[JBoss Seam] - Re: external authentication-any pointers for a beginner?
by mwkohout
After reviewing the seam security documentation, I've written some code:
1) A JAAS Module:
| public class CustomLoginModule extends SeamLoginModule {
|
| private static final LogProvider log = Logging.getLogProvider(SeamLoginModule.class);
|
| public CustomLoginModule() {
| }
|
| @Override
| public boolean login() throws LoginException {
|
| boolean isLoggedIn = false;
| javax.faces.context.FacesContext ctx = javax.faces.context.FacesContext.getCurrentInstance();
| javax.servlet.http.Cookie cookie = (javax.servlet.http.Cookie) ctx.getExternalContext().getRequestCookieMap().get("umnAuthV2");
|
| log.debug("in Module. cookie == "+cookie);
| try{
| if (cookie == null) //if we can't find it, redirect them to the auth server. the auth server will redirect them back, using the desturl param
| ctx.getExternalContext().redirect("https://authserver.somewhere?desurl=" + ((javax.servlet.http.HttpServletRequest) ctx.getExternalContext().getRequest()).getRequestURL());
| }
| catch (IOException ex) {
| Logger.getLogger("global").log(Level.SEVERE, null, ex);
| }
|
|
| org.jboss.seam.core.Expressions.MethodExpression mb = org.jboss.seam.security.Identity.instance().getAuthenticateMethod();
| if (mb == null) {
| throw new java.lang.IllegalStateException("No authentication method defined - please define <security:authenticate-method/> for <security:identity/> in components.xml");
| }
|
| try {
| isLoggedIn = (java.lang.Boolean) mb.invoke();
| } catch (java.lang.Exception ex) {
| log.error("Error invoking login method", ex);
| }
| return isLoggedIn;
| }
| }
And a new security configuration factory(that exposes my JAAS module):
| @Name("org.jboss.seam.security.configurationFactory")
| @BypassInterceptors
| @Scope(ScopeType.STATELESS)
| public class JAASConfigFactory {
|
| @Logger
| private Log log;
| public JAASConfigFactory() {
| }
|
| static final String DEFAULT_JAAS_CONFIG_NAME = "custom";
|
| protected javax.security.auth.login.Configuration createConfiguration()
| {
| return new javax.security.auth.login.Configuration()
| {
| private AppConfigurationEntry[] aces = { createAppConfigurationEntry() };
|
| @Override
| public AppConfigurationEntry[] getAppConfigurationEntry(String name)
| {
| return DEFAULT_JAAS_CONFIG_NAME.equals(name) ? aces : null;
| }
|
| @Override
| public void refresh() {}
|
|
| };
| }
|
| protected AppConfigurationEntry createAppConfigurationEntry()
| {
| log.debug("in JAASConfigFactory..");
| return new AppConfigurationEntry(
| CustomLoginModule.class.getName(),
| LoginModuleControlFlag.REQUIRED,
| new HashMap<String,String>()
| );
| }
|
| @Factory(value="org.jboss.seam.security.configuration", autoCreate=true, scope=APPLICATION)
| public javax.security.auth.login.Configuration getConfiguration()
| {
| return createConfiguration();
| }
|
| public static javax.security.auth.login.Configuration instance()
| {
| if ( !Contexts.isApplicationContextActive() )
| {
| throw new IllegalStateException("No active application scope");
| }
| return (javax.security.auth.login.Configuration) Component.getInstance("org.jboss.seam.security.configuration");
| }
|
| }
|
I've also altered the security:identity component:
| <security:identity authenticate-method="#{authBean.authenticate}"
| security-rules="#{securityRules}"
| authenticate-every-request="true"
| auto-create="true" jaas-config-name="custom"/>
|
However, Seam does not seem to be installing my JAAS module(it fails to output any of my logs). Am I missing something?
Any ideas would be helpful
Thanks
Mike Kohout
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4067168#4067168
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4067168
18Â years, 9Â months
[JBoss Seam] - Re: Bijection clarification
by smithbstl
Ok, I am still having problems with Address getting injected into my second sfsb
Here is what is going on
A form is submitted to sfsb "addressLocator" via an actionListener on the a4j:commandButton
<h:form id="addressSearch_Form">
| <h:panelGrid columns="2">
| //Form inputs here bound to address fields
| </h:panelGrid>
| <a4j:commandButton actionListener="#{addressLocator.findAddressByAddress}"
| value="#{messages['AddressLookup.search']}"
| reRender="searchResults"/>
|
| ...searchResults here....
|
| <h:panelGrid columns="1" rendered="#{address != null}">
| <h:outputText value="Address Not Found?"/>
| <h:commandLink value="Create a Service Request with the address you entered above" action="createRequestFromAddress"/>
| </h:panelGrid>
| </form>
Here is the my first sfsb "AddressLocator"
@Stateful
| @Name("addressLocator")
| @Scope(ScopeType.CONVERSATION)
| @SuppressWarnings("unchecked")
| public class AddressLocatorAction implements AddressLocator {
|
| @In
| private EntityManager entityManager;
|
| @In(required=false)
| @Out(scope=ScopeType.CONVERSATION, required=false)
| private Address address;
|
|
| public AddressLocatorAction() {
| }
|
| public void findAddressByAddress(ActionEvent event) {
| //Uses address for query, address has value here
| }
after a dataTable "searchResults" is reRendered, the commandLink is pressed which calls requestManager.createRequestFromAddress()
@Stateful
| @Name("requestManager")
| @Scope(ScopeType.CONVERSATION)
| public class RequestManagerAction implements com.stlouiscity.csb.ejb.action.RequestManager {
|
| @In
| private EntityManager entityManager;
|
| @In
| private Address address;
|
|
| public RequestManagerAction() {
| }
|
| public void createRequestFromAddress() {
| serviceRequest = new ServiceRequest();
|
| //This is a different address instance than was outjected
| // by addressLocatorAction, fields are null
| serviceRequest.setAddress(address);
| }
The address component that is outjected from addressLocator is not the same instance that is injected into requestManager. I can see the orginal address component on the seam debug page but a different instance belongs to serviceRequest on the debug page. This is taking place in the scope of a long running conversation being managed by a jpdl pageflow.
Thanks again.
Thanks again.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4067167#4067167
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4067167
18Â years, 9Â months