xmltooling/security/impl/ChainingCredentialResolver.cpp

   1 /**
   2  * Licensed to the University Corporation for Advanced Internet
   3  * Development, Inc. (UCAID) under one or more contributor license
   4  * agreements. See the NOTICE file distributed with this work for
   5  * additional information regarding copyright ownership.
   6  *
   7  * UCAID licenses this file to you under the Apache License,
   8  * Version 2.0 (the "License"); you may not use this file except
   9  * in compliance with the License. You may obtain a copy of the
  10  * License at
  11  *
  12  * http://www.apache.org/licenses/LICENSE-2.0
  13  *
  14  * Unless required by applicable law or agreed to in writing,
  15  * software distributed under the License is distributed on an
  16  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
  17  * either express or implied. See the License for the specific
  18  * language governing permissions and limitations under the License.
  19  */
  20
  21 /**
  22  * ChainingCredentialResolver.cpp
  23  *
  24  * CredentialResolver with chaining capability.
  25  */
  26
  27 #include "internal.h"
  28 #include "logging.h"
  29 #include "XMLToolingConfig.h"
  30 #include "security/CredentialResolver.h"
  31 #include "util/NDC.h"
  32 #include "util/XMLHelper.h"
  33
  34 #include <algorithm>
  35 #include <functional>
  36 #include <boost/bind.hpp>
  37 #include <boost/ptr_container/ptr_vector.hpp>
  38 #include <xercesc/util/XMLUniDefs.hpp>
  39
  40 using namespace xmltooling::logging;
  41 using namespace xmltooling;
  42 using namespace boost;
  43 using namespace std;
  44
  45 using xercesc::DOMElement;
  46
  47 namespace xmltooling {
  48     class XMLTOOL_DLLLOCAL ChainingCredentialResolver : public CredentialResolver
  49     {
  50     public:
  51         ChainingCredentialResolver(const DOMElement* e);
  52         virtual ~ChainingCredentialResolver() {}
  53
  54         Lockable* lock() {
  55             for_each(m_resolvers.begin(), m_resolvers.end(), mem_fun_ref(&Lockable::lock));
  56             return this;
  57         }
  58         void unlock() {
  59             for_each(m_resolvers.begin(), m_resolvers.end(), mem_fun_ref(&Lockable::unlock));
  60         }
  61
  62         const Credential* resolve(const CredentialCriteria* criteria=nullptr) const {
  63             const Credential* cred = nullptr;
  64             for (ptr_vector<CredentialResolver>::const_iterator cr = m_resolvers.begin(); !cred && cr!=m_resolvers.end(); ++cr)
  65                 cred = cr->resolve(criteria);
  66             return cred;
  67         }
  68
  69         virtual vector<const Credential*>::size_type resolve(
  70             vector<const Credential*>& results, const CredentialCriteria* criteria=nullptr
  71             ) const {
  72
  73             // Member function pointer to method to call.
  74             static vector<const Credential*>::size_type (CredentialResolver::* fn)
  75                 (vector<const Credential*>& results, const CredentialCriteria* criteria) const = &CredentialResolver::resolve;
  76
  77             // ref() converts pass by copy to pass by reference for output parameter
  78             for_each(m_resolvers.begin(), m_resolvers.end(), boost::bind(fn, _1, boost::ref(results), criteria));
  79             return results.size();
  80         }
  81
  82     private:
  83         ptr_vector<CredentialResolver> m_resolvers;
  84     };
  85
  86     CredentialResolver* XMLTOOL_DLLLOCAL ChainingCredentialResolverFactory(const DOMElement* const & e)
  87     {
  88         return new ChainingCredentialResolver(e);
  89     }
  90
  91     static const XMLCh _CredentialResolver[] =  UNICODE_LITERAL_18(C,r,e,d,e,n,t,i,a,l,R,e,s,o,l,v,e,r);
  92     static const XMLCh type[] =                 UNICODE_LITERAL_4(t,y,p,e);
  93 };
  94
  95 ChainingCredentialResolver::ChainingCredentialResolver(const DOMElement* e)
  96 {
  97     XMLToolingConfig& conf = XMLToolingConfig::getConfig();
  98     Category& log=Category::getInstance(XMLTOOLING_LOGCAT".CredentialResolver."CHAINING_CREDENTIAL_RESOLVER);
  99
 100     // Load up the chain of resolvers.
 101     e = e ? XMLHelper::getFirstChildElement(e, _CredentialResolver) : nullptr;
 102     while (e) {
 103         string t = XMLHelper::getAttrString(e, nullptr, type);
 104         if (!t.empty()) {
 105             log.info("building CredentialResolver of type %s", t.c_str());
 106             try {
 107                 m_resolvers.push_back(conf.CredentialResolverManager.newPlugin(t.c_str(), e));
 108             }
 109             catch (exception& ex) {
 110                 log.error("caught exception processing embedded CredentialResolver element: %s", ex.what());
 111             }
 112         }
 113         e = XMLHelper::getNextSiblingElement(e, _CredentialResolver);
 114     }
 115 }