D-Net

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">

    <parent>

        <groupId>eu.dnetlib</groupId>

        <artifactId>dnet-parent</artifactId>

        <version>1.0.0-SNAPSHOT</version>

        <relativePath></relativePath>

    </parent>

    <modelVersion>4.0.0</modelVersion>

    <groupId>eu.dnetlib</groupId>

    <artifactId>uoa-oauth-server</artifactId>

    <version>1.0.0-SNAPSHOT</version>

    <packaging>war</packaging>

    <properties>

        <servlet.port>8081</servlet.port>

        <mujina-idp.version>3.1.0</mujina-idp.version>

        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>

        <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>

        <!-- all the versions in the oa-aas project -->

        <dropwizard.version>0.4.2</dropwizard.version>

        <flyway.version>2.1.1</flyway.version>

        <hsqldb.version>2.2.8</hsqldb.version>

        <junit.version>4.10</junit.version>

        <tomcat-jdbc.version>7.0.29</tomcat-jdbc.version>

        <spring.version>3.2.7.RELEASE</spring.version>

        <spring-security.version>3.2.7.RELEASE</spring-security.version>

        <spring-data-commons-core.version>1.3.0</spring-data-commons-core.version>

        <openjpa.version>2.2.0</openjpa.version>

        <commons-lang.version>2.6</commons-lang.version>

        <commons-io.version>2.0.1</commons-io.version>

        <jersey.version>1.12</jersey.version>

        <commons-codec.version>1.4</commons-codec.version>

        <coin-test.version>2.8.1</coin-test.version>

        <servlet-api.version>3.0.1</servlet-api.version>

        <slf4j.version>1.7.2</slf4j.version>

        <commons-validator.version>1.4.0</commons-validator.version>

        <hibernate-validator.version>4.3.0.Final</hibernate-validator.version>

        <spring-security-opensaml.version>4.0.0</spring-security-opensaml.version>

        <spring-data-jpa.version>1.1.0.RELEASE</spring-data-jpa.version>

        <javax-inject.version>1</javax-inject.version>

        <mockito.version>1.9.0</mockito.version>

        <jackson.version>1.9.2</jackson.version>

        <logback.version>1.0.6</logback.version>

        <jetty-maven-plugin.version>8.1.4.v20120524</jetty-maven-plugin.version>

        <selenium.version>2.32.0</selenium.version>

        <cglib.version>2.2.2</cglib.version>

        <jstl.version>1.2</jstl.version>

        <jsp.version>2.1</jsp.version>

        <mysql.version>5.1.20</mysql.version>

        <coin-api.version>3.11.0</coin-api.version>

        <project.version>1.3.6-SNAPSHOT</project.version>

    </properties>

    <repositories>

        <repository>

            <snapshots>

                <enabled>false</enabled>

            </snapshots>

            <releases>

                <enabled>true</enabled>

                <updatePolicy>never</updatePolicy>

            </releases>

            <id>openconext-releases</id>

            <name>OpenConext public releases repository</name>

            <url>https://build.surfconext.nl/repository/public/releases</url>

        </repository>

        <repository>

            <snapshots>

                <enabled>true</enabled>

            </snapshots>

            <releases>

                <enabled>false</enabled>

                <updatePolicy>never</updatePolicy>

            </releases>

            <id>openconext-snapshots</id>

            <name>OpenConext public snapshots repository</name>

            <url>https://build.surfconext.nl/repository/public/snapshots</url>

        </repository>

    </repositories>

    <pluginRepositories>

        <pluginRepository>

            <snapshots>

                <enabled>false</enabled>

            </snapshots>

            <releases>

                <enabled>true</enabled>

                <updatePolicy>never</updatePolicy>

            </releases>

            <id>openconext-releases</id>

            <name>OpenConext public releases repository</name>

            <url>https://build.surfconext.nl/repository/public/releases</url>

        </pluginRepository>

    </pluginRepositories>

    <dependencies>

        <dependency>

            <groupId>com.unboundid</groupId>

            <artifactId>unboundid-ldapsdk</artifactId>

            <version>2.3.6</version>

        </dependency>

        <dependency>

            <groupId>nl.surfnet.apis</groupId>

            <artifactId>apis-authorization-server</artifactId>

            <version>1.3.6-SNAPSHOT</version>

        </dependency>

        <dependency>

            <groupId>com.sun.jersey</groupId>

            <artifactId>jersey-servlet</artifactId>

            <version>${jersey.version}</version>

        </dependency>

        <dependency>

            <groupId>org.apache.tomcat</groupId>

            <artifactId>tomcat-jdbc</artifactId>

            <version>7.0.29</version>

        </dependency>

        <dependency>

            <groupId>javax.servlet</groupId>

            <artifactId>javax.servlet-api</artifactId>

            <version>3.1.0</version>

        </dependency>

        <dependency>

            <groupId>javax.servlet.jsp.jstl</groupId>

            <artifactId>jstl-api</artifactId>

            <version>1.2</version>

        </dependency>

        <dependency>

            <groupId>javax.servlet</groupId>

            <artifactId>jsp-api</artifactId>

            <version>2.0</version>

        </dependency>

        <dependency>

            <groupId>mysql</groupId>

            <artifactId>mysql-connector-java</artifactId>

            <version>5.1.20</version>

        </dependency>

        <dependency>

            <groupId>postgresql</groupId>

            <artifactId>postgresql</artifactId>

            <version>9.1-901.jdbc4</version>

        </dependency>

        <dependency>

            <groupId>com.sun.jersey.contribs</groupId>

            <artifactId>jersey-spring</artifactId>

            <version>1.12</version>

            <exclusions>

                <exclusion>

                    <groupId>org.springframework</groupId>

                    <artifactId>spring</artifactId>

                </exclusion>

                <exclusion>

                    <groupId>org.springframework</groupId>

                    <artifactId>spring-core</artifactId>

                </exclusion>

                <exclusion>

                    <groupId>org.springframework</groupId>

                    <artifactId>spring-web</artifactId>

                </exclusion>

                <exclusion>

                    <groupId>org.springframework</groupId>

                    <artifactId>spring-beans</artifactId>

                </exclusion>

                <exclusion>

                    <groupId>org.springframework</groupId>

                    <artifactId>spring-context</artifactId>

                </exclusion>

                <exclusion>

                    <groupId>org.springframework</groupId>

                    <artifactId>spring-aop</artifactId>

                </exclusion>

            </exclusions>

        </dependency>

        <dependency>

            <groupId>com.sun.jersey</groupId>

            <artifactId>jersey-client</artifactId>

            <version>1.12</version>

        </dependency>

        <!-- SPRING DEPENDENCIES -->

        <dependency>

            <groupId>org.surfnet.coin</groupId>

            <artifactId>spring-security-opensaml</artifactId>

            <version>${spring-security-opensaml.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework.data</groupId>

            <artifactId>spring-data-jpa</artifactId>

            <version>${spring-data-jpa.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-beans</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-web</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-webmvc</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-jdbc</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-context</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-core</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-tx</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-orm</artifactId>

            <version>${spring.version}</version>

        </dependency>

        <dependency>

            <groupId>org.springframework</groupId>

            <artifactId>spring-test</artifactId>

            <version>${spring.version}</version>

            <scope>test</scope>

        </dependency>

        <dependency>

            <groupId>org.springframework.data</groupId>

            <artifactId>spring-data-commons-core</artifactId>

            <version>1.3.0.RELEASE</version>

        </dependency>

        <!-- LDAP -->

        <dependency>

            <groupId>xml-apis</groupId>

            <artifactId>xml-apis</artifactId>

            <version>1.4.01</version>

        </dependency>

        <!-- SPRING CONFIG -->

        <dependency>

            <groupId>cglib</groupId>

            <artifactId>cglib</artifactId>

            <version>${cglib.version}</version>

        </dependency>

        <dependency>

            <groupId>javax.inject</groupId>

            <artifactId>javax.inject</artifactId>

            <version>${javax-inject.version}</version>

        </dependency>

        <dependency>

            <groupId>org.hibernate</groupId>

            <artifactId>hibernate-validator</artifactId>

            <version>${hibernate-validator.version}</version>

        </dependency>

        <dependency>

            <groupId>com.yammer.dropwizard</groupId>

            <artifactId>dropwizard-auth</artifactId>

            <version>${dropwizard.version}</version>

        </dependency>

        <dependency>

            <groupId>com.yammer.dropwizard</groupId>

            <artifactId>dropwizard-views</artifactId>

            <version>${dropwizard.version}</version>

        </dependency>

        <dependency>

            <groupId>com.yammer.dropwizard</groupId>

            <artifactId>dropwizard-client</artifactId>

            <version>${dropwizard.version}</version>

        </dependency>

        <!-- JUNIT -->

        <dependency>

            <groupId>junit</groupId>

            <artifactId>junit</artifactId>

            <version>${junit.version}</version>

            <scope>test</scope>

        </dependency>

        <!-- Begin Selenium -->

        <dependency>

            <groupId>org.seleniumhq.selenium</groupId>

            <artifactId>selenium-firefox-driver</artifactId>

            <version>2.32.0</version>

            <scope>test</scope>

        </dependency>

        <dependency>

            <groupId>org.seleniumhq.selenium</groupId>

            <artifactId>selenium-support</artifactId>

            <version>2.32.0</version>

            <scope>test</scope>

        </dependency>

        <dependency>

            <groupId>org.seleniumhq.selenium</groupId>

            <artifactId>selenium-htmlunit-driver</artifactId>

            <version>2.32.0</version>

            <scope>test</scope>

        </dependency>

        <!-- End Selenium -->

        <dependency>

            <groupId>org.apache.httpcomponents</groupId>

            <artifactId>httpclient</artifactId>

            <version>4.2</version>

            <classifier>tests</classifier>

            <scope>test</scope>

        </dependency>

        <dependency>

            <groupId>nl.surfnet.apis</groupId>

            <artifactId>apis-resource-server-library</artifactId>

            <version>1.3.6-SNAPSHOT</version>

        </dependency>

        <!-- LOGGING -->

        <!-- <dependency> -->

        <!-- <groupId>ch.qos.logback</groupId> -->

        <!-- <artifactId>logback-classic</artifactId> -->

        <!-- <version>1.3.6-SNAPSHOT</version> -->

        <!-- </dependency> -->

        <dependency>

            <groupId>org.slf4j</groupId>

            <artifactId>log4j-over-slf4j</artifactId>

            <version>${slf4j.version}</version>

        </dependency>

        <dependency>

            <groupId>org.slf4j</groupId>

            <artifactId>jcl-over-slf4j</artifactId>

            <version>${slf4j.version}</version>

        </dependency>

        <dependency>

            <groupId>org.slf4j</groupId>

            <artifactId>jul-to-slf4j</artifactId>

            <version>${slf4j.version}</version>

        </dependency>

        <!-- <dependency> -->

        <!-- <groupId>commons-logging</groupId> -->

        <!-- <artifactId>commons-logging</artifactId> -->

        <!-- <version> ${slf4j.version}</version> -->

        <!-- </dependency> -->

        <!-- <dependency> -->

        <!-- <groupId>log4j</groupId> -->

        <!-- <artifactId>log4j</artifactId> -->

        <!-- <version> ${slf4j.version}</version> -->

        <!-- </dependency> -->

    </dependencies>

    <profiles>

        <!-- Profile for integration tests. Enable with -Pintegration This profile

            enables the maven failsafe plugin with its standard configuration. This means

            that test classes **TestIT.java will be run and **Test.java will be skipped.

            Prior to run ning the tests, a Jetty container is started by the jetty-maven-plugin. -->

        <profile>

            <id>integration</id>

            <activation>

                <activeByDefault>false</activeByDefault>

                <property>

                    <name>integration</name>

                </property>

            </activation>

            <build>

                <plugins>

                    <plugin>

                        <artifactId>maven-failsafe-plugin</artifactId>

                        <version>2.12</version>

                        <executions>

                            <execution>

                                <goals>

                                    <goal>integration-test</goal>

                                    <goal>verify</goal>

                                </goals>

                            </execution>

                        </executions>

                    </plugin>

                    <plugin>

                        <groupId>org.mortbay.jetty</groupId>

                        <artifactId>jetty-maven-plugin</artifactId>

                        <version>8.1.4.v20120524</version>

                        <!-- 8.1.4.v20120524 -->

                        <configuration>

                            <scanIntervalSeconds>0</scanIntervalSeconds>

                            <webAppConfig>

                                <contextPath>/</contextPath>

                                <extraClasspath>${basedir}/src/test/resources/</extraClasspath>

                            </webAppConfig>

                            <connectors>

                                <connector implementation="org.eclipse.jetty.server.nio.SelectChannelConnector">

                                    <port>${servlet.port}</port>

                                    <maxIdleTime>60000</maxIdleTime>

                                </connector>

                            </connectors>

                            <daemon>true</daemon>

                            <scanIntervalSeconds>0</scanIntervalSeconds>

                            <stopKey>foo</stopKey>

                            <stopPort>9966</stopPort>

                            <contextXml>${basedir}/src/test/resources/jetty-context.xml</contextXml>

                        </configuration>

                        <executions>

                            <execution>

                                <id>start-jetty</id>

                                <phase>pre-integration-test</phase>

                                <goals>

                                    <goal>run</goal>

                                </goals>

                            </execution>

                            <execution>

                                <id>stop-jetty</id>

                                <phase>post-integration-test</phase>

                                <goals>

                                    <goal>stop</goal>

                                </goals>

                            </execution>

                        </executions>

                    </plugin>

                </plugins>

            </build>

        </profile>

        <!-- extra profile to use a headless selenium driver instead of default

            (firefox). -->

        <profile>

            <id>selenium-headless</id>

            <activation>

                <activeByDefault>false</activeByDefault>

            </activation>

            <properties>

                <selenium.webdriver>htmlunit</selenium.webdriver>

            </properties>

        </profile>

    </profiles>

    <build>

        <!--<finalName>oauth</finalName>-->

        <plugins>

            <!-- Specific jetty-maven-plugin configuration for running Jetty during

                development. None of its goals are run in a normal build lifecycle. -->

            <plugin>

                <groupId>org.mortbay.jetty</groupId>

                <artifactId>jetty-maven-plugin</artifactId>

                <version>8.1.4.v20120524</version>

                <dependencies>

                    <dependency>

                        <groupId>org.surfnet.coin</groupId>

                        <artifactId>mujina-idp</artifactId>

                        <type>war</type>

                        <version>3.1.0</version>

                    </dependency>

                    <dependency>

                        <groupId>nl.surfnet.apis</groupId>

                        <artifactId>apis-openconext-mock-war</artifactId>

                        <type>war</type>

                        <version>1.3.6-SNAPSHOT</version>

                    </dependency>

                </dependencies>

                <configuration>

                    <contextHandlers>

                        <contextHandler implementation="org.eclipse.jetty.webapp.WebAppContext">

                            <contextPath>/mujina-idp</contextPath>

                            <war>

                                ${settings.localRepository}/org/surfnet/coin/mujina-idp/3.1.0/mujina-idp-3.1.0.war

                            </war>

                            <extraClasspath>${basedir}/src/test/resources/</extraClasspath>

                        </contextHandler>

                        <contextHandler implementation="org.eclipse.jetty.webapp.WebAppContext">

                            <contextPath>/openconext-mock</contextPath>

                            <war>

                                ${settings.localRepository}/nl/surfnet/apis/apis-openconext-mock-war/1.3.6-SNAPSHOT/apis-openconext-mock-war-1.3.6-SNAPSHOT.war

                            </war>

                            <extraClasspath>${basedir}/src/test/resources/</extraClasspath>

                        </contextHandler>

                    </contextHandlers>

                    <webAppConfig>

                        <contextPath>/</contextPath>

                        <extraClasspath>${basedir}/src/test/resources/</extraClasspath>

                    </webAppConfig>

                    <connectors>

                        <connector implementation="org.eclipse.jetty.server.nio.SelectChannelConnector">

                            <port>${servlet.port}</port>

                            <host>0.0.0.0</host>

                        </connector>

                    </connectors>

                    <reload>manual</reload>

                    <stopKey>stopauthserver</stopKey>

                    <stopPort>9280</stopPort>

                    <useTestClasspath>true</useTestClasspath>

                    <contextXml>${basedir}/src/test/resources/jetty-context.xml</contextXml>

                </configuration>

            </plugin>

        </plugins>

    </build>

</project>

<?xml version="1.0" encoding="UTF-8"?>

<module org.jetbrains.idea.maven.project.MavenProjectsManager.isMavenModule="true" type="JAVA_MODULE" version="4">

  <component name="FacetManager">

    <facet type="web" name="Web">

      <configuration>

        <descriptors>

          <deploymentDescriptor name="web.xml" url="file://$MODULE_DIR$/src/main/webapp/WEB-INF/web.xml" />

        </descriptors>

        <webroots>

          <root url="file://$MODULE_DIR$/src/main/webapp" relative="/" />

        </webroots>

        <sourceRoots>

          <root url="file://$MODULE_DIR$/src/main/java" />

          <root url="file://$MODULE_DIR$/src/main/resources" />

        </sourceRoots>

      </configuration>

    </facet>

    <facet type="Spring" name="Spring">

      <configuration />

    </facet>

  </component>

  <component name="NewModuleRootManager" LANGUAGE_LEVEL="JDK_1_6" inherit-compiler-output="false">

    <output url="file://$MODULE_DIR$/target/classes" />

    <output-test url="file://$MODULE_DIR$/target/test-classes" />

    <content url="file://$MODULE_DIR$">

      <sourceFolder url="file://$MODULE_DIR$/src/main/java" isTestSource="false" />

      <sourceFolder url="file://$MODULE_DIR$/src/test/java" isTestSource="true" />

      <sourceFolder url="file://$MODULE_DIR$/src/main/resources" type="java-resource" />

      <sourceFolder url="file://$MODULE_DIR$/src/test/resources" type="java-test-resource" />

      <excludeFolder url="file://$MODULE_DIR$/target" />

    </content>

    <orderEntry type="inheritedJdk" />

    <orderEntry type="sourceFolder" forTests="false" />

    <orderEntry type="library" name="Spring Integration-4.0.3" level="project" />

    <orderEntry type="library" name="Maven: com.unboundid:unboundid-ldapsdk:2.3.6" level="project" />

    <orderEntry type="library" name="Maven: nl.surfnet.apis:apis-authorization-server:1.3.6-SNAPSHOT" level="project" />

    <orderEntry type="library" name="Maven: nl.surfnet.apis:apis-resource-server-library:1.3.6-SNAPSHOT" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey:jersey-json:1.12" level="project" />

    <orderEntry type="library" name="Maven: org.codehaus.jettison:jettison:1.1" level="project" />

    <orderEntry type="library" name="Maven: stax:stax-api:1.0.1" level="project" />

    <orderEntry type="library" name="Maven: com.sun.xml.bind:jaxb-impl:2.2.3-1" level="project" />

    <orderEntry type="library" name="Maven: javax.xml.bind:jaxb-api:2.2.2" level="project" />

    <orderEntry type="library" name="Maven: javax.xml.stream:stax-api:1.0-2" level="project" />

    <orderEntry type="library" name="Maven: javax.activation:activation:1.1" level="project" />

    <orderEntry type="library" name="Maven: org.codehaus.jackson:jackson-core-asl:1.9.2" level="project" />

    <orderEntry type="library" name="Maven: org.codehaus.jackson:jackson-mapper-asl:1.9.2" level="project" />

    <orderEntry type="library" name="Maven: org.codehaus.jackson:jackson-jaxrs:1.9.2" level="project" />

    <orderEntry type="library" name="Maven: org.codehaus.jackson:jackson-xc:1.9.2" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey:jersey-core:1.12" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey:jersey-client:1.12" level="project" />

    <orderEntry type="library" name="Maven: org.codehaus.jackson:jackson-mrbean:1.9.2" level="project" />

    <orderEntry type="library" name="Maven: commons-lang:commons-lang:2.6" level="project" />

    <orderEntry type="library" name="Maven: commons-codec:commons-codec:1.4" level="project" />

    <orderEntry type="library" name="Maven: commons-validator:commons-validator:1.4.0" level="project" />

    <orderEntry type="library" name="Maven: commons-beanutils:commons-beanutils:1.8.3" level="project" />

    <orderEntry type="library" name="Maven: commons-digester:commons-digester:1.8" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-context:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-aop:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: aopalliance:aopalliance:1.0" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-beans:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-core:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: commons-logging:commons-logging:1.1.1" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-expression:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: javax.inject:javax.inject:1" level="project" />

    <orderEntry type="library" name="Maven: org.slf4j:jul-to-slf4j:1.7.2" level="project" />

    <orderEntry type="library" name="Maven: org.slf4j:slf4j-api:1.6.1" level="project" />

    <orderEntry type="library" name="Maven: cglib:cglib:2.2.2" level="project" />

    <orderEntry type="library" name="Maven: asm:asm:3.3.1" level="project" />

    <orderEntry type="library" name="Maven: org.apache.openjpa:openjpa:2.2.0" level="project" />

    <orderEntry type="library" name="Maven: commons-collections:commons-collections:3.2.1" level="project" />

    <orderEntry type="library" name="Maven: net.sourceforge.serp:serp:1.13.1" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: junit:junit:4.10" level="project" />

    <orderEntry type="library" name="Maven: org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1" level="project" />

    <orderEntry type="library" name="Maven: org.apache.geronimo.specs:geronimo-jta_1.1_spec:1.1.1" level="project" />

    <orderEntry type="library" name="Maven: commons-pool:commons-pool:1.5.4" level="project" />

    <orderEntry type="library" name="Maven: org.apache.geronimo.specs:geronimo-jpa_2.0_spec:1.1" level="project" />

    <orderEntry type="library" name="Maven: org.hibernate:hibernate-validator:4.3.0.Final" level="project" />

    <orderEntry type="library" name="Maven: javax.validation:validation-api:1.0.0.GA" level="project" />

    <orderEntry type="library" name="Maven: org.jboss.logging:jboss-logging:3.1.0.CR2" level="project" />

    <orderEntry type="library" name="Maven: org.springframework.data:spring-data-jpa:1.1.0.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework.data:spring-data-commons-core:1.3.0.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: junit:junit-dep:4.8.2" level="project" />

    <orderEntry type="library" name="Maven: org.hamcrest:hamcrest-core:1.1" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-orm:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-jdbc:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-tx:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.slf4j:jcl-over-slf4j:1.7.2" level="project" />

    <orderEntry type="library" name="Maven: org.aspectj:aspectjrt:1.6.12" level="project" />

    <orderEntry type="library" name="Maven: org.hsqldb:hsqldb:2.2.8" level="project" />

    <orderEntry type="library" name="Maven: joda-time:joda-time:2.1" level="project" />

    <orderEntry type="library" name="Maven: com.googlecode.flyway:flyway-core:2.1.1" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey:jersey-servlet:1.12" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey:jersey-server:1.12" level="project" />

    <orderEntry type="library" name="Maven: org.apache.tomcat:tomcat-jdbc:7.0.29" level="project" />

    <orderEntry type="library" name="Maven: org.apache.tomcat:tomcat-juli:7.0.29" level="project" />

    <orderEntry type="library" name="Maven: javax.servlet:javax.servlet-api:3.1.0" level="project" />

    <orderEntry type="library" name="Maven: javax.servlet.jsp.jstl:jstl-api:1.2" level="project" />

    <orderEntry type="library" name="Maven: javax.servlet:servlet-api:2.5" level="project" />

    <orderEntry type="library" name="Maven: javax.servlet.jsp:jsp-api:2.1" level="project" />

    <orderEntry type="library" name="Maven: javax.servlet:jsp-api:2.0" level="project" />

    <orderEntry type="library" name="Maven: mysql:mysql-connector-java:5.1.20" level="project" />

    <orderEntry type="library" name="Maven: postgresql:postgresql:9.1-901.jdbc4" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey.contribs:jersey-spring:1.12" level="project" />

    <orderEntry type="library" name="Maven: org.surfnet.coin:spring-security-opensaml:4.0.0" level="project" />

    <orderEntry type="library" name="Maven: org.opensaml:opensaml:2.6.1" level="project" />

    <orderEntry type="library" name="Maven: org.opensaml:openws:1.5.1" level="project" />

    <orderEntry type="library" name="Maven: org.opensaml:xmltooling:1.4.1" level="project" />

    <orderEntry type="library" name="Maven: org.bouncycastle:bcprov-jdk15:1.46" level="project" />

    <orderEntry type="library" name="Maven: ca.juliusdavies:not-yet-commons-ssl:0.3.9" level="project" />

    <orderEntry type="library" name="Maven: commons-httpclient:commons-httpclient:3.1" level="project" />

    <orderEntry type="library" name="Maven: org.apache.santuario:xmlsec:1.5.6" level="project" />

    <orderEntry type="library" scope="RUNTIME" name="Maven: xerces:xercesImpl:2.10.0" level="project" />

    <orderEntry type="library" scope="RUNTIME" name="Maven: xalan:serializer:2.7.1" level="project" />

    <orderEntry type="library" scope="RUNTIME" name="Maven: xml-resolver:xml-resolver:1.2" level="project" />

    <orderEntry type="library" scope="RUNTIME" name="Maven: xalan:xalan:2.7.1" level="project" />

    <orderEntry type="library" name="Maven: org.apache.velocity:velocity:1.7" level="project" />

    <orderEntry type="library" name="Maven: org.owasp.esapi:esapi:2.0.1" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-web:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-context-support:3.1.3.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework.security:spring-security-core:3.1.3.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework.security:spring-security-web:3.1.3.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: commons-io:commons-io:2.0.1" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.springframework:spring-test:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: org.springframework:spring-webmvc:3.2.7.RELEASE" level="project" />

    <orderEntry type="library" name="Maven: xml-apis:xml-apis:1.4.01" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.dropwizard:dropwizard-auth:0.4.2" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.dropwizard:dropwizard-core:0.4.2" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.metrics:metrics-core:2.1.2" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.metrics:metrics-servlet:2.1.2" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.metrics:metrics-jetty:2.1.2" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty:jetty-server:8.1.4.v20120524" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty.orbit:javax.servlet:3.0.0.v201112011016" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty:jetty-continuation:8.1.4.v20120524" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty:jetty-http:8.1.4.v20120524" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty:jetty-io:8.1.4.v20120524" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty:jetty-util:8.1.9.v20130131" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.metrics:metrics-logback:2.1.2" level="project" />

    <orderEntry type="library" name="Maven: ch.qos.logback:logback-core:1.0.6" level="project" />

    <orderEntry type="library" name="Maven: ch.qos.logback:logback-classic:1.0.6" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.metrics:metrics-jersey:2.1.2" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.metrics:metrics-annotation:2.1.2" level="project" />

    <orderEntry type="library" name="Maven: com.fasterxml.jackson:jackson-datatype-guava:1.9.1" level="project" />

    <orderEntry type="library" name="Maven: com.google.guava:guava:12.0" level="project" />

    <orderEntry type="library" name="Maven: com.google.code.findbugs:jsr305:1.3.9" level="project" />

    <orderEntry type="library" name="Maven: commons-cli:commons-cli:1.2" level="project" />

    <orderEntry type="library" name="Maven: org.slf4j:log4j-over-slf4j:1.7.2" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty:jetty-servlet:8.1.4.v20120524" level="project" />

    <orderEntry type="library" name="Maven: org.eclipse.jetty:jetty-security:8.1.4.v20120524" level="project" />

    <orderEntry type="library" name="Maven: org.yaml:snakeyaml:1.10" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.dropwizard:dropwizard-views:0.4.2" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey.contribs:jersey-freemarker:1.12" level="project" />

    <orderEntry type="library" name="Maven: org.freemarker:freemarker:2.3.19" level="project" />

    <orderEntry type="library" name="Maven: org.mockito:mockito-all:1.9.0" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.dropwizard:dropwizard-client:0.4.2" level="project" />

    <orderEntry type="library" name="Maven: com.sun.jersey.contribs:jersey-apache-client4:1.12" level="project" />

    <orderEntry type="library" name="Maven: org.apache.httpcomponents:httpclient:4.2" level="project" />

    <orderEntry type="library" name="Maven: org.apache.httpcomponents:httpcore:4.2" level="project" />

    <orderEntry type="library" name="Maven: com.yammer.metrics:metrics-httpclient:2.1.2" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.seleniumhq.selenium:selenium-firefox-driver:2.32.0" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.seleniumhq.selenium:selenium-remote-driver:2.32.0" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: cglib:cglib-nodep:2.1_3" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.json:json:20080701" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.seleniumhq.selenium:selenium-api:2.32.0" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.apache.commons:commons-exec:1.1" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: net.java.dev.jna:jna:3.4.0" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: net.java.dev.jna:platform:3.4.0" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.seleniumhq.selenium:selenium-support:2.32.0" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.seleniumhq.selenium:selenium-htmlunit-driver:2.32.0" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: net.sourceforge.htmlunit:htmlunit:2.12" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.apache.commons:commons-lang3:3.1" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.apache.httpcomponents:httpmime:4.2.3" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: net.sourceforge.htmlunit:htmlunit-core-js:2.12" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: net.sourceforge.nekohtml:nekohtml:1.9.18" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: net.sourceforge.cssparser:cssparser:0.9.9" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.w3c.css:sac:1.3" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.eclipse.jetty:jetty-websocket:8.1.9.v20130131" level="project" />

    <orderEntry type="library" scope="TEST" name="Maven: org.apache.httpcomponents:httpclient:tests:4.2" level="project" />

    <orderEntry type="library" name="Maven: log4j:log4j:1.2.17" level="project" />

  </component>

</module>

package eu.dnetlib.oauth.repositories;

import org.surfnet.oaaas.repository.ClientRepository;

import javax.inject.Inject;

import javax.sql.DataSource;

/**

 * Created by envy17 j110ea on 18/1/2015.

 */

public abstract class ClientRepo implements ClientRepository {

    private DataSource dataSource;

    /*

       @Override

       public Client findByClientId(String clientId) {

           java.sql.Connection con= null;

           try {

               con = dataSource.getConnection();

          PreparedStatement stmt=  con.prepareStatement("Select * from client where id=?");

               stmt.setString(1,clientId);

           ResultSet res=stmt.executeQuery();

               Client client= new Client();

               }

           } catch (SQLException e) {

               e.printStackTrace();

           }

       }

   */

    public DataSource getDataSource() {

        return dataSource;

    }

    @Inject

    public void setDataSource(DataSource dataSource) {

        this.dataSource = dataSource;

    }

}

package eu.dnetlib.oauth.store;

import com.unboundid.ldap.sdk.*;

import com.unboundid.ldap.sdk.schema.ObjectClassDefinition;

import com.unboundid.ldap.sdk.schema.Schema;

import com.unboundid.util.ssl.SSLUtil;

import com.unboundid.util.ssl.TrustAllTrustManager;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.surfnet.oaaas.auth.principal.AuthenticatedPrincipal;

import java.util.*;

import java.util.Map.Entry;

public class LDAPStore implements CredentialsStore {

    private String username;

    private String password;

    private String ldapURL;

    private int port;

    private String SSL;

    private final Logger log = LoggerFactory.getLogger(this.getClass());

    private BindResult admin_bind = null;

    private int initialConnections = 2;

    private int maxConnections = 20;

    @Override

    public AuthenticatedPrincipal authenticate(String username, String password) throws Exception {

        //

        HashMap<String, String> Search_Fields = new HashMap<String, String>();

        //

        Search_Fields.put("cn", username);

        Search_Fields.put("userPassword", password);

        //

        // ->insert full attrs here, create User class

        ArrayList<String> Attrs = new ArrayList<String>();

        Attrs.add("cn");

        Attrs.add("userPassword");

        Attrs.add("JoomlaGroup");

        Attrs.add("DisplayName");

        log.info(" Lookin up User" + username);

        SearchResult search_user = this.search_user(Attrs, Search_Fields);

        if (search_user.getSearchEntries().isEmpty()) {

            log.error("User" + username + " Does not Exist in LDAP Credentials Store ");

            return null;

        }

        ArrayList<String> roles = new ArrayList<String>();

        roles.add(search_user.getSearchEntries().get(0).getAttributeValue(("JoomlaGroup")));

        AuthenticatedPrincipal authenticatedPrincipal = new AuthenticatedPrincipal();

        authenticatedPrincipal.setName(username);

        authenticatedPrincipal.setRoles(roles);

        authenticatedPrincipal.setAttributes((Map<String, String>) search_user.getSearchEntries().get(0).getAttributes());

        return authenticatedPrincipal;

    }

    public LDAPStore() {

        log.info(" Initiated LDAP Store");

    }

    private LDAPConnection connect() throws Exception {

        LDAPConnection connection;

        if (SSL.equalsIgnoreCase("true")) {

            SSLUtil sslUtil = new SSLUtil(new TrustAllTrustManager());

            connection = new LDAPConnection(sslUtil.createSSLSocketFactory());

        }

        if (port <= 0) {

            final StringBuilder builder = new StringBuilder(port);

            builder.append(" Illegal value for port.");

            throw new IllegalArgumentException(builder.toString());

        }

        connection = new LDAPConnection(ldapURL, port, username, password);

        log.info("Established Connection");

        this.admin_bind = connection.bind(new SimpleBindRequest(username, password));

        return connection;

    }

    private void close(LDAPConnection connection) {

        log.info("Connection Closed");

        connection.close();

        this.admin_bind = null;

    }

    /*

     * Searches for user in ldap Takes Attributes and values as args ie: name=

     * "test" userPassword="testpass" etc

     */

    private SearchResult search_user(List<String> attributes, HashMap<String, String> Search_Fields) throws Exception {

        LDAPConnection connection = null;

        try {

            connection = this.connect();

            log.info("Sucessfully established connection to : " + this.ldapURL + " at " + this.port);

        } catch (Exception e) {

            log.error("Fail to establish connection to : " + this.ldapURL + " at " + this.port + ". Reason: " + e.toString());

        }

        if (this.admin_bind.getResultCode().isConnectionUsable()) {

            get_ldap_schema();

            ArrayList<Filter> List_of_Filters = new ArrayList<Filter>();

            for (Entry<String, String> field : Search_Fields.entrySet()) {

                {

                    List_of_Filters.add(Filter.createEqualityFilter(field.getKey(), field.getValue()));

                }

            }

            Filter filters = Filter.createANDFilter(List_of_Filters);

            log.info("Search Filter: " + filters.toString());

            // TO DO: remove dc=... from here, pass it as parameter

            SearchRequest request = new SearchRequest("dc=openaire,dc=eu", SearchScope.SUB, filters, attributes.toArray(new String[attributes.size()]));

            SearchResult search = connection.search(request);

            for (SearchResultEntry i : search.getSearchEntries()) {

                log.info(i + "\n");

            }

            close(connection);

            return search;

        } else {

            log.error("LDAP Server is not Listening ");

            throw new Exception("LDAP Server is not Listening ");

        }

    }

    /*

     * For testing only- GET LDAP SCHEMA AND ATTRIBUTES SYNTAX

     */

    private void get_ldap_schema() throws Exception {

        LDAPConnection connection = connect();

        Schema schema = connection.getSchema();

        Set<ObjectClassDefinition> abstractObjectClasses = schema.getAbstractObjectClasses();

        //

        log.info(abstractObjectClasses.toString());

        //

        log.info(schema.getAttributeSyntaxes().toString());

        //

        log.info(schema.getAttributeTypes().toString());

        close(connection);

    }

    public String getUsername() {

        return username;

    }

    public void setUsername(String username) {

        this.username = username;

    }

    public String getPassword() {

        return password;

    }

    public void setPassword(String password) {

        this.password = password;

    }

    public String getLdapURL() {

        return ldapURL;

    }

    public void setLdapURL(String ldapURL) {

        this.ldapURL = ldapURL;

    }

    public int getPort() {

        return port;

    }

    public void setPort(int port) {

        this.port = port;

    }

    public String getSSL() {

        return SSL;

    }

    public void setSSL(String sSL) {

        SSL = sSL;

    }

    public BindResult getAdmin_bind() {

        return admin_bind;

    }

    public void setAdmin_bind(BindResult admin_bind) {

        this.admin_bind = admin_bind;

    }

    public int getInitialConnections() {

        return initialConnections;

    }

    public void setInitialConnections(int initialConnections) {

        this.initialConnections = initialConnections;

    }

    public int getMaxConnections() {

        return maxConnections;

    }

    public void setMaxConnections(int maxConnections) {

        this.maxConnections = maxConnections;

    }

}

package eu.dnetlib.oauth.store;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.surfnet.oaaas.auth.principal.AuthenticatedPrincipal;

import javax.inject.Inject;

import javax.sql.DataSource;

import java.sql.Connection;

import java.sql.PreparedStatement;

import java.sql.ResultSet;

import java.sql.SQLException;

import java.util.ArrayList;

public class DBStore implements CredentialsStore {

    private DataSource authenticationRepository;

    private final Logger log = LoggerFactory.getLogger(this.getClass());

    private Connection connection = null;

    public DBStore() {

    }

    ;

    @Override

    public AuthenticatedPrincipal authenticate(String username, String password) throws Exception {

        try {

            AuthenticatedPrincipal principal = null;

            connection = authenticationRepository.getConnection();

            PreparedStatement pstmt = connection.prepareStatement("select * from \"user\",\"user_has_roles\" where username = ? " + "" + " and password= ? " + "" + " and \"user_has_roles\".user_id = \"user\".user_id ;");

            pstmt.setString(1, username);

            pstmt.setString(2, password);

            ResultSet rs = pstmt.executeQuery();

            ArrayList<String> roles = new ArrayList<String>();

            if (rs == null) {

                log.error("User does not exist in SQL DBStore");

                pstmt.close();

                throw new Exception("User " + username + "does not exist in SQL DBStore");

            }

            while (rs.next()) {

                String role = (String) rs.getObject("role");

                log.info("Role for user " + username + " : " + role);

                roles.add(role);

            }

            principal = new AuthenticatedPrincipal(username, roles);

            log.info("Created Principal " + principal.toString());

            pstmt.close();

            return principal;

        } catch (SQLException e) {

            log.error("Cannnot initate connection to datasource : " + e.toString());

            throw new Exception("Cannnot initate connection to datasource : " + e);

        } finally {

            if (connection != null) {

                connection.close();

            }

        }

    }

    public DataSource getAuthenticationRepository() {

        return authenticationRepository;

    }

    @Inject

    public void setAuthenticationRepository(DataSource authenticationRepository) {

        this.authenticationRepository = authenticationRepository;

    }

}

package eu.dnetlib.oauth.store;

import org.surfnet.oaaas.auth.principal.AuthenticatedPrincipal;

/**

 * @author eri Generic Credentials store that authenticates a user against a DB,

 *         LDAP instance, or whatever implementation is used

 */

public interface CredentialsStore {

    public AuthenticatedPrincipal authenticate(String username, String password) throws Exception;

    // TODO here main methods for validating user againts the credential stores

}

package eu.dnetlib.oauth.authenticate;

import eu.dnetlib.oauth.store.CredentialsStore;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.surfnet.oaaas.auth.principal.AuthenticatedPrincipal;

/**

 * Created by envy17 j110ea on 13/2/2015.

 */

public class Authenticator {

    private CredentialsStore LDAPStore;

    private CredentialsStore DBStore;

    private final Logger log = LoggerFactory.getLogger(this.getClass());

    public AuthenticatedPrincipal doAuthenticate(String username, String password) throws Exception {

        log.info("Authenticating against multiple stores..");

        AuthenticatedPrincipal principal = null;

        principal = DBStore.authenticate(username, password);

        if (principal == null) {

            log.error("User not found in database ");

            principal = LDAPStore.authenticate(username, password);

        }

        if (principal == null) {

            log.error("User not found ");

            throw new Exception("User not found ");

        }

        return principal;

    }

    public CredentialsStore getLDAPStore() {

        return LDAPStore;

    }

    public void setLDAPStore(CredentialsStore LDAPStore) {

        this.LDAPStore = LDAPStore;

    }

    public CredentialsStore getDBStore() {

        return DBStore;

    }

    public void setDBStore(CredentialsStore DBStore) {

        this.DBStore = DBStore;

    }

}

/*

 * Licensed to the Apache Software Foundation (ASF) under one

 * or more contributor license agreements.  See the NOTICE file

 * distributed with this work for additional information

 * regarding copyright ownership.  The ASF licenses this file

 * to you under the Apache License, Version 2.0 (the

 * "License"); you may not use this file except in compliance

 * with the License.  You may obtain a copy of the License at

 *

 *   http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing,

 * software distributed under the License is distributed on an

 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

 * KIND, either express or implied.  See the License for the

 * specific language governing permissions and limitations

 * under the License.

 */

package eu.dnetlib.oauth.handlers;

import eu.dnetlib.oauth.authenticate.Authenticator;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.springframework.beans.factory.annotation.Autowired;

import org.surfnet.oaaas.auth.AbstractAuthenticator;

import org.surfnet.oaaas.auth.principal.AuthenticatedPrincipal;

import javax.inject.Inject;

import javax.inject.Named;

import javax.servlet.FilterChain;

import javax.servlet.ServletException;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

/**

 * {@link AbstractAuthenticator} that redirects to a form. Note that other

 * implementations can go wild because they have access to the

 * {@link HttpServletRequest} and {@link HttpServletResponse}.

 */

@Named("formAuthenticator")

public class FormLoginAuthenticator extends AbstractAuthenticator {

    private static final String SESSION_IDENTIFIER = "AUTHENTICATED_PRINCIPAL";

    @Autowired

    private Authenticator multiAuthenticator;

    private final Logger log = LoggerFactory.getLogger(this.getClass());

    @Override

    public boolean canCommence(HttpServletRequest request) {

        log.info("Form login Authenticator: Checking can commence...");

        return request.getMethod().equals("POST") && request.getParameter(AUTH_STATE) != null

                && request.getParameter("j_username") != null;

    }

    @Override

    public void authenticate(HttpServletRequest request, HttpServletResponse response, FilterChain chain,

                             String authStateValue, String returnUri) throws IOException, ServletException {

        HttpSession session = request.getSession(false);

        log.info("Attempting authentication");

        AuthenticatedPrincipal principal = (AuthenticatedPrincipal) (session != null ? session

                .getAttribute(SESSION_IDENTIFIER) : null);

        if (true)

        //(request.getMethod().equals("POST"))

        {

            log.info("HTTP REQUEST IS POST");

            processForm(request);

            chain.doFilter(request, response);

        } else if (principal != null) {

            log.info("HTTPS IS NOT POST AND PRINCIPAL IS NOT NULL");

            // we stil have the session

            setAuthStateValue(request, authStateValue);

            setPrincipal(request, principal);

            chain.doFilter(request, response);

        } else {

            log.info("HTTP REQUEST  IS NOT POST , principal is  NULL AND processing Initial FORM "

            );

            processInitial(request, response, returnUri, authStateValue);

        }

    }

    private void processInitial(HttpServletRequest request, ServletResponse response, String returnUri,

                                String authStateValue) throws IOException, ServletException {

        request.setAttribute(AUTH_STATE, authStateValue);

        request.setAttribute("actionUri", returnUri);

        log.info("SET AUTH STATE " + authStateValue + " AND ACTION  URI" + returnUri);

        //TODO Eri why is this hardcoded? How can we make this dynamic????

        request.getRequestDispatcher("/WEB-INF/jsp/login.jsp").forward(request, response);

    }

    /**

     * Hook for actually validating the username/ password against a database,

     * ldap, external webservice or whatever to perform authentication

     *

     * @param request the {@link HttpServletRequest}

     */

    protected void processForm(final HttpServletRequest request) {

        setAuthStateValue(request, request.getParameter(AUTH_STATE));

        //new AuthenticatedPrincipal(request.getParameter("j_username"));

        //TODO here authentication occurs

        try {

            log.debug("Attempting login with : " + request.getParameter("j_username") + request.getParameter("j_password"));

            AuthenticatedPrincipal principal = multiAuthenticator.doAuthenticate(request.getParameter("j_username"), request.getParameter("j_password"));

            request.getSession().setAttribute(SESSION_IDENTIFIER, principal);

            setPrincipal(request, principal);

        } catch (Exception ex) {

            log.error("Authentication Failed. Reason: " + ex.toString());

        }

    }

    public Authenticator getMultiAuthenticator() {

        return multiAuthenticator;

    }

    @Inject

    public void setMultiAuthenticator(Authenticator multiAuthenticator) {

        this.multiAuthenticator = multiAuthenticator;

    }

}

/*

 * Licensed to the Apache Software Foundation (ASF) under one

 * or more contributor license agreements.  See the NOTICE file

 * distributed with this work for additional information

 * regarding copyright ownership.  The ASF licenses this file

 * to you under the Apache License, Version 2.0 (the

 * "License"); you may not use this file except in compliance

 * with the License.  You may obtain a copy of the License at

 *

 *   http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing,

 * software distributed under the License is distributed on an

 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

 * KIND, either express or implied.  See the License for the

 * specific language governing permissions and limitations

 * under the License.

 */

package eu.dnetlib.oauth.handlers;

import org.apache.commons.collections.CollectionUtils;

import org.apache.commons.lang.StringUtils;

import org.springframework.http.HttpMethod;

import org.surfnet.oaaas.auth.AbstractAuthenticator;

import org.surfnet.oaaas.auth.AbstractUserConsentHandler;

import org.surfnet.oaaas.auth.principal.AuthenticatedPrincipal;

import org.surfnet.oaaas.model.AccessToken;

import org.surfnet.oaaas.model.AuthorizationRequest;

import org.surfnet.oaaas.model.Client;

import org.surfnet.oaaas.repository.AccessTokenRepository;

import org.surfnet.oaaas.repository.AuthorizationRequestRepository;

import javax.inject.Inject;

import javax.inject.Named;

import javax.servlet.FilterChain;

import javax.servlet.ServletException;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

import java.util.List;

/**

 * Example {@link AbstractUserConsentHandler} that forwards to a form.

 */

@Named("formConsentHandler")

public class FormUserConsentHandler extends AbstractUserConsentHandler {

    private static final String USER_OAUTH_APPROVAL = "user_oauth_approval";

    @Inject

    private AccessTokenRepository accessTokenRepository;

    @Inject

    private AuthorizationRequestRepository authorizationRequestRepository;

    @Override

    public void handleUserConsent(HttpServletRequest request, HttpServletResponse response, FilterChain chain,

                                  String authStateValue, String returnUri, Client client) throws IOException, ServletException {

        if (isUserConsentPost(request)) {

            if (processForm(request, response)) {

                chain.doFilter(request, response);

            }

        } else {

            processInitial(request, response, chain, returnUri, authStateValue, client);

        }

    }

    private boolean isUserConsentPost(HttpServletRequest request) {

        String oauthApproval = request.getParameter(USER_OAUTH_APPROVAL);

        return request.getMethod().equals(HttpMethod.POST.toString()) && StringUtils.isNotBlank(oauthApproval);

    }

    private void processInitial(HttpServletRequest request, ServletResponse response, FilterChain chain,

                                String returnUri, String authStateValue, Client client) throws IOException, ServletException {

        AuthenticatedPrincipal principal = (AuthenticatedPrincipal) request.getAttribute(AbstractAuthenticator.PRINCIPAL);

        List<AccessToken> tokens = accessTokenRepository.findByResourceOwnerIdAndClient(principal.getName(), client);

        if (!CollectionUtils.isEmpty(tokens)) {

            // If another token is already present for this resource owner and client, no new consent should be requested

            List<String> grantedScopes = tokens.get(0).getScopes(); // take the scopes of the first access token found.

            setGrantedScopes(request, grantedScopes.toArray(new String[grantedScopes.size()]));

            chain.doFilter(request, response);

        } else {

            AuthorizationRequest authorizationRequest = authorizationRequestRepository.findByAuthState(authStateValue);

            request.setAttribute("requestedScopes", authorizationRequest.getRequestedScopes());

            request.setAttribute("client", client);

            request.setAttribute(AUTH_STATE, authStateValue);

            request.setAttribute("actionUri", returnUri);

            ((HttpServletResponse) response).setHeader("X-Frame-Options", "SAMEORIGIN");

            request.getRequestDispatcher(getUserConsentUrl()).forward(request, response);

        }

    }

    /**

     * Return the path to the User Consent page. Subclasses can use this hook by

     * providing a custom html/jsp.

     *

     * @return the path to the User Consent page

     */

    protected String getUserConsentUrl() {

        return "/WEB-INF/jsp/userconsent.jsp";

    }

    private boolean processForm(final HttpServletRequest request, final HttpServletResponse response)

            throws ServletException, IOException {

        if (Boolean.valueOf(request.getParameter(USER_OAUTH_APPROVAL))) {

            setAuthStateValue(request, request.getParameter(AUTH_STATE));

            String[] scopes = request.getParameterValues(GRANTED_SCOPES);

            setGrantedScopes(request, scopes);

            return true;

        } else {

            request.getRequestDispatcher(getUserConsentDeniedUrl()).forward(request, response);

            return false;

        }

    }

    /**

     * @return

     */

    protected String getUserConsentDeniedUrl() {

        return "/WEB-INF/jsp/userconsent_denied.jsp";

    }

}

/*

 * Copyright 2012 SURFnet bv, The Netherlands

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *      http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */

package eu.dnetlib.oauth.config;

import eu.dnetlib.oauth.authenticate.Authenticator;

import eu.dnetlib.oauth.handlers.FormLoginAuthenticator;

import eu.dnetlib.oauth.store.CredentialsStore;

import eu.dnetlib.oauth.store.DBStore;

import eu.dnetlib.oauth.store.LDAPStore;

import org.apache.openjpa.persistence.PersistenceProviderImpl;

import org.apache.tomcat.jdbc.pool.DataSource;

import org.springframework.context.annotation.*;

import org.springframework.core.env.Environment;

import org.springframework.orm.jpa.JpaTransactionManager;

import org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean;

import org.springframework.scheduling.annotation.EnableScheduling;

import org.springframework.transaction.annotation.EnableTransactionManagement;

import org.surfnet.oaaas.auth.*;

import org.surfnet.oaaas.repository.ExceptionTranslator;

import org.surfnet.oaaas.repository.OpenJPAExceptionTranslator;

import org.surfnet.oaaas.support.Cleaner;

import javax.inject.Inject;

import javax.servlet.Filter;

import javax.servlet.ServletException;

import javax.validation.Validator;

/**

 * The SpringConfiguration is a {@link Configuration} that can be overridden if

 * you want to plugin your own implementations. Note that the two most likely

 * candidates to change are the {@link AbstractAuthenticator} an

 * {@link AbstractUserConsentHandler}. You can change the implementation by

 * editing the application.apis.properties file where the implementations are

 * configured.

 */

@Configuration

@PropertySource("classpath:apis.application.properties")

/*

 * The component scan can be used to add packages and exclusions to the default

 * package

 */

@ComponentScan(basePackages = {"eu.dnetlib.oauth.resource"})

@ImportResource("classpath:spring-repositories.xml")

@EnableTransactionManagement

@EnableScheduling

public class SpringConfiguration {

    private static final String PERSISTENCE_UNIT_NAME = "oaaas";

    private static final Class<PersistenceProviderImpl> PERSISTENCE_PROVIDER_CLASS = PersistenceProviderImpl.class;