PolicyGestioneToken.java

  1. /*
  2.  * GovWay - A customizable API Gateway 
  3.  * https://govway.org
  4.  * 
  5.  * Copyright (c) 2005-2025 Link.it srl (https://link.it).
  6.  * 
  7.  * This program is free software: you can redistribute it and/or modify
  8.  * it under the terms of the GNU General Public License version 3, as published by
  9.  * the Free Software Foundation.
  10.  *
  11.  * This program is distributed in the hope that it will be useful,
  12.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14.  * GNU General Public License for more details.
  15.  *
  16.  * You should have received a copy of the GNU General Public License
  17.  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18.  *
  19.  */


  22. package org.openspcoop2.pdd.core.token;

  24. import java.io.Serializable;
  25. import java.lang.reflect.InvocationTargetException;
  26. import java.text.MessageFormat;
  27. import java.util.List;
  28. import java.util.Properties;

  30. import org.apache.commons.lang.StringUtils;
  31. import org.openspcoop2.core.config.constants.CostantiConfigurazione;
  32. import org.openspcoop2.pdd.config.dynamic.PddPluginLoader;
  33. import org.openspcoop2.pdd.core.token.parser.BasicDynamicDiscoveryParser;
  34. import org.openspcoop2.pdd.core.token.parser.BasicTokenParser;
  35. import org.openspcoop2.pdd.core.token.parser.IDynamicDiscoveryParser;
  36. import org.openspcoop2.pdd.core.token.parser.ITokenParser;
  37. import org.openspcoop2.pdd.core.token.parser.TipologiaClaims;
  38. import org.openspcoop2.security.message.constants.SecurityConstants;
  39. import org.openspcoop2.security.message.jose.JOSEUtils;
  40. import org.openspcoop2.utils.resources.ClassLoaderUtilities;
  41. import org.openspcoop2.utils.transport.http.HttpRequestMethod;

  43. /**     
  44.  * PolicyGestioneToken
  45.  *
  46.  * @author Poli Andrea (poli@link.it)
  47.  * @author $Author$
  48.  * @version $Rev$, $Date$
  49.  */
  50. public class PolicyGestioneToken extends AbstractPolicyToken implements Serializable {

  52.     /**
  53.      * 
  54.      */
  55.     private static final long serialVersionUID = 1L;
  56.     
  57.     private boolean tokenOpzionale;
  58.     
  59.     private boolean dynamicDiscovery;
  60.     
  61.     private boolean validazioneJWT;
  62.     private boolean validazioneJWTWarningOnly;
  63.     
  64.     private boolean introspection;
  65.     private boolean introspectionWarningOnly;
  66.     
  67.     private boolean userInfo;
  68.     private boolean userInfoWarningOnly;
  69.     
  70.     private boolean forwardToken;
  71.     
  72.     
  73.     public boolean isTokenOpzionale() {
  74.         return this.tokenOpzionale;
  75.     }
  76.     public void setTokenOpzionale(boolean tokenOpzionale) {
  77.         this.tokenOpzionale = tokenOpzionale;
  78.     }
  79.     public boolean isDynamicDiscovery() {
  80.         return this.dynamicDiscovery;
  81.     }
  82.     public void setDynamicDiscovery(boolean dynamicDiscovery) {
  83.         this.dynamicDiscovery = dynamicDiscovery;
  84.     }
  85.     public boolean isValidazioneJWT() {
  86.         return this.validazioneJWT;
  87.     }
  88.     public void setValidazioneJWT(boolean validazioneJWT) {
  89.         this.validazioneJWT = validazioneJWT;
  90.     }
  91.     public boolean isValidazioneJWTWarningOnly() {
  92.         return this.validazioneJWTWarningOnly;
  93.     }
  94.     public void setValidazioneJWTWarningOnly(boolean validazioneJWTWarningOnly) {
  95.         this.validazioneJWTWarningOnly = validazioneJWTWarningOnly;
  96.     }
  97.     public boolean isIntrospection() {
  98.         return this.introspection;
  99.     }
  100.     public void setIntrospection(boolean introspection) {
  101.         this.introspection = introspection;
  102.     }
  103.     public boolean isIntrospectionWarningOnly() {
  104.         return this.introspectionWarningOnly;
  105.     }
  106.     public void setIntrospectionWarningOnly(boolean introspectionWarningOnly) {
  107.         this.introspectionWarningOnly = introspectionWarningOnly;
  108.     }
  109.     public boolean isUserInfo() {
  110.         return this.userInfo;
  111.     }
  112.     public void setUserInfo(boolean userInfo) {
  113.         this.userInfo = userInfo;
  114.     }
  115.     public boolean isUserInfoWarningOnly() {
  116.         return this.userInfoWarningOnly;
  117.     }
  118.     public void setUserInfoWarningOnly(boolean userInfoWarningOnly) {
  119.         this.userInfoWarningOnly = userInfoWarningOnly;
  120.     }
  121.     public boolean isForwardToken() {
  122.         return this.forwardToken;
  123.     }
  124.     public void setForwardToken(boolean forwardToken) {
  125.         this.forwardToken = forwardToken;
  126.     }
  127.     
  128.     public String getRealm() {
  129.         String realm = this.defaultProperties.getProperty(Costanti.POLICY_REALM);
  130.         if(realm==null) {
  131.             realm = this.name;
  132.         }
  133.         return realm;
  134.     }
  135.     public boolean isMessageErrorGenerateEmptyMessage() {
  136.         boolean genericError = true;
  137.         String tmp = this.defaultProperties.getProperty(Costanti.POLICY_MESSAGE_ERROR_BODY_EMPTY);
  138.         if(tmp!=null) {
  139.             genericError = Boolean.valueOf(tmp);
  140.         }
  141.         return genericError;
  142.     }
  143.     public boolean isMessageErrorGenerateGenericMessage() {
  144.         boolean genericError = true;
  145.         String tmp = this.defaultProperties.getProperty(Costanti.POLICY_MESSAGE_ERROR_GENERIC_MESSAGE);
  146.         if(tmp!=null) {
  147.             genericError = Boolean.valueOf(tmp);
  148.         }
  149.         return genericError;
  150.     }
  151.     
  152.     public String getLabelAzioniGestioneToken() {
  153.         StringBuilder bf = new StringBuilder();
  154.         if(this.isValidazioneJWT() || this.isIntrospection() || this.isUserInfo()) {
  155.             bf.append("Validazione ");
  156.             boolean first = true;
  157.             if(this.isValidazioneJWT()) {
  158.                 bf.append("JWT");
  159.                 first = false;
  160.             }
  161.             if(this.isIntrospection()) {
  162.                 if(!first) {
  163.                     bf.append(",");
  164.                 }
  165.                 bf.append("Introspection");
  166.                 first = false;
  167.             }
  168.             if(this.isUserInfo()) {
  169.                 if(!first) {
  170.                     bf.append(",");
  171.                 }
  172.                 bf.append("UserInfo");
  173.                 /**first = false;*/
  174.             }
  175.             return bf.toString();
  176.         }
  177.         else {
  178.             return "Nessuna Validazione Attiva";
  179.         }
  180.     }
  181.     
  182.     public String getAzioniGestioneToken() {
  183.         StringBuilder bf = new StringBuilder();
  184.         if(this.isValidazioneJWT() || this.isIntrospection() || this.isUserInfo()) {
  185.             boolean first = true;
  186.             if(this.isValidazioneJWT()) {
  187.                 bf.append(Costanti.GESTIONE_TOKEN_VALIDATION_ACTION_JWT);
  188.                 first = false;
  189.             }
  190.             if(this.isIntrospection()) {
  191.                 if(!first) {
  192.                     bf.append(",");
  193.                 }
  194.                 bf.append(Costanti.GESTIONE_TOKEN_VALIDATION_ACTION_INTROSPECTION);
  195.                 first = false;
  196.             }
  197.             if(this.isUserInfo()) {
  198.                 if(!first) {
  199.                     bf.append(",");
  200.                 }
  201.                 bf.append(Costanti.GESTIONE_TOKEN_VALIDATION_ACTION_USER_INFO);
  202.                 /**first = false;*/
  203.             }
  204.             return bf.toString();
  205.         }
  206.         else {
  207.             return Costanti.GESTIONE_TOKEN_VALIDATION_ACTION_NONE;
  208.         }
  209.     }
  210.     
  211.     public String getTipoToken() {
  212.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_TYPE);
  213.     }
  214.     public String getLabelTipoToken() {
  215.         String tokenType = this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_TYPE);
  216.         if(Costanti.POLICY_TOKEN_TYPE_OPAQUE.equals(tokenType)) {
  217.             return "Opaco";
  218.         }
  219.         else {
  220.             return tokenType.toUpperCase();
  221.         }
  222.     }
  223.     
  224.     public String getTokenSource() {
  225.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_SOURCE);
  226.     }
  227.     public String getTokenSourceHeaderName() {
  228.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_HEADER_NAME);
  229.     }
  230.     public String getTokenSourceUrlPropertyName() {
  231.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_URL_PROPERTY_NAME);
  232.     }
  233.         
  234.     public String getLabelPosizioneToken() {
  235.         String position = this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_SOURCE);
  236.         if(Costanti.POLICY_TOKEN_SOURCE_RFC6750.equals(position)) {
  237.             return Costanti.POLICY_TOKEN_SOURCE_RFC6750_LABEL;
  238.         }
  239.         else if(Costanti.POLICY_TOKEN_SOURCE_RFC6750_HEADER.equals(position)) {
  240.             return Costanti.POLICY_TOKEN_SOURCE_RFC6750_HEADER_LABEL;
  241.         }
  242.         else if(Costanti.POLICY_TOKEN_SOURCE_RFC6750_FORM.equals(position)) {
  243.             return Costanti.POLICY_TOKEN_SOURCE_RFC6750_FORM_LABEL;
  244.         }
  245.         else if(Costanti.POLICY_TOKEN_SOURCE_RFC6750_URL.equals(position)) {
  246.             return Costanti.POLICY_TOKEN_SOURCE_RFC6750_URL_LABEL;
  247.         }
  248.         else if(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_HEADER.equals(position)) {
  249.             return Costanti.POLICY_TOKEN_SOURCE_CUSTOM_HEADER_LABEL.replace(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_TEMPLATE_LABEL, 
  250.                     this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_HEADER_NAME));
  251.         }
  252.         else if(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_URL.equals(position)) {
  253.             return Costanti.POLICY_TOKEN_SOURCE_CUSTOM_URL_LABEL.replace(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_TEMPLATE_LABEL, 
  254.                     this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_SOURCE_CUSTOM_URL_PROPERTY_NAME));
  255.         }
  256.         return "Sconosciuto"; // non dovrebbe mai succedere, esiste la validazione
  257.     }
  258.     
  259.     public boolean isEndpointHttps() {
  260.         return isEndpointHttps(true, true);
  261.     }
  262.     public boolean isEndpointHttps(boolean checkIntrospection, boolean checkUserInfo) {
  263.         // Devo considerare anche la possibilità che sia abilitato solamente con clientAuth su introspection o userinfo
  264.         boolean enabled = TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_ENDPOINT_HTTPS_STATO);
  265.         if(!enabled && checkIntrospection && TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_INTROSPECTION_AUTH_SSL_STATO)) {
  266.             enabled = true;
  267.         }
  268.         if(!enabled && checkUserInfo && TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_USER_INFO_AUTH_SSL_STATO)) {
  269.             enabled = true;
  270.         }
  271.         return enabled;
  272.     }
  273.     
  274.     
  275.     public String getDynamicDiscoveryEndpoint() {
  276.         return this.defaultProperties.getProperty(Costanti.POLICY_DISCOVERY_URL);
  277.     }
  278.     public TipologiaClaims getDynamicDiscoveryType() {
  279.         return TipologiaClaims.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_DISCOVERY_CLAIMS_PARSER_TYPE));
  280.     }
  281.     public IDynamicDiscoveryParser getDynamicDiscoveryParser() throws TokenException, ClassNotFoundException, InstantiationException, IllegalAccessException, IllegalArgumentException, InvocationTargetException, NoSuchMethodException, SecurityException {
  282.         IDynamicDiscoveryParser parser = null;
  283.         TipologiaClaims tipologiaClaims = TipologiaClaims.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_DISCOVERY_CLAIMS_PARSER_TYPE));
  284.         if(TipologiaClaims.CUSTOM.equals(tipologiaClaims)) {
  285.             String className = this.defaultProperties.getProperty(Costanti.POLICY_DISCOVERY_CLAIMS_PARSER_CLASS_NAME);
  286.             if(className!=null && StringUtils.isNotEmpty(className) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(className)) {
  287.                 parser = (IDynamicDiscoveryParser) ClassLoaderUtilities.newInstance(className);
  288.             }
  289.             else {
  290.                 String tipo = this.defaultProperties.getProperty(Costanti.POLICY_DISCOVERY_CLAIMS_PARSER_PLUGIN_TYPE);
  291.                 if(tipo!=null && StringUtils.isNotEmpty(tipo) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(tipo)) {
  292.                     try{
  293.                         PddPluginLoader pluginLoader = PddPluginLoader.getInstance();
  294.                         parser = pluginLoader.newDynamicDiscovery(tipo);
  295.                     }catch(Exception e){
  296.                         throw new TokenException(e.getMessage(),e); // descrizione errore già corretta
  297.                     }
  298.                 }
  299.                 else {
  300.                     throw new TokenException("Deve essere selezionato un plugin per il parser dei claims della risposta del servizio 'Introspection'");
  301.                 }
  302.             }
  303.         }
  304.         else{
  305.             parser = new BasicDynamicDiscoveryParser(tipologiaClaims, TokenUtilities.getDynamicDiscoveryClaimsMappingProperties(this.properties));
  306.         }
  307.         return parser;
  308.     }
  309.     
  310.     
  311.     
  312.     public boolean isValidazioneJWTLocationHttp() {
  313.         String location = this.getValidazioneJWTLocation();
  314.         return location !=null && 
  315.                 (location.startsWith(JOSEUtils.HTTP_PROTOCOL) || location.startsWith(JOSEUtils.HTTPS_PROTOCOL));
  316.     }
  317.     public String getValidazioneJWTLocation() {
  318.         if(this.properties!=null) {
  319.             Properties p = this.properties.get(Costanti.POLICY_VALIDAZIONE_JWS_VERIFICA_PROP_REF_ID);
  320.             if(p!=null) {
  321.                 return p.getProperty(SecurityConstants.JOSE_KEYSTORE_FILE);
  322.             }
  323.         }
  324.         return null;
  325.     }
  326.     public boolean isValidazioneJWTSaveErrorInCache() {
  327.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_VALIDAZIONE_SAVE_ERROR_IN_CACHE);   
  328.     }
  329.     public ITokenParser getValidazioneJWTTokenParser() throws TokenException, ClassNotFoundException, InstantiationException, IllegalAccessException, IllegalArgumentException, InvocationTargetException, NoSuchMethodException, SecurityException {
  330.         ITokenParser parser = null;
  331.         TipologiaClaims tipologiaClaims = TipologiaClaims.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_VALIDAZIONE_CLAIMS_PARSER_TYPE));
  332.         if(TipologiaClaims.CUSTOM.equals(tipologiaClaims)) {
  333.             String className = this.defaultProperties.getProperty(Costanti.POLICY_VALIDAZIONE_CLAIMS_PARSER_CLASS_NAME);
  334.             if(className!=null && StringUtils.isNotEmpty(className) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(className)) {
  335.                 parser = (ITokenParser) ClassLoaderUtilities.newInstance(className);
  336.             }
  337.             else {
  338.                 String tipo = this.defaultProperties.getProperty(Costanti.POLICY_VALIDAZIONE_CLAIMS_PARSER_PLUGIN_TYPE);
  339.                 if(tipo!=null && StringUtils.isNotEmpty(tipo) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(tipo)) {
  340.                     try{
  341.                         PddPluginLoader pluginLoader = PddPluginLoader.getInstance();
  342.                         parser = pluginLoader.newTokenValidazione(tipo);
  343.                     }catch(Exception e){
  344.                         throw new TokenException(e.getMessage(),e); // descrizione errore già corretta
  345.                     }
  346.                 }
  347.                 else {
  348.                     throw new TokenException("Deve essere selezionato un plugin per il parser del token JWT");
  349.                 }
  350.             }
  351.         }
  352.         else{
  353.             parser = new BasicTokenParser(tipologiaClaims, TokenUtilities.getValidazioneJwtClaimsMappingProperties(this.properties));
  354.         }
  355.         return parser;
  356.     }
  357.     public String getValidazioneJWTOcspPolicy() {
  358.         return this.defaultProperties.getProperty(SecurityConstants.SIGNATURE_OCSP);
  359.     }
  360.     public String getValidazioneJWTCrl() {
  361.         return this.defaultProperties.getProperty(SecurityConstants.SIGNATURE_CRL);
  362.     }
  363.     
  364.     public boolean isValidazioneJWTHeader() {
  365.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_VALIDAZIONE_JWS_HEADER);    
  366.     }
  367.     public List<String> getValidazioneJWTHeaderTyp() {
  368.         return TokenUtilities.getClaims(this.defaultProperties, Costanti.POLICY_VALIDAZIONE_JWS_HEADER_TYP);
  369.     }
  370.     public List<String> getValidazioneJWTHeaderCty() {
  371.         return TokenUtilities.getClaims(this.defaultProperties, Costanti.POLICY_VALIDAZIONE_JWS_HEADER_CTY);
  372.     }
  373.     public List<String> getValidazioneJWTHeaderAlg() {
  374.         return TokenUtilities.getClaims(this.defaultProperties, Costanti.POLICY_VALIDAZIONE_JWS_HEADER_ALG);
  375.     }
  376.     
  377.     public String getIntrospectionEndpoint() {
  378.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_URL);
  379.     }
  380.     public boolean isIntrospectionSaveErrorInCache() {
  381.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_INTROSPECTION_SAVE_ERROR_IN_CACHE); 
  382.     }
  383.     public HttpRequestMethod getIntrospectionHttpMethod() {
  384.         return HttpRequestMethod.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_HTTP_METHOD));
  385.     }
  386.     public TipoTokenRequest getIntrospectionTipoTokenRequest() {
  387.         return TipoTokenRequest.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_REQUEST_TOKEN_POSITION));
  388.     }
  389.     public String getIntrospectionTipoTokenRequestHeaderName() {
  390.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_REQUEST_TOKEN_POSITION_HEADER_NAME);
  391.     }
  392.     public String getIntrospectionTipoTokenRequestUrlPropertyName() {
  393.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_REQUEST_TOKEN_POSITION_URL_PROPERTY_NAME);
  394.     }
  395.     public String getIntrospectionTipoTokenRequestFormPropertyName() {
  396.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_REQUEST_TOKEN_POSITION_FORM_PROPERTY_NAME);
  397.     }
  398.     public String getIntrospectionContentType() {
  399.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_CONTENT_TYPE);
  400.     }
  401.     public ITokenParser getIntrospectionTokenParser() throws TokenException, ClassNotFoundException, InstantiationException, IllegalAccessException, IllegalArgumentException, InvocationTargetException, NoSuchMethodException, SecurityException {
  402.         ITokenParser parser = null;
  403.         TipologiaClaims tipologiaClaims = TipologiaClaims.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_CLAIMS_PARSER_TYPE));
  404.         if(TipologiaClaims.CUSTOM.equals(tipologiaClaims)) {
  405.             String className = this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_CLAIMS_PARSER_CLASS_NAME);
  406.             if(className!=null && StringUtils.isNotEmpty(className) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(className)) {
  407.                 parser = (ITokenParser) ClassLoaderUtilities.newInstance(className);
  408.             }
  409.             else {
  410.                 String tipo = this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_CLAIMS_PARSER_PLUGIN_TYPE);
  411.                 if(tipo!=null && StringUtils.isNotEmpty(tipo) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(tipo)) {
  412.                     try{
  413.                         PddPluginLoader pluginLoader = PddPluginLoader.getInstance();
  414.                         parser = pluginLoader.newTokenValidazione(tipo);
  415.                     }catch(Exception e){
  416.                         throw new TokenException(e.getMessage(),e); // descrizione errore già corretta
  417.                     }
  418.                 }
  419.                 else {
  420.                     throw new TokenException("Deve essere selezionato un plugin per il parser dei claims della risposta del servizio 'Introspection'");
  421.                 }
  422.             }
  423.         }
  424.         else{
  425.             parser = new BasicTokenParser(tipologiaClaims, TokenUtilities.getIntrospectionClaimsMappingProperties(this.properties));
  426.         }
  427.         return parser;
  428.     }
  429.     public boolean isIntrospectionBasicAuthentication() {
  430.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_INTROSPECTION_AUTH_BASIC_STATO);    
  431.     }
  432.     public String getIntrospectionBasicAuthenticationUsername() {
  433.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_AUTH_BASIC_USERNAME);
  434.     }
  435.     public String getIntrospectionBasicAuthenticationPassword() {
  436.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_AUTH_BASIC_PASSWORD);
  437.     }
  438.     public boolean isIntrospectionBearerAuthentication() {
  439.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_INTROSPECTION_AUTH_BEARER_STATO);   
  440.     }
  441.     public String getIntrospectionBeareAuthenticationToken() {
  442.         return this.defaultProperties.getProperty(Costanti.POLICY_INTROSPECTION_AUTH_BEARER_TOKEN);
  443.     }
  444.     public boolean isIntrospectionHttpsAuthentication() {
  445.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_INTROSPECTION_AUTH_SSL_STATO);  
  446.     }
  447.     
  448.     public String getUserInfoEndpoint() {
  449.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_URL);
  450.     }
  451.     public boolean isUserInfoSaveErrorInCache() {
  452.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_USER_INFO_SAVE_ERROR_IN_CACHE); 
  453.     }
  454.     public HttpRequestMethod getUserInfoHttpMethod() {
  455.         return HttpRequestMethod.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_HTTP_METHOD));
  456.     }
  457.     public TipoTokenRequest getUserInfoTipoTokenRequest() {
  458.         return TipoTokenRequest.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_REQUEST_TOKEN_POSITION));
  459.     }
  460.     public String getUserInfoTipoTokenRequestHeaderName() {
  461.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_REQUEST_TOKEN_POSITION_HEADER_NAME);
  462.     }
  463.     public String getUserInfoTipoTokenRequestUrlPropertyName() {
  464.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_REQUEST_TOKEN_POSITION_URL_PROPERTY_NAME);
  465.     }
  466.     public String getUserInfoTipoTokenRequestFormPropertyName() {
  467.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_REQUEST_TOKEN_POSITION_FORM_PROPERTY_NAME);
  468.     }
  469.     public String getUserInfoContentType() {
  470.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_CONTENT_TYPE);
  471.     }
  472.     public ITokenParser getUserInfoTokenParser() throws TokenException, ClassNotFoundException, InstantiationException, IllegalAccessException, IllegalArgumentException, InvocationTargetException, NoSuchMethodException, SecurityException {
  473.         ITokenParser parser = null;
  474.         TipologiaClaims tipologiaClaims = TipologiaClaims.valueOf(this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_CLAIMS_PARSER_TYPE));
  475.         if(TipologiaClaims.CUSTOM.equals(tipologiaClaims)) {
  476.             String className = this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_CLAIMS_PARSER_CLASS_NAME);
  477.             if(className!=null && StringUtils.isNotEmpty(className) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(className)) {
  478.                 parser = (ITokenParser) ClassLoaderUtilities.newInstance(className);
  479.             }
  480.             else {
  481.                 String tipo = this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_CLAIMS_PARSER_PLUGIN_TYPE);
  482.                 if(tipo!=null && StringUtils.isNotEmpty(tipo) && !CostantiConfigurazione.POLICY_ID_NON_DEFINITA.equals(tipo)) {
  483.                     try{
  484.                         PddPluginLoader pluginLoader = PddPluginLoader.getInstance();
  485.                         parser = pluginLoader.newTokenValidazione(tipo);
  486.                     }catch(Exception e){
  487.                         throw new TokenException(e.getMessage(),e); // descrizione errore già corretta
  488.                     }
  489.                 }
  490.                 else {
  491.                     throw new TokenException("Deve essere selezionato un plugin per il parser dei claims della risposta del servizio 'UserInfo'");
  492.                 }
  493.             }
  494.         }
  495.         else{
  496.             parser = new BasicTokenParser(tipologiaClaims, TokenUtilities.getUserInfoClaimsMappingProperties(this.properties));
  497.         }
  498.         return parser;
  499.     }
  500.     public boolean isUserInfoBasicAuthentication() {
  501.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_USER_INFO_AUTH_BASIC_STATO);    
  502.     }
  503.     public String getUserInfoBasicAuthenticationUsername() {
  504.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_AUTH_BASIC_USERNAME);
  505.     }
  506.     public String getUserInfoBasicAuthenticationPassword() {
  507.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_AUTH_BASIC_PASSWORD);
  508.     }
  509.     public boolean isUserInfoBearerAuthentication() {
  510.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_USER_INFO_AUTH_BEARER_STATO);   
  511.     }
  512.     public String getUserInfoBeareAuthenticationToken() {
  513.         return this.defaultProperties.getProperty(Costanti.POLICY_USER_INFO_AUTH_BEARER_TOKEN);
  514.     }
  515.     public boolean isUserInfoHttpsAuthentication() {
  516.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_USER_INFO_AUTH_SSL_STATO);  
  517.     }
  518.     
  519.     
  520.     public boolean isForwardTokenTrasparente() {
  521.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_STATO);   
  522.     }
  523.     public String getForwardTokenTrasparenteMode() {
  524.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE);
  525.     }
  526.     public String getForwardTokenTrasparenteModeCustomHeader() {
  527.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_CUSTOM_HEADER_NAME);
  528.     }
  529.     public String getForwardTokenTrasparenteModeCustomUrl() {
  530.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_CUSTOM_URL_PARAMETER_NAME);
  531.     }
  532.     
  533.     public boolean isForwardTokenInformazioniRaccolte() {
  534.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_STATO); 
  535.     }
  536.     public String getForwardTokenInformazioniRaccolteMode() {
  537.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE);
  538.     }
  539.     public boolean isForwardTokenInformazioniRaccolteEncodeBase64() {
  540.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_ENCODE_BASE64); 
  541.     }
  542.     
  543.     public boolean isForwardTokenInformazioniRaccolteValidazioneJWT() {
  544.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_VALIDAZIONE_JWT);   
  545.     }
  546.     public String getForwardTokenInformazioniRaccolteValidazioneJWTMode() {
  547.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_VALIDAZIONE_JWT_MODE);
  548.     }
  549.     public String getForwardTokenInformazioniRaccolteValidazioneJWTModeHeaderName() {
  550.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_VALIDAZIONE_JWT_MODE_HEADER_NAME);
  551.     }
  552.     public String getForwardTokenInformazioniRaccolteValidazioneJWTModeQueryParameterName() {
  553.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_VALIDAZIONE_JWT_MODE_URL_PARAMETER_NAME);
  554.     }
  555.     
  556.     public boolean isForwardTokenInformazioniRaccolteIntrospection() {
  557.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_INTROSPECTION); 
  558.     }
  559.     public String getForwardTokenInformazioniRaccolteIntrospectionMode() {
  560.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_INTROSPECTION_MODE);
  561.     }
  562.     public String getForwardTokenInformazioniRaccolteIntrospectionModeHeaderName() {
  563.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_INTROSPECTION_MODE_HEADER_NAME);
  564.     }
  565.     public String getForwardTokenInformazioniRaccolteIntrospectionModeQueryParameterName() {
  566.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_INTROSPECTION_MODE_URL_PARAMETER_NAME);
  567.     }
  568.     
  569.     public boolean isForwardTokenInformazioniRaccolteUserInfo() {
  570.         return TokenUtilities.isEnabled(this.defaultProperties, Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_USER_INFO); 
  571.     }
  572.     public String getForwardTokenInformazioniRaccolteUserInfoMode() {
  573.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_USER_INFO_MODE);
  574.     }
  575.     public String getForwardTokenInformazioniRaccolteUserInfoModeHeaderName() {
  576.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_USER_INFO_MODE_HEADER_NAME);
  577.     }
  578.     public String getForwardTokenInformazioniRaccolteUserInfoModeQueryParameterName() {
  579.         return this.defaultProperties.getProperty(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_USER_INFO_MODE_URL_PARAMETER_NAME);
  580.     }

  582.     public String getAzioniForwardToken() {
  583.         StringBuilder bf = new StringBuilder();
  584.         if(this.isForwardToken()) {
  585.             boolean first = true;
  586.             if(this.isForwardTokenTrasparente()) {
  587.                 String mode = this.getForwardTokenTrasparenteMode();
  588.                 addPolicyTokenForwardTrasparente(mode, bf);
  589.                 first = false;
  590.             }
  591.             if(this.isForwardTokenInformazioniRaccolte()) {
  592.                 if(!first) {
  593.                     bf.append(",");
  594.                 }
  595.                 String mode = this.getForwardTokenInformazioniRaccolteMode();
  596.                 addPolicyTokenForwardInfoRaccolte(mode, bf);
  597.                 /**first = false;*/
  598.             }
  599.             return bf.toString();
  600.         }
  601.         else {
  602.             return "Disabilitato";
  603.         }
  604.     }
  605.     private void addPolicyTokenForwardTrasparente(String mode, StringBuilder bf) {
  606.         if(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_AS_RECEIVED.equals(mode)) {
  607.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_AS_RECEIVED_ORIGINALE);
  608.         }
  609.         else if(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_RFC6750_HEADER.equals(mode)) {
  610.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_RFC6750_HEADER);
  611.         }
  612.         else if(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_RFC6750_URL.equals(mode)) {
  613.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_RFC6750_URL);
  614.         }
  615.         else if(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_CUSTOM_HEADER.equals(mode)) {
  616.             bf.append(MessageFormat.format(Costanti.LABEL_POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_CUSTOM_HEADER,getForwardTokenTrasparenteModeCustomHeader()));
  617.         }
  618.         else if(Costanti.POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_CUSTOM_URL.equals(mode)) {
  619.             bf.append(MessageFormat.format(Costanti.LABEL_POLICY_TOKEN_FORWARD_TRASPARENTE_MODE_CUSTOM_URL,getForwardTokenTrasparenteModeCustomUrl()));
  620.         }
  621.         else {
  622.             bf.append("Originale '"+mode+"'");
  623.         }
  624.     }
  625.     private void addPolicyTokenForwardInfoRaccolte(String mode, StringBuilder bf) {
  626.         if(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_OP2_HEADERS.equals(mode)) {
  627.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_OP2_HEADERS);
  628.         }
  629.         else if(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_OP2_JSON.equals(mode)) {
  630.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_OP2_JSON);
  631.         }
  632.         else if(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_OP2_JWS.equals(mode)) {
  633.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_OP2_JWS);
  634.         }
  635.         else if(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_JWS.equals(mode)) {
  636.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_JWS);
  637.         }
  638.         else if(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_JWE.equals(mode)) {
  639.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_JWE);
  640.         }
  641.         else if(Costanti.POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_JSON.equals(mode)) {
  642.             bf.append(Costanti.LABEL_POLICY_TOKEN_FORWARD_INFO_RACCOLTE_MODE_JSON);
  643.         }
  644.         else {
  645.             bf.append(mode);
  646.         }
  647.     }
  648. }
Created with JaCoCo 0.8.8.202204050719