/**
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.apache.cxf.systest.sts.deployment;
import org.apache.cxf.sts.request.ReceivedToken;
import org.apache.cxf.sts.request.ReceivedToken.STATE;
import org.apache.cxf.sts.token.validator.TokenValidator;
import org.apache.cxf.sts.token.validator.TokenValidatorParameters;
import org.apache.cxf.sts.token.validator.TokenValidatorResponse;
import org.apache.cxf.ws.security.sts.provider.model.secext.BinarySecurityTokenType;
import org.apache.wss4j.common.principal.CustomTokenPrincipal;
import org.apache.xml.security.utils.Base64;
/**
* A TokenProvider implementation that validates a (custom) BinarySecurityToken.
*/
public class CustomBSTTokenValidator implements TokenValidator {
private static final String TOKEN_TYPE =
"http://custom.apache.org/token";
public boolean canHandleToken(ReceivedToken validateTarget) {
Object token = validateTarget.getToken();
if ((token instanceof BinarySecurityTokenType)
&& TOKEN_TYPE.equals(((BinarySecurityTokenType)token).getValueType())) {
return true;
}
return false;
}
public boolean canHandleToken(ReceivedToken validateTarget, String realm) {
return canHandleToken(validateTarget);
}
public TokenValidatorResponse validateToken(TokenValidatorParameters tokenParameters) {
TokenValidatorResponse response = new TokenValidatorResponse();
ReceivedToken validateTarget = tokenParameters.getToken();
validateTarget.setState(STATE.INVALID);
response.setToken(validateTarget);
if (!validateTarget.isBinarySecurityToken()) {
return response;
}
BinarySecurityTokenType binarySecurityToken = (BinarySecurityTokenType)validateTarget.getToken();
//
// Do some validation of the token here
//
if (Base64.encode("12345678".getBytes()).equals(binarySecurityToken.getValue())) {
validateTarget.setState(STATE.VALID);
}
response.setPrincipal(new CustomTokenPrincipal("alice"));
return response;
}
}