actionpip.java

一个完整的XACML工程,学习XACML技术的好例子!

/*
* Copyright (c) 2006, University of Kent
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without 
* modification, are permitted provided that the following conditions are met:
*
* Redistributions of source code must retain the above copyright notice, this 
* list of conditions and the following disclaimer.
* 
* Redistributions in binary form must reproduce the above copyright notice, 
* this list of conditions and the following disclaimer in the documentation 
* and/or other materials provided with the distribution. 
*
* 1. Neither the name of the University of Kent nor the names of its 
* contributors may be used to endorse or promote products derived from this 
* software without specific prior written permission. 
*
* 2. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS  
* IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
* PURPOSE ARE DISCLAIMED. 
*
* 3. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 
* POSSIBILITY OF SUCH DAMAGE.
*
* 4. YOU AGREE THAT THE EXCLUSIONS IN PARAGRAPHS 2 AND 3 ABOVE ARE REASONABLE
* IN THE CIRCUMSTANCES.  IN PARTICULAR, YOU ACKNOWLEDGE (1) THAT THIS
* SOFTWARE HAS BEEN MADE AVAILABLE TO YOU FREE OF CHARGE, (2) THAT THIS
* SOFTWARE IS NOT "PRODUCT" QUALITY, BUT HAS BEEN PRODUCED BY A RESEARCH
* GROUP WHO DESIRE TO MAKE THIS SOFTWARE FREELY AVAILABLE TO PEOPLE WHO WISH
* TO USE IT, AND (3) THAT BECAUSE THIS SOFTWARE IS NOT OF "PRODUCT" QUALITY
* IT IS INEVITABLE THAT THERE WILL BE BUGS AND ERRORS, AND POSSIBLY MORE
* SERIOUS FAULTS, IN THIS SOFTWARE.
*
* 5. This license is governed, except to the extent that local laws
* necessarily apply, by the laws of England and Wales.
*/
/*
 * ActionPIP.java
 *
 * Created on 02 November 2006, 12:19
 *
 * To change this template, choose Tools | Template Manager
 * and open the template in the editor.
 */

package uk.ac.kent.dpa.custom.pip;

import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.parsers.ParserConfigurationException;
import org.globus.wsrf.security.authorization.*;
import org.w3c.dom.*;
import javax.security.auth.Subject;
import javax.xml.rpc.handler.MessageContext;
import javax.xml.namespace.QName;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.globus.wsrf.impl.security.authorization.exceptions.*;
import java.util.*;
import java.io.*;
import java.security.Principal;
import org.apache.axis.message.addressing.*;
import org.apache.axis.message.MessageElement;
import uk.ac.kent.dpa.custom.authz.util.ActionParameter;
import javax.xml.parsers.*;
import org.globus.wsrf.security.SecurityException;
import uk.ac.kent.dpa.custom.authz.util.*;
import issrg.web.service.EncodeXML;
import uk.ac.kent.dpa.obligation.engine.BasicDom;
import org.apache.axis.message.SOAPBody;
import javax.xml.soap.SOAPMessage;
import javax.xml.soap.SOAPException;
import javax.xml.rpc.handler.soap.SOAPMessageContext;
/**
 *
 * @author Linying Su
 */

public class ActionPIP implements PIP {
    
    private HashMap actions = new HashMap();
    private static Log logger = LogFactory.getLog(ActionPIP.class.getName());
    /** Creates a new instance of ActionPIP */
    public ActionPIP() {
    }

    public void collectAttributes(Subject subject, MessageContext ctx, QName operation) throws AttributeException {
        String method = operation.getLocalPart();
        logger.info("the action PIP is called for "+method);
        ParameterPath parameter = (ParameterPath)this.actions.get(method);
        QName[] keys = new QName[0];
        QName[] path = null;
        if (parameter==null) {
            logger.debug("this method has no parameter");
            keys = new QName[0];
        } else {
            path = parameter.getParamPath();
            Set set = parameter.getParamMap().keySet();
            if (set!=null) {
                keys = new QName[set.size()];
                keys = (QName[])set.toArray(keys);// each key is a parameter name
                logger.debug("there are "+keys.length+" parameters for "+method);
            }
        }
        SOAPMessage soapMsg =  ((SOAPMessageContext)ctx).getMessage();
        SOAPBody soapBody;
        try {
            soapBody = (SOAPBody)soapMsg.getSOAPBody();
        } catch (SOAPException exp) {
            throw new AttributeException("Error:"+exp);
        }

        Element soapBodyElem;
        try {
            soapBodyElem = soapBody.getAsDOM();
        } catch (Exception exp) {
            throw new AttributeException("Error:"+exp);
        }

        DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
        factory.setValidating(false);

        try {
            Document doc = factory.newDocumentBuilder().newDocument();
            Element request = doc.createElement("Request");
            request.setAttribute("xmlns","urn:oasis:names:tc:xacml:1.0:context");
            request.setAttribute("xmlns:globus","http://www.globus.org/namespaces");
            request.setAttribute("xmlns:xsi","http://www.w3.org/2001/XMLSchema-instance");
            Element action = doc.createElement("Action");
            Element attribute = doc.createElement("Attribute");
            attribute.setAttribute("AttributeId","urn:oasis:names:tc:xacml:1.0:action:action-id");
            attribute.setAttribute("DataType","http://www.w3.org/2001/XMLSchema#string");
            Element value = doc.createElement("AttributeValue");
            Text text = doc.createTextNode(method);
            value.appendChild(text);
            attribute.appendChild(value);
            action.appendChild(attribute);
            
            for (int i=0; i<keys.length; i++) {
                TypeAndValue tv = (TypeAndValue)parameter.getParamMap().get(keys[i]);       
                NodeList list = soapBodyElem.getChildNodes();
                for (int j=0; j<list.getLength(); j++) {
                    Node node = list.item(j);
                    if (Text.class.isAssignableFrom(node.getClass())) continue;
                    String v = this.depthTraverse(node,path);
                    tv.setValue(v);
                }
                attribute = doc.createElement("Attribute");
                attribute.setAttribute("AttributeId","globus:"+keys[i].getLocalPart());
                attribute.setAttribute("DataType","http://www.w3.org/2001/XMLSchema#"+this.getConvertedType(tv.getDataType()));
                value = doc.createElement("AttributeValue");
                text = doc.createTextNode(tv.getValue());
                value.appendChild(text);
                attribute.appendChild(value);
                action.appendChild(attribute);
            }
            request.appendChild(action);
            logger.debug("the current request context");
            logger.debug(new EncodeXML().encode(request,0));
            Element pre = null;
            if (ctx!=null) pre = (Element)ctx.getProperty("request.context");
            if (pre!=null) {
                request = new Merge().merge(pre,request);
            }
            if (ctx!=null) ctx.setProperty("request.context",request);
        } catch (ParserConfigurationException pe) {
            throw new AttributeException("XML parser error:"+pe);
        } catch (AuthzException ae) {
            throw new AttributeException("XML processing error:"+ae);
        }
    }  
    
    public void initialize(PDPConfig pdpConfig, String name, String id) throws InitializeException { 
        logger.info("to initialise the custom action PIP (scope:"+name+") for the service "+id);
        String globusLocation = System.getenv("GLOBUS_LOCATION");
        String separator = System.getProperty("file.separator");
        String fileName = (String)pdpConfig.getProperty(name,"parameterConfig");
        logger.debug("parameterConfig="+fileName);
        File file = new File(fileName);
        String keyService = null;
        try {
            HashMap map = ActionParameter.getParametersFromFile(file);
            for (Iterator i = map.keySet().iterator(); i.hasNext();) {
                keyService = (String)i.next();
                if (keyService.endsWith(id)) break;
                else keyService = null;
            }
            if (keyService==null) throw new InitializeException("invalid service URL in the configuration");
            int index = keyService.indexOf("://");
            if (index<0) throw new InitializeException("invalid service URL in the configuration");
            index = keyService.indexOf("/wsrf/services/",index+3);
            if (index<0) throw new InitializeException("invalid service URL in the configuration");
            String wsddFile = keyService.substring(index+15);
            wsddFile = wsddFile.replaceAll("/","_");
            wsddFile = globusLocation+separator+"etc"+separator+wsddFile+separator+"server-config.wsdd";
            BasicDom dom = new BasicDom(wsddFile);
            Document doc = dom.getXMLDocument();
            Element wsdd = doc.getDocumentElement();
            String[] folders = this.getWsdlFileName(wsdd);
            String wsdlFile = new String();
            for (int i=0; i<folders.length-1; i++) {
                wsdlFile +=folders[i]+separator;
            }
            wsdlFile +=folders[folders.length-1];
            wsdlFile = globusLocation+separator+wsdlFile+".wsdl";
            dom = new BasicDom(wsdlFile);
            doc = dom.getXMLDocument();
            Element wsdl = doc.getDocumentElement();

            Object obj = map.get(keyService);
            map = (HashMap)obj;
            String[] keyMethods = new String[map.keySet().size()];
            keyMethods = (String[])map.keySet().toArray(keyMethods);
            int count = 0;
            for (int i=0 ; i<keyMethods.length; i++) {
                logger.debug("method="+keyMethods[i]);
                obj = map.get(keyMethods[i]);
                Vector vector = (Vector)obj;