mirror of
https://github.com/vanitasvitae/Smack.git
synced 2024-07-02 16:16:43 +02:00
fcc8414a92
There is a unsolveable race condition between the connection state and sendPacket(), i.e. the connection could go down, right after the method calling sendPacket is called, but before sendPacket() is invoked. Before this change, sendPacket() has thrown an unchecked IllegalStateException, which could be ignored by the Smack user, who would also not notice the race condition. We have decided to throw a checked Exception in this case now, to make the Smack user aware of this situation. SMACK-426
90 lines
3.4 KiB
Java
90 lines
3.4 KiB
Java
/**
|
|
*
|
|
* Copyright the original author or authors
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
package org.jivesoftware.smack.sasl;
|
|
|
|
import org.jivesoftware.smack.SASLAuthentication;
|
|
import org.jivesoftware.smack.SmackException.NotConnectedException;
|
|
|
|
import java.io.IOException;
|
|
import java.util.Map;
|
|
import java.util.HashMap;
|
|
|
|
import javax.security.sasl.Sasl;
|
|
import javax.security.sasl.SaslException;
|
|
import javax.security.auth.callback.CallbackHandler;
|
|
|
|
/**
|
|
* Implementation of the SASL GSSAPI mechanism
|
|
*
|
|
* @author Jay Kline
|
|
*/
|
|
public class SASLGSSAPIMechanism extends SASLMechanism {
|
|
|
|
public SASLGSSAPIMechanism(SASLAuthentication saslAuthentication) {
|
|
super(saslAuthentication);
|
|
|
|
System.setProperty("javax.security.auth.useSubjectCredsOnly","false");
|
|
System.setProperty("java.security.auth.login.config","gss.conf");
|
|
|
|
}
|
|
|
|
protected String getName() {
|
|
return "GSSAPI";
|
|
}
|
|
|
|
/**
|
|
* Builds and sends the <tt>auth</tt> stanza to the server.
|
|
* This overrides from the abstract class because the initial token
|
|
* needed for GSSAPI is binary, and not safe to put in a string, thus
|
|
* getAuthenticationText() cannot be used.
|
|
*
|
|
* @param username the username of the user being authenticated.
|
|
* @param host the hostname where the user account resides.
|
|
* @param cbh the CallbackHandler (not used with GSSAPI)
|
|
* @throws IOException If a network error occures while authenticating.
|
|
* @throws NotConnectedException
|
|
*/
|
|
public void authenticate(String username, String host, CallbackHandler cbh) throws IOException, SaslException, NotConnectedException {
|
|
String[] mechanisms = { getName() };
|
|
Map<String,String> props = new HashMap<String,String>();
|
|
props.put(Sasl.SERVER_AUTH,"TRUE");
|
|
sc = Sasl.createSaslClient(mechanisms, null, "xmpp", host, props, cbh);
|
|
authenticate();
|
|
}
|
|
|
|
/**
|
|
* Builds and sends the <tt>auth</tt> stanza to the server.
|
|
* This overrides from the abstract class because the initial token
|
|
* needed for GSSAPI is binary, and not safe to put in a string, thus
|
|
* getAuthenticationText() cannot be used.
|
|
*
|
|
* @param username the username of the user being authenticated.
|
|
* @param host the hostname where the user account resides.
|
|
* @param password the password of the user (ignored for GSSAPI)
|
|
* @throws IOException If a network error occures while authenticating.
|
|
* @throws NotConnectedException
|
|
*/
|
|
public void authenticate(String username, String host, String password) throws IOException, SaslException, NotConnectedException {
|
|
String[] mechanisms = { getName() };
|
|
Map<String,String> props = new HashMap<String, String>();
|
|
props.put(Sasl.SERVER_AUTH,"TRUE");
|
|
sc = Sasl.createSaslClient(mechanisms, null, "xmpp", host, props, this);
|
|
authenticate();
|
|
}
|
|
|
|
}
|