xmltooling/security/impl/ChainingCredentialResolver.cpp

   1 /**
   2  * Licensed to the University Corporation for Advanced Internet
   3  * Development, Inc. (UCAID) under one or more contributor license
   4  * agreements. See the NOTICE file distributed with this work for
   5  * additional information regarding copyright ownership.
   6  *
   7  * UCAID licenses this file to you under the Apache License,
   8  * Version 2.0 (the "License"); you may not use this file except
   9  * in compliance with the License. You may obtain a copy of the
  10  * License at
  11  *
  12  * http://www.apache.org/licenses/LICENSE-2.0
  13  *
  14  * Unless required by applicable law or agreed to in writing,
  15  * software distributed under the License is distributed on an
  16  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
  17  * either express or implied. See the License for the specific
  18  * language governing permissions and limitations under the License.
  19  */
  20
  21 /**
  22  * ChainingCredentialResolver.cpp
  23  *
  24  * CredentialResolver with chaining capability.
  25  */
  26
  27 #include "internal.h"
  28 #include "logging.h"
  29 #include "XMLToolingConfig.h"
  30 #include "security/CredentialResolver.h"
  31 #include "util/NDC.h"
  32 #include "util/XMLHelper.h"
  33
  34 #include <algorithm>
  35 #include <functional>
  36 #include <xercesc/util/XMLUniDefs.hpp>
  37
  38 using namespace xmltooling::logging;
  39 using namespace xmltooling;
  40 using namespace std;
  41
  42 using xercesc::DOMElement;
  43
  44 namespace xmltooling {
  45     class XMLTOOL_DLLLOCAL ChainingCredentialResolver : public CredentialResolver
  46     {
  47     public:
  48         ChainingCredentialResolver(const DOMElement* e);
  49         virtual ~ChainingCredentialResolver() {
  50             for_each(m_resolvers.begin(), m_resolvers.end(), xmltooling::cleanup<CredentialResolver>());
  51         }
  52
  53         Lockable* lock() {
  54             for_each(m_resolvers.begin(), m_resolvers.end(), mem_fun(&Lockable::lock));
  55             return this;
  56         }
  57         void unlock() {
  58             for_each(m_resolvers.begin(), m_resolvers.end(), mem_fun(&Lockable::unlock));
  59         }
  60
  61         const Credential* resolve(const CredentialCriteria* criteria=nullptr) const {
  62             const Credential* cred = nullptr;
  63             for (vector<CredentialResolver*>::const_iterator cr = m_resolvers.begin(); !cred && cr!=m_resolvers.end(); ++cr)
  64                 cred = (*cr)->resolve(criteria);
  65             return cred;
  66         }
  67
  68         virtual vector<const Credential*>::size_type resolve(
  69             vector<const Credential*>& results, const CredentialCriteria* criteria=nullptr
  70             ) const {
  71             for (vector<CredentialResolver*>::const_iterator cr = m_resolvers.begin(); cr!=m_resolvers.end(); ++cr)
  72                 (*cr)->resolve(results, criteria);
  73             return results.size();
  74         }
  75
  76     private:
  77         vector<CredentialResolver*> m_resolvers;
  78     };
  79
  80     CredentialResolver* XMLTOOL_DLLLOCAL ChainingCredentialResolverFactory(const DOMElement* const & e)
  81     {
  82         return new ChainingCredentialResolver(e);
  83     }
  84
  85     static const XMLCh _CredentialResolver[] =  UNICODE_LITERAL_18(C,r,e,d,e,n,t,i,a,l,R,e,s,o,l,v,e,r);
  86     static const XMLCh type[] =                 UNICODE_LITERAL_4(t,y,p,e);
  87 };
  88
  89 ChainingCredentialResolver::ChainingCredentialResolver(const DOMElement* e)
  90 {
  91     XMLToolingConfig& conf = XMLToolingConfig::getConfig();
  92     Category& log=Category::getInstance(XMLTOOLING_LOGCAT".CredentialResolver."CHAINING_CREDENTIAL_RESOLVER);
  93
  94     // Load up the chain of resolvers.
  95     e = e ? XMLHelper::getFirstChildElement(e, _CredentialResolver) : nullptr;
  96     while (e) {
  97         string t = XMLHelper::getAttrString(e, nullptr, type);
  98         if (!t.empty()) {
  99             log.info("building CredentialResolver of type %s", t.c_str());
 100             try {
 101                 m_resolvers.push_back(conf.CredentialResolverManager.newPlugin(t.c_str(), e));
 102             }
 103             catch (exception& ex) {
 104                 log.error("caught exception processing embedded CredentialResolver element: %s", ex.what());
 105             }
 106         }
 107         e = XMLHelper::getNextSiblingElement(e, _CredentialResolver);
 108     }
 109 }