import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
/**
 * Impose constraints on the {@linkplain org.mortbay.jetty.servlet.Context}
 * passed in.
 * @param ctx - {@linkplain org.mortbay.jetty.servlet.Context} to impose
 *            constraints on.
 */
public static void enforceConstraints(Context ctx) {
  Constraint c = new Constraint();
  c.setAuthenticate(true);

  ConstraintMapping cmt = new ConstraintMapping();
  cmt.setConstraint(c);
  cmt.setMethod("TRACE");
  cmt.setPathSpec("/*");

  ConstraintMapping cmo = new ConstraintMapping();
  cmo.setConstraint(c);
  cmo.setMethod("OPTIONS");
  cmo.setPathSpec("/*");

  SecurityHandler sh = new SecurityHandler();
  sh.setConstraintMappings(new ConstraintMapping[]{cmt, cmo});
  ctx.addHandler(sh);
}
 

import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
/**
 * Add constraints to a Jetty Context to disallow undesirable Http methods.
 * @param context The context to modify
 */
public static void constrainHttpMethods(Context context) {
  Constraint c = new Constraint();
  c.setAuthenticate(true);

  ConstraintMapping cmt = new ConstraintMapping();
  cmt.setConstraint(c);
  cmt.setMethod("TRACE");
  cmt.setPathSpec("/*");

  ConstraintMapping cmo = new ConstraintMapping();
  cmo.setConstraint(c);
  cmo.setMethod("OPTIONS");
  cmo.setPathSpec("/*");

  SecurityHandler sh = new SecurityHandler();
  sh.setConstraintMappings(new ConstraintMapping[]{ cmt, cmo });

  context.addHandler(sh);
}
 

import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
private SecurityHandler makeSecurityHandler(String realm, String consoleUser, String consolePassword, String curatorUser, String curatorPassword)
{
    HashUserRealm userRealm = new HashUserRealm(realm);
    userRealm.put(consoleUser, Credential.getCredential(consolePassword));
    userRealm.addUserToRole(consoleUser,"console");
    userRealm.put(curatorUser, Credential.getCredential(curatorPassword));
    userRealm.addUserToRole(curatorUser, "curator");

    Constraint console = new Constraint();
    console.setName("consoleauth");
    console.setRoles(new String[]{"console"});
    console.setAuthenticate(true);

    Constraint curator = new Constraint();
    curator.setName("curatorauth");
    curator.setRoles(new String[]{"curator", "console"});
    curator.setAuthenticate(true);

    ConstraintMapping consoleMapping = new ConstraintMapping();
    consoleMapping.setConstraint(console);
    consoleMapping.setPathSpec("/*");

    ConstraintMapping curatorMapping = new ConstraintMapping();
    curatorMapping.setConstraint(curator);
    curatorMapping.setPathSpec("/exhibitor/v1/cluster/list");

    SecurityHandler handler = new SecurityHandler();
    handler.setUserRealm(userRealm);
    handler.setConstraintMappings(new ConstraintMapping[]{consoleMapping,curatorMapping});
    handler.setAuthenticator(new BasicAuthenticator());

    return handler;
}
 

import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
@BeforeClass
public static void jettyServer() throws Exception {

	server = new Server();

	Connector connector = new SelectChannelConnector();
	connector.setPort(PORT);
	server.setConnectors(new Connector[] { connector });
	ConstraintMapping cm = new ConstraintMapping();
	Constraint constraint = new Constraint();
	constraint.setName(Constraint.__BASIC_AUTH);
	constraint.setRoles(new String[] { ROLE_NAME });
	constraint.setAuthenticate(true);
	cm.setConstraint(constraint);
	cm.setPathSpec("/*");

	sh = new SecurityHandler();
	userRealm = new HashUserRealm(REALM);
	userRealm.put(USERNAME, PASSWORD);
	userRealm.addUserToRole(USERNAME, ROLE_NAME);
	sh.setUserRealm(userRealm);
	sh.setConstraintMappings(new ConstraintMapping[] { cm });

	WebAppContext webappcontext = new WebAppContext();
	webappcontext.setContextPath("/");

	URL htmlRoot = HTTPAuthenticatorIT.class.getResource(HTML);
	assertNotNull("Could not find " + HTML, htmlRoot);
	webappcontext.setWar(htmlRoot.toExternalForm());
	
	webappcontext.addHandler(sh);

	HandlerCollection handlers = new HandlerCollection();
	handlers.setHandlers(new Handler[] { webappcontext,
			new DefaultHandler() });

	server.setHandler(handlers);
	server.start();
}
 

import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
private void configureSecurity() {
    SecurityHandler handler = new SecurityHandler();

    handler.setAuthenticator(new AppengineAuthenticator());
    handler.setUserRealm(createAppengineUserRealm());

    webapp.setSecurityHandler(handler);
}
 

import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
private void addSecurityFile(HashUserRealm realm, String securityFile, Context root) throws Exception
{
    // create a temp Jetty context to parse the security portion of the web.xml file

    /*
        TODO

        This code assumes far too much internal knowledge of Jetty. I don't know
        of simple way to parse the web.xml though and don't want to write it myself.
     */

    final URL url = new URL("file", null, securityFile);
    final WebXmlConfiguration webXmlConfiguration = new WebXmlConfiguration();
    WebAppContext context = new WebAppContext();
    context.setServer(server);
    webXmlConfiguration.setWebAppContext(context);
    ContextHandler contextHandler = new ContextHandler("/")
    {
        @Override
        protected void startContext() throws Exception
        {
            super.startContext();
            setServer(server);
            webXmlConfiguration.configure(url.toString());
        }
    };
    contextHandler.start();
    try
    {
        SecurityHandler securityHandler = webXmlConfiguration.getWebAppContext().getSecurityHandler();

        if ( realm != null )
        {
            securityHandler.setUserRealm(realm);
        }

        root.setSecurityHandler(securityHandler);
    }
    finally
    {
        contextHandler.stop();
    }
}
 

import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
public SecurityHandler getSecurityHandler()
{
    return securityHandler;
}
 

import org.mortbay.jetty.security.SecurityHandler; //导入依赖的package包/类
public static void updateAuthentication() {
	try {
		SagexConfiguration config = new SagexConfiguration();

		boolean httpenabled = config.getBoolean(SagexConfiguration.PROP_ENABLE_HTTP, true);
		Context ctx = (Context) SagexServlet.getUserData().get("jetty_context");
		if (!httpenabled) {
			System.out.println("SAGEX-API: Stopping Http Context");
			ctx.stop();
			return;
		} else {
			if (ctx.isStopped()) {
				System.out.println("SAGEX-API: Starting Http Context");
				ctx.start();
			}
		}
		
		if (ctx == null) {
			System.out
					.println("SAGEX-API: Can't configure authentication; No Jetty Context.");
			return;
		}
		SecurityHandler sh = ctx.getSecurityHandler();
		if (sh == null) {
			System.out
					.println("SAGEX-API: Can't configure authentication; No Security Handler.");
			return;
		}
		ConstraintMapping cmap[] = sh.getConstraintMappings();
		if (cmap == null) {
			System.out
					.println("SAGEX-API: Can't configure authentication; No Constraints.");
			return;
		}

		boolean auth = config.getBoolean(
				SagexConfiguration.PROP_SECURE_HTTP, true);
		for (ConstraintMapping c : cmap) {
			Constraint cs = c.getConstraint();
			if (cs != null) {
				System.out
						.println("SAGEX-API: Updated Constrant Authentication: "
								+ auth);
				cs.setAuthenticate(auth);
			}
		}
	} catch (Throwable t) {
		t.printStackTrace();
	}
}