org.springside.modules.security.springsecurity.cxf.SpringSecurityInInterceptor.java Source code

Introduction

Here is the source code for org.springside.modules.security.springsecurity.cxf.SpringSecurityInInterceptor.java

Source

/**
 * Copyright (c) 2005-2010 springside.org.cn
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * 
 * $Id: Log4jMBean.java 1192 2010-09-03 15:42:13Z calvinxiu $
 */
package org.springside.modules.security.springsecurity.cxf;

import java.util.Vector;

import javax.servlet.http.HttpServletRequest;

import org.apache.cxf.interceptor.Fault;
import org.apache.cxf.message.Message;
import org.apache.cxf.phase.AbstractPhaseInterceptor;
import org.apache.cxf.phase.Phase;
import org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor;
import org.apache.ws.security.WSConstants;
import org.apache.ws.security.WSSecurityEngineResult;
import org.apache.ws.security.WSUsernameTokenPrincipal;
import org.apache.ws.security.handler.WSHandlerConstants;
import org.apache.ws.security.handler.WSHandlerResult;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springside.modules.security.springsecurity.SpringSecurityUtils;

/**
 * WSS4J???SpringSecurity ContextCXF Interceptor.
 * 
 * 
 * @author calvin
 */
public class SpringSecurityInInterceptor extends AbstractPhaseInterceptor<Message> {

    private UserDetailsService userDetailsService;

    public SpringSecurityInInterceptor() {
        super(Phase.POST_PROTOCOL);
        addAfter(WSS4JInInterceptor.class.getName());
    }

    public void setUserDetailsService(UserDetailsService userDetailsService) {
        this.userDetailsService = userDetailsService;
    }

    public void handleMessage(Message message) throws Fault {
        String userName = getUserNameFromWSS4JResult(message);
        HttpServletRequest request = (HttpServletRequest) message.get("HTTP.REQUEST");

        UserDetails userDetails = userDetailsService.loadUserByUsername(userName);
        SpringSecurityUtils.saveUserDetailsToContext(userDetails, request);
    }

    /**
     * MessageWSS4J???.
     */
    @SuppressWarnings("unchecked")
    private String getUserNameFromWSS4JResult(Message message) {
        Vector<WSHandlerResult> results = (Vector<WSHandlerResult>) message
                .getContextualProperty(WSHandlerConstants.RECV_RESULTS);
        if (results != null && !results.isEmpty()) {
            for (WSHandlerResult result : results) {
                for (WSSecurityEngineResult securityResult : (Vector<WSSecurityEngineResult>) result.getResults()) {
                    int action = (Integer) securityResult.get(WSSecurityEngineResult.TAG_ACTION);
                    if ((action & WSConstants.UT) > 0) {
                        WSUsernameTokenPrincipal token = (WSUsernameTokenPrincipal) securityResult
                                .get(WSSecurityEngineResult.TAG_PRINCIPAL);
                        return token.getName();
                    }
                }
            }
        }
        return null;
    }
}