add https support for platform available at localhost:8443 by default when running from command line.

This commit is contained in:
Keith Woodlock
2012-05-21 17:36:51 +01:00
parent 69722c9409
commit 4a8d5a86f6
14 changed files with 138 additions and 212 deletions
@@ -8,7 +8,7 @@ import org.springframework.stereotype.Service;
@Service
public class InMemoryApplicationConfigurationService implements ApplicationConfigurationService {
private String platformApiUrl = "http://localhost:8080/mifosng-provider/api/v1/";
private String platformApiUrl = "https://localhost:8443/mifosng-provider/api/v1/";
public InMemoryApplicationConfigurationService() {
//
@@ -20,7 +20,6 @@ import org.springframework.security.core.context.SecurityContext;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.web.client.HttpClientErrorException;
import org.springframework.web.client.RestTemplate;
/**
* A {@link AbstractUserDetailsAuthenticationProvider} which is responsible for delegating authentication to the mifos platform API.
@@ -30,11 +29,11 @@ import org.springframework.web.client.RestTemplate;
*/
public class ApiDelegatingAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider {
private final RestTemplate restTemplate;
private final SslRestTemplate restTemplate;
private final ApplicationConfigurationService applicationConfigurationService;
@Autowired
public ApiDelegatingAuthenticationProvider(final RestTemplate restTemplate, final ApplicationConfigurationService applicationConfigurationService) {
public ApiDelegatingAuthenticationProvider(final SslRestTemplate restTemplate, final ApplicationConfigurationService applicationConfigurationService) {
this.restTemplate = restTemplate;
this.applicationConfigurationService = applicationConfigurationService;
}
@@ -0,0 +1,71 @@
package org.mifosng.ui.infrastructure;
import java.io.IOException;
import java.net.HttpURLConnection;
import java.security.SecureRandom;
import java.security.cert.CertificateException;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import org.springframework.http.client.SimpleClientHttpRequestFactory;
import org.springframework.stereotype.Component;
/**
*
*/
@Component
public class CustomClientHttpRequestFactory extends SimpleClientHttpRequestFactory {
@Override
protected void prepareConnection(HttpURLConnection connection,
String httpMethod) throws IOException {
if (connection instanceof HttpsURLConnection) {
disableCertificateValidation();
HttpsURLConnection httpsConnection = (HttpsURLConnection) connection;
httpsConnection.setHostnameVerifier(new NullHostnameVerifier());
}
super.prepareConnection(connection, httpMethod);
}
private class NullHostnameVerifier implements HostnameVerifier {
@Override
public boolean verify(String hostname, SSLSession session) {
return true;
}
}
public static void disableCertificateValidation() {
X509TrustManager trustManager = new X509TrustManager() {
@Override
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return null;
}
@Override
public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType) throws CertificateException {
}
@Override
public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType) throws CertificateException {
}
};
TrustManager[] trustAllCerts = new TrustManager[1];
trustAllCerts[0] = trustManager;
try {
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, trustAllCerts, new SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
} catch (Exception e) {
}
}
}
@@ -0,0 +1,17 @@
package org.mifosng.ui.infrastructure;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.web.client.RestTemplate;
/**
*
*/
@Component
public class SslRestTemplate extends RestTemplate {
@Autowired
public SslRestTemplate(final CustomClientHttpRequestFactory simpleClientHttpRequestFactory) {
super(simpleClientHttpRequestFactory);
}
}