IDGenerator.java

/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements. See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership. The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package org.apache.axis2.saaj.util;

import java.util.Random;

/** Code borrowed from AuthenticatorBase.java for generating a secure id's. */
public class IDGenerator {

    /** The number of random bytes to include when generating a session identifier. */
    protected static final int SESSION_ID_BYTES = 16;

    /** A random number generator to use when generating session identifiers. */
    protected static Random random = null;

    /**
     * The Java class name of the random number generator class to be used when generating session
     * identifiers.
     */
    protected static String randomClass = "java.security.SecureRandom";

    /**
     * Generate and return a new session identifier.
     *
     * @return a new session id
     */
    public static synchronized String generateID() {
        // Generate a byte array containing a session identifier
        byte bytes[] = new byte[SESSION_ID_BYTES];

        getRandom().nextBytes(bytes);

        // Render the result as a String of hexadecimal digits
        StringBuffer result = new StringBuffer();

        for (int i = 0; i < bytes.length; i++) {
            byte b1 = (byte)((bytes[i] & 0xf0) >> 4);
            byte b2 = (byte)(bytes[i] & 0x0f);

            if (b1 < 10) {
                result.append((char)('0' + b1));
            } else {
                result.append((char)('A' + (b1 - 10)));
            }
            if (b2 < 10) {
                result.append((char)('0' + b2));
            } else {
                result.append((char)('A' + (b2 - 10)));
            }
        }
        return (result.toString());
    }

    /**
     * Return the random number generator instance we should use for generating session identifiers.
     * If there is no such generator currently defined, construct and seed a new one.
     *
     * @return Random object
     */
    private static synchronized Random getRandom() {
        if (random == null) {
            try {
                Class clazz = Class.forName(randomClass);
                random = (Random)clazz.newInstance();
            } catch (Exception e) {
                random = new java.util.Random();
            }
        }
        return (random);
    }

}