CodenvyEverrestWebSocketServlet.java

/*******************************************************************************
 * Copyright (c) 2012-2015 Codenvy, S.A.
 * All rights reserved. This program and the accompanying materials
 * are made available under the terms of the Eclipse Public License v1.0
 * which accompanies this distribution, and is available at
 * http://www.eclipse.org/legal/epl-v10.html
 *
 * Contributors:
 *   Codenvy, S.A. - initial API and implementation
 *******************************************************************************/
package org.eclipse.che.everrest;

import org.eclipse.che.commons.env.EnvironmentContext;
import org.eclipse.che.commons.user.User;

import org.apache.catalina.websocket.StreamInbound;
import org.everrest.core.DependencySupplier;
import org.everrest.core.ResourceBinder;
import org.everrest.core.impl.ApplicationProviderBinder;
import org.everrest.core.impl.EverrestConfiguration;
import org.everrest.core.impl.EverrestProcessor;
import org.everrest.core.impl.ProviderBinder;
import org.everrest.core.tools.SimplePrincipal;
import org.everrest.websockets.EverrestWebSocketServlet;
import org.everrest.websockets.WSConnectionImpl;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.inject.Inject;
import javax.inject.Singleton;
import javax.servlet.ServletContext;
import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.core.SecurityContext;
import java.security.Principal;

/** @author andrew00x */
@Singleton
public class CodenvyEverrestWebSocketServlet extends EverrestWebSocketServlet {
    private static final Logger LOG = LoggerFactory.getLogger(CodenvyEverrestWebSocketServlet.class);

    static final String ENVIRONMENT_CONTEXT = "ide.websocket." + EnvironmentContext.class.getName();

    @Inject
    private EverrestConfiguration config;

    @Override
    protected EverrestProcessor getEverrestProcessor() {
        final ServletContext servletContext = getServletContext();
        final DependencySupplier dependencies = (DependencySupplier)servletContext.getAttribute(DependencySupplier.class.getName());
        final ResourceBinder resources = (ResourceBinder)servletContext.getAttribute(ResourceBinder.class.getName());
        final ProviderBinder providers = (ProviderBinder)servletContext.getAttribute(ApplicationProviderBinder.class.getName());
        final EverrestConfiguration copy = new EverrestConfiguration(config);
        copy.setProperty(EverrestConfiguration.METHOD_INVOKER_DECORATOR_FACTORY, WebSocketMethodInvokerDecoratorFactory.class.getName());
        return new EverrestProcessor(resources, providers, dependencies, copy, null);
    }

    @Override
    protected StreamInbound createWebSocketInbound(String s, HttpServletRequest req) {
        WSConnectionImpl wsConnection = (WSConnectionImpl)super.createWebSocketInbound(s, req);
        wsConnection.setAttribute(ENVIRONMENT_CONTEXT, EnvironmentContext.getCurrent());
        LOG.debug("Websocket {}  http session {} context of ws {} is temporary {}",
                  wsConnection.getId(),
                  wsConnection.getHttpSession().getId(),
                  EnvironmentContext.getCurrent().getWorkspaceName(),
                  EnvironmentContext.getCurrent().isWorkspaceTemporary());
        return wsConnection;
    }

    @Override
    protected SecurityContext createSecurityContext(HttpServletRequest req) {
        final User user = EnvironmentContext.getCurrent().getUser();
        if (user == null) {
            return super.createSecurityContext(req);
        }
        final Principal principal = new SimplePrincipal(user.getName());
        final boolean secure = req.isSecure();
        final String authType = req.getAuthType();

        return new SecurityContext() {

            @Override
            public Principal getUserPrincipal() {
                return principal;
            }

            @Override
            public boolean isUserInRole(String role) {
                return user.isMemberOf(role);
            }

            @Override
            public boolean isSecure() {
                return secure;
            }

            @Override
            public String getAuthenticationScheme() {
                return authType;
            }
        };
    }
}