/* * Copyright (c) 2010 Lockheed Martin Corporation * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.eurekastreams.server.action.execution.opensocial; import java.io.Serializable; import org.apache.shindig.social.opensocial.oauth.OAuthEntry; import org.eurekastreams.commons.actions.ExecutionStrategy; import org.eurekastreams.commons.actions.context.PrincipalActionContext; import org.eurekastreams.commons.exceptions.ExecutionException; import org.eurekastreams.server.domain.OAuthDomainEntry; import org.eurekastreams.server.persistence.mappers.DomainMapper; /** * Disable this OAuth token. * */ public class DisableOAuthTokenExecution implements ExecutionStrategy<PrincipalActionContext> { /** * Maximum attempts to attempt to authorize a request token. */ private static final int CALLBACK_TOKEN_ATTEMPTS = 5; /** * Instance of OAuth entry mapper injected by spring. */ private final DomainMapper<String, OAuthDomainEntry> entryMapper; /** * Constructor. * * @param inEntryMapper * - instance of the {@link DomainMapper} class. */ public DisableOAuthTokenExecution(final DomainMapper<String, OAuthDomainEntry> inEntryMapper) { entryMapper = inEntryMapper; } /** * {@inheritDoc}. Disable the OAuth token based on the supplied parameters. */ @Override public Serializable execute(final PrincipalActionContext inActionContext) throws ExecutionException { String entryToken = (String) inActionContext.getParams(); OAuthDomainEntry dto = entryMapper.execute(entryToken); dto.setCallbackTokenAttempts(dto.getCallbackTokenAttempts() + 1); if (!dto.isCallbackUrlSigned() || dto.getCallbackTokenAttempts() >= CALLBACK_TOKEN_ATTEMPTS) { dto.setType(OAuthEntry.Type.DISABLED.toString()); } return null; } }