Jungleford's Home BlogJava分舵

4．簡單的例子

     以上流程中使用到的Java源代碼和配置文件如下：

// MyPrincipal.java package com.jungleford.auth; import java.security.Principal; public class MyPrincipal implements Principal { // 一個Principal的例子 private String name; // Principal的名字 public MyPrincipal(String name) { this.name = name; } public String getName() { //取得Principal的名字 return this.name; } public boolean equals(Object principal) { // 判斷兩個Pincipal相同的依據(jù) if (principal instanceof MyPrincipal) return this.name.equals(((MyPrincipal)principal).getName()); else return false; } public String toString() { // Principal的表示 return "MyPrincipal: " + this.name; } public int hashCode() { // 確定本對象的散列值 // 用于有基于散列容器的場合，判斷在散列容器中是否是同一個對象。 // 如果對hashCode感興趣，請參見： // http://www-900.ibm.com/developerWorks/cn/java/j-jtp05273/ return this.name.hashCode(); } }

// MyLoginModule.java package com.jungleford.auth; import java.util.*; import java.io.IOException; import java.security.Principal; import javax.security.auth.*; import javax.security.auth.callback.*; import javax.security.auth.login.*; import javax.security.auth.spi.*; public class MyLoginModule implements LoginModule { // 一個登錄模塊的例子 private Subject subject; // 登錄主體的表征 private CallbackHandler cbHandler; // 回調(diào)對象，提供終端下獲取用戶名、口令的界面 private Map sharedState; // 用于緩存中間結(jié)果的共享區(qū) private Map options; // 用于保存某些登錄模塊所需要用到的一些配置選項 private boolean succeeded = false; // 一次login成功的標(biāo)志 private boolean cmtSucceeded = false; // 整體登錄成功的提交標(biāo)志 private String username; // 取得用戶名 private char[] password; // 取得口令 private Principal principal; // 取得登錄后的身份標(biāo)志 public void initialize(Subject subject, CallbackHandler cbHandler, Map sharedState, Map options) { // 初始化過程 System.out.println("Login module initializing ..."); System.out.println(); this.subject = subject; this.cbHandler = cbHandler; this.sharedState = sharedState; this.options = options; } public boolean login() throws LoginException { // 一次登錄過程 if (cbHandler == null) // 尚未配置回調(diào)對象 throw new LoginException("Error: No CallbackHandler available " + "to garner authentication information from the user"); Callback[] cbs = new Callback[2]; // 僅使用用戶名回調(diào)和口令回調(diào) cbs[0] = new NameCallback("Login: "); cbs[1] = new PasswordCallback("Password: ", false); try { cbHandler.handle(cbs); username = ((NameCallback)cbs[0]).getName(); char[] temp = ((PasswordCallback)cbs[1]).getPassword(); if (temp == null) { // 口令為空 temp = new char[0]; } password = new char[temp.length]; System.arraycopy(temp, 0, password, 0, temp.length); ((PasswordCallback)cbs[1]).clearPassword(); // 清除內(nèi)存中的口令痕跡 } catch (IOException ioe) { throw new LoginException(ioe.toString()); } catch (UnsupportedCallbackException uce) { throw new LoginException("Error: " + uce.getCallback().toString() + " not available to garner authentication information " + "from the user"); } boolean usrCorrect = false; // 用戶名正確否？ boolean pwdCorrect = false; // 口令正確否？ if (username.equals("user")) // 目前僅允許用戶名為user的登錄 usrCorrect = true; if (usrCorrect && password.length == 9 && password[0] == 'l' && password[1] == 'e' && password[2] == 't' && password[3] == 'm' && password[4] == 'e' && password[5] == 'p' && password[6] == 'a' && password[7] == 's' && password[8] == 's') // user的口令指定為letmepass { System.out.println("MyLoginModule: Authentication pass!"); System.out.println(); pwdCorrect = true; succeeded = true; return true; // 一次登錄成功 } else { System.out.println("MyLoginModule: Authentication failed!"); System.out.println(); succeeded = false; username = null; for (int i = 0; i < password.length; i++) // 清除內(nèi)存中的口令痕跡 password[i] = ' '; password = null; if (!usrCorrect) { throw new FailedLoginException("Username incorrect!"); } else { throw new FailedLoginException("Password incorrect!"); } } } public boolean commit() throws LoginException { // 根據(jù)登錄配置策略判斷是否整體登錄成功 if (succeeded == false) { return false; } else { principal = new MyPrincipal(username); if (!subject.getPrincipals().contains(principal)) subject.getPrincipals().add(principal); // 把新的身份添加到subject中 System.out.println("MyLoginModule: Add a new principal to current subject."); System.out.println(); username = null; for (int i = 0; i < password.length; i++) // 清除內(nèi)存中的口令痕跡 password[i] = ' '; password = null; cmtSucceeded = true; return true; } } public boolean abort() throws LoginException { // 放棄登錄，將狀態(tài)復(fù)位至登錄前 if (succeeded == false) { return false; } else if (succeeded == true && cmtSucceeded == false) { succeeded = false; username = null; if (password != null) { for (int i = 0; i < password.length; i++) // 清除內(nèi)存中的口令痕跡 password[i] = ' '; password = null; } principal = null; } else { logout(); } return true; } public boolean logout() throws LoginException { // 注銷，并將狀態(tài)復(fù)位至登錄前 subject.getPrincipals().remove(principal); succeeded = false; succeeded = cmtSucceeded; username = null; if (password != null) { for (int i = 0; i < password.length; i++) // 清除內(nèi)存中的口令痕跡 password[i] = ' '; password = null; } principal = null; return true; } }