org.psl.fidouaf.core.ri.client.AuthenticationRequestProcessing.java Source code

Introduction

Here is the source code for org.psl.fidouaf.core.ri.client.AuthenticationRequestProcessing.java

Source

/*
 * Copyright 2015 eBay Software Foundation
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.psl.fidouaf.core.ri.client;

import java.util.ArrayList;
import java.util.List;

import org.apache.commons.codec.binary.Base64;
import org.psl.fidouaf.core.constants.Constants;
import org.psl.fidouaf.core.entity.AuthenticationRequest;
import org.psl.fidouaf.core.entity.AuthenticationResponse;
import org.psl.fidouaf.core.entity.AuthenticatorSignAssertion;
import org.psl.fidouaf.core.entity.FinalChallengeParams;
import org.psl.fidouaf.core.entity.OperationHeader;

import com.google.gson.Gson;

public class AuthenticationRequestProcessing {

    public AuthenticationResponse processRequest(AuthenticationRequest request) {
        AuthenticationResponse response = new AuthenticationResponse();
        Gson gson = new Gson();
        setAppId(request, response);

        OperationHeader opHeader = new OperationHeader();
        opHeader.setServerData(request.header.serverData);
        opHeader.setOp(request.header.op);
        opHeader.setUpv(request.header.upv);
        response.setHeader(opHeader);

        FinalChallengeParams fcParams = new FinalChallengeParams();
        fcParams.setAppID(Constants.APP_ID);
        ;
        fcParams.setFacetID(Constants.FACET_ID);
        fcParams.setChallenge(request.challenge);
        response.setFcParams(Base64.encodeBase64URLSafeString(gson.toJson(fcParams).getBytes()));
        setAssertions(response);
        return response;
    }

    private void setAssertions(AuthenticationResponse response) {
        AuthenticatorSignAssertion assertion = new AuthenticatorSignAssertion();
        assertion.assertionScheme = "UAFV1TLV";
        // Example from specs doc
        assertion.assertion = "Aj7WAAQ-jgALLgkAQUJDRCNBQkNEDi4FAAABAQEADy4gAHwyJAEX8t1b2wOxbaKOC5ZL7ACqbLo_TtiQfK3DzDsHCi4gAFwCUz-dOuafXKXJLbkUrIzjAU6oDbP8B9iLQRmCf58fEC4AAAkuIABkwI-f3bIe_Uin6IKIFvqLgAOrpk6_nr0oVAK9hIl82A0uBAACAAAABi5AADwDOcBvPslX2bRNy4SvFhAwhEAoBSGUitgMUNChgUSMxss3K3ukekq1paG7Fv1v5mBmDCZVPt2NCTnjUxrjTp4";
        List<AuthenticatorSignAssertion> assertions = new ArrayList<AuthenticatorSignAssertion>();
        assertions.add(assertion);
        response.setAssertions(assertions);
    }

    private void setAppId(AuthenticationRequest request, AuthenticationResponse response) {
        OperationHeader opHeader = new OperationHeader();
        if (request.header.appID == null && request.header.appID.isEmpty()) {
            opHeader.setAppID(Constants.APP_ID);
            response.setHeader(opHeader);
        } else {
            setAppID(request, response);
        }
    }

    private void setAppID(AuthenticationRequest request, AuthenticationResponse response) {
        // TODO Auto-generated method stub
    }
}