I have a custom login module that is working fine with jboss 4.2.1 and jboss 5
Beta 3. Caveat is I extend the AbstractServerLoginModule NOT
UsernamePasswordLoginModule. But this should not a big issue as
UsernamePasswordLoginModule extends AbstractServerLoginModule. So enjoy...
Code
package com.jaas.module;
|
| import java.math.BigDecimal;
| import java.security.Principal;
| import java.security.acl.Group;
| import java.sql.SQLException;
| import java.util.Arrays;
| import java.util.Map;
| import java.util.Set;
|
| import javax.naming.Context;
| import javax.naming.InitialContext;
| import javax.naming.NamingException;
| import javax.security.auth.Subject;
| import javax.security.auth.callback.Callback;
| import javax.security.auth.callback.CallbackHandler;
| import javax.security.auth.callback.NameCallback;
| import javax.security.auth.callback.PasswordCallback;
| import javax.security.auth.callback.UnsupportedCallbackException;
| import javax.security.auth.login.LoginException;
| import javax.sql.DataSource;
|
| import org.apache.commons.dbutils.QueryRunner;
| import org.apache.commons.dbutils.handlers.ArrayHandler;
| import org.jboss.security.SimpleGroup;
| import org.jboss.security.SimplePrincipal;
| import org.jboss.security.auth.spi.AbstractServerLoginModule;
|
| public class CustomLoginModule extends AbstractServerLoginModule {
|
| private Principal principal;
|
| private String authSql;
|
| private String rolesSql;
|
| private String name = null;
|
| private String password = null;
|
| @SuppressWarnings("unused")
| private String ssn = null;
|
| public void initialize(Subject subject, CallbackHandler callbackHandler,
| Map sharedState, Map options) {
| super.initialize(subject, callbackHandler, sharedState,
options);
| this.authSql = (String) options.get("authSql");
| this.rolesSql = (String) options.get("rolesSql");
| }
|
| public boolean login() throws LoginException {
|
| //this is a protected boolean in Super class
| loginOk = false;
| if (this.callbackHandler == null) {
| throw new LoginException("No callback handler is
available");
| }
|
| Callback callbacks[] = new Callback[2];
|
| callbacks[0] = new NameCallback("Name :");
| callbacks[1] = new PasswordCallback("Password :", false);
|
| try {
| this.callbackHandler.handle(callbacks);
| name = ((NameCallback) callbacks[0]).getName().trim();
| password = new String(((PasswordCallback) callbacks[1])
| .getPassword());
|
| Object[] results = (Object[])
getQueryRunner().query(authSql,
| new Object[] { name, password }, new
ArrayHandler());
|
| ssn = ((BigDecimal) results[3]).toString();
| principal = new CustomPrincipal((String) results[0],
| (String) results[1], ((BigDecimal)
results[2]).toString(),
| ((BigDecimal) results[3]).toString());
|
| loginOk = true;
|
| } catch (java.io.IOException ioe) {
| ioe.printStackTrace();
| throw new LoginException(ioe.toString());
| } catch (UnsupportedCallbackException ce) {
| ce.printStackTrace();
| throw new LoginException("Error: " +
ce.getCallback().toString());
| } catch (SQLException ex) {
| ex.printStackTrace();
| }
| return loginOk;
| }
|
| @Override
| protected Principal getIdentity() {
| return this.principal;
| }
|
| @Override
| protected Group[] getRoleSets() {
|
| Group roleGroup = new SimpleGroup("Roles");
| Group callerPrincipal = new SimpleGroup("CallerPrincipal");
| Group[] groups = { roleGroup, callerPrincipal };
|
| try {
| Object[] grps = (Object[])
getQueryRunner().query(rolesSql,
| new Object[] { name }, new
ArrayHandler());
| for (int i = 0; i < grps.length; i++) {
| roleGroup.addMember(new
SimplePrincipal(((String) grps)
| .trim()));
| }
| } catch (SQLException ex) {
| ex.printStackTrace();
| }
| callerPrincipal.addMember(this.principal);
| return groups;
| }
|
| public boolean commit() throws LoginException {
|
| boolean flag = false;
|
| if (!loginOk) {
| abort();
| throw new LoginException(
| "Error: Username Password failed to
authenticate ");
| }
|
| if (loginOk) {
| Set<? super Principal> setOfPrincipals =
subject.getPrincipals();
| setOfPrincipals.add(this.principal);
|
setOfPrincipals.addAll(Arrays.asList(this.getRoleSets()));
| flag = true;
| } else {
| flag = false;
| }
| return flag;
| }
|
| public boolean logout() {
|
| this.subject.getPrincipals().remove(this.principal);
| subject = null;
| return true;
|
| }
|
| public boolean abort() {
|
| if ((subject != null) && (this.principal != null)) {
| Set setOfPrincipals = subject.getPrincipals();
| setOfPrincipals.remove(this.principal);
| }
| subject = null;
| this.principal = null;
| return true;
|
| }
|
| private Context getContext() throws NamingException {
| return new InitialContext();
| }
|
| private DataSource getDataSource() {
| DataSource ds = null;
| try {
| ds = (DataSource)
getContext().lookup("java:jdbc/OracleDS");
| } catch (NamingException ne) {
| ne.printStackTrace();
| }
| return ds;
| }
|
| private QueryRunner getQueryRunner() {
| return new QueryRunner(getDataSource());
| }
|
| }
|
|
|
My Custom Principal
Code
package com.jaas.module;
|
| import java.security.Principal;
|
| public class CustomPrincipal implements Principal {
|
| private String firstName;
|
| private String lastName;
|
| private int age;
|
| private int ssn;
|
| public String getName() {
| String name = "";
| name = this.lastName != null ? this.firstName + " " +
this.lastName
| : this.firstName;
| return name;
| }
|
| public String getFirstName() {
| return this.firstName;
| }
|
| public String getLastName() {
| return this.lastName;
| }
|
| public int getAge() {
| return this.age;
| }
|
| private void setFirstName(String firstName) {
| this.firstName = firstName;
| }
|
| private void setLastName(String lastName) {
| this.lastName = lastName;
| }
|
| private void setAge(String age) {
| this.age = Integer.parseInt(age);
| }
|
| public CustomPrincipal(String fName, String lName, String age, String
ssn) {
| setFirstName(fName.trim());
| if (lName != null)
| setLastName(lName.trim());
| setAge(age.trim());
| setSsn(ssn.trim());
| }
|
| public CustomPrincipal(String name) {
| setFirstName(name.trim());
| }
|
| public int getSsn() {
| return this.ssn;
| }
|
| public void setSsn(String ssn) {
| this.ssn = Integer.parseInt(ssn);
| }
|
| }
|
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4118904#4118904
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4118904
_______________________________________________
jboss-user mailing list
jboss-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/jboss-user
