/* * Copyright 2019 Federal Chancellery Austria * MOA-ID has been developed in a cooperation between BRZ, the Federal * Chancellery Austria - ICT staff unit, and Graz University of Technology. * * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by * the European Commission - subsequent versions of the EUPL (the "Licence"); * You may not use this work except in compliance with the Licence. * You may obtain a copy of the Licence at: * http://www.osor.eu/eupl/ * * Unless required by applicable law or agreed to in writing, software * distributed under the Licence is distributed on an "AS IS" basis, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the Licence for the specific language governing permissions and * limitations under the Licence. * * This product combines work with different licenses. See the "NOTICE" text * file for details on the various modules and licenses. * The "NOTICE" text file is part of the distribution. Any derivative works * that you distribute must include a readable copy of the "NOTICE" text file. */ package at.gv.egovernment.moa.id.auth.modules.eidproxyauth; import java.io.Serializable; import javax.annotation.PostConstruct; import org.apache.commons.lang3.StringUtils; import org.springframework.beans.factory.annotation.Autowired; import at.gv.egiz.eaaf.core.api.IRequest; import at.gv.egiz.eaaf.core.api.idp.IConfiguration; import at.gv.egiz.eaaf.core.api.idp.auth.modules.AuthModule; import at.gv.egiz.eaaf.core.api.idp.process.ExecutionContext; import at.gv.egovernment.moa.id.commons.config.MOAIDConfigurationConstants; import at.gv.egovernment.moa.id.moduls.AuthenticationManager; import at.gv.egovernment.moa.logging.Logger; /** * @author tlenz * */ public class EIDProxyAuthModuleImpl implements AuthModule { @Autowired(required=true) private IConfiguration authConfig; @Autowired(required=true) private AuthenticationManager authManager; private int priority = 0; private final String AUTH_PROCESS_NAME = "EIDAuthentication"; @PostConstruct protected void initalizeEIDProxyAuthentication() { //parameter to whiteList authManager.addParameterNameToWhiteList(EIDProxyAuthConstants.HTTP_PARAM_EIDPROXY_AUTH_SELECTION); } /* (non-Javadoc) * @see at.gv.egovernment.moa.id.auth.modules.AuthModule#getPriority() */ @Override public int getPriority() { return priority; } /* (non-Javadoc) * @see at.gv.egovernment.moa.id.auth.modules.AuthModule#selectProcess(at.gv.egovernment.moa.id.process.api.ExecutionContext) */ @Override public String selectProcess(ExecutionContext context, IRequest pendingReq) { if (Boolean.parseBoolean( pendingReq.getServiceProviderConfiguration().getConfigurationValue( MOAIDConfigurationConstants.SERVICE_AUTH_AUSTRIAN_EID_DEMO_MODE, String.valueOf(false)))) { Logger.debug("SP: " + pendingReq.getSPEntityId() + " activates E-ID mode."); return AUTH_PROCESS_NAME; } else { if (authConfig.getBasicConfigurationBoolean(EIDProxyAuthConstants.CONFIG_PROPS_DISABLE_PROCESS_ENFORCEMENT, true)) { Logger.trace("Disable E-ID enforcment is 'true' "); Serializable paramObj = context.get(EIDProxyAuthConstants.HTTP_PARAM_EIDPROXY_AUTH_SELECTION); if (paramObj != null ) { if (paramObj instanceof String) { String param = (String)paramObj; if (StringUtils.isNotEmpty(param) && Boolean.parseBoolean(param)) { Logger.debug("Manually selected E-ID authentication process "); return AUTH_PROCESS_NAME; } } } return null; } else { Logger.trace("Select E-ID authentication process ... "); return AUTH_PROCESS_NAME; } } } /* (non-Javadoc) * @see at.gv.egovernment.moa.id.auth.modules.AuthModule#getProcessDefinitions() */ @Override public String[] getProcessDefinitions() { return new String[] { "classpath:EID_connector_auth.process.xml" }; } /** * @param priority the priority to set */ public void setPriority(int priority) { this.priority = priority; } }