X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Finternal%2Fauth%2FOsJcrAuthenticationProvider.java;fp=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Finternal%2Fauth%2FOsJcrAuthenticationProvider.java;h=0000000000000000000000000000000000000000;hb=86140b8db15a11cfd942892eface6a4f90329a41;hp=a394baf1e598c5a9ee44e35dfad024b90bfd3dff;hpb=2b3904582518de706357fd2a8216a47ca77dfc39;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/auth/OsJcrAuthenticationProvider.java b/org.argeo.cms/src/org/argeo/cms/internal/auth/OsJcrAuthenticationProvider.java
deleted file mode 100644
index a394baf1e..000000000
--- a/org.argeo.cms/src/org/argeo/cms/internal/auth/OsJcrAuthenticationProvider.java
+++ /dev/null
@@ -1,119 +0,0 @@
-/*
- * Copyright (C) 2007-2012 Argeo GmbH
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *         http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.argeo.cms.internal.auth;
-
-import java.util.Collection;
-
-import javax.jcr.Node;
-import javax.jcr.Repository;
-import javax.jcr.RepositoryException;
-import javax.jcr.Session;
-
-import org.argeo.ArgeoException;
-import org.argeo.cms.internal.useradmin.SimpleJcrSecurityModel;
-import org.argeo.jcr.JcrUtils;
-import org.argeo.security.OsAuthenticationToken;
-import org.argeo.security.SecurityUtils;
-import org.argeo.security.core.OsAuthenticationProvider;
-import org.argeo.security.jcr.JcrUserDetails;
-import org.springframework.security.authentication.BadCredentialsException;
-import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
-import org.springframework.security.core.Authentication;
-import org.springframework.security.core.AuthenticationException;
-import org.springframework.security.core.GrantedAuthority;
-import org.springframework.security.core.userdetails.UserDetails;
-
-/** Relies on OS to authenticate and additionally setup JCR */
-public class OsJcrAuthenticationProvider extends OsAuthenticationProvider {
-	private Repository repository;
-	private Session nodeSession;
-
-	private UserDetails userDetails;
-	private JcrSecurityModel jcrSecurityModel = new SimpleJcrSecurityModel();
-
-	private final static String JVM_OSUSER = System.getProperty("user.name");
-
-	public void init() {
-		try {
-			nodeSession = repository.login();
-		} catch (RepositoryException e) {
-			throw new ArgeoException("Cannot initialize", e);
-		}
-	}
-
-	public void destroy() {
-		JcrUtils.logoutQuietly(nodeSession);
-	}
-
-	public Authentication authenticate(Authentication authentication)
-			throws AuthenticationException {
-		if (authentication instanceof UsernamePasswordAuthenticationToken) {
-			// deal with remote access to internal server
-			// FIXME very primitive and unsecure at this sSession adminSession
-			// =tage
-			// consider using the keyring for username / password authentication
-			// or certificate
-			UsernamePasswordAuthenticationToken upat = (UsernamePasswordAuthenticationToken) authentication;
-			if (!upat.getPrincipal().toString().equals(JVM_OSUSER))
-				throw new BadCredentialsException("Wrong credentials");
-			UsernamePasswordAuthenticationToken authen = new UsernamePasswordAuthenticationToken(
-					authentication.getPrincipal(),
-					authentication.getCredentials(), getBaseAuthorities());
-			authen.setDetails(userDetails);
-			return authen;
-		} else if (authentication instanceof OsAuthenticationToken) {
-			OsAuthenticationToken authen = (OsAuthenticationToken) super
-					.authenticate(authentication);
-			try {
-				// WARNING: at this stage we assume that the java properties
-				// will have the same value
-				Collection<? extends GrantedAuthority> authorities = getBaseAuthorities();
-				String username = JVM_OSUSER;
-				Node userProfile = jcrSecurityModel.sync(nodeSession, username,
-						SecurityUtils.authoritiesToStringList(authorities));
-				JcrUserDetails.checkAccountStatus(userProfile);
-
-				userDetails = new JcrUserDetails(userProfile, authen
-						.getCredentials().toString(), authorities);
-				authen.setDetails(userDetails);
-				return authen;
-			} catch (RepositoryException e) {
-				JcrUtils.discardQuietly(nodeSession);
-				throw new ArgeoException(
-						"Unexpected exception when synchronizing OS and JCR security ",
-						e);
-			}
-		} else {
-			throw new ArgeoException("Unsupported authentication "
-					+ authentication.getClass());
-		}
-	}
-
-	public void setRepository(Repository repository) {
-		this.repository = repository;
-	}
-
-	public void setJcrSecurityModel(JcrSecurityModel jcrSecurityModel) {
-		this.jcrSecurityModel = jcrSecurityModel;
-	}
-
-	@SuppressWarnings("rawtypes")
-	public boolean supports(Class authentication) {
-		return OsAuthenticationToken.class.isAssignableFrom(authentication)
-				|| UsernamePasswordAuthenticationToken.class
-						.isAssignableFrom(authentication);
-	}
-}
\ No newline at end of file