net.triptech.buildulator.service.OpenIdAuthenticationFailureHandler.java Source code

Introduction

Here is the source code for net.triptech.buildulator.service.OpenIdAuthenticationFailureHandler.java

Source

/*******************************************************************************
 * Copyright (c) 2012 David Harrison, Triptech Ltd.
 * All rights reserved. This program and the accompanying materials
 * are made available under the terms of the GNU Public License v3.0
 * which accompanies this distribution, and is available at
 * http://www.gnu.org/licenses/gpl.html
 *
 * Contributors:
 *     David Harrison, Triptech Ltd - initial API and implementation
 ******************************************************************************/
package net.triptech.buildulator.service;

import java.io.IOException;
import java.util.Calendar;
import java.util.List;
import java.util.Random;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import net.triptech.buildulator.model.Person;
import net.triptech.buildulator.model.UserRole;
import net.triptech.buildulator.model.UserStatus;

import org.apache.commons.lang.StringUtils;
import org.springframework.security.authentication.DisabledException;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.security.openid.OpenIDAttribute;
import org.springframework.security.openid.OpenIDAuthenticationStatus;
import org.springframework.security.openid.OpenIDAuthenticationToken;
import org.springframework.security.web.DefaultRedirectStrategy;
import org.springframework.security.web.RedirectStrategy;
import org.springframework.security.web.authentication.AuthenticationFailureHandler;

/**
 * The Class OpenIdAuthenticationFailureHandler.
 */
public class OpenIdAuthenticationFailureHandler extends OpenIdAuthenticationBase
        implements AuthenticationFailureHandler {

    /**
     * Called when an authentication attempt fails.
     *
     * @param request - the request during which the authentication attempt occurred.
     * @param response - the response.
     * @param exception - the exception which was thrown to reject the authentication
     * request.
     * @throws java.io.IOException
     * @throws javax.servlet.ServletException
     */
    @Override
    public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response,
            AuthenticationException authenticationException) throws IOException, ServletException {

        if (authenticationException instanceof DisabledException) {
            RedirectStrategy redirectStrategy = new DefaultRedirectStrategy();
            redirectStrategy.sendRedirect(request, response, "/accountDisabled");
        }

        if (isFailedDueToUserNotRegistered(authenticationException)) {

            OpenIDAuthenticationToken token = (OpenIDAuthenticationToken) authenticationException
                    .getAuthentication();

            Person person = Person.findByOpenIdIdentifier(token.getIdentityUrl());

            if (person == null) {

                // The person does not exist, create
                person = createPerson(token);

                // Recreate OpenIDAuthentication token, transfer values from existing
                // token, and assign roles from retrieved user. Since grantedAuthorities
                // is unmodifiable list and no way to update the pre created token.

                OpenIDAuthenticationToken newToken = new OpenIDAuthenticationToken(person, person.getAuthorities(),
                        token.getIdentityUrl(), token.getAttributes());
                newToken.setAuthenticated(true);

                token.setDetails(person);
                SecurityContextHolder.getContext().setAuthentication(newToken);

                // Transfer any previous projects to the new user
                transferProjects(request, person);

                RedirectStrategy redirectStrategy = new DefaultRedirectStrategy();
                redirectStrategy.sendRedirect(request, response, "/user");
            }
        }
    }

    /**
     * Checks if is failed due to user not registered.
     *
     * @param authenticationException the authentication exception
     * @return true, if is failed due to user not registered
     */
    private boolean isFailedDueToUserNotRegistered(AuthenticationException authenticationException) {

        return null != authenticationException && authenticationException instanceof UsernameNotFoundException
                && authenticationException.getAuthentication() instanceof OpenIDAuthenticationToken
                && ((OpenIDAuthenticationToken) authenticationException.getAuthentication()).getStatus()
                        .equals(OpenIDAuthenticationStatus.SUCCESS);
    }

    /**
     * Creates the person object based on the supplied OpenID attributes.
     *
     * @param token the token
     * @return the person
     */
    private Person createPerson(final OpenIDAuthenticationToken token) {

        Person person = new Person();

        // The person does not exist, create
        String email = null;
        String firstName = null;
        String lastName = null;

        String id = token.getIdentityUrl();
        List<OpenIDAttribute> attributes = token.getAttributes();

        for (OpenIDAttribute attribute : attributes) {
            if (attribute.getName().equals("email")) {
                email = attribute.getValues().get(0);
            }
            if (attribute.getName().equals("firstName")) {
                firstName = attribute.getValues().get(0);
            }
            if (attribute.getName().equals("lastName")) {
                lastName = attribute.getValues().get(0);
            }
        }

        if (StringUtils.isBlank(email)) {
            Random generator = new Random();
            email = String.valueOf(generator.nextInt()) + "@"
                    + String.valueOf(Calendar.getInstance().getTimeInMillis());
        }
        if (StringUtils.isBlank(firstName)) {
            firstName = "New";
        }
        if (StringUtils.isBlank(lastName)) {
            lastName = "User";
        }

        UserRole role = UserRole.ROLE_USER;
        if (Person.countPeople() == 0) {
            role = UserRole.ROLE_ADMIN;
        }

        person = new Person();
        person.setOpenIdIdentifier(id);

        person.setEmailAddress(email);
        person.setFirstName(firstName);
        person.setLastName(lastName);
        person.setUserRole(role);
        person.setUserStatus(UserStatus.ACTIVE);

        person.persist();

        return person;
    }
}