package com.mozilla.bespin.auth;/** * Created by IntelliJ IDEA. * User: dion * Date: Dec 17, 2008 * Time: 9:57:17 AM */import org.openid4java.discovery.Identifier;import org.openid4java.discovery.DiscoveryInformation;import org.openid4java.message.ax.FetchRequest;import org.openid4java.message.ax.FetchResponse;import org.openid4java.message.ax.AxMessage;import org.openid4java.message.*;import org.openid4java.OpenIDException;import org.openid4java.server.RealmVerifier;import org.openid4java.consumer.ConsumerManager;import org.openid4java.consumer.ConsumerException;import org.openid4java.consumer.VerificationResult;import javax.servlet.http.HttpSession;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;import javax.servlet.http.HttpServlet;import javax.servlet.RequestDispatcher;import javax.servlet.ServletException;import javax.servlet.ServletConfig;import java.util.List;import java.io.IOException;import com.mozilla.bespin.RequestContext;/** * Sample Consumer (Relying Party) implementation. */public class OpenIDAuth implements Authenticator{    public ConsumerManager manager;    public OpenIDAuth() throws ConsumerException {        // instantiate a ConsumerManager object        // Don't try to enforce the realm at all        manager = new ConsumerManager();        RealmVerifier rv = new RealmVerifier();        rv.setEnforceRpId(false);        manager.setRealmVerifier(rv);    }    // --- placing the authentication request ---    public String authenticate(RequestContext ctx, String userSuppliedString, String password)    {        try        {            // configure the return_to URL where your application will receive            // the authentication responses from the OpenID provider            String returnToUrl = "http://localhost:8080/register/verify";            // --- Forward proxy setup (only if needed) ---            // ProxyProperties proxyProps = new ProxyProperties();            // proxyProps.setProxyName("proxy.example.com");            // proxyProps.setProxyPort(8080);            // HttpClientFactory.setProxyProperties(proxyProps);            // perform discovery on the user-supplied identifier            List discoveries = manager.discover(userSuppliedString);            // attempt to associate with the OpenID provider            // and retrieve one service endpoint for authentication            DiscoveryInformation discovered = manager.associate(discoveries);            // store the discovery information in the user's session            ctx.getSession().setAttribute("openid-disc", discovered);            // obtain a AuthRequest message to be sent to the OpenID provider            AuthRequest authReq = manager.authenticate(discovered, returnToUrl);            // Attribute Exchange example: fetching the 'email' attribute            FetchRequest fetch = FetchRequest.createFetchRequest();            fetch.addAttribute("email",                    // attribute alias                    "http://schema.openid.net/contact/email",   // type URI                    true);                                      // required            // attach the extension to the authentication request            authReq.addExtension(fetch);            if (! discovered.isVersion2() )            {                // Option 1: GET HTTP-redirect to the OpenID Provider endpoint                // The only method supported in OpenID 1.x                // redirect-URL usually limited ~2048 bytes                try {                    ctx.getResp().sendRedirect(authReq.getDestinationUrl(true));                } catch (IOException e) {                }                return null;            }            else            {                // Option 2: HTML FORM Redirection (Allows payloads >2048 bytes)/*                RequestDispatcher dispatcher =                        getServletContext().getRequestDispatcher("formredirection.jsp");                httpReq.setAttribute("parameterMap", authReq.getParameterMap());                httpReq.setAttribute("destinationUrl", authReq.getDestinationUrl(false));                dispatcher.forward(httpReq, httpResp);                */            }        }        catch (OpenIDException e)        {            // present error to the user        }        return null;    }    // --- processing the authentication response ---    public Identifier verify(RequestContext ctx)    {        HttpServletRequest httpReq = ctx.getReq();        try        {            // extract the parameters from the authentication response            // (which comes in as a HTTP request from the OpenID provider)            ParameterList response =                    new ParameterList(httpReq.getParameterMap());            // retrieve the previously stored discovery information            DiscoveryInformation discovered = (DiscoveryInformation)                    httpReq.getSession().getAttribute("openid-disc");            // extract the receiving URL from the HTTP request            StringBuffer receivingURL = httpReq.getRequestURL();            String queryString = httpReq.getQueryString();            if (queryString != null && queryString.length() > 0)                receivingURL.append("?").append(httpReq.getQueryString());            // verify the response; ConsumerManager needs to be the same            // (static) instance used to place the authentication request            VerificationResult verification = manager.verify(                    receivingURL.toString(),                    response, discovered);            // examine the verification result and extract the verified identifier            Identifier verified = verification.getVerifiedId();            if (verified != null)            {                AuthSuccess authSuccess =                        (AuthSuccess) verification.getAuthResponse();                if (authSuccess.hasExtension(AxMessage.OPENID_NS_AX))                {                    FetchResponse fetchResp = (FetchResponse) authSuccess                            .getExtension(AxMessage.OPENID_NS_AX);                    List emails = fetchResp.getAttributeValues("email");                    String email = (String) emails.get(0);                }                return verified;  // success            }        }        catch (OpenIDException e)        {            // present error to the user        }        return null;    }}