-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This library is now Java 17. Fixed all the "planned" but never done feats.
- Loading branch information
Showing
23 changed files
with
1,147 additions
and
470 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
68 changes: 68 additions & 0 deletions
68
src/main/java/org/codehaus/plexus/components/secdispatcher/SecDispatcher.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,68 @@ | ||
| /* | ||
| * Copyright (c) 2008 Sonatype, Inc. All rights reserved. | ||
| * | ||
| * This program is licensed to you under the Apache License Version 2.0, | ||
| * and you may not use this file except in compliance with the Apache License Version 2.0. | ||
| * You may obtain a copy of the Apache License Version 2.0 at http://www.apache.org/licenses/LICENSE-2.0. | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, | ||
| * software distributed under the Apache License Version 2.0 is distributed on an | ||
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the Apache License Version 2.0 for the specific language governing permissions and limitations there under. | ||
| */ | ||
|
|
||
| package org.codehaus.plexus.components.secdispatcher; | ||
|
|
||
| import java.util.Map; | ||
| import java.util.Set; | ||
|
|
||
| /** | ||
| * This component decrypts a string, passed to it | ||
| * | ||
| * @author Oleg Gusakov | ||
| */ | ||
| public interface SecDispatcher { | ||
| /** | ||
| * The default path of configuration. | ||
| * <p> | ||
| * The character {@code ~} (tilde) may be present as first character ONLY and is | ||
| * interpreted as "user home". | ||
| */ | ||
| String DEFAULT_CONFIGURATION = "~/.m2/settings-security.xml"; | ||
|
|
||
| /** | ||
| * Java System Property that may be set, to override configuration path. | ||
| */ | ||
| String SYSTEM_PROPERTY_CONFIGURATION_LOCATION = "settings.security"; | ||
|
|
||
| /** | ||
| * Attribute that selects a dispatcher. | ||
| * | ||
| * @see #availableDispatchers() | ||
| */ | ||
| String DISPATCHER_NAME_ATTR = "name"; | ||
|
|
||
| /** | ||
| * Returns the set of available dispatcher names, never {@code null}. | ||
| */ | ||
| Set<String> availableDispatchers(); | ||
|
|
||
| /** | ||
| * encrypt given plaintext string | ||
| * | ||
| * @param str the plaintext to encrypt | ||
| * @param attr the attributes, may be {@code null} | ||
| * @return encrypted string | ||
| * @throws SecDispatcherException in case of problem | ||
| */ | ||
| String encrypt(String str, Map<String, String> attr) throws SecDispatcherException; | ||
|
|
||
| /** | ||
| * decrypt given encrypted string | ||
| * | ||
| * @param str the encrypted string | ||
| * @return plaintext string | ||
| * @throws SecDispatcherException in case of problem | ||
| */ | ||
| String decrypt(String str) throws SecDispatcherException; | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
200 changes: 200 additions & 0 deletions
200
...main/java/org/codehaus/plexus/components/secdispatcher/internal/DefaultSecDispatcher.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,200 @@ | ||
| /* | ||
| * Copyright (c) 2008 Sonatype, Inc. All rights reserved. | ||
| * | ||
| * This program is licensed to you under the Apache License Version 2.0, | ||
| * and you may not use this file except in compliance with the Apache License Version 2.0. | ||
| * You may obtain a copy of the Apache License Version 2.0 at http://www.apache.org/licenses/LICENSE-2.0. | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, | ||
| * software distributed under the Apache License Version 2.0 is distributed on an | ||
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the Apache License Version 2.0 for the specific language governing permissions and limitations there under. | ||
| */ | ||
|
|
||
| package org.codehaus.plexus.components.secdispatcher.internal; | ||
|
|
||
| import javax.inject.Inject; | ||
| import javax.inject.Named; | ||
| import javax.inject.Singleton; | ||
|
|
||
| import java.util.HashMap; | ||
| import java.util.Map; | ||
| import java.util.Set; | ||
| import java.util.StringTokenizer; | ||
| import java.util.stream.Collectors; | ||
|
|
||
| import org.codehaus.plexus.components.cipher.PlexusCipher; | ||
| import org.codehaus.plexus.components.cipher.PlexusCipherException; | ||
| import org.codehaus.plexus.components.secdispatcher.SecDispatcher; | ||
| import org.codehaus.plexus.components.secdispatcher.SecDispatcherException; | ||
| import org.codehaus.plexus.components.secdispatcher.model.SettingsSecurity; | ||
|
|
||
| import static java.util.Objects.requireNonNull; | ||
|
|
||
| /** | ||
| * @author Oleg Gusakov | ||
| */ | ||
| @Singleton | ||
| @Named | ||
| public class DefaultSecDispatcher implements SecDispatcher { | ||
| public static final String ATTR_START = "["; | ||
| public static final String ATTR_STOP = "]"; | ||
|
|
||
| protected final PlexusCipher cipher; | ||
| protected final Map<String, MasterPasswordSource> masterPasswordSources; | ||
| protected final Map<String, Dispatcher> dispatchers; | ||
| protected final String configurationFile; | ||
|
|
||
| @Inject | ||
| public DefaultSecDispatcher( | ||
| PlexusCipher cipher, | ||
| Map<String, MasterPasswordSource> masterPasswordSources, | ||
| Map<String, Dispatcher> dispatchers, | ||
| @Named("${configurationFile:-" + DEFAULT_CONFIGURATION + "}") final String configurationFile) { | ||
| this.cipher = requireNonNull(cipher); | ||
| this.masterPasswordSources = requireNonNull(masterPasswordSources); | ||
| this.dispatchers = requireNonNull(dispatchers); | ||
| this.configurationFile = requireNonNull(configurationFile); | ||
| } | ||
|
|
||
| @Override | ||
| public Set<String> availableDispatchers() { | ||
| return Set.copyOf(dispatchers.keySet()); | ||
| } | ||
|
|
||
| @Override | ||
| public String encrypt(String str, Map<String, String> attr) throws SecDispatcherException { | ||
| if (isEncryptedString(str)) return str; | ||
|
|
||
| try { | ||
| String res; | ||
| if (attr == null || attr.get(DISPATCHER_NAME_ATTR) == null) { | ||
| SettingsSecurity sec = getConfiguration(true); | ||
| String master = getMasterPassword(sec, true); | ||
| res = cipher.encrypt(getMasterCipher(sec), str, master); | ||
| } else { | ||
| String type = attr.get(DISPATCHER_NAME_ATTR); | ||
| Dispatcher dispatcher = dispatchers.get(type); | ||
| if (dispatcher == null) throw new SecDispatcherException("no dispatcher for name " + type); | ||
| res = ATTR_START | ||
| + attr.entrySet().stream() | ||
| .map(e -> e.getKey() + "=" + e.getValue()) | ||
| .collect(Collectors.joining(",")) | ||
| + ATTR_STOP; | ||
| res += dispatcher.encrypt(str, attr, prepareDispatcherConfig(type)); | ||
| } | ||
| return cipher.decorate(res); | ||
| } catch (PlexusCipherException e) { | ||
| throw new SecDispatcherException(e.getMessage(), e); | ||
| } | ||
| } | ||
|
|
||
| @Override | ||
| public String decrypt(String str) throws SecDispatcherException { | ||
| if (!isEncryptedString(str)) return str; | ||
| try { | ||
| String bare = cipher.unDecorate(str); | ||
| Map<String, String> attr = stripAttributes(bare); | ||
| if (attr == null || attr.get(DISPATCHER_NAME_ATTR) == null) { | ||
| SettingsSecurity sec = getConfiguration(true); | ||
| String master = getMasterPassword(sec, true); | ||
| return cipher.decrypt(getMasterCipher(sec), bare, master); | ||
| } else { | ||
| String type = attr.get(DISPATCHER_NAME_ATTR); | ||
| Dispatcher dispatcher = dispatchers.get(type); | ||
| if (dispatcher == null) throw new SecDispatcherException("no dispatcher for name " + type); | ||
| return dispatcher.decrypt(strip(bare), attr, prepareDispatcherConfig(type)); | ||
| } | ||
| } catch (PlexusCipherException e) { | ||
| throw new SecDispatcherException(e.getMessage(), e); | ||
| } | ||
| } | ||
|
|
||
| private Map<String, String> prepareDispatcherConfig(String type) { | ||
| HashMap<String, String> dispatcherConf = new HashMap<>(); | ||
| SettingsSecurity sec = getConfiguration(false); | ||
| String master = getMasterPassword(sec, false); | ||
| if (master != null) { | ||
| dispatcherConf.put(Dispatcher.CONF_MASTER_PASSWORD, master); | ||
| } | ||
| Map<String, String> conf = SecUtil.getConfig(sec, type); | ||
| if (conf != null) { | ||
| dispatcherConf.putAll(conf); | ||
| } | ||
| return dispatcherConf; | ||
| } | ||
|
|
||
| private String strip(String str) { | ||
| int start = str.indexOf(ATTR_START); | ||
| int stop = str.indexOf(ATTR_STOP); | ||
| if (start != -1 && stop != -1 && stop > start) { | ||
| return str.substring(stop + 1); | ||
| } | ||
| return str; | ||
| } | ||
|
|
||
| private Map<String, String> stripAttributes(String str) { | ||
| int start = str.indexOf(ATTR_START); | ||
| int stop = str.indexOf(ATTR_STOP); | ||
| if (start != -1 && stop != -1 && stop > start) { | ||
| if (start != 0) throw new SecDispatcherException("Attributes can be prefix only"); | ||
| if (stop == start + 1) return null; | ||
| String attrs = str.substring(start + 1, stop).trim(); | ||
| if (attrs.isEmpty()) return null; | ||
| Map<String, String> res = null; | ||
| StringTokenizer st = new StringTokenizer(attrs, ","); | ||
| while (st.hasMoreTokens()) { | ||
| if (res == null) res = new HashMap<>(st.countTokens()); | ||
| String pair = st.nextToken(); | ||
| int pos = pair.indexOf('='); | ||
| if (pos == -1) throw new SecDispatcherException("Attribute malformed: " + pair); | ||
| String key = pair.substring(0, pos).trim(); | ||
| String val = pair.substring(pos + 1).trim(); | ||
| res.put(key, val); | ||
| } | ||
| return res; | ||
| } | ||
| return null; | ||
| } | ||
|
|
||
| private boolean isEncryptedString(String str) { | ||
| if (str == null) return false; | ||
| return cipher.isEncryptedString(str); | ||
| } | ||
|
|
||
| private SettingsSecurity getConfiguration(boolean mandatory) throws SecDispatcherException { | ||
| String location = System.getProperty(SYSTEM_PROPERTY_CONFIGURATION_LOCATION, getConfigurationFile()); | ||
| location = location.charAt(0) == '~' ? System.getProperty("user.home") + location.substring(1) : location; | ||
| SettingsSecurity sec = SecUtil.read(location, true); | ||
| if (mandatory && sec == null) | ||
| throw new SecDispatcherException("Please check that configuration file on path " + location + " exists"); | ||
|
|
||
| return sec; | ||
| } | ||
|
|
||
| private String getMasterPassword(SettingsSecurity sec, boolean mandatory) throws SecDispatcherException { | ||
| if (sec == null && !mandatory) { | ||
| return null; | ||
| } | ||
| requireNonNull(sec, "configuration is null"); | ||
| String masterSource = requireNonNull(sec.getMasterSource(), "masterSource is null"); | ||
| for (MasterPasswordSource masterPasswordSource : masterPasswordSources.values()) { | ||
| String masterPassword = masterPasswordSource.handle(masterSource); | ||
| if (masterPassword != null) return masterPassword; | ||
| } | ||
| if (mandatory) { | ||
| throw new SecDispatcherException("master password could not be fetched"); | ||
| } else { | ||
| return null; | ||
| } | ||
| } | ||
|
|
||
| private String getMasterCipher(SettingsSecurity sec) throws SecDispatcherException { | ||
| requireNonNull(sec, "configuration is null"); | ||
| return requireNonNull(sec.getMasterCipher(), "masterCipher is null"); | ||
| } | ||
|
|
||
| public String getConfigurationFile() { | ||
| return configurationFile; | ||
| } | ||
| } |
Oops, something went wrong.