import com.stormpath.sdk.account.Account; //导入依赖的package包/类
@Override
public void validate(final UsernamePasswordCredentials credentials, final WebContext context) throws HttpAction {

    init(context);

    try {
        logger.debug("Attempting to authenticate user [{}] against application [{}] in Stormpath cloud...",
                credentials.getUsername(), this.application.getName());
        final Account account = authenticateAccount(credentials);
        logger.debug("Successfully authenticated user [{}]", account.getUsername());

        final StormpathProfile profile = createProfile(account);
        credentials.setUserProfile(profile);
    } catch (final ResourceException e) {
        throw new BadCredentialsException("Bad credentials for: " + credentials.getUsername(), e);
    }
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
/**
 * Obtiene la lista de los registros de Item asociados a un Client
 *
 * @return Colección de objetos de ItemDetailDTO
 * @generated
 */
@GET
public List<ItemDetailDTO> getItems() {
    String accountHref = req.getRemoteUser();
    if (accountHref != null) {
        Account account = Utils.getClient().getResource(accountHref, Account.class);
        Integer clientsId = (Integer) account.getCustomData().get("client_id");
        if(clientsId != null) {
            if (page != null && maxRecords != null) {
                this.response.setIntHeader("X-Total-Count", itemLogic.countItems());
                return listEntity2DTO(itemLogic.getItems(page, maxRecords, clientsId.longValue()));
            }
            return listEntity2DTO(itemLogic.getItems(clientsId.longValue()));
        }
    }
    throw new WebApplicationException("User not authorized to do this", 403);
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
/**
 * Asocia un Item existente a un Client
 *
 * @param dto Objeto de ItemDetailDTO con los datos nuevos
 * @return Objeto de ItemDetailDTOcon los datos nuevos y su ID.
 * @generated
 */
@POST
@StatusCreated
public ClientDetailDTO createItem(ItemDetailDTO dto) {
    String accountHref = req.getRemoteUser();
    if (accountHref != null) {
        Account account = Utils.getClient().getResource(accountHref, Account.class);
        Integer clientsId = (Integer) account.getCustomData().get("client_id");

        if(clientsId == null){
            throw new WebApplicationException("User is not client", 403);
        }

        itemLogic.createItem(clientsId.longValue(), dto.toEntity());
        ClientDetailDTO clientDetailDTO = new ClientDetailDTO();
        clientDetailDTO.setId(clientsId.longValue());
        return clientDetailDTO;
    }
    throw new WebApplicationException("User not authorized to do this", 403);
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
/**
 * Obtiene la lista de los registros de Client
 *
 * @return Colección de objetos de ClientDetailDTO
 * @generated
 */
@GET
public List<ClientDetailDTO> getClients() {
    String accountHref = req.getRemoteUser();
    if (accountHref != null) {
        Account account = Utils.getClient().getResource(accountHref, Account.class);
        for (Group gr : account.getGroups()) {
            switch (gr.getHref()) {
                case ADMIN_HREF:
                    if (page != null && maxRecords != null) {
                        this.response.setIntHeader("X-Total-Count", clientLogic.countClients());
                        return listEntity2DTO(clientLogic.getClients(page, maxRecords));
                    }
                    return listEntity2DTO(clientLogic.getClients());
                case CLIENT_HREF:
                    Integer id = (int) account.getCustomData().get("client_id");
                    List<ClientDetailDTO> list = new ArrayList();
                    list.add(new ClientDetailDTO(clientLogic.getClient(id.longValue())));
                    return list;
            }
        }
    } 
    return null;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
/**
 * Obtiene la lista de los registros de Agency
 *
 * @return Colección de objetos de AgencyDetailDTO
 * @generated
 */
@GET
public List<AgencyDetailDTO> getAgencys() {
    String accountHref = req.getRemoteUser();
    if (accountHref != null) {
        Account account = Utils.getClient().getResource(accountHref, Account.class);
        for (Group gr : account.getGroups()) {
            switch (gr.getHref()) {
                case ADMIN_HREF:
                    if (page != null && maxRecords != null) {
                    this.response.setIntHeader("X-Total-Count", agencyLogic.countAgencys());
                    return listEntity2DTO(agencyLogic.getAgencys(page, maxRecords));
                }
                return listEntity2DTO(agencyLogic.getAgencys());
                case AGENCY_HREF:
                    Integer id = (int) account.getCustomData().get("agency_id");
                    List<AgencyDetailDTO> list = new ArrayList();
                    list.add(new AgencyDetailDTO(agencyLogic.getAgency(id.longValue())));
                    return list;
            }
        }
    } 
    return null;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
/**
 * Authenticate user with given username and password
 *
 * @param username username string
 * @param password password string
 * @return Account instance or null
 */
public static Account authenticate(String username, String password) throws ResourceException {

    AuthenticationRequest request = new UsernamePasswordRequest(username, password);
    Account account = null;
    try {
        AuthenticationResult result = getStormpathApplicaiton().authenticateAccount(request);
        account = result.getAccount();
        LOGGER.info("Authenticating user with username: {} and password: {}", new Object[]{ account.getUsername(), "******"});
    } catch (ResourceException ex) {
        LOGGER.error("status: {} requestId: {} message: {} ", new Object[] { ex.getStatus(), ex.getRequestId(), ex.getMessage()});
        throw ex;
    }

    return account;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
/**
 * Create new user account with given username and password
 *
 * @param givenName given name of user
 * @param surname last name of user
 * @param email email of user
 * @param password password of user
 * @return Account instance of new user
 * @throws ResourceException
 */
public static Account createUser(String givenName, String surname, String email, String password) throws ResourceException {
    Account created = null;
    try {
        Account account = getStormpathClient().instantiate(Account.class);
        account.setGivenName(givenName);
        account.setSurname(surname);
        account.setEmail(email);
        account.setPassword(password);

        created = getStormpathApplicaiton().createAccount(account);
    } catch (ResourceException ex) {
        LOGGER.error("status: {} requestId: {} message: {} ", new Object[] { ex.getStatus(), ex.getRequestId(), ex.getMessage()});
        throw ex;
    }

    return created;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
private Account createAccount(final String uname, final String pw) {
	// Create the account object
	Account account = client.instantiate(Account.class);

	// Set the account properties
	account.setGivenName("Bob");
	account.setSurname("Bobbin");
	account.setUsername(uname); // optional, defaults to email if unset
	account.setEmail("[email protected]");
	account.setPassword(pw);
	CustomData cd = account.getCustomData();
	cd.put("rank", "Captain");

	// Create the account using the existing Application object
	return application.createAccount(account);
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
private Account authAccount(final String acName, final String pw) {
	// Create an authentication request using the credentials
	AuthenticationRequest request = new UsernamePasswordRequest(acName, pw);

	// Now let's authenticate the account with the application:
	try {
		return application.authenticateAccount(request).getAccount();
	} catch (ResourceException name) {
		// ...catch the error and print it to the syslog if it wasn't.
		LOG.severe("Auth error: " + name.getDeveloperMessage());
		return null;
	} finally {
		// Clear the request data to prevent later memory access
		request.clear();
	}
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
public final OtfGroup buildGroup(final String href) {
	final Group grp = spbd.getResourceByHrefGroup(href);
	OtfGroup ogrp = new OtfGroup();
	ogrp.setIdref(grp.getHref());
	ogrp.setName(grp.getName());
	ogrp.setDescription(grp.getDescription());
	ogrp.setStatus(grp.getStatus().toString());

	for (Account acc : grp.getAccounts()) {
		OtfAccount oacc = buildAccount(acc);
		ogrp.getAccounts().getAccounts().put(oacc.getName(), oacc);
	}

	Map<String, Object> cd = spbd.getResourceByHrefCustomData(grp
			.getCustomData().getHref());
	for (String key : cd.keySet()) {
		if (!OtfCustomData.getReservedWords().contains(key)) {
			String val = cd.get(key).toString();
			OtfCustomField cf = new OtfCustomField(key, val);
			ogrp.getCustData().getCustFields().put(key, cf);
		}
	}
	return ogrp;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
public final Account authSPAccount(final String acName, final String pw) {
	// Create an authentication request using the credentials
	AuthenticationRequest<?, ?> request = new UsernamePasswordRequest(
			acName, pw);
	Application userApp = getUsersApplication(acName);
	if (userApp == null) {
		// LOG.severe("Auth error: User " + acName + " not found. ");
		return null;
	}
	// Now let's authenticate the account with the application:
	try {
		Account userAcc = userApp.authenticateAccount(request).getAccount();
		return userAcc;
	} catch (ResourceException name) {
		// ...catch the error and print it to the syslog if it wasn't.
		LOG.severe("Auth error: " + name.getDeveloperMessage());
		return null;
	} finally {
		// Clear the request data to prevent later memory access
		request.clear();
	}
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
@VisibleForTesting
Account getAccount(ClientData clientData) {
    Account account = null;

    AccountList accountList = application.getAccounts(Accounts
            .where(Accounts.username().eqIgnoreCase(clientData.getUsername().get())));

    // Iterator is necessary, because there's no size() in the ApplicationsList class and the AccountList could be empty,
    // if the username changes while the client is still connected.
    final Iterator<Account> iterator = accountList.iterator();
    if (iterator.hasNext()) {
        account = iterator.next();
    }

    return account;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
protected Map<String, Object> buildAttributesFromStormpathAccount(final Account account) {
    final Map<String, Object> attributes = new HashMap<>();
    attributes.put("fullName", account.getFullName());
    attributes.put("email", account.getEmail());
    attributes.put("givenName", account.getGivenName());
    attributes.put("middleName", account.getMiddleName());
    attributes.put("surName", account.getSurname());
    attributes.put("groups", account.getGroups());
    attributes.put("groupMemberships", account.getGroupMemberships());
    attributes.put("status", account.getStatus());
    return attributes;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
@Override
public void register(UserDTO user) {
    try {
       Account acct = createUser(user);
    for (Group gr : acct.getGroups()) {
        switch(gr.getHref()){
            case CLIENT_HREF:
            ClientEntity client = new ClientEntity();
            client.setName(user.getUserName());
            client = clientLogic.createClient(client);
            acct.getCustomData().put(CLIENT_CD, client.getId());
            break;
            case AGENCY_HREF:
            AgencyEntity provider = new AgencyEntity();
            provider.setName(user.getUserName());                
            provider = agencyLogic.createAgency(provider);
            acct.getCustomData().put(AGENCY_CD, provider.getId());  
            break;
            default:
             throw new WebApplicationException("Group link doen's match ");
        }
            
        }
    acct.getCustomData().save();
    } catch (ResourceException e) {
        throw new WebApplicationException(e, e.getStatus());
    }
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
@Test
@SuppressWarnings("unchecked")
public void Can_convert_an_authentication_into_user_details() {

    final AuthenticationResult result = mock(AuthenticationResult.class);

    final Account account = mock(Account.class);
    final String username = someString();
    final GroupList groups = mock(GroupList.class);
    final Collection authorities = mock(Collection.class);

    // Given
    given(result.getAccount()).willReturn(account);
    given(account.getUsername()).willReturn(username);
    given(account.getStatus()).willReturn(ENABLED);
    given(account.getGroups()).willReturn(groups);
    given(authorityConverter.convert(groups)).willReturn(authorities);

    // When
    final AccountUserDetails actual = converter.create(result);

    // Then
    assertThat(actual.getUsername(), is(username));
    assertThat(actual.getPassword(), nullValue());
    assertThat(actual.getAuthorities(), is(authorities));
    assertThat(actual.isAccountNonExpired(), is(true));
    assertThat(actual.isAccountNonLocked(), is(true));
    assertThat(actual.isCredentialsNonExpired(), is(true));
    assertThat(actual.isEnabled(), is(true));
    assertThat(actual.getAccount(), is(account));
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
@Test
@SuppressWarnings("unchecked")
public void Can_convert_a_disabled_authentication_into_user_details() {

    final AuthenticationResult result = mock(AuthenticationResult.class);

    final Account account = mock(Account.class);
    final String username = someString();
    final EnumSet<AccountStatus> statuses = EnumSet.allOf(AccountStatus.class);
    final GroupList groups = mock(GroupList.class);
    final Collection authorities = mock(Collection.class);

    // Given
    given(result.getAccount()).willReturn(account);
    given(account.getUsername()).willReturn(username);
    statuses.remove(ENABLED);
    given(account.getStatus()).willReturn(someThing(statuses.toArray(new AccountStatus[statuses.size()])));
    given(account.getGroups()).willReturn(groups);
    given(authorityConverter.convert(groups)).willReturn(authorities);

    // When
    final AccountUserDetails actual = converter.create(result);

    // Then
    assertThat(actual.getUsername(), is(username));
    assertThat(actual.getPassword(), nullValue());
    assertThat(actual.getAuthorities(), is(authorities));
    assertThat(actual.isAccountNonExpired(), is(true));
    assertThat(actual.isAccountNonLocked(), is(true));
    assertThat(actual.isCredentialsNonExpired(), is(true));
    assertThat(actual.isEnabled(), is(false));
    assertThat(actual.getAccount(), is(account));
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
@Post
public String doPost(Representation entity) throws IOException {
    RestletServer.configureRestForm(getResponse());
    String[] body = entity.getText().split("&");
    String username = body[0].split("=")[1];
    String textpass = body[1].split("=")[1];

    String path = "resources/.stormpath/apiKey.properties";
    ApiKey apiKey = ApiKeys.builder().setFileLocation(path).build();
    Client client = Clients.builder().setApiKey(apiKey).build();

    @SuppressWarnings("rawtypes")
    AuthenticationRequest request = new UsernamePasswordRequest(username, textpass);

    Tenant tenant = client.getCurrentTenant();
    ApplicationList applications = tenant.getApplications(
        Applications.where(Applications.name().eqIgnoreCase("SOABA Secure")));
    Application application = applications.iterator().next();

    AuthenticationResult result = application.authenticateAccount(request);
    Account account = result.getAccount();
    
    Session newSession = new Session();
    newSession.setUserAccount(account);
    newSession.setToken(UUID.randomUUID().toString());
    config.getSessions().put(newSession.getToken().toString(), newSession);
    
    return toJSON(newSession);
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
public void setUserAccount(Account userAccount) {
    this.userAccount = userAccount;
    this.username = userAccount.getUsername();
    this.setGivenName(userAccount.getGivenName());
    this.setMiddleName(userAccount.getMiddleName());
    this.setSurname(userAccount.getSurname());
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
public final List<String> getAppAccounts(final Application application) {
	ArrayList<String> acList = new ArrayList<String>();

	AccountList acs = application.getAccounts();
	for (Account ac : acs) {
		acList.add(ac.getUsername());
		LOG.info("Account = " + ac);
	}
	return acList;
}
 

import com.stormpath.sdk.account.Account; //导入依赖的package包/类
public final Account getTestUser() {

		if (testUser == null) {
			testUser = authAccount(testUname, testUname);
			if (testUser == null) {
				LOG.info("getTestUser testUser not found so creating");
				testUser = createAccount(testUname, testUname);

			}
		}
		LOG.info("getTestUser testUser = " + testUser.toString());
		return testUser;
	}