[jboss-cvs] JBossAS SVN: r98877 - trunk/tomcat/src/main/java/org/jboss/web/tomcat/security.

[jboss-cvs-commits at lists.jboss.org]

Author: acoliver at jboss.org
Date: 2009-12-23 00:11:11 -0500 (Wed, 23 Dec 2009)
New Revision: 98877

Added:
   trunk/tomcat/src/main/java/org/jboss/web/tomcat/security/RemoteHostValve.java
Log:
https://jira.jboss.org/jira/browse/JBAS-7542 - added hostname valve, then rewrote to use reflection to get over unfortunate module/build structure.  


Added: trunk/tomcat/src/main/java/org/jboss/web/tomcat/security/RemoteHostValve.java
===================================================================
--- trunk/tomcat/src/main/java/org/jboss/web/tomcat/security/RemoteHostValve.java	                        (rev 0)
+++ trunk/tomcat/src/main/java/org/jboss/web/tomcat/security/RemoteHostValve.java	2009-12-23 05:11:11 UTC (rev 98877)
@@ -0,0 +1,68 @@
+/*
+ * JBoss, Home of Professional Open Source.
+ * Copyright 2006, Red Hat Middleware LLC, and individual contributors
+ * as indicated by the @author tags. See the copyright.txt file in the
+ * distribution for a full listing of individual contributors.
+ *
+ * This is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU Lesser General Public License as
+ * published by the Free Software Foundation; either version 2.1 of
+ * the License, or (at your option) any later version.
+ *
+ * This software is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this software; if not, write to the Free
+ * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+ * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+ */
+package org.jboss.web.tomcat.security;
+
+import java.lang.reflect.Method;
+import java.io.IOException;
+import javax.servlet.ServletException;
+
+import org.apache.catalina.connector.Request;
+import org.apache.catalina.connector.Response;
+import org.apache.catalina.valves.ValveBase;
+import org.jboss.logging.Logger;
+//import org.jboss.security.HostThreadLocal;
+
+/** 
+ This valve gets the remote host and sticks it in a thread local.  It is 
+ to be used with RemoteHostTrustLoginModule in particular
+   
+ @author Andrew C. Oliver (acoliver at gmail.com)
+ @version $Revision: 0 $
+ */
+public class RemoteHostValve
+   extends ValveBase
+{
+   private static Logger log = Logger.getLogger(RemoteHostValve.class);
+   private static boolean trace = log.isTraceEnabled();
+
+   public void invoke(Request request, Response response)
+      throws IOException, ServletException
+   {
+      boolean trace = log.isTraceEnabled();
+      if(trace) {
+        log.trace("in RemoteHostValve");
+      }
+      String remoteHost = request.getRemoteHost();
+      if(trace) {
+        log.trace("remoteHostValve set remoteHost to be "+remoteHost);
+      } 
+      try {
+         Class clazz = Thread.currentThread().getContextClassLoader().loadClass("org.jboss.security.HostThreadLocal");
+         Method m = clazz.getMethod("set",new Class[] {String.class});
+         m.invoke(null,new Object[]{remoteHost});
+      } catch (Exception e) {
+         throw new RuntimeException("Error providing the remoteHost to HostThreadLocal, most likely this is a version mismatch",e);
+      }
+      //HostThreadLocal.set(remoteHost);
+      getNext().invoke(request, response);
+   }
+}