AuthorizationServiceConnector.cs 5.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123
  1. /*
  2. * Copyright (c) Contributors, http://opensimulator.org/
  3. * See CONTRIBUTORS.TXT for a full list of copyright holders.
  4. *
  5. * Redistribution and use in source and binary forms, with or without
  6. * modification, are permitted provided that the following conditions are met:
  7. * * Redistributions of source code must retain the above copyright
  8. * notice, this list of conditions and the following disclaimer.
  9. * * Redistributions in binary form must reproduce the above copyright
  10. * notice, this list of conditions and the following disclaimer in the
  11. * documentation and/or other materials provided with the distribution.
  12. * * Neither the name of the OpenSimulator Project nor the
  13. * names of its contributors may be used to endorse or promote products
  14. * derived from this software without specific prior written permission.
  15. *
  16. * THIS SOFTWARE IS PROVIDED BY THE DEVELOPERS ``AS IS'' AND ANY
  17. * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
  18. * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  19. * DISCLAIMED. IN NO EVENT SHALL THE CONTRIBUTORS BE LIABLE FOR ANY
  20. * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
  21. * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  22. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
  23. * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  24. * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
  25. * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  26. */
  27. using log4net;
  28. using System;
  29. using System.Collections.Generic;
  30. using System.IO;
  31. using System.Reflection;
  32. using Nini.Config;
  33. using OpenSim.Framework;
  34. using OpenSim.Framework.Communications;
  35. using OpenSim.Services.Interfaces;
  36. using OpenMetaverse;
  37. namespace OpenSim.Services.Connectors
  38. {
  39. public class AuthorizationServicesConnector
  40. {
  41. private static readonly ILog m_log =
  42. LogManager.GetLogger(
  43. MethodBase.GetCurrentMethod().DeclaringType);
  44. private string m_ServerURI = String.Empty;
  45. private bool m_ResponseOnFailure = true;
  46. public AuthorizationServicesConnector()
  47. {
  48. }
  49. public AuthorizationServicesConnector(string serverURI)
  50. {
  51. m_ServerURI = serverURI.TrimEnd('/');
  52. }
  53. public AuthorizationServicesConnector(IConfigSource source)
  54. {
  55. Initialise(source);
  56. }
  57. public virtual void Initialise(IConfigSource source)
  58. {
  59. IConfig authorizationConfig = source.Configs["AuthorizationService"];
  60. if (authorizationConfig == null)
  61. {
  62. //m_log.Info("[AUTHORIZATION CONNECTOR]: AuthorizationService missing from OpenSim.ini");
  63. throw new Exception("Authorization connector init error");
  64. }
  65. string serviceURI = authorizationConfig.GetString("AuthorizationServerURI",
  66. String.Empty);
  67. if (serviceURI == String.Empty)
  68. {
  69. m_log.Error("[AUTHORIZATION CONNECTOR]: No Server URI named in section AuthorizationService");
  70. throw new Exception("Authorization connector init error");
  71. }
  72. m_ServerURI = serviceURI;
  73. // this dictates what happens if the remote service fails, if the service fails and the value is true
  74. // the user is authorized for the region.
  75. bool responseOnFailure = authorizationConfig.GetBoolean("ResponseOnFailure",true);
  76. m_ResponseOnFailure = responseOnFailure;
  77. m_log.Info("[AUTHORIZATION CONNECTOR]: AuthorizationService initialized");
  78. }
  79. public bool IsAuthorizedForRegion(string userID, string firstname, string surname, string email, string regionName, string regionID, out string message)
  80. {
  81. // do a remote call to the authorization server specified in the AuthorizationServerURI
  82. m_log.InfoFormat("[AUTHORIZATION CONNECTOR]: IsAuthorizedForRegion checking {0} at remote server {1}", userID, m_ServerURI);
  83. string uri = m_ServerURI;
  84. AuthorizationRequest req = new AuthorizationRequest(userID, firstname, surname, email, regionName, regionID);
  85. AuthorizationResponse response;
  86. try
  87. {
  88. response = SynchronousRestObjectRequester.MakeRequest<AuthorizationRequest, AuthorizationResponse>("POST", uri, req);
  89. }
  90. catch (Exception e)
  91. {
  92. m_log.WarnFormat("[AUTHORIZATION CONNECTOR]: Unable to send authorize {0} for region {1} error thrown during comms with remote server. Reason: {2}", userID, regionID, e.Message);
  93. message = "";
  94. return m_ResponseOnFailure;
  95. }
  96. if (response == null)
  97. {
  98. message = "Null response";
  99. return m_ResponseOnFailure;
  100. }
  101. m_log.DebugFormat("[AUTHORIZATION CONNECTOR] response from remote service was {0}", response.Message);
  102. message = response.Message;
  103. return response.IsAuthorized;
  104. }
  105. }
  106. }