com.noelios.restlet.ext.oauth.MemoryOAuthProvider.java Source code

Introduction

Here is the source code for com.noelios.restlet.ext.oauth.MemoryOAuthProvider.java

Source

/**
 * Copyright 2005-2008 Noelios Technologies.
 * 
 * The contents of this file are subject to the terms of the following open
 * source licenses: LGPL 3.0 or LGPL 2.1 or CDDL 1.0 (the "Licenses"). You can
 * select the license that you prefer but you may not use this file except in
 * compliance with one of these Licenses.
 * 
 * You can obtain a copy of the LGPL 3.0 license at
 * http://www.gnu.org/licenses/lgpl-3.0.html
 * 
 * You can obtain a copy of the LGPL 2.1 license at
 * http://www.gnu.org/licenses/lgpl-2.1.html
 * 
 * You can obtain a copy of the CDDL 1.0 license at
 * http://www.sun.com/cddl/cddl.html
 * 
 * See the Licenses for the specific language governing permissions and
 * limitations under the Licenses.
 * 
 * Alternatively, you can obtain a royaltee free commercial license with less
 * limitations, transferable or non-transferable, directly at
 * http://www.noelios.com/products/restlet-engine
 * 
 * Restlet is a registered trademark of Noelios Technologies.
 */

package com.noelios.restlet.ext.oauth;

import java.io.IOException;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

import net.oauth.OAuthAccessor;
import net.oauth.OAuthConsumer;
import net.oauth.OAuthMessage;

import org.apache.commons.codec.digest.DigestUtils;
import org.restlet.Context;

/**
 * Provider with a in-memory backing store.
 * 
 * @author Adam Rosien
 */
public class MemoryOAuthProvider extends OAuthProvider {

    // TODO: Mutexes.
    // TODO: LRU collections.
    private final Map<String, OAuthConsumer> consumers = new HashMap<String, OAuthConsumer>();

    private final Set<OAuthAccessor> tokens = new HashSet<OAuthAccessor>();

    /**
     * Constructor.
     */
    public MemoryOAuthProvider() {
    }

    @Override
    public void addConsumer(String key, OAuthConsumer consumer) {
        Context.getCurrentLogger().fine("Adding consumer " + consumer);
        this.consumers.put(key, consumer);
    }

    @Override
    public void generateAccessToken(OAuthAccessor accessor) {
        // generate oauth_token and oauth_secret
        final String consumer_key = (String) accessor.consumer.getProperty("name");

        // generate token and secret based on consumer_key
        // for now use md5 of name + current time as token
        final String token_data = consumer_key + System.nanoTime();
        final String token = DigestUtils.md5Hex(token_data);

        // first remove the accessor from cache
        this.tokens.remove(accessor);

        accessor.requestToken = null;
        accessor.accessToken = token;

        Context.getCurrentLogger().fine("Adding access token " + accessor);

        // update token in local cache
        this.tokens.add(accessor);
    }

    @Override
    public void generateRequestToken(OAuthAccessor accessor) {
        // generate oauth_token and oauth_secret
        final String consumer_key = (String) accessor.consumer.getProperty("name");
        // generate token and secret based on consumer_key

        // for now use md5 of name + current time as token
        final String token_data = consumer_key + System.nanoTime();
        final String token = DigestUtils.md5Hex(token_data);
        // for now use md5 of name + current time + token as secret
        final String secret_data = consumer_key + System.nanoTime() + token;
        final String secret = DigestUtils.md5Hex(secret_data);

        accessor.requestToken = token;
        accessor.tokenSecret = secret;
        accessor.accessToken = null;

        Context.getCurrentLogger().fine("Adding request token " + accessor);

        // add to the local cache
        this.tokens.add(accessor);
    }

    @Override
    public OAuthAccessor getAccessor(OAuthMessage requestMessage) {
        String consumer_token = null;
        try {
            consumer_token = requestMessage.getToken();
        } catch (IOException e) {
            return null;
        }

        if (consumer_token == null) {
            return null;
        }

        OAuthAccessor accessor = null;

        // TODO: This is slow.
        for (final OAuthAccessor a : this.tokens) {
            if (a.requestToken != null) {
                if (a.requestToken.equals(consumer_token)) {
                    accessor = a;
                    break;
                }
            } else if (a.accessToken != null) {
                if (a.accessToken.equals(consumer_token)) {
                    accessor = a;
                    break;
                }
            }
        }

        return accessor;
    }

    @Override
    public OAuthConsumer getConsumer(OAuthMessage requestMessage) {
        try {
            final String consumer_key = requestMessage.getConsumerKey();
            return this.consumers.get(consumer_key);
        } catch (IOException e) {
            return null;
        }
    }

    @Override
    public void markAsAuthorized(OAuthAccessor accessor, String userId) {
        // first remove the accessor from cache
        this.tokens.remove(accessor);

        accessor.setProperty("user", userId);
        accessor.setProperty("authorized", Boolean.TRUE);

        Context.getCurrentLogger().fine("Authorizing request token " + accessor + " for userId " + userId);

        // update token in local cache
        this.tokens.add(accessor);
    }

}