X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=security%2Fruntime%2Forg.argeo.security.ldap%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2Fldap%2FArgeoLdapUserDetailsManager.java;fp=security%2Fruntime%2Forg.argeo.security.ldap%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2Fldap%2FArgeoLdapUserDetailsManager.java;h=040d650d7bba1c085aef3c379ffd1ba85fd601f1;hb=fb4f7c451ea7d9025f7cf7fe032020f229df794a;hp=54ef836a077bde2d852cb346bb6f95127b756868;hpb=5266ec50ddbf3247a5033d98a1dbceec6673a5b8;p=lgpl%2Fargeo-commons.git

diff --git a/security/runtime/org.argeo.security.ldap/src/main/java/org/argeo/security/ldap/ArgeoLdapUserDetailsManager.java b/security/runtime/org.argeo.security.ldap/src/main/java/org/argeo/security/ldap/ArgeoLdapUserDetailsManager.java
index 54ef836a0..040d650d7 100644
--- a/security/runtime/org.argeo.security.ldap/src/main/java/org/argeo/security/ldap/ArgeoLdapUserDetailsManager.java
+++ b/security/runtime/org.argeo.security.ldap/src/main/java/org/argeo/security/ldap/ArgeoLdapUserDetailsManager.java
@@ -2,14 +2,27 @@ package org.argeo.security.ldap;
 
 import java.security.NoSuchAlgorithmException;
 import java.security.SecureRandom;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.Iterator;
+import java.util.List;
 import java.util.Random;
+import java.util.Set;
+import java.util.TreeSet;
 
+import org.argeo.security.UserAdminDao;
+import org.argeo.security.UserAdminService;
 import org.springframework.ldap.core.ContextSource;
+import org.springframework.security.GrantedAuthority;
 import org.springframework.security.providers.encoding.PasswordEncoder;
+import org.springframework.security.userdetails.UserDetails;
 import org.springframework.security.userdetails.ldap.LdapUserDetailsManager;
 
 /** Extends {@link LdapUserDetailsManager} by adding password encoding support. */
-public class ArgeoLdapUserDetailsManager extends LdapUserDetailsManager {
+public class ArgeoLdapUserDetailsManager extends LdapUserDetailsManager
+		implements UserAdminService {
+	private String superUsername = "root";
+	private UserAdminDao userAdminDao;
 	private PasswordEncoder passwordEncoder;
 	private final Random random;
 
@@ -31,6 +44,46 @@ public class ArgeoLdapUserDetailsManager extends LdapUserDetailsManager {
 		super.changePassword(oldPassword, encodePassword(newPassword));
 	}
 
+	public void newRole(String role) {
+		userAdminDao.createRole(role, superUsername);
+	}
+
+	public void synchronize() {
+		for (String username : userAdminDao.listUsers())
+			loadUserByUsername(username);
+		// TODO: find a way to remove from JCR
+	}
+
+	public void deleteRole(String role) {
+		userAdminDao.deleteRole(role);
+	}
+
+	public Set<String> listUsersInRole(String role) {
+		Set<String> lst = new TreeSet<String>(
+				userAdminDao.listUsersInRole(role));
+		Iterator<String> it = lst.iterator();
+		while (it.hasNext()) {
+			if (it.next().equals(superUsername)) {
+				it.remove();
+				break;
+			}
+		}
+		return lst;
+	}
+
+	public List<String> listUserRoles(String username) {
+		UserDetails userDetails = loadUserByUsername(username);
+		List<String> roles = new ArrayList<String>();
+		for (GrantedAuthority ga : userDetails.getAuthorities()) {
+			roles.add(ga.getAuthority());
+		}
+		return Collections.unmodifiableList(roles);
+	}
+
+	public Set<String> listEditableRoles() {
+		return userAdminDao.listEditableRoles();
+	}
+
 	protected String encodePassword(String password) {
 		if (!password.startsWith("{")) {
 			byte[] salt = new byte[16];
@@ -45,4 +98,12 @@ public class ArgeoLdapUserDetailsManager extends LdapUserDetailsManager {
 		this.passwordEncoder = passwordEncoder;
 	}
 
+	public void setSuperUsername(String superUsername) {
+		this.superUsername = superUsername;
+	}
+
+	public void setUserAdminDao(UserAdminDao userAdminDao) {
+		this.userAdminDao = userAdminDao;
+	}
+
 }