mirror of
https://gitee.com/dromara/MaxKey.git
synced 2026-06-10 03:07:33 +08:00
225 lines
8.9 KiB
Java
225 lines
8.9 KiB
Java
/*
|
||
* Copyright [2020] [MaxKey of copyright http://www.maxkey.top]
|
||
*
|
||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
* you may not use this file except in compliance with the License.
|
||
* You may obtain a copy of the License at
|
||
*
|
||
* http://www.apache.org/licenses/LICENSE-2.0
|
||
*
|
||
* Unless required by applicable law or agreed to in writing, software
|
||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
* See the License for the specific language governing permissions and
|
||
* limitations under the License.
|
||
*/
|
||
|
||
|
||
package org.maxkey;
|
||
|
||
import java.io.BufferedReader;
|
||
import java.io.IOException;
|
||
import java.io.InputStreamReader;
|
||
import java.util.ArrayList;
|
||
import java.util.List;
|
||
import java.util.stream.Collectors;
|
||
|
||
import org.maxkey.authn.realm.jdbc.JdbcAuthenticationRealm;
|
||
import org.maxkey.authn.realm.ldap.LdapAuthenticationRealmService;
|
||
import org.maxkey.authn.support.kerberos.KerberosProxy;
|
||
import org.maxkey.authn.support.kerberos.RemoteKerberosService;
|
||
import org.maxkey.configuration.EmailConfig;
|
||
import org.maxkey.constants.ConstsPersistence;
|
||
import org.maxkey.password.onetimepwd.AbstractOtpAuthn;
|
||
import org.maxkey.password.onetimepwd.OtpAuthnService;
|
||
import org.maxkey.password.onetimepwd.algorithm.OtpKeyUriFormat;
|
||
import org.maxkey.password.onetimepwd.impl.MailOtpAuthn;
|
||
import org.maxkey.password.onetimepwd.impl.TimeBasedOtpAuthn;
|
||
import org.maxkey.password.onetimepwd.token.RedisOtpTokenStore;
|
||
import org.maxkey.persistence.redis.RedisConnectionFactory;
|
||
import org.maxkey.persistence.repository.LoginHistoryRepository;
|
||
import org.maxkey.persistence.repository.LoginRepository;
|
||
import org.maxkey.persistence.repository.PasswordPolicyValidator;
|
||
import org.maxkey.persistence.service.LdapContextService;
|
||
import org.maxkey.persistence.service.UserInfoService;
|
||
import org.slf4j.Logger;
|
||
import org.slf4j.LoggerFactory;
|
||
import org.springframework.beans.factory.InitializingBean;
|
||
import org.springframework.beans.factory.annotation.Value;
|
||
import org.springframework.context.annotation.Bean;
|
||
import org.springframework.context.annotation.ComponentScan;
|
||
import org.springframework.context.annotation.Configuration;
|
||
import org.springframework.core.io.ClassPathResource;
|
||
import org.springframework.core.io.Resource;
|
||
import org.springframework.jdbc.core.JdbcTemplate;
|
||
import org.springframework.security.crypto.password.PasswordEncoder;
|
||
|
||
@Configuration
|
||
@ComponentScan(basePackages = {
|
||
"org.maxkey.authn",
|
||
"org.maxkey.configuration",
|
||
"org.maxkey.domain",
|
||
"org.maxkey.domain.apps",
|
||
"org.maxkey.domain.userinfo",
|
||
"org.maxkey.api.v1.contorller",
|
||
"org.maxkey.web.endpoint",
|
||
"org.maxkey.web.contorller",
|
||
"org.maxkey.web.interceptor",
|
||
//single sign on protocol
|
||
"org.maxkey.authz.endpoint",
|
||
"org.maxkey.authz.desktop.endpoint",
|
||
"org.maxkey.authz.exapi.endpoint",
|
||
"org.maxkey.authz.formbased.endpoint",
|
||
"org.maxkey.authz.ltpa.endpoint",
|
||
"org.maxkey.authz.token.endpoint"
|
||
})
|
||
public class MaxKeyConfig implements InitializingBean {
|
||
private static final Logger _logger = LoggerFactory.getLogger(MaxKeyConfig.class);
|
||
|
||
|
||
@Bean(name = "otpKeyUriFormat")
|
||
public OtpKeyUriFormat otpKeyUriFormat(
|
||
@Value("${maxkey.otp.policy.type:totp}")
|
||
String type,
|
||
@Value("${maxkey.otp.policy.domain:MaxKey.top}")
|
||
String domain,
|
||
@Value("${maxkey.otp.policy.issuer:MaxKey}")
|
||
String issuer,
|
||
@Value("${maxkey.otp.policy.digits:6}")
|
||
int digits,
|
||
@Value("${maxkey.otp.policy.period:30}")
|
||
int period) {
|
||
|
||
OtpKeyUriFormat otpKeyUriFormat=new OtpKeyUriFormat(type,issuer,domain,digits,period);
|
||
_logger.debug("OTP KeyUri Format " + otpKeyUriFormat);
|
||
return otpKeyUriFormat;
|
||
}
|
||
|
||
//可以在此实现其他的登陆认证方式，请实现AbstractAuthenticationRealm
|
||
@Bean(name = "authenticationRealm")
|
||
public JdbcAuthenticationRealm authenticationRealm(
|
||
PasswordEncoder passwordEncoder,
|
||
PasswordPolicyValidator passwordPolicyValidator,
|
||
LoginRepository loginService,
|
||
LoginHistoryRepository loginHistoryService,
|
||
UserInfoService userInfoService,
|
||
JdbcTemplate jdbcTemplate,
|
||
OtpAuthnService otpAuthnService,
|
||
LdapContextService ldapContextService) {
|
||
LdapAuthenticationRealmService ldapRealmService = new LdapAuthenticationRealmService(ldapContextService);
|
||
JdbcAuthenticationRealm authenticationRealm = new JdbcAuthenticationRealm(
|
||
passwordEncoder,
|
||
passwordPolicyValidator,
|
||
loginService,
|
||
loginHistoryService,
|
||
userInfoService,
|
||
jdbcTemplate,
|
||
ldapRealmService
|
||
);
|
||
|
||
return authenticationRealm;
|
||
}
|
||
|
||
@Bean(name = "timeBasedOtpAuthn")
|
||
public TimeBasedOtpAuthn timeBasedOtpAuthn(
|
||
@Value("${maxkey.otp.policy.digits:6}")
|
||
int digits,
|
||
@Value("${maxkey.otp.policy.period:30}")
|
||
int period) {
|
||
TimeBasedOtpAuthn tfaOtpAuthn = new TimeBasedOtpAuthn(digits , period);
|
||
_logger.debug("TimeBasedOtpAuthn inited.");
|
||
return tfaOtpAuthn;
|
||
}
|
||
|
||
@Bean(name = "tfaOtpAuthn")
|
||
public AbstractOtpAuthn tfaOptAuthn(
|
||
@Value("${maxkey.login.mfa.type}")String mfaType,
|
||
@Value("${maxkey.otp.policy.digits:6}")
|
||
int digits,
|
||
@Value("${maxkey.otp.policy.period:30}")
|
||
int period,
|
||
@Value("${maxkey.server.persistence}") int persistence,
|
||
RedisConnectionFactory redisConnFactory) {
|
||
AbstractOtpAuthn tfaOtpAuthn = new TimeBasedOtpAuthn(digits , period);
|
||
_logger.debug("TimeBasedOtpAuthn inited.");
|
||
|
||
if (persistence == ConstsPersistence.REDIS) {
|
||
RedisOtpTokenStore redisOptTokenStore = new RedisOtpTokenStore(redisConnFactory);
|
||
tfaOtpAuthn.setOptTokenStore(redisOptTokenStore);
|
||
}
|
||
|
||
tfaOtpAuthn.initPropertys();
|
||
return tfaOtpAuthn;
|
||
}
|
||
|
||
@Bean(name = "mailOtpAuthn")
|
||
public MailOtpAuthn mailOtpAuthn(
|
||
EmailConfig emailConfig,
|
||
@Value("${spring.mail.properties.mailotp.message.subject}")
|
||
String messageSubject,
|
||
@Value("${spring.mail.properties.mailotp.message.template}")
|
||
String messageTemplate,
|
||
@Value("${spring.mail.properties.mailotp.message.validity}")
|
||
int messageValidity,
|
||
@Value("${spring.mail.properties.mailotp.message.type}")
|
||
String messageType
|
||
) {
|
||
if(messageType!= null && messageType.equalsIgnoreCase("html")) {
|
||
Resource resource = new ClassPathResource("messages/email/forgotpassword.html");
|
||
try {
|
||
BufferedReader bufferedReader =new BufferedReader(new InputStreamReader(resource.getInputStream()));
|
||
messageTemplate = bufferedReader.lines().collect(Collectors.joining("\n"));
|
||
bufferedReader.close();
|
||
} catch (IOException e) {
|
||
_logger.error("mailOtpAuthn IOException ",e);
|
||
}
|
||
}
|
||
_logger.trace("messageTemplate \n" +messageTemplate);
|
||
MailOtpAuthn mailOtpAuthn = new MailOtpAuthn();
|
||
mailOtpAuthn.setSubject(messageSubject);
|
||
mailOtpAuthn.setMessageTemplate(messageTemplate);
|
||
mailOtpAuthn.setEmailConfig(emailConfig);
|
||
mailOtpAuthn.setInterval(messageValidity);
|
||
_logger.debug("MailOtpAuthn inited.");
|
||
return mailOtpAuthn;
|
||
}
|
||
|
||
|
||
@Bean(name = "kerberosService")
|
||
public RemoteKerberosService kerberosService(
|
||
@Value("${maxkey.login.kerberos.default.userdomain}")
|
||
String userDomain,
|
||
@Value("${maxkey.login.kerberos.default.fulluserdomain}")
|
||
String fullUserDomain,
|
||
@Value("${maxkey.login.kerberos.default.crypto}")
|
||
String crypto,
|
||
@Value("${maxkey.login.kerberos.default.redirecturi}")
|
||
String redirectUri
|
||
) {
|
||
RemoteKerberosService kerberosService = new RemoteKerberosService();
|
||
KerberosProxy kerberosProxy = new KerberosProxy();
|
||
|
||
kerberosProxy.setCrypto(crypto);
|
||
kerberosProxy.setFullUserdomain(fullUserDomain);
|
||
kerberosProxy.setUserdomain(userDomain);
|
||
kerberosProxy.setRedirectUri(redirectUri);
|
||
|
||
List<KerberosProxy> kerberosProxysList = new ArrayList<KerberosProxy>();
|
||
kerberosProxysList.add(kerberosProxy);
|
||
kerberosService.setKerberosProxys(kerberosProxysList);
|
||
|
||
_logger.debug("RemoteKerberosService inited.");
|
||
return kerberosService;
|
||
}
|
||
|
||
|
||
|
||
@Override
|
||
public void afterPropertiesSet() throws Exception {
|
||
|
||
}
|
||
|
||
|
||
|
||
}
|