X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=security%2Fruntime%2Forg.argeo.security.ldap%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2Fldap%2Fjcr%2FJcrUserDetailsContextMapper.java;fp=security%2Fruntime%2Forg.argeo.security.ldap%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2Fldap%2Fjcr%2FJcrUserDetailsContextMapper.java;h=9476658e84f901e175d347493d87d4c1e36bc8bd;hb=f522286115b9f19befd40d62949630aa7f49f6a9;hp=0000000000000000000000000000000000000000;hpb=59cf55b9e72ded7dd9ff2d3dc5cf04bf28763775;p=lgpl%2Fargeo-commons.git

diff --git a/security/runtime/org.argeo.security.ldap/src/main/java/org/argeo/security/ldap/jcr/JcrUserDetailsContextMapper.java b/security/runtime/org.argeo.security.ldap/src/main/java/org/argeo/security/ldap/jcr/JcrUserDetailsContextMapper.java
new file mode 100644
index 000000000..9476658e8
--- /dev/null
+++ b/security/runtime/org.argeo.security.ldap/src/main/java/org/argeo/security/ldap/jcr/JcrUserDetailsContextMapper.java
@@ -0,0 +1,79 @@
+package org.argeo.security.ldap.jcr;
+
+import java.util.UUID;
+
+import javax.jcr.Node;
+import javax.jcr.Repository;
+import javax.jcr.RepositoryException;
+import javax.jcr.Session;
+
+import org.argeo.ArgeoException;
+import org.argeo.jcr.ArgeoNames;
+import org.argeo.jcr.JcrUtils;
+import org.argeo.security.jcr.JcrUserDetails;
+import org.springframework.ldap.core.DirContextAdapter;
+import org.springframework.ldap.core.DirContextOperations;
+import org.springframework.security.GrantedAuthority;
+import org.springframework.security.userdetails.UserDetails;
+import org.springframework.security.userdetails.ldap.UserDetailsContextMapper;
+
+/** Read only mapping from LDAP to user details */
+public class JcrUserDetailsContextMapper implements UserDetailsContextMapper,
+		ArgeoNames {
+	/** Admin session on the security workspace */
+	private Session securitySession;
+	private Repository repository;
+	private String securityWorkspace = "security";
+
+	public void init() {
+		try {
+			securitySession = repository.login(securityWorkspace);
+		} catch (RepositoryException e) {
+			JcrUtils.logoutQuietly(securitySession);
+			throw new ArgeoException(
+					"Cannot initialize LDAP/JCR user details context mapper", e);
+		}
+	}
+
+	public void destroy() {
+		JcrUtils.logoutQuietly(securitySession);
+	}
+
+	/** Called during authentication in order to retrieve user details */
+	public UserDetails mapUserFromContext(final DirContextOperations ctx,
+			final String username, GrantedAuthority[] authorities) {
+		if (ctx == null)
+			throw new ArgeoException("No LDAP information for user " + username);
+		Node userHome = JcrUtils.getUserHome(securitySession, username);
+		if (userHome == null)
+			throw new ArgeoException("No JCR information for user " + username);
+
+		// password
+		// SortedSet<?> passwordAttributes = ctx
+		// .getAttributeSortedStringSet(passwordAttribute);
+		// String password;
+		// if (passwordAttributes == null || passwordAttributes.size() == 0) {
+		// throw new ArgeoException("No password found for user " + username);
+		// } else {
+		// byte[] arr = (byte[]) passwordAttributes.first();
+		// password = new String(arr);
+		// // erase password
+		// Arrays.fill(arr, (byte) 0);
+		// }
+
+		try {
+			// we don't have access to password, so let's not pretend
+			String password = UUID.randomUUID().toString();
+			return new JcrUserDetails(userHome.getNode(ARGEO_PROFILE),
+					password, authorities);
+		} catch (RepositoryException e) {
+			throw new ArgeoException("Cannot retrieve user details for "
+					+ username, e);
+		}
+	}
+
+	public void mapUserToContext(UserDetails user, final DirContextAdapter ctx) {
+		throw new UnsupportedOperationException("LDAP access is read-only");
+	}
+
+}