1 files changed, 178 insertions, 0 deletions
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/GenerateIFrameTemplateServlet.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/GenerateIFrameTemplateServlet.java
new file mode 100644
index 000000000..29d407dc7
--- /dev/null
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/GenerateIFrameTemplateServlet.java
@@ -0,0 +1,178 @@
+package at.gv.egovernment.moa.id.auth.servlet;
+
+import java.io.IOException;
+import java.io.PrintWriter;
+import java.util.Arrays;
+import java.util.List;
+
+import javax.servlet.ServletConfig;
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+import org.apache.commons.lang.StringEscapeUtils;
+import org.bouncycastle.asn1.x509.Target;
+
+import com.trilead.ssh2.Session;
+
+import at.gv.egovernment.moa.id.AuthenticationException;
+import at.gv.egovernment.moa.id.MOAIDException;
+import at.gv.egovernment.moa.id.auth.MOAIDAuthInitializer;
+import at.gv.egovernment.moa.id.auth.WrongParametersException;
+import at.gv.egovernment.moa.id.auth.builder.StartAuthenticationBuilder;
+import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;
+import at.gv.egovernment.moa.id.auth.parser.StartAuthentificationParameterParser;
+import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;
+import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProvider;
+import at.gv.egovernment.moa.id.config.auth.OAAuthParameter;
+import at.gv.egovernment.moa.id.moduls.AuthenticationManager;
+import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;
+import at.gv.egovernment.moa.id.util.MOAIDMessageProvider;
+import at.gv.egovernment.moa.logging.Logger;
+import at.gv.egovernment.moa.util.StringUtils;
+
+public class GenerateIFrameTemplateServlet extends AuthServlet {
+
+	private static final long serialVersionUID = 1L;
+
+	public void init(ServletConfig servletConfig) throws ServletException {
+		    try {
+		      super.init(servletConfig);
+		      MOAIDAuthInitializer.initialize();
+		      Logger.debug("default platform file.encoding: " + System.getProperty("file.encoding"));
+		      Logger.info(MOAIDMessageProvider.getInstance().getMessage("init.00", null));
+		    }
+		    catch (Exception ex) {
+		      Logger.fatal(MOAIDMessageProvider.getInstance().getMessage("init.02", null), ex);
+		      throw new ServletException(ex);
+		    }
+		  }
+	  
+	protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+			throws ServletException, IOException {
+		Logger.info("Receive " + GenerateIFrameTemplateServlet.class + " Request");
+	
+	    try {
+	    	String bkuid = req.getParameter(PARAM_BKU);
+	    	String useMandate = req.getParameter(PARAM_USEMANDATE);
+	    	String ccc = req.getParameter(PARAM_CCC);
+	   
+	    	String moasessionid = null;
+	    	AuthenticationSession moasession = null;
+	   
+	    	try {
+	    	    moasessionid = (String) req.getSession().getAttribute(AuthenticationManager.MOA_SESSION);
+				moasession = AuthenticationSessionStoreage.getSession(moasessionid);
+				
+			} catch (MOADatabaseException e) {
+				Logger.info("MOASession with SessionID="+ moasessionid + " is not found in Database");
+				throw new MOAIDException("init.04", new Object[] {
+						moasessionid});
+				
+			} catch (Throwable e) {
+				Logger.info("No HTTP Session found!");
+				throw new MOAIDException("auth.18", new Object[] {});
+			}
+	    	
+	    	//load OA Config
+			OAAuthParameter oaParam = AuthConfigurationProvider.getInstance()
+					.getOnlineApplicationParameter(moasession.getOAURLRequested());
+			
+			if (oaParam == null)
+				throw new AuthenticationException("auth.00", new Object[] { moasession.getOAURLRequested() });
+			
+			else {
+	    	
+				//load Parameters from config
+		    	String target = oaParam.getTarget();
+		    	String sourceID = ""; //TODO: load from Config
+		    	String bkuURL = getBKUURIFromConfig(Integer.valueOf(bkuid), oaParam);
+		    	String templateURL = getTemplateURIFromConfig(Integer.valueOf(bkuid), oaParam);;
+
+		    	
+		    	//parse all OA parameters i
+		    	StartAuthentificationParameterParser.parse(moasession, 
+		    											   target, 
+		    											   sourceID,
+		    											   moasession.getOAURLRequested(),
+		    											   bkuURL,
+		    											   templateURL,
+		    											   useMandate,
+		    											   ccc, 
+		    											   moasession.getModul(),
+		    											   moasession.getAction(),
+		    											   req);
+			}
+			
+		    StartAuthenticationBuilder startauth = StartAuthenticationBuilder.getInstance();			
+		    String getIdentityLinkForm = startauth.build(moasession, req, resp);
+			
+			//store MOASession
+			try {
+				AuthenticationSessionStoreage.storeSession(moasession);				
+			} catch (MOADatabaseException e) {
+				Logger.error("Database Error! MOASession is not stored!");
+				throw new MOAIDException("init.04", new Object[] {
+						moasession.getSessionID()});
+			}
+		    
+		    if (!StringUtils.isEmpty(getIdentityLinkForm)) {
+		    	resp.setContentType("text/html;charset=UTF-8");
+		    	PrintWriter out = new PrintWriter(resp.getOutputStream());
+		    	out.print(getIdentityLinkForm);
+		    	out.flush();
+		    	Logger.debug("Finished GET "+GenerateIFrameTemplateServlet.class);
+		    }
+	    } 
+	    catch (WrongParametersException ex) {
+	    	handleWrongParameters(ex, req, resp);
+	    }
+	          
+	    catch (MOAIDException ex) {
+	    	handleError(null, ex, req, resp);
+	    }
+	    
+	    
+	}
+		
+	private String getTemplateURIFromConfig(int bkuID, OAAuthParameter oaParam) throws WrongParametersException {
+		//TODO: CHANGE to real OA config
+		
+		List<String> bkuURIs = Arrays.asList(
+				"http://labda.iaik.tugraz.at:8080/moa-id-auth/template_onlineBKU.html",
+				"http://labda.iaik.tugraz.at:8080/moa-id-auth/template_handyBKU.html",
+				"http://labda.iaik.tugraz.at:8080/moa-id-auth/template_localBKU.html");
+		
+//		List<String> bkuURIs = Arrays.asList(
+//				"http://demo.egiz.gv.at/demoportal_moaid-2.0/template_onlineBKU.html",
+//				"http://demo.egiz.gv.at/demoportal_moaid-2.0/template_handyBKU.html",
+//				"http://demo.egiz.gv.at/demoportal_moaid-2.0/template_localBKU.html");
+		
+		if (bkuID < bkuURIs.size())
+			return bkuURIs.get(bkuID);
+		else
+			throw new WrongParametersException("GenerateIFrameTemplate", PARAM_TEMPLATE,
+					"auth.12");
+	}
+	
+	private String getBKUURIFromConfig(int bkuID, OAAuthParameter oaParam) throws WrongParametersException {
+		//TODO: CHANGE to real OA config	
+		
+		List<String> bkuURIs = Arrays.asList(
+				"https://labda.iaik.tugraz.at:8843/bkuonline/https-security-layer-request",
+				"https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx",
+				"https://127.0.0.1:3496/https-security-layer-request");
+			
+//			List<String> bkuURIs = Arrays.asList(
+//					"https://demo.egiz.gv.at/demoportal_bkuonline/https-security-layer-request",
+//					"https://www.handy-signatur.at/mobile/https-security-layer-request/default.aspx",
+//					"https://127.0.0.1:3496/https-security-layer-request");
+		
+		if (bkuID < bkuURIs.size())
+			return bkuURIs.get(bkuID);
+		else
+			throw new WrongParametersException("GenerateIFrameTemplate", PARAM_BKU,
+					"auth.12");
+	}
+}