CertConstraintsFeature.java

/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements. See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership. The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package org.apache.cxf.transport.https;

import org.apache.cxf.Bus;
import org.apache.cxf.common.injection.NoJSR250Annotations;
import org.apache.cxf.configuration.security.CertificateConstraintsType;
import org.apache.cxf.endpoint.Client;
import org.apache.cxf.endpoint.Server;
import org.apache.cxf.feature.AbstractPortableFeature;
import org.apache.cxf.feature.DelegatingFeature;
import org.apache.cxf.interceptor.InterceptorProvider;

/**
 * <pre>
 * <![CDATA[
    <jaxws:endpoint ...>
      <jaxws:features>
       <bean class="org.apache.cxf.transport.https.CertConstraintsFeature">
           <property name="CertificateConstraints">
               <bean class="org.apache.cxf.configuration.security.CertificateConstraintsType">
                   <property name="SubjectDNConstraints">
                       <bean class="org.apache.cxf.configuration.security.DNConstraintsType">
                           <property name="RegularExpression">
                               <list>
                                   <value>.*CN=(Bethal|Gordy).*</value>
                                   <value>.*O=ApacheTest.*</value>
                               </list>
                           </property>
                       </bean>
                   </property>
                   .........
               </bean>
           </property>
       </bean>
      </jaxws:features>
    </jaxws:endpoint>
  ]]>
  </pre>
 */
@NoJSR250Annotations
public class CertConstraintsFeature extends DelegatingFeature<CertConstraintsFeature.Portable> {

    public CertConstraintsFeature() {
        super(new Portable());
    }

    public void setCertificateConstraints(CertificateConstraintsType c) {
        delegate.setCertificateConstraints(c);
    }

    public CertificateConstraintsType getCertificateConstraints() {
        return delegate.getCertificateConstraints();
    }

    public static class Portable implements AbstractPortableFeature {
        CertificateConstraintsType contraints;


        public Portable() {
        }

        @Override
        public void initialize(Server server, Bus bus) {
            if (contraints == null) {
                return;
            }
            doInitializeProvider(server.getEndpoint(), bus);
            CertConstraints c = CertConstraintsJaxBUtils.createCertConstraints(contraints);
            server.getEndpoint().put(CertConstraints.class.getName(), c);
        }

        @Override
        public void initialize(Client client, Bus bus) {
            if (contraints == null) {
                return;
            }
            doInitializeProvider(client, bus);
            CertConstraints c = CertConstraintsJaxBUtils.createCertConstraints(contraints);
            client.getEndpoint().put(CertConstraints.class.getName(), c);
        }

        @Override
        public void initialize(Bus bus) {
            if (contraints == null) {
                return;
            }
            doInitializeProvider(bus, bus);
            CertConstraints c = CertConstraintsJaxBUtils.createCertConstraints(contraints);
            bus.setProperty(CertConstraints.class.getName(), c);
        }

        @Override
        public void doInitializeProvider(InterceptorProvider provider, Bus bus) {
            if (contraints == null) {
                return;
            }
            provider.getInInterceptors().add(CertConstraintsInterceptor.INSTANCE);
            provider.getInFaultInterceptors().add(CertConstraintsInterceptor.INSTANCE);
        }

        public void setCertificateConstraints(CertificateConstraintsType c) {
            contraints = c;
        }

        public CertificateConstraintsType getCertificateConstraints() {
            return contraints;
        }
    }
}