Changeset 2180

Timestamp:

Mar 12, 2012, 12:16:52 PM (10 years ago)

Author:

work@…

Message:

• adding support for programmatic logins using the 'hello' method in the restController over http basic authentication.
• e.g. /rest/hello?consumer=myConsumerId

Location:

trunk/grails-app

Files:

• conf/BootStrap.groovy (modified) (1 diff)
• conf/Config.groovy (modified) (1 diff)
• controllers/RestController.groovy (modified) (3 diffs)

trunk/grails-app/conf/BootStrap.groovy

@@ -38 +38 @@
                 // define timezone
                 System.setProperty('user.timezone', 'CET')
+
+                // set up a client (=external program) role if it does not exist
+                def clientRole = SecRole.findByAuthority('ROLE_CLIENT') ?: new SecRole(authority: 'ROLE_CLIENT').save(failOnError: true)
 
                 // set up authentication (if required)

trunk/grails-app/conf/Config.groovy

@@ -109 +109 @@
 grails.plugins.springsecurity.successHandler.targetUrlParameter = 'spring-security-redirect'
 
+// Spring Security configuration
+grails.plugins.springsecurity.useBasicAuth = true
+grails.plugins.springsecurity.basic.realmName = "Authentication Required"
+grails.plugins.springsecurity.useSessionFixationPrevention = true
+grails.plugins.springsecurity.filterChain.chainMap = [
+        '/rest/hello': 'JOINED_FILTERS,-exceptionTranslationFilter',
+        '/**': 'JOINED_FILTERS,-basicAuthenticationFilter,-basicExceptionTranslationFilter'
+]
+
 // Needed for the (copy of) the Spring Security UI plugin
 grails.mail.default.from = 'gscf@dbnp.org'

trunk/grails-app/controllers/RestController.groovy

@@ -22 +22 @@
 import nl.metabolomicscentre.dsp.http.BasicAuthentication
 import dbnp.rest.common.CommunicationManager
-import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.context.SecurityContextHolder
+import grails.plugins.springsecurity.Secured;
 
 class RestController {
@@ -34 +35 @@
         def credentials
         def requestUser
+
+        @Secured(['ROLE_CLIENT'])
+        def hello = {
+                // client was authorized over basic http authentication
+                // (also see spring security section in Config.groovy)
+                // for now just return the token to authenticate with
+
+                // got a consumer?
+                if (!params.containsKey('consumer')) {
+                        // no
+                        response.status = 400;
+
+                        def result = ['error':"Consumer required"]
+
+                        if (params.containsKey('callback')) {
+                                render "${params.callback}(${result as JSON})"
+                        } else {
+                                render result as JSON
+                        }
+                } else {
+                        // yes
+                        // create a random session token that will be used to allow to module to
+                        // sync with gscf prior to presenting the measurement data
+                        def sessionToken = UUID.randomUUID().toString()
+
+                        def result = ['token': sessionToken]
+
+                        // put the session token to work
+                        authenticationService.logInRemotely( params.get('consumer'), sessionToken, authenticationService.getLoggedInUser())
+
+                        response.status = 200;
+                        if (params.containsKey('callback')) {
+                                render "${params.callback}(${result as JSON})"
+                        } else {
+                                render result as JSON
+                        }
+                }
+        }
 
         /**
@@ -109 +148 @@
          *
          * If one study is requested, a 404 error might occur if the study doesn't exist, and a 401 error if the user is not
-         * authorized to access this study. If multiple studies are requrested, non-existing studies or studies for which the 
+         * authorized to access this study. If multiple studies are requested, non-existing studies or studies for which the
          * user is not authorized are not returned in the list (so the list might be empty).
          *