org.codice.ddf.security.servlet.logout.LogoutServiceImpl.java Source code

Introduction

Here is the source code for org.codice.ddf.security.servlet.logout.LogoutServiceImpl.java

Source

/**
 * Copyright (c) Codice Foundation
 *
 * <p>This is free software: you can redistribute it and/or modify it under the terms of the GNU
 * Lesser General Public License as published by the Free Software Foundation, either version 3 of
 * the License, or any later version.
 *
 * <p>This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
 * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Lesser General Public License for more details. A copy of the GNU Lesser General Public
 * License is distributed along with this program and can be found at
 * <http://www.gnu.org/licenses/lgpl.html>.
 */
package org.codice.ddf.security.servlet.logout;

import static org.boon.Boon.toJson;

import ddf.action.Action;
import ddf.action.ActionProvider;
import ddf.security.SecurityConstants;
import ddf.security.SubjectUtils;
import ddf.security.common.SecurityTokenHolder;
import ddf.security.http.SessionFactory;
import ddf.security.service.SecurityManager;
import ddf.security.service.SecurityServiceException;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import org.apache.commons.lang3.StringUtils;
import org.apache.cxf.ws.security.tokenstore.SecurityToken;
import org.apache.shiro.subject.Subject;
import org.codice.ddf.security.logout.service.LogoutService;

public class LogoutServiceImpl implements LogoutService {

    private List<ActionProvider> logoutActionProviders;

    private SessionFactory httpSessionFactory;

    private SecurityManager securityManager;

    @Override
    public String getActionProviders(HttpServletRequest request) throws SecurityServiceException {

        HttpSession session = httpSessionFactory.getOrCreateSession(request);
        Map<String, SecurityToken> realmTokenMap = ((SecurityTokenHolder) session
                .getAttribute(SecurityConstants.SAML_ASSERTION)).getRealmTokenMap();
        Map<String, Subject> realmSubjectMap = new HashMap<>();

        for (Map.Entry<String, SecurityToken> entry : realmTokenMap.entrySet()) {
            realmSubjectMap.put(entry.getKey(), securityManager.getSubject(entry.getValue()));
        }

        List<Map<String, String>> realmToPropMaps = new ArrayList<>();

        for (ActionProvider actionProvider : logoutActionProviders) {
            Action action = actionProvider.getAction(realmSubjectMap);
            if (action != null) {
                String realm = StringUtils.substringAfterLast(action.getId(), ".");

                if (realmTokenMap.get(realm) != null) {
                    Map<String, String> actionProperties = new HashMap<>();
                    String displayName = SubjectUtils.getName(realmSubjectMap.get(realm), "", true);

                    actionProperties.put("title", action.getTitle());
                    actionProperties.put("realm", realm);
                    actionProperties.put("auth", displayName);
                    actionProperties.put("description", action.getDescription());
                    actionProperties.put("url", action.getUrl().toString());
                    realmToPropMaps.add(actionProperties);
                }
            }
        }

        return toJson(realmToPropMaps);
    }

    public void setHttpSessionFactory(SessionFactory httpSessionFactory) {
        this.httpSessionFactory = httpSessionFactory;
    }

    public void setLogoutActionProviders(List<ActionProvider> logoutActionProviders) {
        this.logoutActionProviders = logoutActionProviders;
    }

    public void setSecurityManager(SecurityManager securityManager) {
        this.securityManager = securityManager;
    }
}