public class org.apache.nifi.web.security.StandardAuthenticationEntryPoint extends java.lang.Object implements org.springframework.security.web.AuthenticationEntryPoint
{
protected static final java.lang.String AUTHENTICATE_HEADER;
protected static final java.lang.String BEARER_HEADER;
protected static final java.lang.String UNAUTHORIZED;
protected static final java.lang.String EXPIRED_JWT;
protected static final java.lang.String SESSION_EXPIRED;
private static final java.lang.String ROOT_PATH;
private static final org.apache.nifi.web.security.cookie.ApplicationCookieService applicationCookieService;
private final org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint bearerTokenAuthenticationEntryPoint;
public void <init>(org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint)
{
java.lang.Object v;
org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint v;
org.apache.nifi.web.security.StandardAuthenticationEntryPoint v;
v := @this: org.apache.nifi.web.security.StandardAuthenticationEntryPoint;
v := @parameter: org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint;
specialinvoke v.<java.lang.Object: void <init>()>();
v = staticinvoke <java.util.Objects: java.lang.Object requireNonNull(java.lang.Object)>(v);
v.<org.apache.nifi.web.security.StandardAuthenticationEntryPoint: org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint bearerTokenAuthenticationEntryPoint> = v;
return;
}
public void commence(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, org.springframework.security.core.AuthenticationException) throws java.io.IOException
{
javax.servlet.http.HttpServletRequest v;
org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint v;
javax.servlet.http.HttpServletResponse v;
org.springframework.security.core.AuthenticationException v;
boolean v;
org.apache.nifi.web.security.StandardAuthenticationEntryPoint v;
v := @this: org.apache.nifi.web.security.StandardAuthenticationEntryPoint;
v := @parameter: javax.servlet.http.HttpServletRequest;
v := @parameter: javax.servlet.http.HttpServletResponse;
v := @parameter: org.springframework.security.core.AuthenticationException;
v = v instanceof org.springframework.security.oauth.core.OAuth2AuthenticationException;
if v == 0 goto label;
v = v.<org.apache.nifi.web.security.StandardAuthenticationEntryPoint: org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint bearerTokenAuthenticationEntryPoint>;
virtualinvoke v.<org.springframework.security.oauth.server.resource.web.BearerTokenAuthenticationEntryPoint: void commence(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse,org.springframework.security.core.AuthenticationException)>(v, v, v);
goto label;
label:
interfaceinvoke v.<javax.servlet.http.HttpServletResponse: void setStatus(int)>(401);
label:
specialinvoke v.<org.apache.nifi.web.security.StandardAuthenticationEntryPoint: void removeAuthorizationBearerCookie(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse)>(v, v);
specialinvoke v.<org.apache.nifi.web.security.StandardAuthenticationEntryPoint: void sendErrorMessage(javax.servlet.http.HttpServletResponse,org.springframework.security.core.AuthenticationException)>(v, v);
return;
}
private void sendErrorMessage(javax.servlet.http.HttpServletResponse, org.springframework.security.core.AuthenticationException) throws java.io.IOException
{
java.io.PrintWriter v;
java.lang.Throwable v;
javax.servlet.http.HttpServletResponse v;
org.springframework.security.core.AuthenticationException v;
java.lang.String v;
org.apache.nifi.web.security.StandardAuthenticationEntryPoint v;
v := @this: org.apache.nifi.web.security.StandardAuthenticationEntryPoint;
v := @parameter: javax.servlet.http.HttpServletResponse;
v := @parameter: org.springframework.security.core.AuthenticationException;
interfaceinvoke v.<javax.servlet.http.HttpServletResponse: void setContentType(java.lang.String)>("text/plain");
v = specialinvoke v.<org.apache.nifi.web.security.StandardAuthenticationEntryPoint: java.lang.String getErrorMessage(javax.servlet.http.HttpServletResponse,org.springframework.security.core.AuthenticationException)>(v, v);
v = interfaceinvoke v.<javax.servlet.http.HttpServletResponse: java.io.PrintWriter getWriter()>();
label:
virtualinvoke v.<java.io.PrintWriter: void print(java.lang.String)>(v);
label:
virtualinvoke v.<java.io.PrintWriter: void close()>();
goto label;
label:
v := @caughtexception;
throw v;
label:
return;
catch java.lang.Throwable from label to label with label;
}
private java.lang.String getErrorMessage(javax.servlet.http.HttpServletResponse, org.springframework.security.core.AuthenticationException)
{
javax.servlet.http.HttpServletResponse v;
org.springframework.security.core.AuthenticationException v;
java.lang.String v, v, v, v, v;
boolean v;
org.apache.nifi.web.security.StandardAuthenticationEntryPoint v;
v := @this: org.apache.nifi.web.security.StandardAuthenticationEntryPoint;
v := @parameter: javax.servlet.http.HttpServletResponse;
v := @parameter: org.springframework.security.core.AuthenticationException;
v = interfaceinvoke v.<javax.servlet.http.HttpServletResponse: java.lang.String getHeader(java.lang.String)>("WWW-Authenticate");
if v != null goto label;
v = "Unauthorized";
goto label;
label:
v = v;
label:
v = virtualinvoke v.<java.lang.String: java.lang.String replaceFirst(java.lang.String,java.lang.String)>("Bearer", "Unauthorized");
v = virtualinvoke v.<org.springframework.security.core.AuthenticationException: java.lang.String getMessage()>();
v = staticinvoke <org.springframework.util.StringUtils: boolean endsWithIgnoreCase(java.lang.String,java.lang.String)>(v, "Expired JWT");
if v == 0 goto label;
v = "Session Expired";
goto label;
label:
v = v;
label:
return v;
}
private void removeAuthorizationBearerCookie(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
{
javax.servlet.http.HttpServletResponse v;
org.apache.nifi.web.security.cookie.ApplicationCookieService v, v;
javax.servlet.http.HttpServletRequest v;
org.apache.nifi.web.util.RequestUriBuilder v, v;
org.apache.nifi.web.security.cookie.ApplicationCookieName v, v;
java.util.Optional v;
java.net.URI v;
boolean v;
org.apache.nifi.web.security.StandardAuthenticationEntryPoint v;
v := @this: org.apache.nifi.web.security.StandardAuthenticationEntryPoint;
v := @parameter: javax.servlet.http.HttpServletRequest;
v := @parameter: javax.servlet.http.HttpServletResponse;
v = <org.apache.nifi.web.security.StandardAuthenticationEntryPoint: org.apache.nifi.web.security.cookie.ApplicationCookieService applicationCookieService>;
v = <org.apache.nifi.web.security.cookie.ApplicationCookieName: org.apache.nifi.web.security.cookie.ApplicationCookieName AUTHORIZATION_BEARER>;
v = interfaceinvoke v.<org.apache.nifi.web.security.cookie.ApplicationCookieService: java.util.Optional getCookieValue(javax.servlet.http.HttpServletRequest,org.apache.nifi.web.security.cookie.ApplicationCookieName)>(v, v);
v = virtualinvoke v.<java.util.Optional: boolean isPresent()>();
if v == 0 goto label;
v = staticinvoke <org.apache.nifi.web.util.RequestUriBuilder: org.apache.nifi.web.util.RequestUriBuilder fromHttpServletRequest(javax.servlet.http.HttpServletRequest)>(v);
v = virtualinvoke v.<org.apache.nifi.web.util.RequestUriBuilder: org.apache.nifi.web.util.RequestUriBuilder path(java.lang.String)>("/");
v = virtualinvoke v.<org.apache.nifi.web.util.RequestUriBuilder: java.net.URI build()>();
v = <org.apache.nifi.web.security.StandardAuthenticationEntryPoint: org.apache.nifi.web.security.cookie.ApplicationCookieService applicationCookieService>;
v = <org.apache.nifi.web.security.cookie.ApplicationCookieName: org.apache.nifi.web.security.cookie.ApplicationCookieName AUTHORIZATION_BEARER>;
interfaceinvoke v.<org.apache.nifi.web.security.cookie.ApplicationCookieService: void removeCookie(java.net.URI,javax.servlet.http.HttpServletResponse,org.apache.nifi.web.security.cookie.ApplicationCookieName)>(v, v, v);
label:
return;
}
static void <clinit>()
{
org.apache.nifi.web.security.cookie.StandardApplicationCookieService v;
v = new org.apache.nifi.web.security.cookie.StandardApplicationCookieService;
specialinvoke v.<org.apache.nifi.web.security.cookie.StandardApplicationCookieService: void <init>()>();
<org.apache.nifi.web.security.StandardAuthenticationEntryPoint: org.apache.nifi.web.security.cookie.ApplicationCookieService applicationCookieService> = v;
return;
}
}