org.italiangrid.storm.webdav.authz.VOMSPreAuthDetailsSource.java Source code

Introduction

Here is the source code for org.italiangrid.storm.webdav.authz.VOMSPreAuthDetailsSource.java

Source

/**
 * Copyright (c) Istituto Nazionale di Fisica Nucleare, 2014.
 * 
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not
 * use this file except in compliance with the License. You may obtain a copy of
 * the License at
 * 
 * http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 * License for the specific language governing permissions and limitations under
 * the License.
 */
package org.italiangrid.storm.webdav.authz;

import java.util.ArrayList;
import java.util.Collection;
import java.util.Collections;
import java.util.HashSet;
import java.util.List;
import java.util.Set;

import javax.servlet.http.HttpServletRequest;

import org.italiangrid.storm.webdav.config.StorageAreaConfiguration;
import org.italiangrid.storm.webdav.config.StorageAreaInfo;
import org.springframework.security.authentication.AuthenticationDetailsSource;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.web.authentication.preauth.PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails;

import com.google.common.collect.ArrayListMultimap;
import com.google.common.collect.Multimap;

public class VOMSPreAuthDetailsSource implements
        AuthenticationDetailsSource<HttpServletRequest, PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails> {

    public final List<VOMSAuthDetailsSource> vomsAuthoritiesSources;

    private final StorageAreaConfiguration saConfig;

    private final List<SAPermission> authenticatedPerms;
    private final Multimap<String, SAPermission> voPerms;
    private final Multimap<String, SAPermission> voMapPerms;

    public VOMSPreAuthDetailsSource(List<VOMSAuthDetailsSource> vas, StorageAreaConfiguration conf) {

        this.vomsAuthoritiesSources = vas;
        this.saConfig = conf;

        authenticatedPerms = new ArrayList<SAPermission>();

        voPerms = ArrayListMultimap.create();
        voMapPerms = ArrayListMultimap.create();

        for (StorageAreaInfo sa : saConfig.getStorageAreaInfo()) {

            for (String vo : sa.vos()) {
                voPerms.put(vo, SAPermission.canRead(sa.name()));
                voPerms.put(vo, SAPermission.canWrite(sa.name()));
                if (sa.voMapEnabled()) {
                    voMapPerms.put(vo, SAPermission.canRead(sa.name()));
                    if (sa.voMapGrantsWritePermission()) {
                        voMapPerms.put(vo, SAPermission.canWrite(sa.name()));
                    }
                }
            }

            if (sa.authenticatedReadEnabled() || sa.anonymousReadEnabled()) {
                authenticatedPerms.add(SAPermission.canRead(sa.name()));
            }
        }

    }

    @Override
    public PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails buildDetails(HttpServletRequest request) {

        return new PreAuthenticatedGrantedAuthoritiesWebAuthenticationDetails(request,
                getVOMSGrantedAuthorities(request));
    }

    private void addSAPermissions(Set<GrantedAuthority> authorities) {

        Set<GrantedAuthority> saPermissions = new HashSet<GrantedAuthority>();

        for (GrantedAuthority auth : authorities) {
            if (auth instanceof VOMSVOAuthority) {
                VOMSVOAuthority voAuth = (VOMSVOAuthority) auth;
                saPermissions.addAll(voPerms.get(voAuth.getVoName()));
            }
            if (auth instanceof VOMSVOMapAuthority) {
                VOMSVOMapAuthority voMapAuth = (VOMSVOMapAuthority) auth;
                saPermissions.addAll(voMapPerms.get(voMapAuth.getVoName()));
            }
        }

        authorities.addAll(saPermissions);
        authorities.addAll(authenticatedPerms);
    }

    private Collection<? extends GrantedAuthority> getVOMSGrantedAuthorities(HttpServletRequest request) {

        Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>();

        for (VOMSAuthDetailsSource source : vomsAuthoritiesSources) {
            authorities.addAll(source.getVOMSGrantedAuthorities(request));
        }

        addSAPermissions(authorities);

        return Collections.unmodifiableSet(authorities);
    }
}