Package org.codelibs.fess.sso.aad

Class AzureAdAuthenticator

java.lang.Object

org.codelibs.fess.sso.aad.AzureAdAuthenticator

All Implemented Interfaces:

SsoAuthenticator

public class AzureAdAuthenticator
extends java.lang.Object
implements SsoAuthenticator

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
protected class	AzureAdAuthenticator.StateData

Field Summary

Fields

Modifier and Type	Field	Description
protected long	acquisitionTimeout
protected static java.lang.String	AZUREAD_AUTHORITY
protected static java.lang.String	AZUREAD_CLIENT_ID
protected static java.lang.String	AZUREAD_CLIENT_SECRET
protected static java.lang.String	AZUREAD_REPLY_URL
protected static java.lang.String	AZUREAD_STATE_TTL
protected static java.lang.String	AZUREAD_TENANT
protected static java.lang.String	CODE
protected static java.lang.String	ERROR
protected static java.lang.String	ERROR_DESCRIPTION
protected static java.lang.String	ERROR_URI
protected com.google.common.cache.Cache<java.lang.String,org.codelibs.core.misc.Pair<java.lang.String[],java.lang.String[]>>	groupCache
protected long	groupCacheExpiry
protected static java.lang.String	ID_TOKEN
protected static java.lang.String	STATE
protected static java.lang.String	STATES

Constructor Summary

Constructors

Constructor	Description
AzureAdAuthenticator()

Method Summary

Modifier and Type	Method	Description
protected boolean	containsAuthenticationData(javax.servlet.http.HttpServletRequest request)
protected com.microsoft.aad.adal4j.AuthenticationResult	getAccessToken(com.nimbusds.oauth2.sdk.AuthorizationCode authorizationCode, java.lang.String currentUri)
com.microsoft.aad.adal4j.AuthenticationResult	getAccessToken(java.lang.String refreshToken)
protected java.lang.String	getAuthority()
protected java.lang.String	getAuthUrl(javax.servlet.http.HttpServletRequest request)
protected java.lang.String	getClientId()
protected java.lang.String	getClientSecret()
protected java.util.List<java.lang.String>	getDefaultGroupList()
protected java.util.List<java.lang.String>	getDefaultRoleList()
org.lastaflute.web.login.credential.LoginCredential	getLoginCredential()
protected org.codelibs.core.misc.Pair<java.lang.String[],java.lang.String[]>	getParentGroup(AzureAdCredential.AzureAdUser user, java.lang.String id)
protected java.lang.String	getReplyUrl(javax.servlet.http.HttpServletRequest request)
protected long	getStateTtl()
protected java.lang.String	getTenant()
void	init()
protected com.nimbusds.openid.connect.sdk.AuthenticationResponse	parseAuthenticationResponse(java.lang.String url, java.util.Map<java.lang.String,java.util.List<java.lang.String>> params)
protected org.lastaflute.web.login.credential.LoginCredential	processAuthenticationData(javax.servlet.http.HttpServletRequest request)
protected void	processGroup(AzureAdCredential.AzureAdUser user, java.util.List<java.lang.String> groupList, java.util.List<java.lang.String> roleList, java.lang.String id)
protected void	processMemberOf(AzureAdCredential.AzureAdUser user, java.util.List<java.lang.String> groupList, java.util.List<java.lang.String> roleList, java.lang.String url)
protected void	processParentGroup(AzureAdCredential.AzureAdUser user, java.util.List<java.lang.String> groupList, java.util.List<java.lang.String> roleList, java.lang.String id)
protected AzureAdAuthenticator.StateData	removeStateFromSession(javax.servlet.http.HttpSession session, java.lang.String state)
void	resolveCredential(FessLoginAssist.LoginCredentialResolver resolver)
void	setAcquisitionTimeout(long acquisitionTimeout)
void	setGroupCacheExpiry(long groupCacheExpiry)
protected void	storeStateInSession(javax.servlet.http.HttpSession session, java.lang.String state, java.lang.String nonce)
void	updateMemberOf(AzureAdCredential.AzureAdUser user)
protected void	validateAuthRespMatchesCodeFlow(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse oidcResponse)
protected void	validateNonce(AzureAdAuthenticator.StateData stateData, com.microsoft.aad.adal4j.AuthenticationResult authData)
protected AzureAdAuthenticator.StateData	validateState(javax.servlet.http.HttpSession session, java.lang.String state)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AZUREAD_STATE_TTL

protected static final java.lang.String AZUREAD_STATE_TTL

See Also:

Constant Field Values

AZUREAD_AUTHORITY

protected static final java.lang.String AZUREAD_AUTHORITY

See Also:

Constant Field Values

AZUREAD_TENANT

protected static final java.lang.String AZUREAD_TENANT

See Also:

Constant Field Values

AZUREAD_CLIENT_SECRET

protected static final java.lang.String AZUREAD_CLIENT_SECRET

See Also:

Constant Field Values

AZUREAD_CLIENT_ID

protected static final java.lang.String AZUREAD_CLIENT_ID

See Also:

Constant Field Values

AZUREAD_REPLY_URL

protected static final java.lang.String AZUREAD_REPLY_URL

See Also:

Constant Field Values

STATES

protected static final java.lang.String STATES

See Also:

Constant Field Values

STATE

protected static final java.lang.String STATE

See Also:

Constant Field Values

ERROR

protected static final java.lang.String ERROR

See Also:

Constant Field Values

ERROR_DESCRIPTION

protected static final java.lang.String ERROR_DESCRIPTION

See Also:

Constant Field Values

ERROR_URI

protected static final java.lang.String ERROR_URI

See Also:

Constant Field Values

ID_TOKEN

protected static final java.lang.String ID_TOKEN

See Also:

Constant Field Values

CODE

protected static final java.lang.String CODE

See Also:

Constant Field Values

acquisitionTimeout

protected long acquisitionTimeout

groupCache

protected com.google.common.cache.Cache<java.lang.String,org.codelibs.core.misc.Pair<java.lang.String[],java.lang.String[]>> groupCache

groupCacheExpiry

protected long groupCacheExpiry

Constructor Detail

AzureAdAuthenticator

public AzureAdAuthenticator()

Method Detail

init

@PostConstruct
public void init()

getLoginCredential

public org.lastaflute.web.login.credential.LoginCredential getLoginCredential()

Specified by:

getLoginCredential in interface SsoAuthenticator

getAuthUrl

protected java.lang.String getAuthUrl(javax.servlet.http.HttpServletRequest request)

storeStateInSession

protected void storeStateInSession(javax.servlet.http.HttpSession session,
                                   java.lang.String state,
                                   java.lang.String nonce)

processAuthenticationData

protected org.lastaflute.web.login.credential.LoginCredential processAuthenticationData(javax.servlet.http.HttpServletRequest request)

parseAuthenticationResponse

protected com.nimbusds.openid.connect.sdk.AuthenticationResponse parseAuthenticationResponse(java.lang.String url,
                                                                                             java.util.Map<java.lang.String,java.util.List<java.lang.String>> params)

validateNonce

protected void validateNonce(AzureAdAuthenticator.StateData stateData,
                             com.microsoft.aad.adal4j.AuthenticationResult authData)

getAccessToken

public com.microsoft.aad.adal4j.AuthenticationResult getAccessToken(java.lang.String refreshToken)

getAccessToken

protected com.microsoft.aad.adal4j.AuthenticationResult getAccessToken(com.nimbusds.oauth2.sdk.AuthorizationCode authorizationCode,
                                                                       java.lang.String currentUri)

validateAuthRespMatchesCodeFlow

protected void validateAuthRespMatchesCodeFlow(com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse oidcResponse)

validateState

protected AzureAdAuthenticator.StateData validateState(javax.servlet.http.HttpSession session,
                                                       java.lang.String state)

removeStateFromSession

protected AzureAdAuthenticator.StateData removeStateFromSession(javax.servlet.http.HttpSession session,
                                                                java.lang.String state)

containsAuthenticationData

protected boolean containsAuthenticationData(javax.servlet.http.HttpServletRequest request)

updateMemberOf

public void updateMemberOf(AzureAdCredential.AzureAdUser user)

processMemberOf

protected void processMemberOf(AzureAdCredential.AzureAdUser user,
                               java.util.List<java.lang.String> groupList,
                               java.util.List<java.lang.String> roleList,
                               java.lang.String url)

processParentGroup

protected void processParentGroup(AzureAdCredential.AzureAdUser user,
                                  java.util.List<java.lang.String> groupList,
                                  java.util.List<java.lang.String> roleList,
                                  java.lang.String id)

getParentGroup

protected org.codelibs.core.misc.Pair<java.lang.String[],java.lang.String[]> getParentGroup(AzureAdCredential.AzureAdUser user,
                                                                                                  java.lang.String id)

processGroup

protected void processGroup(AzureAdCredential.AzureAdUser user,
                            java.util.List<java.lang.String> groupList,
                            java.util.List<java.lang.String> roleList,
                            java.lang.String id)

getDefaultGroupList

protected java.util.List<java.lang.String> getDefaultGroupList()

getDefaultRoleList

protected java.util.List<java.lang.String> getDefaultRoleList()

getClientId

protected java.lang.String getClientId()

getClientSecret

protected java.lang.String getClientSecret()

getTenant

protected java.lang.String getTenant()

getAuthority

protected java.lang.String getAuthority()

getStateTtl

protected long getStateTtl()

getReplyUrl

protected java.lang.String getReplyUrl(javax.servlet.http.HttpServletRequest request)

resolveCredential

public void resolveCredential(FessLoginAssist.LoginCredentialResolver resolver)

Specified by:

resolveCredential in interface SsoAuthenticator

setAcquisitionTimeout

public void setAcquisitionTimeout(long acquisitionTimeout)

setGroupCacheExpiry

public void setGroupCacheExpiry(long groupCacheExpiry)