it.greenvulcano.gvesb.api.security.JaxRsIdentityInfo.java Source code

Introduction

Here is the source code for it.greenvulcano.gvesb.api.security.JaxRsIdentityInfo.java

Source

/*******************************************************************************
 * Copyright (c) 2009, 2016 GreenVulcano ESB Open Source Project.
 * All rights reserved.
 *
 * This file is part of GreenVulcano ESB.
 *
 * GreenVulcano ESB is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * GreenVulcano ESB is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with GreenVulcano ESB. If not, see <http://www.gnu.org/licenses/>.
 *******************************************************************************/
package it.greenvulcano.gvesb.api.security;

import java.security.Principal;
import java.util.stream.Collectors;

import javax.ws.rs.core.SecurityContext;

import org.apache.commons.net.util.SubnetUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import it.greenvulcano.gvesb.iam.modules.Identity;
import it.greenvulcano.gvesb.identity.impl.BaseIdentityInfo;

public class JaxRsIdentityInfo extends BaseIdentityInfo {

    private static final Logger logger = LoggerFactory.getLogger(JaxRsIdentityInfo.class);

    private final SecurityContext securityContext;
    private final String remoteAddress;

    public JaxRsIdentityInfo(SecurityContext securityContext, Identity identity, String remoteAddress) {
        super();
        this.securityContext = securityContext;
        this.remoteAddress = remoteAddress;

        getAttributes().put("id", identity.getId().toString());
        getAttributes().put("roles", identity.getRoles().stream().collect(Collectors.joining(",")));
    }

    @Override
    public String getName() {
        Principal p = securityContext.getUserPrincipal();
        return (p != null ? p.getName() : "NONE");
    }

    @Override
    protected boolean subIsInRole(String role) {
        if (role == null) {
            return false;
        }
        boolean res = securityContext.isUserInRole(role);
        if (debug) {
            logger.debug("JaxRsIdentityInfo[" + getName() + "]: Role[" + role + "] -> " + res);
        }
        return res;
    }

    @Override
    protected boolean subMatchAddress(String address) {
        if (address == null) {
            return false;
        }
        boolean res = address.equals(remoteAddress);
        if (debug) {
            logger.debug("JaxRsIdentityInfo[" + getName() + "]: Address[" + address + ": " + remoteAddress + "] -> "
                    + res);
        }
        return res;
    }

    @Override
    protected boolean subMatchAddressMask(String addressMask) {
        boolean matches = false;

        if (addressMask != null) {

            SubnetUtils subnet = new SubnetUtils(addressMask);
            subnet.setInclusiveHostCount(true);

            matches = subnet.getInfo().isInRange(remoteAddress);
            if (debug) {
                logger.debug("JaxRsIdentityInfo[" + getName() + "]: AddressMask["
                        + subnet.getInfo().getCidrSignature() + ": " + remoteAddress + "] -> " + matches);
            }

        }
        return matches;
    }

    @Override
    public String toString() {
        return "JaxRsIdentityInfo[" + getName() + "]";
    }

}