package com.mozilla.bespin.auth;
/**
* Created by IntelliJ IDEA.
* User: dion
* Date: Dec 17, 2008
* Time: 9:57:17 AM
*/
import org.openid4java.discovery.Identifier;
import org.openid4java.discovery.DiscoveryInformation;
import org.openid4java.message.ax.FetchRequest;
import org.openid4java.message.ax.FetchResponse;
import org.openid4java.message.ax.AxMessage;
import org.openid4java.message.*;
import org.openid4java.OpenIDException;
import org.openid4java.server.RealmVerifier;
import org.openid4java.consumer.ConsumerManager;
import org.openid4java.consumer.ConsumerException;
import org.openid4java.consumer.VerificationResult;
import javax.servlet.http.HttpSession;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpServlet;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.ServletConfig;
import java.util.List;
import java.io.IOException;
import com.mozilla.bespin.RequestContext;
/**
* Sample Consumer (Relying Party) implementation.
*/
public class OpenIDAuth implements Authenticator
{
public ConsumerManager manager;
public OpenIDAuth() throws ConsumerException {
// instantiate a ConsumerManager object
// Don't try to enforce the realm at all
manager = new ConsumerManager();
RealmVerifier rv = new RealmVerifier();
rv.setEnforceRpId(false);
manager.setRealmVerifier(rv);
}
// --- placing the authentication request ---
public String authenticate(RequestContext ctx, String userSuppliedString, String password)
{
try
{
// configure the return_to URL where your application will receive
// the authentication responses from the OpenID provider
String returnToUrl = "http://localhost:8080/register/verify";
// --- Forward proxy setup (only if needed) ---
// ProxyProperties proxyProps = new ProxyProperties();
// proxyProps.setProxyName("proxy.example.com");
// proxyProps.setProxyPort(8080);
// HttpClientFactory.setProxyProperties(proxyProps);
// perform discovery on the user-supplied identifier
List discoveries = manager.discover(userSuppliedString);
// attempt to associate with the OpenID provider
// and retrieve one service endpoint for authentication
DiscoveryInformation discovered = manager.associate(discoveries);
// store the discovery information in the user's session
ctx.getSession().setAttribute("openid-disc", discovered);
// obtain a AuthRequest message to be sent to the OpenID provider
AuthRequest authReq = manager.authenticate(discovered, returnToUrl);
// Attribute Exchange example: fetching the 'email' attribute
FetchRequest fetch = FetchRequest.createFetchRequest();
fetch.addAttribute("email",
// attribute alias
"http://schema.openid.net/contact/email", // type URI
true); // required
// attach the extension to the authentication request
authReq.addExtension(fetch);
if (! discovered.isVersion2() )
{
// Option 1: GET HTTP-redirect to the OpenID Provider endpoint
// The only method supported in OpenID 1.x
// redirect-URL usually limited ~2048 bytes
try {
ctx.getResp().sendRedirect(authReq.getDestinationUrl(true));
} catch (IOException e) {
}
return null;
}
else
{
// Option 2: HTML FORM Redirection (Allows payloads >2048 bytes)
/*
RequestDispatcher dispatcher =
getServletContext().getRequestDispatcher("formredirection.jsp");
httpReq.setAttribute("parameterMap", authReq.getParameterMap());
httpReq.setAttribute("destinationUrl", authReq.getDestinationUrl(false));
dispatcher.forward(httpReq, httpResp);
*/
}
}
catch (OpenIDException e)
{
// present error to the user
}
return null;
}
// --- processing the authentication response ---
public Identifier verify(RequestContext ctx)
{
HttpServletRequest httpReq = ctx.getReq();
try
{
// extract the parameters from the authentication response
// (which comes in as a HTTP request from the OpenID provider)
ParameterList response =
new ParameterList(httpReq.getParameterMap());
// retrieve the previously stored discovery information
DiscoveryInformation discovered = (DiscoveryInformation)
httpReq.getSession().getAttribute("openid-disc");
// extract the receiving URL from the HTTP request
StringBuffer receivingURL = httpReq.getRequestURL();
String queryString = httpReq.getQueryString();
if (queryString != null && queryString.length() > 0)
receivingURL.append("?").append(httpReq.getQueryString());
// verify the response; ConsumerManager needs to be the same
// (static) instance used to place the authentication request
VerificationResult verification = manager.verify(
receivingURL.toString(),
response, discovered);
// examine the verification result and extract the verified identifier
Identifier verified = verification.getVerifiedId();
if (verified != null)
{
AuthSuccess authSuccess =
(AuthSuccess) verification.getAuthResponse();
if (authSuccess.hasExtension(AxMessage.OPENID_NS_AX))
{
FetchResponse fetchResp = (FetchResponse) authSuccess
.getExtension(AxMessage.OPENID_NS_AX);
List emails = fetchResp.getAttributeValues("email");
String email = (String) emails.get(0);
}
return verified; // success
}
}
catch (OpenIDException e)
{
// present error to the user
}
return null;
}
}