architecture.user.security.authentication.impl.DefaultAuthenticationProvider.java Source code

Introduction

Here is the source code for architecture.user.security.authentication.impl.DefaultAuthenticationProvider.java

Source

/*
 * Copyright 2016 donghyuck
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package architecture.user.security.authentication.impl;

import java.util.Collection;

import javax.servlet.http.HttpServletRequest;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.context.SecurityContext;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.context.request.ServletRequestAttributes;

import architecture.common.user.Company;
import architecture.common.user.CompanyTemplate;
import architecture.common.user.User;
import architecture.common.user.authentication.AnonymousUser;
import architecture.common.user.authentication.AuthToken;
import architecture.common.util.StringUtils;
import architecture.common.util.TextUtils;
import architecture.user.security.authentication.AuthenticationProvider;
import architecture.user.security.spring.userdetails.ExtendedUserDetails;
import architecture.user.util.CompanyUtils;

public class DefaultAuthenticationProvider implements AuthenticationProvider {

    private static final Log log = LogFactory.getLog(DefaultAuthenticationProvider.class);

    public Authentication getAuthentication() {
        SecurityContext context = SecurityContextHolder.getContext();
        Authentication authen = context.getAuthentication();
        return authen;
    }

    public User getUser() {
        try {
            Authentication authen = getAuthentication();
            Object obj = authen.getPrincipal();
            if (obj instanceof ExtendedUserDetails)
                return ((ExtendedUserDetails) obj).getUser();
        } catch (Exception ignore) {
        }
        return createAnonymousUser();
    }

    public AuthToken getAuthToken() {
        try {
            Authentication authen = getAuthentication();
            Object obj = authen.getPrincipal();
            if (obj instanceof AuthToken)
                return (AuthToken) obj;
        } catch (Exception ignore) {
        }
        return createAnonymousUser();
    }

    public boolean isSystemAdmin() {
        return false;
    }

    protected AnonymousUser createAnonymousUser() {

        if (!CompanyUtils.isAllowedCompanyForAnonymous()) {
            return new AnonymousUser(new CompanyTemplate());
        }

        if (CompanyUtils.isAllowedGetByDomainName()) {
            try {
                String localName = getLocalName();
                if (log.isDebugEnabled()) {
                    log.debug("isValidIpAddress:" + TextUtils.isValidIpAddress(localName));
                    log.debug("isValidHostname:" + TextUtils.isValidHostname(localName));
                }
                if (StringUtils.isNotEmpty(localName) && !TextUtils.isValidIpAddress(localName)
                        && TextUtils.isValidHostname(localName)) {
                    Company company = CompanyUtils.getCompanyByDomainName(localName);
                    return new AnonymousUser(company);
                }
            } catch (Exception ignore) {
                log.warn(ignore);
            }
        }

        try {
            return new AnonymousUser(CompanyUtils.getDefaultCompany());
        } catch (Exception e) {
            log.warn(e);
            return new AnonymousUser();
        }
    }

    protected String getLocalName() {
        HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder.currentRequestAttributes())
                .getRequest();
        return request.getLocalName();
    }

    private boolean isGranted(String role) {

        Authentication auth = getAuthentication();
        if ((auth == null) || (auth.getPrincipal() == null)) {
            return false;
        }
        Collection<? extends GrantedAuthority> authorities = auth.getAuthorities();
        if (authorities == null) {
            return false;
        }
        for (GrantedAuthority grantedAuthority : authorities) {
            if (role.equals(grantedAuthority.getAuthority())) {
                return true;
            }
        }
        return false;
    }

    public boolean isUserInRole(String role) {
        return isGranted(role);
    }

}