/*

 * Copyright (c) 2006, 2015, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

import java.security.Principal;

import javax.management.Attribute;

import javax.management.MBeanServer;

import javax.management.ObjectName;

import javax.management.remote.JMXAuthenticator;

import javax.management.remote.JMXPrincipal;

import javax.security.auth.Subject;

public final class TestJMXAuthenticator implements JMXAuthenticator {

    private String protocol = "";

    private MBeanServer mbs = null;

    public TestJMXAuthenticator() {

    }

    public TestJMXAuthenticator(String protocol) {

        this.protocol = protocol;

    }

    public TestJMXAuthenticator(String protocol, MBeanServer mbs) {

        this.protocol = protocol;

        this.mbs = mbs;

    }

    public Subject authenticate(Object credentials) {

        String credentials_username = "";

        String credentials_password = "";

        Principal aPrincipal = null;

        credentials_username = ((String[]) credentials)[0];

        credentials_password = ((String[]) credentials)[1];

        String authenticated_username = System.getProperty("susername");

        String authenticated_password = System.getProperty("spassword");

        String principal = System.getProperty("principal");

        System.out.println("TestJMXAuthenticator::authenticate: Start");

        System.out.println("TestJMXAuthenticator::authenticate: credentials username = " +

                credentials_username);

        System.out.println("TestJMXAuthenticator::authenticate: credentials password = " +

                credentials_password);

        System.out.println("TestJMXAuthenticator::authenticate: authenticated username = " +

                authenticated_username);

        System.out.println("TestJMXAuthenticator::authenticate: authenticated password = " +

                authenticated_password);

        System.out.println("TestJMXAuthenticator::authenticate: principal used for " +

                "authorization = " + principal);

        if (credentials_username.equals(authenticated_username) &&

                credentials_password.equals(authenticated_password)) {

            System.out.println("TestJMXAuthenticator::authenticate: " +

                    "Authenticator should succeed");

        } else {

            System.out.println("TestJMXAuthenticator::authenticate: " +

                    "Authenticator should reject");

            throw new SecurityException("TestJMXAuthenticator throws EXCEPTION");

        }

        // At this point, authentication has succeeded

        // (no SecurityException thrown).

        //

        // If no authorization is required, the returned subject (empty or not)

        // is useless.

        // Otherwise, the returned subject must define a principal

        // and authorization will be performed against this principal.

        //

        // Note that this custom JMXAuthenticator is used for test purpose and

        // the username used to perform authentication may be different from the

        // username used to perform authorization.

        //

        Subject subject = new Subject();

        if (principal != null) {

            System.out.println("TestJMXAuthenticator::authenticate: " +

                    "Add " + principal + " principal to the returned subject");

            subject.getPrincipals().add(new JMXPrincipal(principal));

        }

        return subject;

    }

}