/* * JBoss, Home of Professional Open Source. * Copyright 2012, Red Hat, Inc., and individual contributors * as indicated by the @author tags. See the copyright.txt file in the * distribution for a full listing of individual contributors. * * This is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as * published by the Free Software Foundation; either version 2.1 of * the License, or (at your option) any later version. * * This software is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public * License along with this software; if not, write to the Free * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA * 02110-1301 USA, or see the FSF site: http://www.fsf.org. */ package org.wildfly.extension.picketlink.federation.model.idp; import java.util.List; import org.jboss.as.controller.AttributeDefinition; import org.jboss.as.controller.ExtensionContext; import org.jboss.as.controller.OperationContext; import org.jboss.as.controller.OperationFailedException; import org.jboss.as.controller.OperationStepHandler; import org.jboss.as.controller.PathAddress; import org.jboss.as.controller.RestartParentWriteAttributeHandler; import org.jboss.as.controller.SimpleAttributeDefinition; import org.jboss.as.controller.SimpleAttributeDefinitionBuilder; import org.jboss.as.controller.access.management.SensitiveTargetAccessConstraintDefinition; import org.jboss.as.controller.registry.ManagementResourceRegistration; import org.jboss.dmr.ModelNode; import org.jboss.dmr.ModelType; import org.jboss.msc.service.ServiceName; import org.wildfly.extension.picketlink.common.model.ModelElement; import org.wildfly.extension.picketlink.federation.model.AbstractFederationResourceDefinition; import org.wildfly.extension.picketlink.federation.model.handlers.HandlerResourceDefinition; import org.wildfly.extension.picketlink.federation.service.IdentityProviderService; /** * @author <a href="mailto:psilva@redhat.com">Pedro Silva</a> * @since Mar 16, 2012 */ public class IdentityProviderResourceDefinition extends AbstractFederationResourceDefinition { public static final SimpleAttributeDefinition URL = new SimpleAttributeDefinitionBuilder(ModelElement.COMMON_URL.getName(), ModelType.STRING, false) .setAllowExpression(true) .build(); public static final SimpleAttributeDefinition SECURITY_DOMAIN = new SimpleAttributeDefinitionBuilder(ModelElement.COMMON_SECURITY_DOMAIN.getName(), ModelType.STRING, true) .setAccessConstraints(SensitiveTargetAccessConstraintDefinition.SECURITY_DOMAIN_REF) .build(); public static final SimpleAttributeDefinition ENCRYPT = new SimpleAttributeDefinitionBuilder(ModelElement.IDENTITY_PROVIDER_ENCRYPT.getName(), ModelType.BOOLEAN, true) .setDefaultValue(new ModelNode().set(false)) .setAllowExpression(true) .build(); public static final SimpleAttributeDefinition SUPPORT_SIGNATURES = new SimpleAttributeDefinitionBuilder(ModelElement.COMMON_SUPPORTS_SIGNATURES.getName(), ModelType.BOOLEAN, true) .setDefaultValue(new ModelNode().set(false)) .setAllowExpression(true) .build(); public static final SimpleAttributeDefinition STRICT_POST_BINDING = new SimpleAttributeDefinitionBuilder(ModelElement.COMMON_STRICT_POST_BINDING.getName(), ModelType.BOOLEAN, true) .setDefaultValue(new ModelNode(true)) .setAllowExpression(true) .build(); public static final SimpleAttributeDefinition EXTERNAL = new SimpleAttributeDefinitionBuilder(ModelElement.IDENTITY_PROVIDER_EXTERNAL.getName(), ModelType.BOOLEAN, true) .setDefaultValue(new ModelNode(false)) .setAllowExpression(true) .build(); public static final SimpleAttributeDefinition SUPPORT_METADATA = new SimpleAttributeDefinitionBuilder(ModelElement.COMMON_SUPPORT_METADATA.getName(), ModelType.BOOLEAN, true) .setDefaultValue(new ModelNode(false)) .setAllowExpression(true) .build(); public static final SimpleAttributeDefinition SSL_AUTHENTICATION = new SimpleAttributeDefinitionBuilder(ModelElement.IDENTITY_PROVIDER_SSL_AUTHENTICATION.getName(), ModelType.BOOLEAN, true) .setDefaultValue(new ModelNode(false)) .setAllowExpression(true) .build(); public static final SimpleAttributeDefinition[] ATTRIBUTE_DEFINITIONS = new SimpleAttributeDefinition[]{URL, SECURITY_DOMAIN, EXTERNAL, ENCRYPT, SUPPORT_SIGNATURES, STRICT_POST_BINDING, SSL_AUTHENTICATION, SUPPORT_METADATA}; private final ExtensionContext extensionContext; public IdentityProviderResourceDefinition(ExtensionContext extensionContext) { super(ModelElement.IDENTITY_PROVIDER, IdentityProviderAddHandler.INSTANCE, IdentityProviderRemoveHandler.INSTANCE, ATTRIBUTE_DEFINITIONS); this.extensionContext = extensionContext; } @Override public void registerChildren(ManagementResourceRegistration resourceRegistration) { addChildResourceDefinition(TrustDomainResourceDefinition.INSTANCE, resourceRegistration); addChildResourceDefinition(HandlerResourceDefinition.INSTANCE, resourceRegistration); addChildResourceDefinition(RoleGeneratorResourceDefinition.INSTANCE, resourceRegistration); addChildResourceDefinition(AttributeManagerResourceDefinition.INSTANCE, resourceRegistration); } @Override public void registerAttributes(ManagementResourceRegistration resourceRegistration) { super.registerAttributes(resourceRegistration); if (this.extensionContext.isRuntimeOnlyRegistrationValid()) { for (final SimpleAttributeDefinition def : IdentityProviderMetricsOperationHandler.ATTRIBUTES) { resourceRegistration.registerMetric(def, IdentityProviderMetricsOperationHandler.INSTANCE); } } } @Override protected OperationStepHandler createAttributeWriterHandler() { List<SimpleAttributeDefinition> attributes = getAttributes(); return new RestartParentWriteAttributeHandler(ModelElement.IDENTITY_PROVIDER.getName(), attributes.toArray(new AttributeDefinition[attributes.size()])) { @Override protected ServiceName getParentServiceName(PathAddress parentAddress) { return IdentityProviderService.createServiceName(parentAddress.getLastElement().getValue()); } @Override public void execute(OperationContext context, ModelNode operation) throws OperationFailedException { context.addStep(new IdentityProviderValidationStepHandler(), OperationContext.Stage.MODEL); super.execute(context, operation); } @Override protected void recreateParentService(OperationContext context, PathAddress parentAddress, ModelNode parentModel) throws OperationFailedException { IdentityProviderAddHandler.launchServices(context, parentModel, parentAddress, true); } }; } }