ShibbolethRequestHeaderAuthenticationFilter.java

/*
 * Copyright 2014
 * Ubiquitous Knowledge Processing (UKP) Lab and FG Language Technology
 * Technische Universität Darmstadt
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *  http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package de.tudarmstadt.ukp.clarin.webanno.security.preauth;

import java.util.HashSet;
import java.util.Properties;
import java.util.Set;

import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;

import org.apache.commons.lang3.StringUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.security.provisioning.UserDetailsManager;
import org.springframework.security.web.authentication.preauth.RequestHeaderAuthenticationFilter;

import de.tudarmstadt.ukp.clarin.webanno.security.UserDao;
import de.tudarmstadt.ukp.clarin.webanno.security.model.Role;
import de.tudarmstadt.ukp.clarin.webanno.security.model.User;
import de.tudarmstadt.ukp.clarin.webanno.support.SettingsUtil;

public class ShibbolethRequestHeaderAuthenticationFilter
    extends RequestHeaderAuthenticationFilter
{
    private final Logger log = LoggerFactory.getLogger(getClass());

    private UserDetailsManager userDetailsManager;

    @Resource(name = "userRepository")
    private UserDao userRepository;

    private void newUserLogin(String aID, HttpServletRequest aRequest)
    {
        User u = new User();
        u.setUsername((String) super.getPreAuthenticatedPrincipal(aRequest));
        u.setPassword("");
        u.setEnabled(true);
        
        Set<Role> s = new HashSet<>();
        s.add(Role.ROLE_USER);
        Properties settings = SettingsUtil.getSettings();
        
        String extraRoles = settings.getProperty(SettingsUtil.CFG_AUTH_PREAUTH_NEWUSER_ROLES);
        if (StringUtils.isNotBlank(extraRoles)) {
            for (String role : extraRoles.split(",")) {
                try {
                    s.add(Role.valueOf(role.trim()));
                }
                catch (IllegalArgumentException e) {
                    log.debug("Ignoring unknown default role [" + role + "] for user ["
                            + u.getUsername() + "]");
                }
            }
        }
        u.setRoles(s);
        
        userRepository.create(u);
        log.debug("Created new user [" + u.getUsername() + "] with roles " + u.getRoles());
    }

    private void existingUserLogin(String aID, HttpServletRequest aRequest)
    {
        // Nothing to do
    }

    public void setUserDetailsManager(UserDetailsManager aUserDetailsManager)
    {
        userDetailsManager = aUserDetailsManager;
    }

    @Override
    protected Object getPreAuthenticatedPrincipal(HttpServletRequest aRequest)
    {
        String o = (String) super.getPreAuthenticatedPrincipal(aRequest);

        if (o != null && !o.equals("")) {
            if (!userDetailsManager.userExists(o)) {
                newUserLogin(o, aRequest);
            }
            else {
                existingUserLogin(o, aRequest);
            }
        }
        return o;
    }
}