/*
* JBoss, Home of Professional Open Source.
* Copyright 2014 Red Hat, Inc., and individual contributors
* as indicated by the @author tags.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.wildfly.security.sasl.anonymous;
import static org.wildfly.security._private.ElytronMessages.log;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.NameCallback;
import javax.security.sasl.SaslException;
import org.wildfly.common.Assert;
import org.wildfly.security.auth.principal.AnonymousPrincipal;
import org.wildfly.security.sasl.WildFlySasl;
import org.wildfly.security.sasl.util.AbstractSaslClient;
import org.wildfly.security.sasl.util.SaslMechanismInformation;
import org.wildfly.security.sasl.util.StringPrep;
import org.wildfly.security.util.ByteStringBuilder;
/**
* A client implementation of the RFC 4505 {@code ANONYMOUS} mechanism.
*
* @author <a href="mailto:david.lloyd@redhat.com">David M. Lloyd</a>
*/
public final class AnonymousSaslClient extends AbstractSaslClient {
private static final int INITIAL_STATE = 1;
/**
* Construct a new instance.
*
* @param protocol the protocol
* @param serverName the server name
* @param callbackHandler the callback handler to use for authentication
* @param authorizationId the possibly {@code null} protocol-dependent name used for authorization
*/
protected AnonymousSaslClient(final String protocol, final String serverName, final CallbackHandler callbackHandler, final String authorizationId) {
super(SaslMechanismInformation.Names.ANONYMOUS, protocol, serverName, callbackHandler, authorizationId, true);
setNegotiationState(INITIAL_STATE);
}
@Override
protected byte[] evaluateMessage(int state, final byte[] message) throws SaslException {
switch (state) {
case INITIAL_STATE:
if (message != null && message.length > 0) {
throw log.mechInvalidServerMessage(getMechanismName()).toSaslException();
}
NameCallback nameCallback = new NameCallback("Authentication name", "anonymous");
handleCallbacks(nameCallback);
String name = nameCallback.getName();
if (name == null) {
throw log.mechNotProvidedUserName(getMechanismName()).toSaslException();
}
if (name.length() > 255) {
throw log.mechAuthenticationNameTooLong(getMechanismName()).toSaslException();
}
if (name.isEmpty()) {
throw log.mechAuthenticationNameIsEmpty(getMechanismName()).toSaslException();
}
ByteStringBuilder b = new ByteStringBuilder();
StringPrep.encode(name, b, 0
| StringPrep.MAP_TO_NOTHING
| StringPrep.MAP_TO_SPACE
| StringPrep.FORBID_ASCII_CONTROL
| StringPrep.FORBID_NON_ASCII_CONTROL
| StringPrep.FORBID_PRIVATE_USE
| StringPrep.FORBID_NON_CHARACTER
| StringPrep.FORBID_SURROGATE
| StringPrep.FORBID_INAPPROPRIATE_FOR_PLAIN_TEXT
| StringPrep.FORBID_CHANGE_DISPLAY_AND_DEPRECATED
| StringPrep.FORBID_TAGGING
| StringPrep.NORMALIZE_KC
);
negotiationComplete();
return b.toArray();
}
throw Assert.impossibleSwitchCase(state);
}
public Object getNegotiatedProperty(final String propName) {
// Our principal is always anonymous, even if an authz name was requested.
return WildFlySasl.PRINCIPAL.equals(propName) ? AnonymousPrincipal.getInstance() : super.getNegotiatedProperty(propName);
}
}