package org.jboss.resteasy.security.doseta;
import org.jboss.resteasy.spi.ResteasyProviderFactory;
import org.jboss.resteasy.util.InputStreamToByteArray;
import javax.annotation.Priority;
import javax.ws.rs.Priorities;
import javax.ws.rs.WebApplicationException;
import javax.ws.rs.core.MultivaluedMap;
import javax.ws.rs.ext.Provider;
import javax.ws.rs.ext.ReaderInterceptor;
import javax.ws.rs.ext.ReaderInterceptorContext;
import java.io.IOException;
import java.io.InputStream;
import java.util.ArrayList;
import java.util.List;
/**
* @author <a href="mailto:bill@burkecentral.com">Bill Burke</a>
* @version $Revision: 1 $
*/
@Provider
@Priority(Priorities.ENTITY_CODER)
public class DigitalVerificationInterceptor implements ReaderInterceptor
{
@Override
public Object aroundReadFrom(ReaderInterceptorContext context) throws IOException, WebApplicationException
{
Verifier verifier = (Verifier) context.getProperty(Verifier.class.getName());
if (verifier == null)
{
return context.proceed();
}
//System.out.println("TRACE: found verifier");
MultivaluedMap<String, String> headers = context.getHeaders();
List<String> strings = headers.get(DKIMSignature.DKIM_SIGNATURE);
if (strings == null)
{
throw new UnauthorizedSignatureException("There was no " + DKIMSignature.DKIM_SIGNATURE + " header");
}
List<DKIMSignature> signatures = new ArrayList<DKIMSignature>();
for (String headerVal : strings)
{
try
{
signatures.add(new DKIMSignature(headerVal));
}
catch (Exception e)
{
throw new UnauthorizedSignatureException("Malformed " + DKIMSignature.DKIM_SIGNATURE + " header");
}
}
InputStream old = context.getInputStream();
try
{
InputStreamToByteArray stream = new InputStreamToByteArray(old);
context.setInputStream(stream);
Object rtn = context.proceed();
byte[] body = stream.toByteArray();
if (verifier.getRepository() == null)
{
KeyRepository repository = (KeyRepository) context.getProperty(KeyRepository.class.getName());
if (repository == null)
{
repository = ResteasyProviderFactory.getContextData(KeyRepository.class);
}
verifier.setRepository(repository);
}
VerificationResults results = verifier.verify(signatures, headers, body);
if (results.isVerified() == false)
{
throw new UnauthorizedSignatureException(results);
}
return rtn;
}
finally
{
context.setInputStream(old);
}
}
}