tolven-cvs-commit Mailing List for Tolven Health Record (Page 1072)

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Update of /cvsroot/tolven/tolvenWEB/src/org/tolven/web/security/auth
In directory sc8-pr-cvs10.sourceforge.net:/tmp/cvs-serv9942/src/org/tolven/web/security/auth

Added Files:
	KeyLoginModule.java 
Log Message:
This LoginModule does not verify username/password directly and MUST be proceeded by a LoginModule which does.
 * However, it is responsible for adding credentials to a Subject, and while adding a UserPrivateKey, it will attempt
 * unlock the UserPrivateKey with the provided password. If the password is not correct, then the login will fail.
 * The UserPrivateKey is placed in a PrivateKeyRing, and it is the PrivateKeyRing which is added to the privateCredentials
 * of the Subject.

--- NEW FILE: KeyLoginModule.java ---
/*
 *  Copyright (C) 2006 Tolven Inc 
 *
 * This library is free software; you can redistribute it and/or modify it under the terms of 
 * the GNU Lesser General Public License as published by the Free Software Foundation; either 
 * version 2.1 of the License, or (at your option) any later version.
 * 
 * This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; 
 * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. 
 * See the GNU Lesser General Public License for more details.
 * 
 * Contact: in...@to...
 */
package org.tolven.web.security.auth;

import java.io.IOException;
import java.security.Principal;
import java.security.acl.Group;
import java.util.Arrays;
import java.util.Enumeration;
import java.util.Iterator;
import java.util.Map;

import javax.naming.InitialContext;
import javax.security.auth.Subject;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.callback.UnsupportedCallbackException;
import javax.security.auth.login.LoginException;
import javax.security.auth.spi.LoginModule;
import javax.security.jacc.PolicyContext;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import org.tolven.core.entity.TolvenUser;
import org.tolven.security.LoginLocal;
import org.tolven.security.TolvenPrincipal;
import org.tolven.security.acl.TolvenGroup;
import org.tolven.security.key.PrivateKeyRing;
import org.tolven.security.key.UserPrivateKey;
import org.tolven.security.key.UserPublicKey;
import org.tolven.web.TopAction;

/**
 * This LoginModule does not verify username/password directly and MUST be proceeded by a LoginModule which does.
 * However, it is responsible for adding credentials to a Subject, and while adding a UserPrivateKey, it will attempt
 * unlock the UserPrivateKey with the provided password. If the password is not correct, then the login will fail.
 * The UserPrivateKey is placed in a PrivateKeyRing, and it is the PrivateKeyRing which is added to the privateCredentials
 * of the Subject.
 * 
 * @author Joseph Isaac
 *
 */
public class KeyLoginModule implements LoginModule {

    private Subject subject = null;
    private CallbackHandler callbackHandler = null;
    private String username;
    private char[] password;

    public void initialize(Subject subject, CallbackHandler callbackHandler, Map<String, ?> arg2, Map<String, ?> arg3) {
        System.out.println(getClass() + "initialize()");
        this.subject = subject;
        this.callbackHandler = callbackHandler;
    }

    public boolean login() throws LoginException {
        System.out.println(getClass() + " begin login");
        if (callbackHandler == null)
            throw new LoginException("No CallbackHandler");
        NameCallback nc = new NameCallback("User name: ");
        PasswordCallback pc = new PasswordCallback("Password: ", false);
        Callback[] callbacks = { nc, pc };
        try {
            callbackHandler.handle(callbacks);
            username = nc.getName();
            if (username == null)
                throw new LoginException("null username not permitted");
            char[] tmpPassword = pc.getPassword();
            if (tmpPassword == null)
                throw new LoginException("null password not permitted");
            password = new char[tmpPassword.length];
            System.arraycopy(tmpPassword, 0, password, 0, tmpPassword.length);
            pc.clearPassword();
        } catch (IOException e) {
            LoginException le = new LoginException("Failed to get username/password");
            le.initCause(e);
            throw le;
        } catch (UnsupportedCallbackException e) {
            LoginException le = new LoginException("CallbackHandler does not support: " + e.getCallback());
            le.initCause(e);
            throw le;
        }
        return true;
    }

    public boolean commit() throws LoginException {
        System.out.println(getClass() + ": begin commit");
        try {
            if (System.getProperty("tolven.security.keys.activate") != null) {
                // Use the session to initialize TolvenUser
                HttpServletRequest request = (HttpServletRequest) PolicyContext.getContext("javax.servlet.http.HttpServletRequest");
                if (request == null)
                    throw new LoginException(getClass() + ": could not obtain an HttpServletRequest");
                HttpSession session = request.getSession();
                if (session == null)
                    throw new LoginException(getClass() + ": could not obtain an HttpSession");
                TopAction top = (TopAction) session.getAttribute("top");
                if (top == null)
                    throw new LoginException(getClass() + ": could not obtain a TopAction");
                //TODO: Phase One obtain an initialized TolvenUser is valid
                TolvenUser user = top.intializeUser(username);
                if (user == null)
                    throw new LoginException(getClass() + ": No User found, access denied");
                boolean userModified = false;
                if (!user.hasUserPrivateKey()) {
                    System.out.println(getClass() + ": initialize keys ");
                    user.initUserPrivateKey(password);
                    userModified = true;
                }
                UserPrivateKey userPrivateKey = user.getUserPrivateKey();
                System.out.println(getClass() + ": Adding  UserPrivateKey to Subject " + username);
                userPrivateKey.unlockPrivateKey(password);
                // Populate the Subject
                // Ensure there is only one Group called Roles
                Group group = null;;
                for (Iterator iter = subject.getPrincipals(Group.class).iterator(); iter.hasNext();) {
                    group = (Group) iter.next();
                    if ("Roles".equalsIgnoreCase(group.getName()))
                        break;
                    group = null;
                }
                if(group == null) {
                } else {
                }
                if (group == null)
                    group = new TolvenGroup("Roles");
                // TODO: Currently we do not distinguish by role. When roles are supported in LDAP this code can be removed
                boolean allRolesExists = false;
                Principal principal = null;
                for (Enumeration e = group.members(); e.hasMoreElements();) {
                    principal = (Principal) e.nextElement();
                    if ("*".equalsIgnoreCase(principal.getName())) {
                        allRolesExists = true;
                        break;
                    }
                }
                if (!allRolesExists)
                    group.addMember(new TolvenPrincipal("*"));
                // Ensure there is only one PrivateKeyRing in a Subject by removing any that might be there
                for (Iterator iter = subject.getPrivateCredentials(PrivateKeyRing.class).iterator(); iter.hasNext();) {
                    iter.remove();
                }
                subject.getPrivateCredentials().add(new PrivateKeyRing(userPrivateKey));
                System.out.println(getClass() + ": Adding  getUserPublicKey to Subject " + username);
                // Ensure there is only one UserPublicKey in a Subject by removing any that might be there
                for (Iterator iter = subject.getPublicCredentials(UserPublicKey.class).iterator(); iter.hasNext();) {
                    iter.remove();
                }
                subject.getPublicCredentials().add(user.getUserPublicKey());
                if (userModified) {
                    InitialContext ictx = new InitialContext();
                    LoginLocal loginLocal = (LoginLocal) ictx.lookup("tolven/LoginBean/local");
                    if (loginLocal == null)
                        throw new LoginException(getClass() + ": Could not locate the LoginBean");
                    loginLocal.update(user);
                    System.out.println(getClass() + ": persisted new keys user " + username);
                }
            }
            System.out.println(getClass() + ": completing login for " + username);
        } catch (Exception ex) {
            ex.printStackTrace();
            throw new LoginException(ex.getMessage());
        }
        return true;
    }

    public boolean abort() throws LoginException {
        removeAllCredentials();
        return true;
    }

    public boolean logout() throws LoginException {
        removeAllCredentials();
        return true;
    }

    private void removeAllCredentials() throws LoginException {
        callbackHandler = null;
        username = null;
        Arrays.fill(password, '0');
        password = null;
        try {
            // Remove PrivateKeyRing
            if (subject != null) {
                for (Iterator iter = subject.getPrivateCredentials(PrivateKeyRing.class).iterator(); iter.hasNext();) {
                    iter.next();
                    iter.remove();
                }
                // Remove all UserPublicKey
                for (Iterator iter = subject.getPrivateCredentials(UserPublicKey.class).iterator(); iter.hasNext();) {
                    iter.next();
                    iter.remove();
                }
            }
        } catch (Exception ex) {
            ex.printStackTrace();
            throw new LoginException(ex.getMessage());
        } finally {
            subject = null;
        }
    }

}

2006	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug (141)	Sep (184)	Oct (159)	Nov (77)	Dec (114)
2007	Jan (212)	Feb (302)	Mar (323)	Apr (360)	May (302)	Jun (392)	Jul (299)	Aug (858)	Sep (499)	Oct (489)	Nov (324)	Dec (438)
2008	Jan (449)	Feb (388)	Mar (811)	Apr (583)	May (949)	Jun (1431)	Jul (943)	Aug (527)	Sep (576)	Oct (440)	Nov (1046)	Dec (658)
2009	Jan (259)	Feb (192)	Mar (495)	Apr (2322)	May (2023)	Jun (1387)	Jul (722)	Aug (771)	Sep (167)	Oct (142)	Nov (384)	Dec (884)
2010	Jan (344)	Feb (82)	Mar (248)	Apr (341)	May (389)	Jun (289)	Jul (19)	Aug (478)	Sep (274)	Oct (431)	Nov (322)	Dec (207)
2011	Jan (125)	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec

tolven-cvs-commit Mailing List for Tolven Health Record (Page 1072)

tolven-cvs-commit — Tolven CVS Commit