org.geosdi.geoplatform.connector.server.security.PreemptiveSecurityConnector.java Source code

Introduction

Here is the source code for org.geosdi.geoplatform.connector.server.security.PreemptiveSecurityConnector.java

Source

/*
 *  geo-platform
 *  Rich webgis framework
 *  http://geo-platform.org
 * ====================================================================
 *
 * Copyright (C) 2008-2012 geoSDI Group (CNR IMAA - Potenza - ITALY).
 *
 * This program is free software: you can redistribute it and/or modify it 
 * under the terms of the GNU General Public License as published by 
 * the Free Software Foundation, either version 3 of the License, or 
 * (at your option) any later version. This program is distributed in the 
 * hope that it will be useful, but WITHOUT ANY WARRANTY; without 
 * even the implied warranty of MERCHANTABILITY or FITNESS FOR 
 * A PARTICULAR PURPOSE. See the GNU General Public License 
 * for more details. You should have received a copy of the GNU General 
 * Public License along with this program. If not, see http://www.gnu.org/licenses/ 
 *
 * ====================================================================
 *
 * Linking this library statically or dynamically with other modules is 
 * making a combined work based on this library. Thus, the terms and 
 * conditions of the GNU General Public License cover the whole combination. 
 * 
 * As a special exception, the copyright holders of this library give you permission 
 * to link this library with independent modules to produce an executable, regardless 
 * of the license terms of these independent modules, and to copy and distribute 
 * the resulting executable under terms of your choice, provided that you also meet, 
 * for each linked independent module, the terms and conditions of the license of 
 * that module. An independent module is a module which is not derived from or 
 * based on this library. If you modify this library, you may extend this exception 
 * to your version of the library, but you are not obligated to do so. If you do not 
 * wish to do so, delete this exception statement from your version. 
 *
 */
package org.geosdi.geoplatform.connector.server.security;

import java.io.IOException;
import java.net.URI;
import org.apache.http.HttpHost;
import org.apache.http.HttpResponse;
import org.apache.http.client.AuthCache;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.methods.HttpUriRequest;
import org.apache.http.client.protocol.ClientContext;
import org.apache.http.impl.auth.AuthSchemeBase;
import org.apache.http.impl.client.BasicAuthCache;
import org.apache.http.protocol.BasicHttpContext;
import org.apache.http.protocol.HttpContext;
import org.geosdi.geoplatform.connector.server.request.GPConnectorRequest;

/**
 *
 * @author Giuseppe La Scaleia - CNR IMAA geoSDI Group
 * @email giuseppe.lascaleia@geosdi.org
 */
public abstract class PreemptiveSecurityConnector extends AbstractSecurityConnector {

    private HttpHost httpHost;
    protected AuthCache authCache;
    protected HttpContext localcontext = new BasicHttpContext();

    public PreemptiveSecurityConnector(String theUserName, String thePassword) {
        super(theUserName, thePassword);
    }

    @Override
    public <C extends GPConnectorRequest, H extends HttpUriRequest> HttpResponse secure(C connectorRequest,
            H httpRequest) throws ClientProtocolException, IOException {
        super.bindCredentials(connectorRequest.getCredentialsProvider(), connectorRequest.getURI());

        HttpHost targetHost = this.extractHost(connectorRequest.getURI());

        this.preparePreemptiveParameters(targetHost);

        return connectorRequest.getClientConnection().execute(targetHost, httpRequest, localcontext);
    }

    protected void preparePreemptiveParameters(HttpHost targetHost) {
        if (this.authCache == null) {
            this.authCache = new BasicAuthCache();
            this.authCache.put(targetHost, createScheme());
            this.localcontext.setAttribute(ClientContext.AUTH_CACHE, this.authCache);
        }
    }

    protected HttpHost extractHost(URI uri) {
        if (this.httpHost == null) {
            this.httpHost = new HttpHost(uri.getHost(), this.retrieveNoSetPort(uri), uri.getScheme());
        }
        return this.httpHost;
    }

    /**
     * Create an instance for {@link AuthSchemeBase} Class
     *
     * @return AuthSchemeBase
     */
    protected abstract AuthSchemeBase createScheme();

    /**
     * If the URI don't have e port, retrieve the standard port wrt scheme
     * ["http" or "https"].
     */
    private int retrieveNoSetPort(URI uri) {
        int port = uri.getPort();
        if (port > 0) {
            return port;
        }

        String scheme = uri.getScheme();
        if ("https".equals(scheme)) {
            port = 443;
        } else if ("http".equals(scheme)) {
            port = 80; // TODO Test Catalog with credentials on port 80 (insert the URL without specifying the port)
        } else {
            throw new IllegalArgumentException("Scheme don't recognize");
        }

        return port;
    }
}