/***********************************************************************
*
* This file is part of WebScarab, an Open Web Application Security
* Project utility. For details, please see http://www.owasp.org/
*
* Copyright (c) 2011 FedICT
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
*/
package org.owasp.webscarab.plugin.openid;
import java.util.logging.Logger;
import org.owasp.webscarab.model.ConversationID;
import org.owasp.webscarab.model.HttpUrl;
import org.owasp.webscarab.model.NamedValue;
import org.owasp.webscarab.model.Request;
import org.owasp.webscarab.model.Response;
import org.owasp.webscarab.model.StoreException;
import org.owasp.webscarab.plugin.Framework;
import org.owasp.webscarab.plugin.Hook;
import org.owasp.webscarab.plugin.Plugin;
import org.owasp.webscarab.util.Encoding;
/**
*
* @author Frank Cornelis
*/
public class OpenId implements Plugin {
private Logger _logger = Logger.getLogger(getClass().getName());
private final OpenIdModel openIdModel;
private final OpenIdProxy openIdProxy;
private Thread _runThread = null;
public OpenId(Framework framework, OpenIdProxy openIdProxy) {
this.openIdModel = new OpenIdModel(framework.getModel());
this.openIdProxy = openIdProxy;
}
@Override
public String getPluginName() {
return "OpenID";
}
@Override
public void setSession(String type, Object store, String session) throws StoreException {
// empty
}
@Override
public void run() {
this.openIdModel.setStatus("Started");
this.openIdModel.setRunning(true);
this._runThread = Thread.currentThread();
this.openIdModel.setStopping(false);
while (!this.openIdModel.isStopping()) {
try {
Thread.sleep(100);
} catch (InterruptedException ie) {
}
}
this.openIdModel.setRunning(false);
this.openIdModel.setStatus("Stopped");
}
@Override
public boolean isRunning() {
return this.openIdModel.isRunning();
}
@Override
public boolean isBusy() {
return this.openIdModel.isBusy();
}
@Override
public String getStatus() {
return this.openIdModel.getStatus();
}
@Override
public boolean stop() {
this.openIdModel.setStopping(true);
try {
_runThread.join(5000);
} catch (InterruptedException ie) {
_logger.warning("Interrupted!");
}
return !this.openIdModel.isRunning();
}
@Override
public boolean isModified() {
return this.openIdModel.isModified();
}
@Override
public void flush() throws StoreException {
// empty
}
@Override
public void analyse(ConversationID id, Request request, Response response, String origin) {
String method = request.getMethod();
if ("GET".equals(method)) {
HttpUrl url = request.getURL();
String query = url.getQuery();
if (null != query) {
NamedValue[] values = NamedValue.splitNamedValues(query, "&", "=");
for (int i = 0; i < values.length; i++) {
String name = values[i].getName();
String value = Encoding.urlDecode(values[i].getValue());
if ("openid.ns".equals(name)) {
this.openIdModel.setOpenIDMessage(id, value);
} else if ("openid.mode".equals(name)) {
this.openIdModel.setOpenIDMessageType(id, value);
}
}
}
}
if ("POST".equals(method)) {
byte[] requestContent = request.getContent();
if (requestContent != null && requestContent.length > 0) {
String body = new String(requestContent);
NamedValue[] namedValues = NamedValue.splitNamedValues(
body, "&", "=");
for (int idx = 0; idx < namedValues.length; idx++) {
String name = namedValues[idx].getName();
String value = Encoding.urlDecode(namedValues[idx].getValue());
if ("openid.ns".equals(name)) {
this.openIdModel.setOpenIDMessage(id, value);
} else if ("openid.mode".equals(name)) {
this.openIdModel.setOpenIDMessageType(id, value);
}
}
}
}
}
@Override
public Hook[] getScriptingHooks() {
return new Hook[0];
}
@Override
public Object getScriptableObject() {
return null;
}
public OpenIdModel getModel() {
return this.openIdModel;
}
public OpenIdProxy getOpenIdProxy() {
return this.openIdProxy;
}
}