6.4.2.1. 引入类库

从 http://www.ioplex.com 下载这个库，然后把这个 JAR 上传到 build.gradle 脚本中注册的一个仓库中。仓库可以是 mavenLocal() 或者内部仓库（私仓）。

在 build.gradle 中的 web 模块配置部分添加以下依赖：

  1. configure(webModule) {
  2.     ...
  3.     dependencies {
  4.         compile('com.company.thirdparty:jespa:1.1.17')  // from a custom repository
  5.         compile('jcifs:jcifs:1.3.17')                   // from Maven Central
  6.         ...

在 web 模块创建一个 CubaAuthProvider 的实现类：

  1. package com.company.sample.web;
  3. import com.haulmont.cuba.core.global.AppBeans;
  4. import com.haulmont.cuba.core.global.Configuration;
  5. import com.haulmont.cuba.core.global.GlobalConfig;
  6. import com.haulmont.cuba.core.global.Messages;
  7. import com.haulmont.cuba.core.sys.AppContext;
  8. import com.haulmont.cuba.security.global.LoginException;
  9. import com.haulmont.cuba.web.auth.CubaAuthProvider;
  10. import com.haulmont.cuba.web.auth.DomainAliasesResolver;
  11. import jespa.http.HttpSecurityService;
  12. import jespa.ntlm.NtlmSecurityProvider;
  13. import jespa.security.PasswordCredential;
  14. import jespa.security.SecurityProviderException;
  15. import org.apache.commons.lang.StringUtils;
  16. import org.apache.commons.logging.Log;
  17. import org.apache.commons.logging.LogFactory;
  19. import javax.inject.Inject;
  20. import javax.servlet.*;
  21. import javax.servlet.http.HttpServletRequest;
  22. import java.io.IOException;
  23. import java.util.HashMap;
  24. import java.util.Locale;
  25. import java.util.Map;
  27. public class JespaAuthProvider extends HttpSecurityService implements CubaAuthProvider {
  29.     private static class DomainInfo {
  30.         private String bindStr;
  31.         private String acctName;
  32.         private String acctPassword;
  34.         private DomainInfo(String bindStr, String acctName, String acctPassword) {
  35.             this.acctName = acctName;
  36.             this.acctPassword = acctPassword;
  37.             this.bindStr = bindStr;
  38.         }
  39.     }
  41.     private static Map<String, DomainInfo> domains = new HashMap<>();
  43.     private static String defaultDomain;
  45.     private Log log = LogFactory.getLog(getClass());
  47.     @Inject
  48.     private Configuration configuration;
  50.     @Inject
  51.     private Messages messages;
  53.     @SuppressWarnings("deprecation")
  54.     @Override
  55.     public void init(FilterConfig filterConfig) throws ServletException {
  57.         initDomains();
  59.         Map<String, String> properties = new HashMap<>();
  61.         properties.put("jespa.bindstr", getBindStr());
  62.         properties.put("jespa.service.acctname", getAcctName());
  63.         properties.put("jespa.service.password", getAcctPassword());
  64.         properties.put("jespa.account.canonicalForm", "3");
  65.         properties.put("jespa.log.path", configuration.getConfig(GlobalConfig.class).getLogDir() + "/jespa.log");
  66.         properties.put("http.parameter.anonymous.name", "anon");
  68.         fillFromSystemProperties(properties);
  70.         try {
  71.             super.init(properties);
  72.         } catch (SecurityProviderException e) {
  73.             throw new ServletException(e);
  74.         }
  75.     }
  77.     @Override
  78.     public void destroy() {
  79.     }
  81.     @Override
  82.     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
  83.             throws IOException, ServletException {
  84.         HttpServletRequest httpServletRequest = (HttpServletRequest) request;
  85.         if (httpServletRequest.getHeader("User-Agent") != null) {
  86.             String ua = httpServletRequest.getHeader("User-Agent").toLowerCase();
  87.             boolean windows = ua.contains("windows");
  88.             boolean gecko = ua.contains("gecko") && !ua.contains("webkit");
  89.             if (!windows && gecko) {
  90.                 chain.doFilter(request, response);
  91.                 return;
  92.             }
  93.         }
  94.         super.doFilter(request, response, chain);
  95.     }
  97.     @Override
  98.     public void authenticate(String login, String password, Locale loc) throws LoginException {
  99.         DomainAliasesResolver aliasesResolver = AppBeans.get(DomainAliasesResolver.NAME);
  101.         String domain;
  102.         String userName;
  104.         int atSignPos = login.indexOf("@");
  105.         if (atSignPos >= 0) {
  106.             String domainAlias = login.substring(atSignPos + 1);
  107.             domain = aliasesResolver.getDomainName(domainAlias).toUpperCase();
  108.         } else {
  109.             int slashPos = login.indexOf('\\');
  110.             if (slashPos <= 0) {
  111.                 throw new LoginException("Invalid name: %s", login);
  112.             }
  113.             String domainAlias = login.substring(0, slashPos);
  114.             domain = aliasesResolver.getDomainName(domainAlias).toUpperCase();
  115.         }
  117.         userName = login;
  119.         DomainInfo domainInfo = domains.get(domain);
  120.         if (domainInfo == null) {
  121.             throw new LoginException("Unknown domain: %s", domain);
  122.         }
  124.         Map<String, String> params = new HashMap<>();
  125.         params.put("bindstr", domainInfo.bindStr);
  126.         params.put("service.acctname", domainInfo.acctName);
  127.         params.put("service.password", domainInfo.acctPassword);
  128.         params.put("account.canonicalForm", "3");
  129.         fillFromSystemProperties(params);
  131.         NtlmSecurityProvider provider = new NtlmSecurityProvider(params);
  132.         try {
  133.             PasswordCredential credential = new PasswordCredential(userName, password.toCharArray());
  134.             provider.authenticate(credential);
  135.         } catch (SecurityProviderException e) {
  136.             throw new LoginException("Authentication error: %s", e.getMessage());
  137.         }
  138.     }
  140.     private void initDomains() {
  141.         String domainsStr = AppContext.getProperty("cuba.web.activeDirectoryDomains");
  142.         if (!StringUtils.isBlank(domainsStr)) {
  143.             String[] strings = domainsStr.split(";");
  144.             for (int i = 0; i < strings.length; i++) {
  145.                 String domain = strings[i];
  146.                 domain = domain.trim();
  147.                 if (!StringUtils.isBlank(domain)) {
  148.                     String[] parts = domain.split("\\|");
  149.                     if (parts.length != 4) {
  150.                         log.error("Invalid ActiveDirectory domain definition: " + domain);
  151.                         break;
  152.                     } else {
  153.                         domains.put(parts[0], new DomainInfo(parts[1], parts[2], parts[3]));
  154.                         if (i == 0)
  155.                             defaultDomain = parts[0];
  156.                     }
  157.                 }
  158.             }
  159.         }
  160.     }
  162.     public String getDefaultDomain() {
  163.         return defaultDomain != null ? defaultDomain : "";
  164.     }
  166.     public String getBindStr() {
  167.         return getBindStr(getDefaultDomain());
  168.     }
  170.     public String getBindStr(String domain) {
  171.         initDomains();
  172.         DomainInfo domainInfo = domains.get(domain);
  173.         return domainInfo != null ? domainInfo.bindStr : "";
  174.     }
  176.     public String getAcctName() {
  177.         return getAcctName(getDefaultDomain());
  178.     }
  180.     public String getAcctName(String domain) {
  181.         initDomains();
  182.         DomainInfo domainInfo = domains.get(domain);
  183.         return domainInfo != null ? domainInfo.acctName : "";
  184.     }
  186.     public String getAcctPassword() {
  187.         return getAcctPassword(getDefaultDomain());
  188.     }
  190.     public String getAcctPassword(String domain) {
  191.         initDomains();
  192.         DomainInfo domainInfo = domains.get(domain);
  193.         return domainInfo != null ? domainInfo.acctPassword : "";
  194.     }
  196.     public void fillFromSystemProperties(Map<String, String> params) {
  197.         for (String name : AppContext.getPropertyNames()) {
  198.             if (name.startsWith("jespa.")) {
  199.                 params.put(name, AppContext.getProperty(name));
  200.             }
  201.         }
  202.     }
  203. }