AuthActions.java

Go to the documentation of this file.

/*
 * Turró i Cutiller Foundation. License notice.
 * Copyright (C) 2015 Lluis Turró Cutiller <http://www.turro.org/>
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 
package org.turro.auth;
 
import java.io.IOException;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.servlet.ServletContext;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.turro.string.Strings;
import org.turro.action.Actions;
import org.turro.elephant.context.ElephantContext;
import org.turro.elephant.context.ElephantProperties;
import org.turro.elephant.direct.DirectContent;
import org.turro.elephant.direct.DirectContents;
import org.turro.elephant.direct.IDirectContent;
import org.turro.http.ElephantPost;
import org.turro.http.ElephantResponse;
import org.turro.http.ElephantResponseType;
import org.turro.plugin.contacts.IContact;
 
@DirectContent(identifier="authentication")
public class AuthActions implements IDirectContent {
  
  private static String 
          LOGOUT_URL = "/logout",
          AUTH_URL = "/authurl";
 
  public static String getAccessURL(String domain, String email, String redir) {
    try {
      ElephantPost ep = new ElephantPost(DirectContents.createURL(domain, getIdentifier()) + AUTH_URL);
      if(!email.contains("@")) {
        email = mapName(email);
      }
      ep.addParameter("email", email);
      ep.addParameter("redir", redir);
      ElephantResponse er = ep.doPost();
      if(ElephantResponse.isCorrect(er)) {
        return domain + "?" + er.message;
      }
    } catch (IOException ex) {
      Logger.getLogger(AuthActions.class.getName()).log(Level.SEVERE, ElephantContext.logMsg(null), ex);
    }
    return null;
  }
  
  public static String createLogoutURL(String redir) {
    IContact contact = Authentication.getLoggedIContact();
    if(contact != null && contact.isValid()) {
      return DirectContents.createRelativeURL(getIdentifier()) + LOGOUT_URL +
            (redir != null ? "?redir=" + redir : "");
    } else {
      return null;
    }
  }
  
  public static boolean isTrustedSource(HttpServletRequest request) {
    String remoteIP = request.getRemoteAddr();
    if("127.0.0.1".equals(remoteIP)) return true;
    if(ElephantProperties.containsContextProperty("trusted", "trusted")) {
      Logger.getLogger(AuthActions.class.getName()).log(Level.INFO, remoteIP + " trust checked");
      return ElephantProperties.getContextProperty("trusted", "trusted", "").contains(remoteIP);
    }
    return false;
  }
  
  public static String mapName(String name) {
    if(ElephantProperties.containsContextProperty("user-map", name)) {
      Logger.getLogger(AuthActions.class.getName()).log(Level.INFO, name + " mapped");
      return ElephantProperties.getContextProperty("user-map", name);
    } else {
      Logger.getLogger(AuthActions.class.getName()).log(Level.INFO, name + " not found");
    }
    return null;
  }
  
  public static String getIdentifier() {
    return AuthActions.class.getAnnotation(DirectContent.class).identifier();
  }
 
  @Override
  public boolean itsMe(String id) {
    return getIdentifier().equals(id);
  }
 
  @Override
  public boolean myTurn(HttpServletRequest request) {
    return DirectContents.isYourTurn(request, getIdentifier());
  }
 
  @Override
  public void execute(ServletContext context, HttpServletRequest request, HttpServletResponse response) {
    if(DirectContents.isYourTurn(request, getIdentifier() + LOGOUT_URL)) {
      String redir = request.getParameter("redir");
      try {
        Authentication.doLogout(redir);
      } catch (IOException ex) {
        Logger.getLogger(AuthActions.class.getName()).log(Level.SEVERE, ElephantContext.logMsg(null), ex);
      }
    } else if(DirectContents.isYourTurn(request, getIdentifier() + AUTH_URL)) {
      if(isTrustedSource(request)) {
        try {
          String url = createAccessURL(request);
          if(!Strings.isBlank(url)) {
            ElephantResponse.writeToResponse(response, ElephantResponseType.RESPONSE_CORRECT,
                    url, null);
          }
        } catch (IOException ex) {
          Logger.getLogger(AuthActions.class.getName()).log(Level.SEVERE, ElephantContext.logMsg(null), ex);
        }
      }
    }
  }
 
  private static String createAccessURL(HttpServletRequest request) {
    try {
      String email = request.getParameter("email"),
              redir = request.getParameter("redir");
      return Actions.createAction(email, redir);
    } catch (Exception ex) {
      Logger.getLogger(AuthActions.class.getName()).log(Level.SEVERE, ElephantContext.logMsg(null), ex);
    }
    return null;
  }
  
}