1 files changed, 186 insertions, 0 deletions
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/saml1/GetArtifactAction.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/saml1/GetArtifactAction.java
new file mode 100644
index 000000000..75825d92d
--- /dev/null
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/protocols/saml1/GetArtifactAction.java
@@ -0,0 +1,186 @@
+package at.gv.egovernment.moa.id.protocols.saml1;
+
+import java.io.IOException;
+import java.io.PrintWriter;
+import java.io.UnsupportedEncodingException;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+import org.apache.commons.lang.StringEscapeUtils;
+
+import at.gv.egovernment.moa.id.AuthenticationException;
+import at.gv.egovernment.moa.id.BuildException;
+import at.gv.egovernment.moa.id.auth.WrongParametersException;
+import at.gv.egovernment.moa.id.auth.builder.RedirectFormBuilder;
+import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;
+import at.gv.egovernment.moa.id.auth.servlet.RedirectServlet;
+import at.gv.egovernment.moa.id.commons.db.dao.session.AuthenticatedSessionStore;
+import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;
+import at.gv.egovernment.moa.id.config.ConfigurationException;
+import at.gv.egovernment.moa.id.config.auth.AuthConfigurationProvider;
+import at.gv.egovernment.moa.id.config.auth.OAAuthParameter;
+import at.gv.egovernment.moa.id.data.AuthenticationData;
+import at.gv.egovernment.moa.id.moduls.AuthenticationManager;
+import at.gv.egovernment.moa.id.moduls.IAction;
+import at.gv.egovernment.moa.id.moduls.IRequest;
+import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;
+import at.gv.egovernment.moa.id.util.ParamValidatorUtils;
+import at.gv.egovernment.moa.logging.Logger;
+import at.gv.egovernment.moa.util.URLEncoder;
+
+public class GetArtifactAction implements IAction {
+
+	public void processRequest(IRequest req, HttpServletRequest httpReq,
+			HttpServletResponse httpResp, AuthenticationSession session) throws AuthenticationException {
+		
+//		HttpSession httpSession = httpReq.getSession();
+//		AuthenticationManager authmanager = AuthenticationManager.getInstance();
+//		AuthenticationSession session = authmanager.getAuthenticationSession(httpSession);
+
+//		if (!AuthenticationSessionStoreage.isAuthenticated(session.getSessionID())) {
+//			throw new AuthenticationException("auth.21", new Object[] {});
+//		}
+		
+		String oaURL = (String) req.getOAURL();
+		String target = (String) req.getTarget();
+		
+		try {
+		
+			
+			if (oaURL == null) {
+				throw new WrongParametersException("StartAuthentication",
+						PARAM_OA, "auth.12");
+			}
+			
+			// check parameter
+			if (!ParamValidatorUtils.isValidOA(oaURL))
+				throw new WrongParametersException("StartAuthentication",
+						PARAM_OA, "auth.12");
+	
+
+			//			if (oaURL == null) {
+//				oaURL = session.getOAURLRequested();
+//			}
+	
+
+			// TODO: Support Mandate MODE!
+			OAAuthParameter oaParam = AuthConfigurationProvider.getInstance()
+				.getOnlineApplicationParameter(oaURL);
+		
+			// builds authentication data and stores it together with a SAML
+			// artifact
+		
+			//TODO: check, if this is correct!!!!
+			//AuthenticationData authData = buildAuthenticationData(session, session.getXMLVerifySignatureResponse(),
+			//		useUTC, false);
+		
+			SAML1AuthenticationServer saml1server = SAML1AuthenticationServer.getInstace();
+			
+			AuthenticationData authData = SAML1AuthenticationServer.buildAuthenticationData(session, 
+					oaParam,
+					target);
+			
+			String samlArtifactBase64 = saml1server.BuildSAMLArtifact(session, oaParam, authData);
+			
+			if (AuthenticationSessionStoreage.isSSOSession(session.getSessionID())) {
+				String url = "RedirectServlet";
+				url = addURLParameter(url, RedirectServlet.REDIRCT_PARAM_URL, URLEncoder.encode(oaURL, "UTF-8"));
+				if (!oaParam.getBusinessService())
+					url = addURLParameter(url, PARAM_TARGET, URLEncoder.encode(oaParam.getTarget(), "UTF-8"));
+				url = addURLParameter(url, PARAM_SAMLARTIFACT, URLEncoder.encode(samlArtifactBase64, "UTF-8"));
+				url = httpResp.encodeRedirectURL(url);
+				
+				httpResp.setContentType("text/html");
+				httpResp.setStatus(302);
+				httpResp.addHeader("Location", url);
+				
+			} else {
+				String redirectURL = oaURL;
+
+				//session.getOAURLRequested();
+				
+				if (!oaParam.getBusinessService()) {
+//					redirectURL = addURLParameter(redirectURL, PARAM_TARGET,
+//							URLEncoder.encode(session.getTarget(), "UTF-8"));
+					redirectURL = addURLParameter(redirectURL, PARAM_TARGET,
+					URLEncoder.encode(oaParam.getTarget(), "UTF-8"));
+
+
+				}
+				redirectURL = addURLParameter(redirectURL, PARAM_SAMLARTIFACT,
+						URLEncoder.encode(samlArtifactBase64, "UTF-8"));
+				redirectURL = httpResp.encodeRedirectURL(redirectURL);
+				httpResp.setContentType("text/html");
+				httpResp.setStatus(302);
+				httpResp.addHeader("Location", redirectURL);
+				Logger.debug("REDIRECT TO: " + redirectURL);
+			}
+			// CONFIRMATION FOR SSO!
+			/*
+			 * OAAuthParameter oaParam =
+			 * AuthConfigurationProvider.getInstance().
+			 * getOnlineApplicationParameter(oaURL);
+			 * 
+			 * String friendlyName = oaParam.getFriendlyName(); if(friendlyName
+			 * == null) { friendlyName = oaURL; }
+			 * 
+			 * 
+			 * LoginConfirmationBuilder builder = new
+			 * LoginConfirmationBuilder();
+			 * builder.addParameter(PARAM_SAMLARTIFACT, samlArtifactBase64);
+			 * String form = builder.finish(oaURL, session.getIdentityLink()
+			 * .getName(), friendlyName);
+			 */
+
+			/*
+			 * resp.setContentType("text/html");
+			 * 
+			 * OutputStream out = resp.getOutputStream();
+			 * out.write(form.getBytes("UTF-8")); out.flush(); out.close();
+			 */
+
+		} catch (WrongParametersException ex) {
+			// handleWrongParameters(ex, req, httpResp);
+			ex.printStackTrace();
+		} catch (ConfigurationException e) {
+			// TODO Auto-generated catch block
+			e.printStackTrace();
+		} catch (BuildException e) {
+			// TODO Auto-generated catch block
+			e.printStackTrace();
+		} catch (AuthenticationException e) {
+			// TODO Auto-generated catch block
+			e.printStackTrace();
+		} catch (UnsupportedEncodingException e) {
+			// TODO Auto-generated catch block
+			e.printStackTrace();
+		} catch (IOException e) {
+			// TODO Auto-generated catch block
+			e.printStackTrace();
+		} catch (MOADatabaseException e) {
+			// TODO Auto-generated catch block
+			e.printStackTrace();
+		}
+	}
+
+	protected static String addURLParameter(String url, String paramname,
+			String paramvalue) {
+		String param = paramname + "=" + paramvalue;
+		if (url.indexOf("?") < 0)
+			return url + "?" + param;
+		else
+			return url + "&" + param;
+	}
+
+	public boolean needAuthentication(IRequest req, HttpServletRequest httpReq,
+			HttpServletResponse httpResp) {
+		return true;
+	}
+
+	public String getDefaultActionName() {
+		return SAML1Protocol.GETARTIFACT;
+	}
+
+}