org.tolven.session.ShiroSessionWrapper.java Source code

Introduction

Here is the source code for org.tolven.session.ShiroSessionWrapper.java

Source

/*
 * Copyright (C) 2009 Tolven Inc
    
 * This library is free software; you can redistribute it and/or modify it under the terms of 
 * the GNU Lesser General Public License as published by the Free Software Foundation; either 
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;  
 * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 
 * See the GNU Lesser General Public License for more details.
 *
 * Contact: info@tolvenhealth.com 
 *
 * @author Joseph Isaac
 */
package org.tolven.session;

import java.io.ByteArrayInputStream;
import java.io.Serializable;
import java.security.KeyFactory;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
import java.security.spec.PKCS8EncodedKeySpec;
import java.util.ArrayList;
import java.util.Collection;
import java.util.Date;
import java.util.List;
import java.util.Set;

import org.apache.commons.codec.binary.Base64;
import org.apache.shiro.SecurityUtils;
import org.tolven.session.TolvenSessionWrapper;

/**
 * A class which wraps a TolvenSession
 * 
 * @author Joseph Isaac
 *
 */
public class ShiroSessionWrapper implements TolvenSessionWrapper {

    private static CertificateFactory certificateFactory;
    private static KeyFactory keyFactory;

    public ShiroSessionWrapper() {
    }

    @Override
    public Object getAttribute(Object name) {
        return SecurityUtils.getSubject().getSession().getAttribute(name);
    }

    @Override
    public Collection<Object> getAttributeKeys() {
        return SecurityUtils.getSubject().getSession().getAttributeKeys();
    }

    private CertificateFactory getCertificateFactory() {
        if (certificateFactory == null) {
            try {
                certificateFactory = CertificateFactory.getInstance("X509");
            } catch (CertificateException ex) {
                throw new RuntimeException("Could not get instance of CertificateFactory", ex);
            }
        }
        return certificateFactory;
    }

    @Override
    public String getHost() {
        return SecurityUtils.getSubject().getSession().getHost();
    }

    @Override
    public Serializable getId() {
        return SecurityUtils.getSubject().getSession().getId();
    }

    private KeyFactory getKeyFactory(String keyAlgorithm) {
        if (keyFactory == null) {
            try {
                keyFactory = KeyFactory.getInstance(keyAlgorithm);
            } catch (Exception ex) {
                throw new RuntimeException("Could not get instance of KeyFactory", ex);
            }
        }
        return keyFactory;
    }

    @Override
    public Date getLastAccessTime() {
        return SecurityUtils.getSubject().getSession().getLastAccessTime();
    }

    @Override
    public Object getPrincipal() {
        return SecurityUtils.getSubject().getPrincipal();
    }

    @Override
    public String getRealm() {
        // TODO The realm needs to be retrieved from the Subject or session
        return "tolven";
    }

    @Override
    public Date getStartTimestamp() {
        return SecurityUtils.getSubject().getSession().getStartTimestamp();
    }

    @Override
    public long getTimeout() {
        return SecurityUtils.getSubject().getSession().getTimeout();
    }

    public List<String> getTolvenPersonList(String name) {
        Set<String> set = (Set<String>) getAttribute(name);
        if (set == null || set.isEmpty()) {
            return new ArrayList<String>();
        } else {
            return (List<String>) new ArrayList<String>(set);
        }
    }

    public String getTolvenPersonString(String name) {
        Set<String> set = (Set<String>) getAttribute(name);
        if (set == null || set.isEmpty()) {
            return null;
        } else {
            return (String) set.iterator().next();
        }
    }

    @Override
    public PrivateKey getUserPrivateKey(String keyAlgorithm) {
        byte[] userPKCS8EncodedKeyBytes = (byte[]) getAttribute("userPKCS8EncodedKey");
        if (userPKCS8EncodedKeyBytes == null) {
            return null;
        } else {
            try {
                PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(userPKCS8EncodedKeyBytes);
                return getKeyFactory(keyAlgorithm).generatePrivate(pkcs8EncodedKeySpec);
            } catch (Exception ex) {
                throw new RuntimeException("Could not get PrivateKey from pkcs8EncodedKey", ex);
            }
        }
    }

    @Override
    public PublicKey getUserPublicKey() {
        X509Certificate x509Certificate = getUserX509Certificate();
        if (x509Certificate == null) {
            return null;
        } else {
            return x509Certificate.getPublicKey();
        }
    }

    @Override
    public X509Certificate getUserX509Certificate() {
        byte[] userX509CertificateBytes = (byte[]) getAttribute("userX509Certificate");
        if (userX509CertificateBytes == null) {
            return null;
        } else {
            try {
                return (X509Certificate) getCertificateFactory()
                        .generateCertificate(new ByteArrayInputStream(userX509CertificateBytes));
            } catch (Exception ex) {
                throw new RuntimeException("Could not get X509Certificate from SSO userCertificate", ex);
            }
        }
    }

    @Override
    public String getUserX509CertificateString() {
        X509Certificate x509Certificate = getUserX509Certificate();
        if (x509Certificate == null) {
            return null;
        }
        try {
            StringBuffer buff = new StringBuffer();
            buff.append("-----BEGIN CERTIFICATE-----");
            buff.append("\n");
            String pemFormat = new String(Base64.encodeBase64Chunked(x509Certificate.getEncoded()));
            buff.append(pemFormat);
            buff.append("\n");
            buff.append("-----END CERTIFICATE-----");
            buff.append("\n");
            return buff.toString();
        } catch (Exception ex) {
            throw new RuntimeException("Could not convert X509Certificate into a String", ex);
        }
    }

    @Override
    public boolean isAuthenticated() {
        return SecurityUtils.getSubject().isAuthenticated();
    }

    @Override
    public void logout() {
        SecurityUtils.getSubject().logout();
    }

    @Override
    public Object removeAttribute(Object name) {
        return SecurityUtils.getSubject().getSession().removeAttribute(name);
    }

    @Override
    public void setAttribute(Object name, Object value) {
        SecurityUtils.getSubject().getSession().setAttribute(name, value);
    }

    @Override
    public void setTimeout(long timeout) {
        SecurityUtils.getSubject().getSession().setTimeout(timeout);
    }

    @Override
    public void stop() {
        SecurityUtils.getSubject().getSession().stop();
    }

    @Override
    public void touch() {
        SecurityUtils.getSubject().getSession().touch();
    }

}