SecurityContextHelper.java

package org.objectweb.jonas.security.iiop;

import java.io.UnsupportedEncodingException;

import org.omg.GSSUP.InitialContextToken;

import org.objectweb.carol.util.csiv2.gss.GSSHelper;

import org.objectweb.jonas.common.Log;
import org.objectweb.jonas.security.AbsSecurityContextHelper;

import org.objectweb.security.context.SecurityContext;
import org.objectweb.security.context.SecurityCurrent;

import org.objectweb.util.monolog.api.Logger;


public class SecurityContextHelper extends AbsSecurityContextHelper {

        private static SecurityContextHelper instance = null;

    private static final String CSIV2_REALM_KEY = "jonas.service.security.csiv2.realm";

    private static final String DEFAULT_CSIV2_REALM = "memrlm_1";


    private static final String DOMAIN_SEPARATOR = "@";

    private static final String DEFAULT_DOMAIN_NAME = "default";

    private static final String ENCODING = "UTF-8";

    private static Logger logger = Log.getLogger(Log.JONAS_CSIV2_SECURITY_PREFIX);

    private SecurityContextHelper() {
    }
    
    public static SecurityContextHelper getInstance() {
        if (instance == null) {
                instance = new SecurityContextHelper();
        }
        return instance;
    }
    
    protected Logger getLogger() {
        return logger;
    }
    
    protected String getRealmKey() {
        return CSIV2_REALM_KEY;
    }
    
    protected String getRealmDefault() {
        return DEFAULT_CSIV2_REALM;
    }

    protected void loginAuthenticationToken(String userName, String password) {
        // need to remove domain of userName which is GSS NT_USERNAME
        String principalName = userName.split(DOMAIN_SEPARATOR)[0];
        String credential = password;
        login(principalName, credential);
    }

    protected void loginIdentiyToken(String principalName) {
        String credential = principalName;
        login(principalName, credential);
    }

    public String getIdentityToken() {
        SecurityCurrent current = SecurityCurrent.getCurrent();
        SecurityContext securityContext = current.getSecurityContext();

        if (securityContext.peekRunAsPrincipal() != null) {
            return securityContext.peekRunAsPrincipal();
        } else {
            return securityContext.getCallerPrincipal(false).getName();
        }
   }

    public InitialContextToken getInitialContextToken() throws UnsupportedEncodingException {
        SecurityCurrent current = SecurityCurrent.getCurrent();
        SecurityContext securityContext = current.getSecurityContext();
        String principalName = securityContext.getPrincipalName();
        String userName = principalName + DOMAIN_SEPARATOR + DEFAULT_DOMAIN_NAME;
        String password = principalName;
        byte[] user = userName.getBytes(ENCODING);
        byte[] pass = password.getBytes(ENCODING);
        byte[] domain = GSSHelper.encodeExported(DEFAULT_DOMAIN_NAME);
        return new InitialContextToken(user, pass, domain);

   }


}

---