forked from AthenZ/athenz
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
local athenz start and stop scripts (AthenZ#1165)
* local athenz start and stop scripts Co-authored-by: Abhijeet V <[email protected]>
- Loading branch information
Showing
22 changed files
with
368 additions
and
43 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
140 changes: 140 additions & 0 deletions
140
libs/java/auth_core/src/main/java/com/yahoo/athenz/auth/impl/TestUserAuthority.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,140 @@ | ||
| /* | ||
| * Copyright 2020 Verizon Media | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"); | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * http://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| */ | ||
| package com.yahoo.athenz.auth.impl; | ||
|
|
||
| import com.yahoo.athenz.auth.Authority; | ||
| import com.yahoo.athenz.auth.Principal; | ||
| import org.bouncycastle.util.encoders.Base64; | ||
| import org.slf4j.Logger; | ||
| import org.slf4j.LoggerFactory; | ||
|
|
||
| import java.nio.charset.StandardCharsets; | ||
|
|
||
| /** | ||
| * Implementation to be used by local testing purposes. | ||
| * NOT RECOMMENDED to be used in production | ||
| */ | ||
| public class TestUserAuthority implements Authority { | ||
|
|
||
| private static final Logger LOG = LoggerFactory.getLogger(TestUserAuthority.class); | ||
| public static final String ATHENZ_AUTH_CHALLENGE = "Basic realm=\"athenz\""; | ||
|
|
||
| @Override | ||
| public void initialize() { | ||
| } | ||
|
|
||
| @Override | ||
| public String getID() { | ||
| return "Auth-TESTUSER"; | ||
| } | ||
|
|
||
| @Override | ||
| public String getDomain() { | ||
| return "user"; | ||
| } | ||
|
|
||
| @Override | ||
| public String getHeader() { | ||
| return "Authorization"; | ||
| } | ||
|
|
||
| @Override | ||
| public String getAuthenticateChallenge() { | ||
| return ATHENZ_AUTH_CHALLENGE; | ||
| } | ||
|
|
||
| /* | ||
| * we don't want the user to keep specifying their username and | ||
| * password as part of the request. instead, the user must first | ||
| * request a usertoken and then use that usertoken for all other | ||
| * requests against ZMS and ZTS servers. | ||
| * @see com.yahoo.athenz.auth.Authority#allowAuthorization() | ||
| */ | ||
| @Override | ||
| public boolean allowAuthorization() { | ||
| return false; | ||
| } | ||
|
|
||
| @Override | ||
| public Principal authenticate(String creds, String remoteAddr, String httpMethod, StringBuilder errMsg) { | ||
| errMsg = errMsg == null ? new StringBuilder(512) : errMsg; | ||
|
|
||
| // the HTTP Basic authorization format is: Basic base64(<username>:<password>) | ||
|
|
||
| if (!creds.startsWith("Basic ")) { | ||
| errMsg.append("UserAuthority:authenticate: credentials do not start with 'Basic '"); | ||
| LOG.error(errMsg.toString()); | ||
| return null; | ||
| } | ||
|
|
||
| final String encodedPassword = creds.substring(6); | ||
| if (encodedPassword.isEmpty()) { | ||
| errMsg.append("TestUserAuthority:authenticate: no credentials after 'Basic '"); | ||
| LOG.error(errMsg.toString()); | ||
| return null; | ||
| } | ||
|
|
||
| // decode - need to skip the first 6 bytes for 'Basic ' | ||
|
|
||
| String decodedCreds; | ||
| try { | ||
| decodedCreds = new String(Base64.decode(encodedPassword.getBytes(StandardCharsets.UTF_8))); | ||
| } catch (Exception e) { | ||
| errMsg.append("UserAuthority:authenticate: factory exc=").append(e.getMessage()); | ||
| LOG.error(errMsg.toString()); | ||
| return null; | ||
| } | ||
|
|
||
| int idx = decodedCreds.indexOf(':'); | ||
| if (idx == -1) { | ||
| errMsg.append("TestUserAuthority: authenticate: no password specified"); | ||
| LOG.error(errMsg.toString()); | ||
| return null; | ||
| } | ||
|
|
||
| final String username = decodedCreds.substring(0, idx); | ||
| final String password = decodedCreds.substring(idx + 1); | ||
|
|
||
| // just a simple check to make sure username and password match | ||
| if (!username.equals(password)) { | ||
| LOG.error("TestUserAuthority:authenticate: failed: username and password do not match"); | ||
| return null; | ||
| } | ||
|
|
||
| if (LOG.isDebugEnabled()) { | ||
| LOG.debug("TestUserAuthority.authenticate: valid user={}", username); | ||
| } | ||
|
|
||
| // all the role members in Athenz are normalized to lower case so we need to make | ||
| // sure our principal's name and domain are created with lower case as well | ||
|
|
||
| long issueTime = 0; | ||
| SimplePrincipal princ = getSimplePrincipal(username.toLowerCase(), creds, issueTime); | ||
| if (princ == null) { | ||
| errMsg.append("TestUserAuthority:authenticate: failed to create principal: user=") | ||
| .append(username); | ||
| LOG.error(errMsg.toString()); | ||
| return null; | ||
| } | ||
| princ.setUnsignedCreds(username); | ||
| return princ; | ||
| } | ||
|
|
||
| SimplePrincipal getSimplePrincipal(String name, String creds, long issueTime) { | ||
| return (SimplePrincipal) SimplePrincipal.create(getDomain(), | ||
| name, creds, issueTime, this); | ||
| } | ||
| } |
Oops, something went wrong.