org.codice.ddf.security.servlet.logout.LogoutService.java Source code

Introduction

Here is the source code for org.codice.ddf.security.servlet.logout.LogoutService.java

Source

/**
 * Copyright (c) Codice Foundation
 * <p/>
 * This is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser
 * General Public License as published by the Free Software Foundation, either version 3 of the
 * License, or any later version.
 * <p/>
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without
 * even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details. A copy of the GNU Lesser General Public License
 * is distributed along with this program and can be found at
 * <http://www.gnu.org/licenses/lgpl.html>.
 */
package org.codice.ddf.security.servlet.logout;

import static org.boon.Boon.toJson;

import java.io.ByteArrayInputStream;
import java.nio.charset.StandardCharsets;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.Response;

import org.apache.commons.lang3.StringUtils;
import org.apache.cxf.common.util.CollectionUtils;
import org.apache.cxf.ws.security.tokenstore.SecurityToken;
import org.apache.shiro.subject.Subject;

import ddf.action.Action;
import ddf.action.ActionProvider;
import ddf.security.SecurityConstants;
import ddf.security.SubjectUtils;
import ddf.security.common.SecurityTokenHolder;
import ddf.security.http.SessionFactory;
import ddf.security.service.SecurityManager;
import ddf.security.service.SecurityServiceException;

@Path("/")
public class LogoutService {

    private List<ActionProvider> logoutActionProviders;

    private SessionFactory httpSessionFactory;

    private SecurityManager securityManager;

    @GET
    @Path("/actions")
    public Response getActionProviders(@Context HttpServletRequest request) throws SecurityServiceException {

        HttpSession session = httpSessionFactory.getOrCreateSession(request);
        Map<String, SecurityToken> realmTokenMap = ((SecurityTokenHolder) session
                .getAttribute(SecurityConstants.SAML_ASSERTION)).getRealmTokenMap();
        Map<String, Subject> realmSubjectMap = new HashMap<>();

        for (Map.Entry<String, SecurityToken> entry : realmTokenMap.entrySet()) {
            realmSubjectMap.put(entry.getKey(), securityManager.getSubject(entry.getValue()));

        }

        List<Map<String, String>> realmToPropMaps = new ArrayList<>();

        for (ActionProvider actionProvider : logoutActionProviders) {
            List<Action> actions = actionProvider.getActions(realmSubjectMap);
            if (!CollectionUtils.isEmpty(actions)) {
                for (Action action : actions) {
                    String realm = StringUtils.substringAfterLast(action.getId(), ".");

                    //if the user is logged in and isn't a guest, add them
                    if (realmTokenMap.get(realm) != null) {
                        Map<String, String> actionProperties = new HashMap<>();
                        String displayName = SubjectUtils.getName(realmSubjectMap.get(realm), "", true);

                        if (displayName != null && !displayName.equals(SubjectUtils.GUEST_DISPLAY_NAME)) {
                            actionProperties.put("title", action.getTitle());
                            actionProperties.put("realm", realm);
                            actionProperties.put("auth", displayName);
                            actionProperties.put("description", action.getDescription());
                            actionProperties.put("url", action.getUrl().toString());
                            realmToPropMaps.add(actionProperties);
                        }
                    }
                }
            }
        }

        return Response.ok(new ByteArrayInputStream(toJson(realmToPropMaps).getBytes(StandardCharsets.UTF_8)))
                .build();
    }

    public void setHttpSessionFactory(SessionFactory httpSessionFactory) {
        this.httpSessionFactory = httpSessionFactory;
    }

    public void setLogoutActionProviders(List<ActionProvider> logoutActionProviders) {
        this.logoutActionProviders = logoutActionProviders;
    }

    public void setSecurityManager(SecurityManager securityManager) {
        this.securityManager = securityManager;
    }

}