Examples of org.apache.sandesha2.security.SecurityManager

org.apache.sandesha2.storage.beans.InvokerBean
SecurityManager interface. This manages the link between the RM layer and Security, so that the CreateSequence message can be secured using a SecurityTokenReference. Once the sequence is secured using the STR, each inbound messgae must be checked to ensure the sender has demonstrated proof-of-possession of the referenced token. See the WS-RM 1.0 spec for details.

    String propertyKey = SandeshaUtil.getSequencePropertyKey(rmMsgCtx);
    
    // Check that both the Sequence header and message body have been secured properly
    SequencePropertyBean tokenBean = seqPropMgr.retrieve(propertyKey, Sandesha2Constants.SequenceProperties.SECURITY_TOKEN);
    if(tokenBean != null) {
      SecurityManager secManager = SandeshaUtil.getSecurityManager(msgCtx.getConfigurationContext());
      
      QName seqName = new QName(rmMsgCtx.getRMNamespaceValue(), Sandesha2Constants.WSRM_COMMON.SEQUENCE);
      
      SOAPEnvelope envelope = msgCtx.getEnvelope();
      OMElement body = envelope.getBody();
      OMElement seqHeader = envelope.getHeader().getFirstChildWithName(seqName);
      
      SecurityToken token = secManager.recoverSecurityToken(tokenBean.getValue());
      
      secManager.checkProofOfPossession(token, seqHeader, msgCtx);
      secManager.checkProofOfPossession(token, body, msgCtx);
    }
    
    //RM will not send sync responses. If sync acks are there this will be
    // made true again later.
    if (rmMsgCtx.getMessageContext().getOperationContext() != null) {

View Full Code Here

          e.toString());
      log.debug(message,e);
    }
    
    configContext.setProperty(Sandesha2Constants.SECURITY_MANAGER,null);
    SecurityManager util = SandeshaUtil.getSecurityManager(configContext);
    util.initSecurity(module);


  }

View Full Code Here

//    if (pollingMode)
//      SandeshaUtil.startPollingManager(configCtx);
    
    SecurityToken token = (SecurityToken) createSeqRMMessage.getProperty(Sandesha2Constants.SequenceProperties.SECURITY_TOKEN);
    if(token != null) {
      SecurityManager secManager = SandeshaUtil.getSecurityManager(configCtx);
      rmsBean.setSecurityTokenData(secManager.getTokenRecoveryData(token));
      
      // If we are using token based security, and the 1.1 spec level, then we
      // should introduce a UsesSequenceSTR header into the message.
      if(createSequencePart.getNamespaceValue().equals(Sandesha2Constants.SPEC_2006_08.NS_URI)) {
        UsesSequenceSTR header = new UsesSequenceSTR(null, Sandesha2Constants.SPEC_2006_08.NS_URI);

View Full Code Here

    // Open a connection to the endpoint
    HttpURLConnection connection = 
      FaultTestUtils.getHttpURLConnection("http://127.0.0.1:" + serverPort + "/axis2/services/RMSampleService",
          pingAction);


    StorageManager storageManager = 
      SandeshaUtil.getSandeshaStorageManager(serverConfigContext, serverConfigContext.getAxisConfiguration());
    
    RMDBeanMgr rmdBeanMgr = storageManager.getRMDBeanMgr();
    
    String seqID = SandeshaUtil.getUUID();
    
    // Mockup an RMDBean
    RMDBean rmdBean = new RMDBean();
    rmdBean.setSequenceID(seqID);
    rmdBean.setToEPR(AddressingConstants.Final.WSA_ANONYMOUS_URL);
    rmdBean.setAcksToEPR(AddressingConstants.Final.WSA_ANONYMOUS_URL);
    rmdBean.setReplyToEPR(AddressingConstants.Final.WSA_ANONYMOUS_URL);
    rmdBean.setRMVersion(Sandesha2Constants.SPEC_VERSIONS.v1_1);
    rmdBean.setServerCompletedMessages(new RangeString());
    // Flag that the sequence is closed.
    rmdBean.setClosed(true);
    
    // Create a transaction and insert the RMSBean
    Transaction tran = storageManager.getTransaction();
    
    rmdBeanMgr.insert(rmdBean);
    
    tran.commit();

View Full Code Here

      
      // Check that the sequence has been deleted.
      StorageManager storageManager = 
        SandeshaUtil.getSandeshaStorageManager(serverConfigContext, serverConfigContext.getAxisConfiguration());
      
      Transaction tran = storageManager.getTransaction();
      
      RMDBean finderBean = new RMDBean();
      List rmdBeans = storageManager.getRMDBeanMgr().find(finderBean);
      
      tran.commit();
      
      lastError = null;
      
      if (rmdBeans.isEmpty())
        lastError = new Error("rmdBeans empty " + rmdBeans);
      else {
        RMDBean bean = (RMDBean)rmdBeans.get(0);
        if (bean.isTerminated())
          break;
        
        lastError = new Error("RMDBean not deleted " + bean);
      }
    }


    if(lastError != null) throw lastError;


    while(System.currentTimeMillis() < limit) {
      Thread.sleep(tickTime); // Try the assertions each tick interval, until they pass or we time out
      
      // Check that the sequence has been deleted.
      StorageManager storageManager = 
        SandeshaUtil.getSandeshaStorageManager(serverConfigContext, serverConfigContext.getAxisConfiguration());
      
      Transaction tran = storageManager.getTransaction();
      
      RMDBean finderBean = new RMDBean();
      List rmdBeans = storageManager.getRMDBeanMgr().find(finderBean);
      
      tran.commit();
      
      lastError = null;
      
      if (!rmdBeans.isEmpty())
        lastError = new Error("rmdBeans not empty " + rmdBeans);

View Full Code Here

    rmdBean.setServerCompletedMessages(new RangeString());
    // Flag that the sequence is closed.
    rmdBean.setClosed(true);
    
    // Create a transaction and insert the RMSBean
    Transaction tran = storageManager.getTransaction();
    
    rmdBeanMgr.insert(rmdBean);
    
    tran.commit();


    
    OutputStream tmpOut2 = connection.getOutputStream();


    byte ar[] = getAppMessageAsBytes(seqID);

View Full Code Here

          pingAction);


    StorageManager storageManager = 
      SandeshaUtil.getSandeshaStorageManager(serverConfigContext, serverConfigContext.getAxisConfiguration());
    
    RMDBeanMgr rmdBeanMgr = storageManager.getRMDBeanMgr();
    
    String seqID = SandeshaUtil.getUUID();
    
    // Mockup an RMDBean
    RMDBean rmdBean = new RMDBean();
    rmdBean.setSequenceID(seqID);
    rmdBean.setToEPR(AddressingConstants.Final.WSA_ANONYMOUS_URL);
    rmdBean.setAcksToEPR(AddressingConstants.Final.WSA_ANONYMOUS_URL);
    rmdBean.setReplyToEPR(AddressingConstants.Final.WSA_ANONYMOUS_URL);
    rmdBean.setRMVersion(Sandesha2Constants.SPEC_VERSIONS.v1_1);
    rmdBean.setServerCompletedMessages(new RangeString());
    // Flag that the sequence is closed.
    rmdBean.setClosed(true);
    
    // Create a transaction and insert the RMSBean
    Transaction tran = storageManager.getTransaction();
    
    rmdBeanMgr.insert(rmdBean);
    
    tran.commit();


    
    OutputStream tmpOut2 = connection.getOutputStream();

View Full Code Here

      
      InMemoryStorageManager storageManager = new InMemoryStorageManager (configurationContext);
      
      Transaction transaction = storageManager.getTransaction();
      
      RMSBeanMgr rmsBeanMgr = storageManager.getRMSBeanMgr();
      
      RMSBean rmsBean = new RMSBean ();
      RMSBean duplicateRMSBean = new RMSBean ();
      
      rmsBean.setCreateSeqMsgID(SandeshaUtil.getUUID());
      duplicateRMSBean.setCreateSeqMsgID(SandeshaUtil.getUUID());
      
      String sequenceId = SandeshaUtil.getUUID();
      
      //we duplicate this sequenceID in both RMSBeans.
      rmsBean.setSequenceID(sequenceId);
      duplicateRMSBean.setSequenceID(sequenceId);
      
      rmsBeanMgr.insert(rmsBean);
      
      boolean exceptionThrown = false;
      try {
        rmsBeanMgr.insert(duplicateRMSBean);
      } catch (SandeshaStorageException e) {
        exceptionThrown = true;
      }
      
      transaction.commit();

View Full Code Here

    public void tearDown() throws Exception {
      transaction.commit();
    }


    public void testDelete() throws SandeshaStorageException {
        mgr.insert(new InvokerBean("Key1", 1001, "SeqId1"));
        mgr.delete("Key1");
        assertNull(mgr.retrieve("Key1"));
    }

View Full Code Here

        mgr.delete("Key1");
        assertNull(mgr.retrieve("Key1"));
    }


    public void testFind() throws SandeshaStorageException {
        mgr.insert(new InvokerBean("Key2", 1002, "SeqId2"));
        mgr.insert(new InvokerBean("Key3", 1003, "SeqId2"));


        InvokerBean bean = new InvokerBean();
        bean.setSequenceID("SeqId2");


        Iterator iter = mgr.find(bean).iterator();
        InvokerBean tmp = (InvokerBean) iter.next();


        if (tmp.getMessageContextRefKey().equals("Key2")) {
            tmp = (InvokerBean) iter.next();
            assertTrue(tmp.getMessageContextRefKey().equals("Key3"));
        } else {
            tmp = (InvokerBean) iter.next();
            assertTrue(tmp.getMessageContextRefKey().equals("Key2"));


        }
    }

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.apache.sandesha2.security.SecurityManager

org.apache.axiom.om.OMElement

org.apache.axiom.om.OMFactory

org.apache.axiom.soap.SOAPEnvelope

org.apache.axiom.soap.SOAPFactory

org.apache.axiom.soap.SOAPHeader

org.apache.axis2.addressing.EndpointReference

org.apache.axis2.AxisFault

org.apache.axis2.client.MessageSender

org.apache.axis2.client.Options

org.apache.axis2.context.AbstractContext

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.