Examples of org.apache.wss4j.common.ext.WSPasswordCallback

org.apache.wss4j.common.ext.WSPasswordCallback
Simple class to provide a password callback mechanism.
It uses the JAAS authentication mechanisms and callback methods. In addition to the identifier (user name) this class also provides information what type of information the callback handle method shall provide.
The WSPasswordCallback class defines the following usage codes:
- UNKNOWN - an unknown usage. Never used by the WSS4J implementation and shall be treated as an error by the handle method.
- DECRYPT - need a password to get the private key of this identifier (username) from the keystore. WSS4J uses this private key to decrypt the session (symmetric) key. Because the encryption method uses the public key to encrypt the session key it needs no password (a public key is usually not protected by a password).
- USERNAME_TOKEN - need the password to fill in or to verify a UsernameToken.
- SIGNATURE - need the password to get the private key of this identifier (username) from the keystore. WSS4J uses this private key to produce a signature. The signature verification uses the public key to verify the signature.
- SECURITY_CONTEXT_TOKEN - need the key to to be associated with a wsc:SecurityContextToken.
- PASSWORD_ENCRYPTOR_PASSWORD - return the password used with a PasswordEncryptor implementation to decrypt encrypted passwords stored in Crypto properties files

    }


    @Override
    public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        if (callbacks[0] instanceof WSPasswordCallback) {
            WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];


            if (pc.getUsage() == WSPasswordCallback.Usage.DECRYPT
                    || pc.getUsage() == WSPasswordCallback.Usage.SIGNATURE
                    || pc.getUsage() == WSPasswordCallback.Usage.USERNAME_TOKEN
                    ) {
                pc.setPassword(username);
            } else if (pc.getUsage() == WSPasswordCallback.Usage.SECRET_KEY
                    || pc.getUsage() == WSPasswordCallback.Usage.SECURITY_CONTEXT_TOKEN) {
                pc.setKey(secret);
            } else if (pc.getUsage() == WSPasswordCallback.Usage.PASSWORD_ENCRYPTOR_PASSWORD) {
                pc.setPassword("this-is-a-secret");
            } else {
                throw new UnsupportedCallbackException(pc, "Unrecognized CallbackHandlerImpl");
            }
        }
    }

View Full Code Here

                    }
                    byte[] encryptedEphemeralKey = cipher.wrap(secretKey);
                    
                    if (((WSSSecurityProperties)getSecurityProperties()).getCallbackHandler() != null) {
                        // Store the Encrypted Key in the CallbackHandler for processing on the inbound side
                        WSPasswordCallback callback = 
                            new WSPasswordCallback(securityToken.getId(), Usage.ENCRYPTED_KEY_TOKEN);
                        callback.setKey(encryptedEphemeralKey);
                        try {
                            ((WSSSecurityProperties)getSecurityProperties()).getCallbackHandler().handle(new Callback[]{callback});
                        } catch (IOException e) { // NOPMD
                            // Do nothing
                        } catch (UnsupportedCallbackException e) { // NOPMD

View Full Code Here

        this.secret = secret;
    }


    @Override
    public void handle(javax.security.auth.callback.Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];


//        if (pc.getUsage() == org.apache.wss4j.dom.WSPasswordCallback.DECRYPT || pc.getUsage() == org.apache.wss4j.WSPasswordCallback.SIGNATURE) {
        if ("wss40rev".equals(pc.getIdentifier())) {
            pc.setPassword("security");
        } else {
            pc.setPassword("default");
        }
/*        } else {
            throw new UnsupportedCallbackException(pc, "Unrecognized CallbackHandlerImpl");
        }
*/
        if (pc.getUsage() == WSPasswordCallback.Usage.SECRET_KEY ||
                pc.getUsage() == WSPasswordCallback.Usage.SECURITY_CONTEXT_TOKEN) {
            pc.setKey(secret);
        }
    }

View Full Code Here

    /**
     * It attempts to get the password from the private alias/passwords map.
     */
    public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        for (int i = 0; i < callbacks.length; i++) {
            WSPasswordCallback pc = (WSPasswordCallback) callbacks[i];


            String pass = passwords.get(pc.getIdentifier());
            if (pass != null) {
                pc.setPassword(pass);
                return;
            }
        }
    }

View Full Code Here

     * Here, we attempt to get the password from the private 
     * alias/passwords map.
     */
    public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        for (int i = 0; i < callbacks.length; i++) {
            WSPasswordCallback pc = (WSPasswordCallback)callbacks[i];


            String pass = passwords.get(pc.getIdentifier());
            if (pass != null) {
                pc.setPassword(pass);
                return;
            }
        }
    }

View Full Code Here

     * It attempts to get the password from the private 
     * alias/passwords map.
     */
    public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        for (int i = 0; i < callbacks.length; i++) {
            WSPasswordCallback pc = (WSPasswordCallback)callbacks[i];
            if (pc.getUsage() == WSPasswordCallback.Usage.PASSWORD_ENCRYPTOR_PASSWORD) {
                pc.setPassword("this-is-a-secret");
            } else {
                String pass = passwords.get(pc.getIdentifier());
                if (pass != null) {
                    pc.setPassword(pass);
                    return;
                } else {
                    pc.setPassword("password");
                }
            }
        }
    }

View Full Code Here

        (byte)0x34, (byte)0x04,
    };
    
    public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        for (int i = 0; i < callbacks.length; i++) {
            WSPasswordCallback pc = (WSPasswordCallback)callbacks[i];
            if (pc.getUsage() == WSPasswordCallback.Usage.SECRET_KEY) {
                pc.setKey(KEY);
            }
        }
    }

View Full Code Here

    private static final QName SERVICE_QNAME = new QName(NAMESPACE, "DoubleItService");
    
    public static class ServerPasswordCallback implements CallbackHandler {
        public void handle(Callback[] callbacks) throws IOException,
                UnsupportedCallbackException {
            WSPasswordCallback pc = (WSPasswordCallback) callbacks[0];


            if (pc.getIdentifier().equals("bob")) {
                // set the password on the callback. This will be compared to the
                // password which was sent from the client.
                pc.setPassword("pwd");
            }
        }

View Full Code Here

        private SecurityToken securityToken;
        
        @Override
        public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
            for (int i = 0; i < callbacks.length; i++) {
                WSPasswordCallback pc = (WSPasswordCallback)callbacks[i];
                if (securityToken != null && pc.getIdentifier().equals(securityToken.getId())) {
                    pc.setKey(securityToken.getSecret());
                } else {
                    new org.apache.cxf.systest.ws.common.KeystorePasswordCallback().handle(callbacks);
                }
                    
            }

View Full Code Here

    /**
     * Here, we attempt to get the password from the private alias/passwords map.
     */
    public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
        for (int i = 0; i < callbacks.length; i++) {
            WSPasswordCallback pc = (WSPasswordCallback)callbacks[i];


            // System.out.println("**************** Server checking id: "+pc.getIdentifer());


            String pass = passwords.get(pc.getIdentifier());
            if (pass != null) {
                pc.setPassword(pass);
                return;
            }
        }


        //

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.apache.wss4j.common.ext.WSPasswordCallback

demo.wssec.client.ClientCallbackHandler

demo.wssec.client.UTPasswordCallback

demo.wssec.server.ServerCallbackHandler

demo.wssec.server.UTPasswordCallback

demo.wssec.sts.STSCallbackHandler

org.apache.cxf.rs.security.common.SecurityUtils

org.apache.cxf.rs.security.saml.sso.KeystorePasswordCallback

org.apache.cxf.rs.security.saml.sso.SamlPostBindingFilter

org.apache.cxf.rs.security.saml.sso.SamlRedirectBindingFilter

org.apache.cxf.rs.security.xml.XmlSecInInterceptor

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.