|
|
|
|
@@ -0,0 +1,192 @@
|
|
|
|
|
/*
|
|
|
|
|
* Copyright 2019 the original author or authors.
|
|
|
|
|
*
|
|
|
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
|
* you may not use this file except in compliance with the License.
|
|
|
|
|
* You may obtain a copy of the License at
|
|
|
|
|
*
|
|
|
|
|
* https://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
|
*
|
|
|
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
|
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
|
|
|
|
|
* or implied. See the License for the specific language governing
|
|
|
|
|
* permissions and limitations under the License.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
package example.app.crm.config;
|
|
|
|
|
|
|
|
|
|
import java.io.IOException;
|
|
|
|
|
import java.lang.reflect.Method;
|
|
|
|
|
import java.net.Authenticator;
|
|
|
|
|
import java.net.PasswordAuthentication;
|
|
|
|
|
import java.util.Optional;
|
|
|
|
|
|
|
|
|
|
import org.apache.geode.management.internal.security.ResourceConstants;
|
|
|
|
|
import org.apache.shiro.util.Assert;
|
|
|
|
|
import org.apache.shiro.util.StringUtils;
|
|
|
|
|
import org.springframework.beans.BeansException;
|
|
|
|
|
import org.springframework.beans.factory.config.BeanPostProcessor;
|
|
|
|
|
import org.springframework.context.annotation.Bean;
|
|
|
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
|
|
import org.springframework.context.annotation.Profile;
|
|
|
|
|
import org.springframework.core.env.Environment;
|
|
|
|
|
import org.springframework.data.gemfire.config.admin.remote.RestHttpGemfireAdminTemplate;
|
|
|
|
|
import org.springframework.data.gemfire.config.annotation.ClusterConfigurationConfiguration;
|
|
|
|
|
import org.springframework.http.HttpHeaders;
|
|
|
|
|
import org.springframework.http.HttpRequest;
|
|
|
|
|
import org.springframework.http.client.ClientHttpRequestExecution;
|
|
|
|
|
import org.springframework.http.client.ClientHttpRequestInterceptor;
|
|
|
|
|
import org.springframework.http.client.ClientHttpResponse;
|
|
|
|
|
import org.springframework.lang.Nullable;
|
|
|
|
|
import org.springframework.util.ReflectionUtils;
|
|
|
|
|
import org.springframework.web.client.RestTemplate;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Spring {@link Configuration} class used to configure and initialize a Java Platform {@link Authenticator},
|
|
|
|
|
* which is used by the Java Platform anytime a Java process needs to make a secure network connection.
|
|
|
|
|
*
|
|
|
|
|
* @author John Blum
|
|
|
|
|
* @see java.net.Authenticator
|
|
|
|
|
* @see java.net.PasswordAuthentication
|
|
|
|
|
* @see org.springframework.context.annotation.Bean
|
|
|
|
|
* @see org.springframework.context.annotation.Configuration
|
|
|
|
|
* @see org.springframework.context.annotation.Profile
|
|
|
|
|
* @see org.springframework.core.env.Environment
|
|
|
|
|
* @since 1.0.0
|
|
|
|
|
*/
|
|
|
|
|
@Configuration
|
|
|
|
|
@Profile("security")
|
|
|
|
|
@SuppressWarnings("unused")
|
|
|
|
|
public class HttpSecurityConfiguration {
|
|
|
|
|
|
|
|
|
|
private static final String DEFAULT_USERNAME = "test";
|
|
|
|
|
private static final String DEFAULT_PASSWORD = DEFAULT_USERNAME;
|
|
|
|
|
|
|
|
|
|
@Bean
|
|
|
|
|
public Authenticator authenticator(Environment environment) {
|
|
|
|
|
|
|
|
|
|
Authenticator authenticator = new Authenticator() {
|
|
|
|
|
|
|
|
|
|
@Override
|
|
|
|
|
protected PasswordAuthentication getPasswordAuthentication() {
|
|
|
|
|
|
|
|
|
|
String username =
|
|
|
|
|
environment.getProperty("spring.data.gemfire.security.username", DEFAULT_USERNAME);
|
|
|
|
|
|
|
|
|
|
String password =
|
|
|
|
|
environment.getProperty("spring.data.gemfire.security.password", DEFAULT_PASSWORD);
|
|
|
|
|
|
|
|
|
|
return new PasswordAuthentication(username, password.toCharArray());
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
Authenticator.setDefault(authenticator);
|
|
|
|
|
|
|
|
|
|
return authenticator;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Bean
|
|
|
|
|
BeanPostProcessor schemaObjectInitializerPostProcessor(Environment environment) {
|
|
|
|
|
|
|
|
|
|
return new BeanPostProcessor() {
|
|
|
|
|
|
|
|
|
|
@Nullable @Override
|
|
|
|
|
public Object postProcessAfterInitialization(Object bean, String beanName) throws BeansException {
|
|
|
|
|
|
|
|
|
|
if (bean instanceof ClusterConfigurationConfiguration.ClusterSchemaObjectInitializer) {
|
|
|
|
|
|
|
|
|
|
Optional.of(bean)
|
|
|
|
|
.map(ClusterConfigurationConfiguration.ClusterSchemaObjectInitializer.class::cast)
|
|
|
|
|
.map(schemaObjectInitializer -> invokeMethod(schemaObjectInitializer, "getSchemaObjectContext"))
|
|
|
|
|
.filter(ClusterConfigurationConfiguration.SchemaObjectContext.class::isInstance)
|
|
|
|
|
.map(ClusterConfigurationConfiguration.SchemaObjectContext.class::cast)
|
|
|
|
|
.map(schemaObjectContext -> invokeMethod(schemaObjectContext, "getGemfireAdminOperations"))
|
|
|
|
|
.filter(RestHttpGemfireAdminTemplate.class::isInstance)
|
|
|
|
|
.map(RestHttpGemfireAdminTemplate.class::cast)
|
|
|
|
|
.map(gemfireAdminTemplate -> invokeMethod(gemfireAdminTemplate, "getRestOperations"))
|
|
|
|
|
.filter(RestTemplate.class::isInstance)
|
|
|
|
|
.map(RestTemplate.class::cast)
|
|
|
|
|
.ifPresent(restTemplate -> registerInterceptor(restTemplate,
|
|
|
|
|
new SecurityAwareClientHttpRequestInterceptor(environment)));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return bean;
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private RestTemplate registerInterceptor(RestTemplate restTemplate,
|
|
|
|
|
ClientHttpRequestInterceptor clientHttpRequestInterceptor) {
|
|
|
|
|
|
|
|
|
|
restTemplate.getInterceptors().add(clientHttpRequestInterceptor);
|
|
|
|
|
|
|
|
|
|
return restTemplate;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@SuppressWarnings("unchecked")
|
|
|
|
|
private <T> T invokeMethod(Object target, String methodName) {
|
|
|
|
|
|
|
|
|
|
return this.doOperationSafely(() -> {
|
|
|
|
|
|
|
|
|
|
Method method = target.getClass().getDeclaredMethod(methodName);
|
|
|
|
|
|
|
|
|
|
ReflectionUtils.makeAccessible(method);
|
|
|
|
|
|
|
|
|
|
return (T) ReflectionUtils.invokeMethod(method, target);
|
|
|
|
|
});
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private <T> T doOperationSafely(ExceptionThrowingOperation<T> operation) {
|
|
|
|
|
|
|
|
|
|
try {
|
|
|
|
|
return operation.doOperation();
|
|
|
|
|
}
|
|
|
|
|
catch (Exception ignore) {
|
|
|
|
|
return null;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@FunctionalInterface
|
|
|
|
|
interface ExceptionThrowingOperation<T> {
|
|
|
|
|
T doOperation() throws Exception;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public static class SecurityAwareClientHttpRequestInterceptor implements ClientHttpRequestInterceptor {
|
|
|
|
|
|
|
|
|
|
private final Environment environment;
|
|
|
|
|
|
|
|
|
|
public SecurityAwareClientHttpRequestInterceptor(Environment environment) {
|
|
|
|
|
|
|
|
|
|
Assert.notNull(environment, "Environment is required");
|
|
|
|
|
|
|
|
|
|
this.environment = environment;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
protected boolean isAuthenticationEnabled() {
|
|
|
|
|
return StringUtils.hasText(getUsername()) && StringUtils.hasText(getPassword());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
protected String getUsername() {
|
|
|
|
|
return this.environment.getProperty("spring.data.gemfire.security.username");
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
protected String getPassword() {
|
|
|
|
|
return this.environment.getProperty("spring.data.gemfire.security.password");
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Override
|
|
|
|
|
public ClientHttpResponse intercept(HttpRequest request, byte[] body,
|
|
|
|
|
ClientHttpRequestExecution execution) throws IOException {
|
|
|
|
|
|
|
|
|
|
HttpHeaders requestHeaders = request.getHeaders();
|
|
|
|
|
|
|
|
|
|
if (isAuthenticationEnabled()) {
|
|
|
|
|
requestHeaders.add(ResourceConstants.USER_NAME, getUsername());
|
|
|
|
|
requestHeaders.add(ResourceConstants.PASSWORD, getPassword());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return execution.execute(request, body);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
John Blum