public class org.apache.hive.service.auth.saml.HiveSaml2Client extends org.pac4j.saml.client.SAML2Client
{
private static final org.slf4j.Logger LOG;
private static org.apache.hive.service.auth.saml.HiveSaml2Client INSTANCE;
private final org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter groupNameFilter;
private void <init>(org.apache.hadoop.hive.conf.HiveConf) throws java.lang.Exception
{
org.apache.hive.service.auth.saml.HiveSamlRelayStateStore v;
org.apache.hadoop.hive.conf.HiveConf v;
org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter v;
org.apache.hive.service.auth.saml.HiveSaml2Client v;
java.lang.Class v;
java.lang.String v, v;
org.pac4j.saml.config.SAML2Configuration v;
v := @this: org.apache.hive.service.auth.saml.HiveSaml2Client;
v := @parameter: org.apache.hadoop.hive.conf.HiveConf;
v = staticinvoke <org.apache.hive.service.auth.saml.HiveSaml2Client: org.pac4j.saml.config.SAML2Configuration getSamlConfig(org.apache.hadoop.hive.conf.HiveConf)>(v);
specialinvoke v.<org.pac4j.saml.client.SAML2Client: void <init>(org.pac4j.saml.config.SAML2Configuration)>(v);
v = staticinvoke <org.apache.hive.service.auth.saml.HiveSaml2Client: java.lang.String getCallBackUrl(org.apache.hadoop.hive.conf.HiveConf)>(v);
virtualinvoke v.<org.apache.hive.service.auth.saml.HiveSaml2Client: void setCallbackUrl(java.lang.String)>(v);
v = class "Lorg/apache/hive/service/auth/saml/HiveSaml2Client;";
v = virtualinvoke v.<java.lang.Class: java.lang.String getSimpleName()>();
virtualinvoke v.<org.apache.hive.service.auth.saml.HiveSaml2Client: void setName(java.lang.String)>(v);
v = staticinvoke <org.apache.hive.service.auth.saml.HiveSamlRelayStateStore: org.apache.hive.service.auth.saml.HiveSamlRelayStateStore get()>();
virtualinvoke v.<org.apache.hive.service.auth.saml.HiveSaml2Client: void setStateGenerator(org.pac4j.core.util.generator.ValueGenerator)>(v);
v = new org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter;
specialinvoke v.<org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter: void <init>(org.apache.hadoop.hive.conf.HiveConf)>(v);
v.<org.apache.hive.service.auth.saml.HiveSaml2Client: org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter groupNameFilter> = v;
virtualinvoke v.<org.apache.hive.service.auth.saml.HiveSaml2Client: void init()>();
return;
}
private static java.lang.String getCallBackUrl(org.apache.hadoop.hive.conf.HiveConf) throws java.lang.Exception
{
org.apache.hadoop.hive.conf.HiveConf v;
java.lang.String v;
java.net.URI v;
v := @parameter: org.apache.hadoop.hive.conf.HiveConf;
v = staticinvoke <org.apache.hive.service.auth.saml.HiveSamlUtils: java.net.URI getCallBackUri(org.apache.hadoop.hive.conf.HiveConf)>(v);
v = virtualinvoke v.<java.net.URI: java.lang.String toString()>();
return v;
}
public static synchronized org.apache.hive.service.auth.saml.HiveSaml2Client get(org.apache.hadoop.hive.conf.HiveConf) throws org.apache.hive.service.auth.saml.HttpSamlAuthenticationException
{
org.apache.hive.service.auth.saml.HttpSamlAuthenticationException v;
org.apache.hive.service.auth.saml.HiveSaml2Client v, v, v, v;
org.apache.hadoop.hive.conf.HiveConf v;
java.lang.Exception v;
v := @parameter: org.apache.hadoop.hive.conf.HiveConf;
v = <org.apache.hive.service.auth.saml.HiveSaml2Client: org.apache.hive.service.auth.saml.HiveSaml2Client INSTANCE>;
if v == null goto label;
v = <org.apache.hive.service.auth.saml.HiveSaml2Client: org.apache.hive.service.auth.saml.HiveSaml2Client INSTANCE>;
return v;
label:
v = new org.apache.hive.service.auth.saml.HiveSaml2Client;
specialinvoke v.<org.apache.hive.service.auth.saml.HiveSaml2Client: void <init>(org.apache.hadoop.hive.conf.HiveConf)>(v);
<org.apache.hive.service.auth.saml.HiveSaml2Client: org.apache.hive.service.auth.saml.HiveSaml2Client INSTANCE> = v;
label:
goto label;
label:
v := @caughtexception;
v = new org.apache.hive.service.auth.saml.HttpSamlAuthenticationException;
specialinvoke v.<org.apache.hive.service.auth.saml.HttpSamlAuthenticationException: void <init>(java.lang.String,java.lang.Throwable)>("Could not instantiate SAML2.0 client", v);
throw v;
label:
v = <org.apache.hive.service.auth.saml.HiveSaml2Client: org.apache.hive.service.auth.saml.HiveSaml2Client INSTANCE>;
return v;
catch java.lang.Exception from label to label with label;
}
private static org.pac4j.saml.config.SAML2Configuration getSamlConfig(org.apache.hadoop.hive.conf.HiveConf) throws java.lang.Exception
{
com.google.common.base.Splitter v;
boolean v, v, v, v, v;
java.util.List v;
org.pac4j.saml.config.SAML2Configuration v;
long v;
org.apache.hadoop.hive.conf.HiveConf$ConfVars v, v, v, v, v, v, v, v, v, v, v, v;
int v;
java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v;
org.slf4j.Logger v;
org.apache.hadoop.hive.conf.HiveConf v;
java.util.concurrent.TimeUnit v;
char[] v, v;
v := @parameter: org.apache.hadoop.hive.conf.HiveConf;
v = new org.pac4j.saml.config.SAML2Configuration;
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_KEYSTORE_PATH>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: java.lang.String get(java.lang.String)>(v);
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_KEYSTORE_PASSWORD>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: char[] getPassword(java.lang.String)>(v);
v = staticinvoke <java.lang.String: java.lang.String valueOf(char[])>(v);
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_PRIVATE_KEY_PASSWORD>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: char[] getPassword(java.lang.String)>(v);
v = staticinvoke <java.lang.String: java.lang.String valueOf(char[])>(v);
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_IDP_METADATA>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: java.lang.String get(java.lang.String)>(v);
specialinvoke v.<org.pac4j.saml.config.SAML2Configuration: void <init>(java.lang.String,java.lang.String,java.lang.String,java.lang.String)>(v, v, v, v);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setAuthnRequestBindingType(java.lang.String)>("urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect");
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setResponseBindingType(java.lang.String)>("urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST");
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_FORCE_AUTH>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: boolean getBoolean(java.lang.String,boolean)>(v, 0);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setForceAuth(boolean)>(v);
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_AUTHENTICATION_LIFETIME>;
v = <java.util.concurrent.TimeUnit: java.util.concurrent.TimeUnit SECONDS>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: long getTimeVar(org.apache.hadoop.hive.conf.HiveConf$ConfVars,java.util.concurrent.TimeUnit)>(v, v);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setMaximumAuthenticationLifetime(int)>(v);
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_ACS_INDEX>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: java.lang.String get(java.lang.String,java.lang.String)>(v, "");
v = virtualinvoke v.<java.lang.String: boolean isEmpty()>();
if v != 0 goto label;
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_ACS_INDEX>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: int getIntVar(org.apache.hadoop.hive.conf.HiveConf$ConfVars)>(v);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setAssertionConsumerServiceIndex(int)>(v);
label:
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_BLACKLISTED_SIGNATURE_ALGORITHMS>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: java.lang.String get(java.lang.String,java.lang.String)>(v, "");
v = virtualinvoke v.<java.lang.String: boolean isEmpty()>();
if v != 0 goto label;
v = <org.apache.hive.service.auth.saml.HiveSaml2Client: org.slf4j.Logger LOG>;
v = dynamicinvoke "makeConcatWithConstants" <java.lang.String (java.lang.String)>(v) <java.lang.invoke.StringConcatFactory: java.lang.invoke.CallSite makeConcatWithConstants(java.lang.invoke.MethodHandles$Lookup,java.lang.String,java.lang.invoke.MethodType,java.lang.String,java.lang.Object[])>("List of disallowed signature algorithms: \u0001");
interfaceinvoke v.<org.slf4j.Logger: void info(java.lang.String)>(v);
v = staticinvoke <com.google.common.base.Splitter: com.google.common.base.Splitter on(char)>(44);
v = virtualinvoke v.<com.google.common.base.Splitter: java.util.List splitToList(java.lang.CharSequence)>(v);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setBlackListedSignatureSigningAlgorithms(java.util.Collection)>(v);
label:
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_SP_ID>;
v = v.<org.apache.hadoop.hive.conf.HiveConf$ConfVars: java.lang.String varname>;
v = staticinvoke <org.apache.hive.service.auth.saml.HiveSaml2Client: java.lang.String getCallBackUrl(org.apache.hadoop.hive.conf.HiveConf)>(v);
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: java.lang.String get(java.lang.String,java.lang.String)>(v, v);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setServiceProviderEntityId(java.lang.String)>(v);
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_WANT_ASSERTIONS_SIGNED>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: boolean getBoolVar(org.apache.hadoop.hive.conf.HiveConf$ConfVars)>(v);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setWantsAssertionsSigned(boolean)>(v);
v = <org.apache.hadoop.hive.conf.HiveConf$ConfVars: org.apache.hadoop.hive.conf.HiveConf$ConfVars HIVE_SERVER2_SAML_SIGN_REQUESTS>;
v = virtualinvoke v.<org.apache.hadoop.hive.conf.HiveConf: boolean getBoolVar(org.apache.hadoop.hive.conf.HiveConf$ConfVars)>(v);
virtualinvoke v.<org.pac4j.saml.config.SAML2Configuration: void setAuthnRequestSigned(boolean)>(v);
return v;
}
public static synchronized void shutdown()
{
<org.apache.hive.service.auth.saml.HiveSaml2Client: org.apache.hive.service.auth.saml.HiveSaml2Client INSTANCE> = null;
staticinvoke <org.apache.hive.service.auth.saml.HiveSamlAuthTokenGenerator: void shutdown()>();
return;
}
public void setRedirect(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse) throws org.apache.hive.service.auth.saml.HttpSamlAuthenticationException
{
java.lang.Integer v;
javax.servlet.http.HttpServletRequest v;
int v, v;
java.lang.String v, v;
org.pac4j.core.context.JEEContext v;
boolean v;
org.slf4j.Logger v, v;
javax.servlet.http.HttpServletResponse v;
java.io.IOException v;
org.apache.hive.service.auth.saml.HttpSamlAuthenticationException v, v;
org.apache.hive.service.auth.saml.HiveSaml2Client v;
java.util.Optional v;
java.lang.Object v, v;
v := @this: org.apache.hive.service.auth.saml.HiveSaml2Client;
v := @parameter: javax.servlet.http.HttpServletRequest;
v := @parameter: javax.servlet.http.HttpServletResponse;
v = staticinvoke <org.apache.hive.service.auth.saml.HiveSamlUtils: int validateSamlResponsePort(javax.servlet.http.HttpServletRequest)>(v);
v = <org.apache.hive.service.auth.saml.HiveSaml2Client: org.slf4j.Logger LOG>;
v = staticinvoke <java.lang.Integer: java.lang.Integer valueOf(int)>(v);
interfaceinvoke v.<org.slf4j.Logger: void debug(java.lang.String,java.lang.Object)>("Request has response port set as {}", v);
v = new org.pac4j.core.context.JEEContext;
specialinvoke v.<org.pac4j.core.context.JEEContext: void <init>(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse)>(v, v);
v = virtualinvoke v.<org.apache.hive.service.auth.saml.HiveSaml2Client: java.util.Optional getRedirectionAction(org.pac4j.core.context.WebContext)>(v);
v = virtualinvoke v.<java.util.Optional: boolean isPresent()>();
if v != 0 goto label;
v = new org.apache.hive.service.auth.saml.HttpSamlAuthenticationException;
specialinvoke v.<org.apache.hive.service.auth.saml.HttpSamlAuthenticationException: void <init>(java.lang.String)>("Could not get the redirect response");
throw v;
label:
v = virtualinvoke v.<java.util.Optional: java.lang.Object get()>();
v = virtualinvoke v.<org.pac4j.core.exception.http.RedirectionAction: int getCode()>();
interfaceinvoke v.<javax.servlet.http.HttpServletResponse: void setStatus(int)>(v);
v = virtualinvoke v.<java.util.Optional: java.lang.Object get()>();
label:
v = interfaceinvoke v.<org.pac4j.core.exception.http.WithLocationAction: java.lang.String getLocation()>();
v = <org.apache.hive.service.auth.saml.HiveSaml2Client: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void debug(java.lang.String,java.lang.Object)>("Sending a redirect response to location = {}", v);
v = interfaceinvoke v.<org.pac4j.core.exception.http.WithLocationAction: java.lang.String getLocation()>();
interfaceinvoke v.<javax.servlet.http.HttpServletResponse: void sendRedirect(java.lang.String)>(v);
label:
goto label;
label:
v := @caughtexception;
v = new org.apache.hive.service.auth.saml.HttpSamlAuthenticationException;
specialinvoke v.<org.apache.hive.service.auth.saml.HttpSamlAuthenticationException: void <init>(java.lang.Throwable)>(v);
throw v;
label:
return;
catch java.io.IOException from label to label with label;
}
public java.lang.String validate(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse) throws org.apache.hive.service.auth.saml.HttpSamlAuthenticationException
{
javax.servlet.http.HttpServletRequest v;
org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter v;
org.apache.hive.service.auth.saml.HttpSamlNoGroupsMatchedException v;
java.lang.String v;
org.pac4j.core.context.JEEContext v;
boolean v, v;
org.slf4j.Logger v;
org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor v;
javax.servlet.http.HttpServletResponse v;
java.lang.Exception v;
java.util.List v;
org.apache.hive.service.auth.saml.HttpSamlAuthenticationException v, v;
org.apache.hive.service.auth.saml.HiveSaml2Client v;
org.pac4j.saml.credentials.SAML2Credentials$SAMLNameID v;
java.util.Optional v;
java.lang.Object v, v;
v := @this: org.apache.hive.service.auth.saml.HiveSaml2Client;
v := @parameter: javax.servlet.http.HttpServletRequest;
v := @parameter: javax.servlet.http.HttpServletResponse;
label:
v = new org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor;
specialinvoke v.<org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor: void <init>(org.pac4j.saml.client.SAML2Client)>(v);
v = new org.pac4j.core.context.JEEContext;
specialinvoke v.<org.pac4j.core.context.JEEContext: void <init>(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse)>(v, v);
v = virtualinvoke v.<org.pac4j.saml.credentials.extractor.SAML2CredentialsExtractor: java.util.Optional extract(org.pac4j.core.context.WebContext)>(v);
label:
goto label;
label:
v := @caughtexception;
v = new org.apache.hive.service.auth.saml.HttpSamlAuthenticationException;
specialinvoke v.<org.apache.hive.service.auth.saml.HttpSamlAuthenticationException: void <init>(java.lang.String,java.lang.Throwable)>("Could not validate the SAML response", v);
throw v;
label:
v = virtualinvoke v.<java.util.Optional: boolean isPresent()>();
if v != 0 goto label;
v = new org.apache.hive.service.auth.saml.HttpSamlAuthenticationException;
specialinvoke v.<org.apache.hive.service.auth.saml.HttpSamlAuthenticationException: void <init>(java.lang.String)>("Credentials could not be extracted");
throw v;
label:
v = virtualinvoke v.<java.util.Optional: java.lang.Object get()>();
v = virtualinvoke v.<org.pac4j.saml.credentials.SAML2Credentials: org.pac4j.saml.credentials.SAML2Credentials$SAMLNameID getNameId()>();
v = virtualinvoke v.<org.pac4j.saml.credentials.SAML2Credentials$SAMLNameID: java.lang.String getValue()>();
v = v.<org.apache.hive.service.auth.saml.HiveSaml2Client: org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter groupNameFilter>;
v = virtualinvoke v.<java.util.Optional: java.lang.Object get()>();
v = virtualinvoke v.<org.pac4j.saml.credentials.SAML2Credentials: java.util.List getAttributes()>();
v = virtualinvoke v.<org.apache.hive.service.auth.saml.HiveSamlGroupNameFilter: boolean apply(java.util.List)>(v);
if v != 0 goto label;
v = <org.apache.hive.service.auth.saml.HiveSaml2Client: org.slf4j.Logger LOG>;
interfaceinvoke v.<org.slf4j.Logger: void warn(java.lang.String,java.lang.Object)>("Could not match any groups for the nameid {}", v);
v = new org.apache.hive.service.auth.saml.HttpSamlNoGroupsMatchedException;
specialinvoke v.<org.apache.hive.service.auth.saml.HttpSamlNoGroupsMatchedException: void <init>(java.lang.String)>("None of the configured groups match for the user");
throw v;
label:
return v;
catch java.lang.Exception from label to label with label;
}
static void <clinit>()
{
org.slf4j.Logger v;
v = staticinvoke <org.slf4j.LoggerFactory: org.slf4j.Logger getLogger(java.lang.Class)>(class "Lorg/apache/hive/service/auth/saml/HiveSaml2Client;");
<org.apache.hive.service.auth.saml.HiveSaml2Client: org.slf4j.Logger LOG> = v;
return;
}
}