Skip to content

O
Openfire
Commit 1ed0983f authored by Gaston Dombiak's avatar Gaston Dombiak Committed by gato
Browse files
Options

Added support for SSO between cluster nodes. 

git-svn-id: http://svn.igniterealtime.org/svn/repos/openfire/trunk@9319 b35dd754-fafc-0310-a699-88a17e54d16e
parent 30e9bb67
Hide whitespace changes
Inline Side-by-side
Showing with 29 additions and 13 deletions
src/web/login.jsp
View file @ 1ed0983f
...@@ -14,6 +14,8 @@ ...@@ -14,6 +14,8 @@
<%@ page import="org.jivesoftware.util.*"%> <%@ page import="org.jivesoftware.util.*"%>
<%@ page import="org.jivesoftware.openfire.XMPPServer"%> <%@ page import="org.jivesoftware.openfire.XMPPServer"%>
<%@ page import="org.xmpp.packet.JID"%> <%@ page import="org.xmpp.packet.JID"%>
<%@ page import="org.jivesoftware.openfire.container.AdminConsolePlugin" %>
<%@ page import="org.jivesoftware.openfire.cluster.ClusterManager" %>
<%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c" %> <%@ taglib uri="http://java.sun.com/jstl/core_rt" prefix="c" %>
<%@ taglib uri="http://java.sun.com/jstl/fmt_rt" prefix="fmt" %> <%@ taglib uri="http://java.sun.com/jstl/fmt_rt" prefix="fmt" %>
...@@ -50,27 +52,31 @@ ...@@ -50,27 +52,31 @@
} }
%> %>
<% // get parameters <% // get parameters
String username = ParamUtils.getParameter(request,"username"); String username = ParamUtils.getParameter(request, "username");
if(username != null){ if (username != null) {
username = JID.escapeNode(username); username = JID.escapeNode(username);
} }
// Escape HTML tags in username to prevent cross-site scripting attacks. This // Escape HTML tags in username to prevent cross-site scripting attacks. This
// is necessary because we display the username in the page below. // is necessary because we display the username in the page below.
username = org.jivesoftware.util.StringUtils.escapeHTMLTags(username); username = org.jivesoftware.util.StringUtils.escapeHTMLTags(username);
String password = ParamUtils.getParameter(request,"password"); String password = ParamUtils.getParameter(request, "password");
String url = ParamUtils.getParameter(request,"url"); String url = ParamUtils.getParameter(request, "url");
// SSO between cluster nodes
String secret = ParamUtils.getParameter(request, "secret");
String nodeID = ParamUtils.getParameter(request, "nodeID");
// The user auth token: // The user auth token:
AuthToken authToken; AuthToken authToken;
// Check the request/response for a login token // Check the request/response for a login token
boolean errors = false; boolean errors = false;
if (ParamUtils.getBooleanParameter(request,"login")) { if (ParamUtils.getBooleanParameter(request, "login")) {
try { try {
if (authorizedUsernames != null && !authorizedUsernames.isEmpty()) { if (authorizedUsernames != null && !authorizedUsernames.isEmpty()) {
if (!authorizedUsernames.containsKey(username)) { if (!authorizedUsernames.containsKey(username)) {
throw new UnauthorizedException("User '" + username + "' no allowed to login."); throw new UnauthorizedException("User '" + username + "' no allowed to login.");
...@@ -81,16 +87,26 @@ ...@@ -81,16 +87,26 @@
throw new UnauthorizedException("Only user 'admin' may login."); throw new UnauthorizedException("Only user 'admin' may login.");
} }
} }
authToken = AuthFactory.authenticate(username, password); if (secret != null && nodeID != null) {
if (StringUtils.hash(AdminConsolePlugin.secret).equals(secret) && ClusterManager.isClusterMember(Base64.decode(nodeID, Base64.URL_SAFE))) {
authToken = new AuthToken(username);
}
else {
throw new UnauthorizedException("SSO failed. Invalid secret or node ID was provided");
}
}
else {
authToken = AuthFactory.authenticate(username, password);
}
session.setAttribute("jive.admin.authToken", authToken); session.setAttribute("jive.admin.authToken", authToken);
response.sendRedirect(go(url)); response.sendRedirect(go(url));
return; return;
} }
catch (UnauthorizedException ue) { catch (UnauthorizedException ue) {
Log.debug(ue); Log.debug(ue);
errors = true; errors = true;
} }
} }
%> %>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

Technounit-GROUP 2023