamingUtils.ldapDateToZonedDateTime(expiryDateStr);
-			} else {
-				expiryDate = ZonedDateTime.now().plusHours(DEFAULT_HOURS);
-				expiryDateStr = NamingUtils.instantToLdapDate(expiryDate);
-			}
-			userManager.addAuthToken(authorization.getName(), token, expiryDate);
-
-			TokenDescriptor tokenDescriptor = new TokenDescriptor();
-			tokenDescriptor.setUsername(authorization.getName());
-			tokenDescriptor.setToken(token);
-			tokenDescriptor.setExpiryDate(expiryDateStr);
-//			tokenDescriptor.setRoles(Collections.unmodifiableSortedSet(new TreeSet<>(Arrays.asList(roles))));
-
-			response.setContentType("application/json");
-			JsonGenerator jg = objectMapper.getFactory().createGenerator(response.getWriter());
-			jg.writeObject(tokenDescriptor);
-		} catch (Exception e) {
-			new CmsExceptionsChain(e).writeAsJson(objectMapper, response);
-		}
-	}
-
-	@Override
-	protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
-		// temporarily wrap POST for ease of testing
-		doPost(req, resp);
-	}
-
-	@Override
-	protected void doDelete(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
-		try {
-			String token = req.getParameter(PARAM_TOKEN);
-			userManager.expireAuthToken(token);
-		} catch (Exception e) {
-			new CmsExceptionsChain(e).writeAsJson(objectMapper, resp);
-		}
-	}
-
-	protected <T> T extractFrom(Set<T> creds) {
-		if (creds.size() > 0)
-			return creds.iterator().next();
-		else
-			return null;
-	}
-
-	public void setUserManager(CmsUserManager userManager) {
-		this.userManager = userManager;
-	}
-}