org.jwebsocket.sso.HTTPSupport.java Source code

Introduction

Here is the source code for org.jwebsocket.sso.HTTPSupport.java

Source

//   ---------------------------------------------------------------------------
//   jWebSocket HTTPSupport for OAuth for Java (Community Edition, CE)
//   ---------------------------------------------------------------------------
//   Copyright 2010-2014 Innotrade GmbH (jWebSocket.org)
//   Alexander Schulze, Germany (NRW)
//
//   Licensed under the Apache License, Version 2.0 (the "License");
//   you may not use this file except in compliance with the License.
//   You may obtain a copy of the License at
//
//   http://www.apache.org/licenses/LICENSE-2.0
//
//   Unless required by applicable law or agreed to in writing, software
//   distributed under the License is distributed on an "AS IS" BASIS,
//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
//   See the License for the specific language governing permissions and
//   limitations under the License.
//   ---------------------------------------------------------------------------
package org.jwebsocket.sso;

import java.io.IOException;
import java.security.KeyStore;
import java.util.Map;
import javax.net.ssl.SSLContext;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.ResponseHandler;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.client.methods.HttpUriRequest;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.conn.ssl.SSLContexts;
import org.apache.http.conn.ssl.TrustSelfSignedStrategy;
import org.apache.http.entity.ByteArrayEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;
import org.apache.log4j.Logger;

/**
 *
 * @author aschulze
 */
public class HTTPSupport {

    static final Logger mLog = Logger.getLogger(HTTPSupport.class);

    /**
     *
     * @param aURL
     * @param aMethod
     * @param aHeaders
     * @param aPostBody
     * @param aTimeout
     * @return
     */
    public static String request(String aURL, String aMethod, Map<String, String> aHeaders, String aPostBody,
            long aTimeout) {
        if (mLog.isDebugEnabled()) {
            mLog.debug("Requesting (" + aMethod + ") '" + aURL + "', timeout: " + aTimeout + "ms, Headers: "
                    + aHeaders + ", Body: "
                    + (null != aPostBody ? "'" + aPostBody.replace("\n", "\\n").replace("\r", "\\r") + "'"
                            : "[null]"));
        }
        String lResponse = "{\"code\": -1, \"msg\": \"undefined\"";
        try {
            KeyStore lTrustStore = KeyStore.getInstance(KeyStore.getDefaultType());
            lTrustStore.load(null, null);
            // Trust own CA and all self-signed certs
            SSLContext lSSLContext = SSLContexts.custom()
                    .loadTrustMaterial(lTrustStore, new TrustSelfSignedStrategy()).build();
            // Allow TLSv1 protocol only
            SSLConnectionSocketFactory lSSLFactory = new SSLConnectionSocketFactory(lSSLContext,
                    new String[] { "TLSv1" }, null, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
            CloseableHttpClient lHTTPClient = HttpClients.custom().setSSLSocketFactory(lSSLFactory).build();
            HttpUriRequest lRequest;
            if ("POST".equals(aMethod)) {
                lRequest = new HttpPost(aURL);
                ((HttpPost) lRequest).setEntity(new ByteArrayEntity(aPostBody.getBytes("UTF-8")));
            } else {
                lRequest = new HttpGet(aURL);
            }
            for (Map.Entry<String, String> lEntry : aHeaders.entrySet()) {
                lRequest.setHeader(lEntry.getKey(), lEntry.getValue());
            }

            // System.out.println("Executing request " + lRequest.getRequestLine());
            // Create a custom response handler
            ResponseHandler<String> lResponseHandler = new ResponseHandler<String>() {

                @Override
                public String handleResponse(final HttpResponse lResponse)
                        throws ClientProtocolException, IOException {
                    int lStatus = lResponse.getStatusLine().getStatusCode();
                    HttpEntity lEntity = lResponse.getEntity();
                    return lEntity != null ? EntityUtils.toString(lEntity) : null;

                    //               if (lStatus >= 200 && lStatus < 300) {
                    //                  HttpEntity entity = lResponse.getEntity();
                    //                  return entity != null ? EntityUtils.toString(entity) : null;
                    //               } else {
                    //                  throw new ClientProtocolException("Unexpected response status: " + lStatus);
                    //               }
                }

            };
            long lStartedAt = System.currentTimeMillis();
            lResponse = lHTTPClient.execute(lRequest, lResponseHandler);
            if (mLog.isDebugEnabled()) {
                mLog.debug("Response (" + (System.currentTimeMillis() - lStartedAt) + "ms): '"
                        + lResponse.replace("\n", "\\n").replace("\r", "\\r") + "'");
            }
            return lResponse;
        } catch (Exception lEx) {
            String lMsg = "{\"code\": -1, \"msg\": \"" + lEx.getClass().getSimpleName() + " at http request: "
                    + lEx.getMessage() + "\"}";
            mLog.error(lEx.getClass().getSimpleName() + ": " + lEx.getMessage() + ", returning: " + lMsg);
            lResponse = lMsg;
            return lResponse;
        }
    }
}