com.globocom.grou.security.KeystoneAuthFilter.java Source code

Introduction

Here is the source code for com.globocom.grou.security.KeystoneAuthFilter.java

Source

/*
 * Copyright (c) 2017-2017 Globo.com
 * All rights reserved.
 *
 * This source is subject to the Apache License, Version 2.0.
 * Please see the LICENSE file for more information.
 *
 * Authors: See AUTHORS file
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.globocom.grou.security;

import com.fasterxml.jackson.databind.JsonNode;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.globocom.grou.security.util.CachedHttpServletRequest;
import com.google.common.io.CharStreams;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.http.HttpMethod;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.util.Assert;
import org.springframework.web.filter.OncePerRequestFilter;

import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.InputStreamReader;
import java.nio.charset.Charset;

public class KeystoneAuthFilter extends OncePerRequestFilter {

    public static final String AUTH_PROBLEM_ERRORMSG = "Auth problem. Check token or project scope";
    public static final String AUTH_TOKEN_HEADER = "X-Auth-Token";
    public static final String PROJECT_SCOPE_HEADER = "X-Project";

    private static final Logger LOGGER = LoggerFactory.getLogger(KeystoneAuthFilter.class);

    private final ObjectMapper mapper = new ObjectMapper();

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response,
            FilterChain filterChain) throws ServletException, IOException {
        boolean isPostMethod = HttpMethod.POST.toString().equals(request.getMethod());
        boolean isDeletePMethod = HttpMethod.DELETE.toString().equals(request.getMethod());
        boolean isPutMethod = HttpMethod.PUT.toString().equals(request.getMethod());
        boolean isPatchMethod = HttpMethod.PATCH.toString().equals(request.getMethod());

        if (!(isPostMethod || isDeletePMethod || isPutMethod || isPatchMethod)) {
            filterChain.doFilter(request, response);
            return;
        }

        String token = request.getHeader(AUTH_TOKEN_HEADER);
        if (token == null) {
            throw new SecurityException(AUTH_PROBLEM_ERRORMSG);
        }
        if (isPostMethod) {
            request = new CachedHttpServletRequest(request);
            JsonNode testJson = getJsonFromBody(request);
            String projectName = testJson.get("project").asText();
            auth(token, projectName);
        } else {
            String projectName = request.getHeader(PROJECT_SCOPE_HEADER);
            auth(token, projectName);
        }
        filterChain.doFilter(request, response);
    }

    private JsonNode getJsonFromBody(HttpServletRequest request) throws IOException {
        String bodyStr = CharStreams
                .toString(new InputStreamReader(request.getInputStream(), Charset.defaultCharset()));
        return mapper.readTree(bodyStr);
    }

    private void auth(String xAuthToken, String projectName) throws SecurityException {
        Assert.notNull(projectName, "Project is NULL");

        LOGGER.info("Using project: {}", projectName);

        Authentication auth = new KeystoneAuthenticationToken(xAuthToken, projectName);
        SecurityContextHolder.getContext().setAuthentication(auth);
        if (auth.getPrincipal() == null)
            throw new SecurityException(AUTH_PROBLEM_ERRORMSG);
    }
}