Package fr.becpg.repo.authentication.provider

Class IdentityServiceAccountProvider

java.lang.Object
fr.becpg.repo.authentication.provider.IdentityServiceAccountProvider
@Service public class IdentityServiceAccountProvider extends Object

IdentityServiceAccountProvider class.

Version:
$Id: $Id
Author:
matthieu

  • Field Details

    • PROHIBITED_CHARS

      private static final Pattern PROHIBITED_CHARS
      Constant PROHIBITED_CHARS

    • GET_USER_ID_ERROR

      private static final String GET_USER_ID_ERROR
      Constant GET_USER_ID_ERROR="Could not find userId from identity ser"{trunked}
      See Also:

    • logger

      private static org.apache.commons.logging.Log logger
      Constant logger

    • enabled

      @Value("${identity-service.create-user.enabled:false}") private Boolean enabled

    • identityServiceUserName

      @Value("${identity-service.client-admin.username:#{null}}") private String identityServiceUserName

    • identityServicePassword

      @Value("${identity-service.client-admin.password:#{null}}") private String identityServicePassword

    • realm

      @Value("${identity-service.realm}") private String realm

    • clientId

      @Value("${identity-service.resource}") private String clientId

    • clientSecret

      @Value("${identity-service.credentials.secret:#{null}}") private String clientSecret

    • authServerUrl

      @Value("${identity-service.auth-server-url}") private String authServerUrl

  • Constructor Details

    • IdentityServiceAccountProvider

      public IdentityServiceAccountProvider()

  • Method Details

    • isEnabled

      public Boolean isEnabled()

      isEnabled.

      Returns:
      a Boolean object

    • getZoneId

      public String getZoneId()

      getZoneId.

      Returns:
      a String object

    • registerAccount

      public boolean registerAccount(BeCPGUserAccount userAccount)

      registerAccount.

      Creates the account in the identity service, together with its initial credential when the given account carries a password.
      Parameters:
      userAccount - a BeCPGUserAccount object
      Returns:
      true when the account was created, false when it already exists in the identity service
      Throws:
      org.alfresco.repo.security.authentication.identityservice.IdentityServiceException - if the account cannot be registered

    • registerInitialPassword

      private void registerInitialPassword(BeCPGUserAccount userAccount)

      registerInitialPassword.

      Stores the initial credential of a freshly created account. The account is rolled back when the credential cannot be stored, otherwise a later creation attempt would reuse an account without any password and the user would never be able to sign in.
      Parameters:
      userAccount - a BeCPGUserAccount object
      Throws:
      org.alfresco.repo.security.authentication.identityservice.IdentityServiceException - if the credential cannot be stored

    • asIdentityServiceException

      private org.alfresco.repo.security.authentication.identityservice.IdentityServiceException asIdentityServiceException(String username, RuntimeException cause)

      asIdentityServiceException.

      Normalizes a registration failure so that callers cleaning up after a failed registration only have to handle IdentityServiceException.
      Parameters:
      username - a String object
      cause - a RuntimeException object
      Returns:
      a IdentityServiceException object

    • rollbackAccount

      private void rollbackAccount(String username)

      rollbackAccount.

      Deletes an account created by a failed registration, without hiding the registration failure.
      Parameters:
      username - a String object

    • deleteAccount

      public void deleteAccount(String username)

      deleteAccount.

      Parameters:
      username - a String object

    • updateUser

      public boolean updateUser(BeCPGUserAccount userAccount)

      updateUser.

      Parameters:
      userAccount - a BeCPGUserAccount object
      Returns:
      a boolean

    • sanitize

      private String sanitize(String input)

      sanitize.

      Parameters:
      input - a String object
      Returns:
      a String object

    • updatePassword

      public void updatePassword(String username, String newPassword)

      updatePassword.

      Parameters:
      username - a String object
      newPassword - a String object

    • getUserId

      private String getUserId(String username)

      getUserId.

      Parameters:
      username - a String object
      Returns:
      a String object

    • getAdminAccessToken

      private String getAdminAccessToken()

      getAdminAccessToken.

      Returns:
      a String object

    • toString

      public String toString()
      The admin password and the client secret are deliberately left out so that logging this provider never leaks them.
      Overrides:
      toString in class Object