AssertionProvider.java

Go to the documentation of this file.

/*
 * Turró i Cutiller Foundation. License notice.
 * Copyright (C) 2019 Lluis Turró Cutiller <http://www.turro.org/>
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 
package org.turro.sso;
 
import java.io.IOException;
import java.nio.charset.StandardCharsets;
import java.util.Date;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.amic.util.date.CheckDate;
import org.apache.commons.codec.DecoderException;
import org.turro.elephant.context.ElephantContext;
import org.turro.elephant.db.ElephantPU;
import org.turro.elephant.db.WhereClause;
import org.turro.elephant.entities.db.SSOIdentity;
import org.turro.elephant.impl.util.CookieUtil;
import org.turro.elephant.sso.IAssertionProvider;
import org.turro.elephant.sso.ISSOIdentity;
import org.turro.jpa.Dao;
import org.turro.plugin.contacts.IContact;
import org.turro.sql.SqlClause;
 
@ElephantAssertion
public class AssertionProvider implements IAssertionProvider {
 
  private static final int VALID_DAYS = 90;
  private static final String ASSERTION_ID = "_elac";
  
  @Override
  public boolean hasAssertion(HttpServletRequest request) {
    return CookieUtil.getCookie(request, ASSERTION_ID) != null;
  }
 
  @Override
  public void killAssertion(HttpServletResponse response) {
    CookieUtil.deleteCookie(response, ASSERTION_ID, "/");
  }
 
  @Override
  public ISSOIdentity getAssertion(HttpServletRequest request) {
    Cookie assertion = CookieUtil.getCookie(request, ASSERTION_ID);
    if(assertion != null) {
      try {
        Dao dao = new ElephantPU();
        return dao.find(SSOIdentity.class, new String(CookieUtil.decryptCookieValue(assertion), StandardCharsets.UTF_8));
      } catch (IOException | DecoderException ex) {
        Logger.getLogger(AssertionProvider.class.getName()).log(Level.SEVERE, ElephantContext.logMsg(null), ex);
      }
    }
    return null;
  }
 
  @Override
  public void setAssertion(byte[] assertion, byte[] clientId, IContact contact, 
          String details, String remoteIP, String geoIP, HttpServletResponse response) {
    if(assertion != null) {
      SSOIdentity identity = new SSOIdentity();
      identity.setClientAssertion(assertion);
      identity.setClientId(clientId);
      identity.setContact(contact);
      updateAssertion(details, remoteIP, geoIP, response, identity);
    }
  }
 
  @Override
  public void updateAssertion(String details, String remoteIP, String geoIP, HttpServletResponse response, ISSOIdentity identity) {
    if(identity != null) {
      CookieUtil.encryptCookie(response, ASSERTION_ID, identity.getClientAssertion(), "/", VALID_DAYS*24*60*60);
      ((SSOIdentity) identity).setDateUsed(new Date());
      ((SSOIdentity) identity).setDetails(details);
      ((SSOIdentity) identity).setRemoteIp(remoteIP);
      ((SSOIdentity) identity).setGeoIp(geoIP);
      new ElephantPU().saveObject(identity);
      removeOldAssertions();
    }
  }
 
  @Override
  public void removeAssertion(HttpServletRequest request, HttpServletResponse response, IContact contact) {
    CookieUtil.deleteCookie(response, ASSERTION_ID, "/");
    WhereClause wc = new WhereClause();
    wc.addClause("delete from SSOIdentity");
    wc.addClause("where idContact = :id");
    wc.addNamedValue("id", contact.getId());
    wc.addClause("and clientId = :client");
    wc.addNamedValue("client", SSO.getSSO().getCurrentId(request));
    new ElephantPU().executeUpdate(wc);
  }
 
  @Override
  public String getGeoIP(String remoteIP) {
    return SqlClause.select("max(geoIp)").from("SSOIdentity")
            .where().equal("remoteIp", remoteIP)
            .dao(new ElephantPU()).singleResult(String.class);
  }
 
  private void removeOldAssertions() {
    WhereClause wc = new WhereClause();
    wc.addClause("delete from SSOIdentity");
    wc.addClause("where dateUsed < :date");
    wc.addNamedValue("date", new CheckDate().addDays(-VALID_DAYS).getDate());
    new ElephantPU().executeUpdate(wc);
  }
 
}