git commit: Adding a basic delegating authentication interceptor

[se...@apache.org]

Repository: cxf
Updated Branches:
  refs/heads/master 60ced92f7 -> 55a4b7bf9


Adding a basic delegating authentication interceptor


Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/55a4b7bf
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/55a4b7bf
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/55a4b7bf

Branch: refs/heads/master
Commit: 55a4b7bf99c22a0ccb3b8f3c321ecad187581061
Parents: 60ced92
Author: Sergey Beryozkin <sb...@talend.com>
Authored: Fri Feb 21 12:36:56 2014 +0000
Committer: Sergey Beryozkin <sb...@talend.com>
Committed: Fri Feb 21 12:36:56 2014 +0000

----------------------------------------------------------------------
 .../DelegatingAuthenticationInterceptor.java    | 67 ++++++++++++++++++++
 1 file changed, 67 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cxf/blob/55a4b7bf/core/src/main/java/org/apache/cxf/interceptor/security/DelegatingAuthenticationInterceptor.java
----------------------------------------------------------------------
diff --git a/core/src/main/java/org/apache/cxf/interceptor/security/DelegatingAuthenticationInterceptor.java b/core/src/main/java/org/apache/cxf/interceptor/security/DelegatingAuthenticationInterceptor.java
new file mode 100644
index 0000000..3a9b5ae
--- /dev/null
+++ b/core/src/main/java/org/apache/cxf/interceptor/security/DelegatingAuthenticationInterceptor.java
@@ -0,0 +1,67 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package org.apache.cxf.interceptor.security;
+
+import java.util.Collections;
+import java.util.Map;
+
+import org.apache.cxf.helpers.CastUtils;
+import org.apache.cxf.interceptor.Fault;
+import org.apache.cxf.interceptor.Interceptor;
+import org.apache.cxf.message.Message;
+import org.apache.cxf.phase.AbstractPhaseInterceptor;
+import org.apache.cxf.phase.Phase;
+
+public class DelegatingAuthenticationInterceptor extends AbstractPhaseInterceptor<Message> {
+    
+    private static final String AUTHORIZATION_HEADER = "Authorization";
+    
+    private Map<String, Interceptor<Message>> authenticationHandlers = Collections.emptyMap(); 
+    
+    public DelegatingAuthenticationInterceptor() {
+        super(Phase.UNMARSHAL);
+    }
+    
+    public DelegatingAuthenticationInterceptor(String phase) {
+        super(phase);
+    }
+    
+    public void handleMessage(Message message) throws Fault {
+        
+        String scheme = getAuthenticationScheme(message);
+        Interceptor<Message> handler = authenticationHandlers.get(scheme);
+        if (handler == null) {
+            throw new AuthenticationException();
+        } 
+        handler.handleMessage(message);
+    }
+
+    public void setSchemeHandlers(Map<String, Interceptor<Message>> handlers) {
+        this.authenticationHandlers = handlers;
+    }
+    
+    protected String getAuthenticationScheme(Message message) {
+        Map<String, String> headers = CastUtils.cast((Map<?, ?>)message.get(Message.PROTOCOL_HEADERS));
+        if (headers == null || !headers.containsKey(AUTHORIZATION_HEADER)) {
+            throw new AuthenticationException();
+        }
+        return headers.get(AUTHORIZATION_HEADER).split(" ")[0].trim();
+    }
+    
+}