com.liferay.portal.spring.remoting.AuthenticatingHttpInvokerRequestExecutor.java Source code

Introduction

Here is the source code for com.liferay.portal.spring.remoting.AuthenticatingHttpInvokerRequestExecutor.java

Source

/**
 * Copyright (c) 2000-2012 Liferay, Inc. All rights reserved.
 *
 * This library is free software; you can redistribute it and/or modify it under
 * the terms of the GNU Lesser General Public License as published by the Free
 * Software Foundation; either version 2.1 of the License, or (at your option)
 * any later version.
 *
 * This library is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more
 * details.
 */

package com.liferay.portal.spring.remoting;

import com.liferay.portal.PwdEncryptorException;
import com.liferay.portal.kernel.util.GetterUtil;
import com.liferay.portal.kernel.util.StringPool;
import com.liferay.portal.security.pwd.PwdEncryptor;

import java.io.IOException;

import java.net.HttpURLConnection;

import org.apache.commons.codec.binary.Base64;

import org.springframework.remoting.httpinvoker.SimpleHttpInvokerRequestExecutor;

/**
 * <p>
 * An HttpInvoker request executor for Spring Remoting that provides HTTP BASIC
 * authentication information for service invocations.
 * </p>
 *
 * @author Joel Kozikowski
 */
public class AuthenticatingHttpInvokerRequestExecutor extends SimpleHttpInvokerRequestExecutor {

    public AuthenticatingHttpInvokerRequestExecutor() {
        super();
    }

    public long getUserId() {
        return _userId;
    }

    public void setUserId(long userId) {
        _userId = userId;
    }

    public String getPassword() {
        return _password;
    }

    public void setPassword(String password) throws PwdEncryptorException {
        _password = PwdEncryptor.encrypt(password);
    }

    /**
     * Called every time a HTTP invocation is made. This implementation allows
     * the parent to setup the connection, and then adds an
     * <code>Authorization</code> HTTP header property for BASIC authentication.
     */
    @Override
    protected void prepareConnection(HttpURLConnection con, int contentLength) throws IOException {

        super.prepareConnection(con, contentLength);

        if (getUserId() > 0) {
            String password = GetterUtil.getString(getPassword());

            String base64 = getUserId() + StringPool.COLON + password;

            con.setRequestProperty("Authorization", "Basic " + new String(Base64.encodeBase64(base64.getBytes())));
        }
    }

    private long _userId;
    private String _password;

}