public class UrlConnectionDispatch extends AbstractGatewayFilter {
private static final GatewayMessages LOG = MessagesFactory.get(GatewayMessages.class);
private static final GatewayResources RES = ResourcesFactory.get(GatewayResources.class);
private static Auditor auditor =
AuditServiceFactory.getAuditService()
.getAuditor(
AuditConstants.DEFAULT_AUDITOR_NAME,
AuditConstants.KNOX_SERVICE_NAME,
AuditConstants.KNOX_COMPONENT_NAME);
@Override
protected void doFilter(
HttpServletRequest request, HttpServletResponse response, FilterChain chain)
throws IOException, ServletException {
String method = request.getMethod().toUpperCase();
if (method.equals("GET")) {
try {
doGet(getDispatchUrl(request), request, response);
} catch (URISyntaxException e) {
throw new ServletException(e);
}
} else {
response.sendError(HttpServletResponse.SC_METHOD_NOT_ALLOWED);
}
}
protected static URI getDispatchUrl(HttpServletRequest request) {
StringBuffer str = request.getRequestURL();
String query = request.getQueryString();
if (query != null) {
str.append('?');
str.append(query);
}
URI url = URI.create(str.toString());
return url;
}
public void doGet(URI url, HttpServletRequest request, HttpServletResponse response)
throws IOException, URISyntaxException {
String sourcePathInfo = request.getPathInfo();
String sourcePattern = getConfig().getInitParameter("pattern");
String targetPattern = getConfig().getInitParameter("target");
// TODO: Some of the compilation should be done at servlet init for performance reasons.
Template sourceTemplate = Parser.parseTemplate(sourcePattern);
Template targetTemplate = Parser.parseTemplate(targetPattern);
Resolver resolver = new DispatchParamResolver(getConfig(), request);
URI sourceUri = new URI(sourcePathInfo);
URI targetUri = Rewriter.rewrite(sourceUri, sourceTemplate, targetTemplate, resolver, null);
// //TODO: This should be more at filter init.
// Pattern sourceRegex = UrlRewriter.compileUrlRegex( sourcePattern );
// Matcher matcher = sourceRegex.matcher( sourcePathInfo );
// String targetUrl = MessageFormat.format( targetPattern, Regex.toGroupArray( matcher ) );
// System.out.println( "Source URI: " + expect.getRequestURI() );
// System.out.println( "Source URL: " + expect.getRequestURL() );
// System.out.println( "Source Query: " + expect.getQueryString() );
// System.out.println( "Source pathInfo: " + sourcePathInfo );
// System.out.println( "Source pattern: " + sourcePattern );
// System.out.println( "Target pattern: " + targetPattern );
// System.out.println( "Resolved target: " + targetUrl );
StringBuilder paramStr = new StringBuilder();
Enumeration paramNames = request.getParameterNames();
if (paramNames.hasMoreElements()) {
paramStr.append("?");
}
while (paramNames.hasMoreElements()) {
String paramName = (String) paramNames.nextElement();
String paramValue = request.getParameter(paramName);
paramStr.append(paramName);
paramStr.append("=");
paramStr.append(URLEncoder.encode(paramValue, "UTF-8"));
if (paramNames.hasMoreElements()) {
paramStr.append("&");
}
}
String urlStr = targetUri.toString() + paramStr.toString();
try {
URL clientUrl = new URL(urlStr);
// System.out.println( "Resolved query: " + clientUrl );
AuthenticatedURL.Token token = new AuthenticatedURL.Token();
KerberosAuthenticator authenticator = new KerberosAuthenticator();
auditor.audit(Action.DISPATCH, urlStr, ResourceType.URI, ActionOutcome.UNAVAILABLE);
HttpURLConnection conn = new AuthenticatedURL(authenticator).openConnection(clientUrl, token);
// System.out.println( "STATUS=" + conn.getResponseCode() );
InputStream input = conn.getInputStream();
if (input != null) {
OutputStream output = response.getOutputStream();
try {
IOUtils.copy(input, output);
} finally {
output.flush();
input.close();
}
}
auditor.audit(Action.DISPATCH, urlStr, ResourceType.URI, ActionOutcome.SUCCESS);
} catch (AuthenticationException e) {
response.sendError(HttpServletResponse.SC_UNAUTHORIZED);
LOG.failedToEstablishConnectionToUrl(urlStr, e);
auditor.audit(
Action.DISPATCH,
urlStr,
ResourceType.URI,
ActionOutcome.FAILURE,
RES.responseStatus(HttpServletResponse.SC_UNAUTHORIZED));
} catch (FileNotFoundException e) {
response.sendError(HttpServletResponse.SC_NOT_FOUND);
LOG.failedToEstablishConnectionToUrl(urlStr, e);
auditor.audit(
Action.DISPATCH,
urlStr,
ResourceType.URI,
ActionOutcome.FAILURE,
RES.responseStatus(HttpServletResponse.SC_NOT_FOUND));
}
}
}
// NOTE: Instances Not thread safe but reusable. Static parse method is thread safe.
// NOTE: Ignores matrix parameters at this point.
public class Parser {
/*
^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))?
12 3 4 5 6 7 8 9
The numbers in the second line above are only to assist readability;
they indicate the reference points for each subexpression (i.e., each
paired parenthesis). We refer to the value matched for subexpression
<n> as $<n>. For example, matching the above expression to
http://www.ics.uci.edu/pub/ietf/uri/#Related
results in the following subexpression matches:
$1 = http:
$2 = http
$3 = //www.ics.uci.edu
$4 = www.ics.uci.edu
$5 = /pub/ietf/uri/
$6 = <undefined>
$7 = <undefined>
$8 = #Related
$9 = Related
where <undefined> indicates that the component is not present, as is
the case for the query component in the above example. Therefore, we
can determine the value of the five components as
scheme = $2
authority = $4
path = $5
query = $7
fragment = $9
*/
private static final Resources RES = ResourcesFactory.get(Resources.class);
public static final char TEMPLATE_OPEN_MARKUP = '{';
public static final char TEMPLATE_CLOSE_MARKUP = '}';
public static final char NAME_PATTERN_SEPARATOR = '=';
private static final int MATCH_GROUP_SCHEME = 1;
private static final int MATCH_GROUP_SCHEME_NAKED = 2;
private static final int MATCH_GROUP_AUTHORITY = 3;
private static final int MATCH_GROUP_AUTHORITY_NAKED = 4;
private static final int MATCH_GROUP_PATH = 5;
private static final int MATCH_GROUP_QUERY = 6;
private static final int MATCH_GROUP_QUERY_NAKED = 7;
private static final int MATCH_GROUP_FRAGMENT = 8;
private static final int MATCH_GROUP_FRAGMENT_NAKED = 9;
private static Pattern PATTERN =
Pattern.compile("^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?");
private String template; // Kept this for debugging.
private Builder builder;
public static Template parse(String template) throws URISyntaxException {
return new Parser().parseTemplate(template);
}
public Template parseTemplate(String template) throws URISyntaxException {
this.template = template;
builder = new Builder(template);
builder.setHasScheme(false);
builder.setHasAuthority(
false); // Assume no until found otherwise. If true, will cause // in output URL.
builder.setIsAuthorityOnly(false);
builder.setIsAbsolute(
false); // Assume relative until found otherwise. If true, will cause leading / in output
// URL.
builder.setIsDirectory(
false); // Assume a file path until found otherwise. If true, will cause trailing / in
// output URL.
builder.setHasQuery(
false); // Assume no ? until found otherwise. If true, will cause ? in output URL.
builder.setHasFragment(
false); // Assume no # until found otherwise. If true, will cause # in output URL.
Matcher match = PATTERN.matcher(template);
if (match.matches()) {
consumeSchemeMatch(match);
consumeAuthorityMatch(match);
consumePathMatch(match);
consumeQueryMatch(match);
consumeFragmentMatch(match);
fixNakedAuthority();
} else {
throw new URISyntaxException(template, RES.parseTemplateFailureReason(template));
}
return builder.build();
}
private final void fixNakedAuthority() {
if (builder.getHashScheme()
&& !builder.getHasAuthority()
&& !builder.getIsAbsolute()
&& !builder.getIsDirectory()
&& (builder.getPath().size() == 1)
&& !builder.getHasQuery()
&& !builder.getHasFragment()) {
final Scheme scheme = builder.getScheme();
builder.setHasScheme(false);
builder.setHost(makeTokenSingular(scheme.getToken()));
Path path = builder.getPath().remove(0);
builder.setPort(makeTokenSingular(path.getToken()));
builder.setIsAuthorityOnly(true);
}
}
private final Token makeTokenSingular(Token token) {
final String effectivePattern = token.getEffectivePattern();
if (Segment.GLOB_PATTERN.equals(effectivePattern)) {
token = new Token(token.getParameterName(), token.getOriginalPattern(), Segment.STAR_PATTERN);
}
return token;
}
// private String makePatternSingular( String pattern ) {
// if( Segment.GLOB_PATTERN.equals( pattern ) ) {
// pattern = Segment.STAR_PATTERN;
// }
// return pattern;
// }
private void consumeSchemeMatch(Matcher match) {
if (match.group(MATCH_GROUP_SCHEME) != null) {
builder.setHasScheme(true);
consumeSchemeToken(match.group(MATCH_GROUP_SCHEME_NAKED));
}
}
private void consumeSchemeToken(String token) {
if (token != null) {
Token t = parseTemplateToken(token, Segment.STAR_PATTERN);
builder.setScheme(t);
}
}
private void consumeAuthorityMatch(Matcher match) {
if (match.group(MATCH_GROUP_AUTHORITY) != null) {
builder.setHasAuthority(true);
consumeAuthorityToken(match.group(MATCH_GROUP_AUTHORITY_NAKED));
}
}
private void consumeAuthorityToken(String token) {
if (token != null) {
Token paramPattern;
String[] usernamePassword = null, hostPort;
String[] userAddr = split(token, '@');
if (userAddr.length == 1) {
hostPort = split(userAddr[0], ':');
} else {
usernamePassword = split(userAddr[0], ':');
hostPort = split(userAddr[1], ':');
}
if (usernamePassword != null) {
if (usernamePassword[0].length() > 0) {
paramPattern =
makeTokenSingular(parseTemplateToken(usernamePassword[0], Segment.STAR_PATTERN));
builder.setUsername(paramPattern);
}
if (usernamePassword.length > 1 && usernamePassword[1].length() > 0) {
paramPattern =
makeTokenSingular(parseTemplateToken(usernamePassword[1], Segment.STAR_PATTERN));
builder.setPassword(paramPattern);
}
}
if (hostPort[0].length() > 0) {
paramPattern = makeTokenSingular(parseTemplateToken(hostPort[0], Segment.STAR_PATTERN));
builder.setHost(paramPattern);
}
if (hostPort.length > 1 && hostPort[1].length() > 0) {
paramPattern = makeTokenSingular(parseTemplateToken(hostPort[1], Segment.STAR_PATTERN));
builder.setPort(paramPattern);
}
}
}
private void consumePathMatch(Matcher match) {
String path = match.group(MATCH_GROUP_PATH);
if (path != null) {
builder.setIsAbsolute(path.startsWith("/"));
builder.setIsDirectory(path.endsWith("/"));
consumePathToken(path);
}
}
private final void consumePathToken(final String token) {
if (token != null) {
final StringTokenizer tokenizer = new StringTokenizer(token, "/");
while (tokenizer.hasMoreTokens()) {
consumePathSegment(tokenizer.nextToken());
}
}
}
private final void consumePathSegment(final String token) {
if (token != null) {
final Token t = parseTemplateToken(token, Segment.GLOB_PATTERN);
builder.addPath(t);
}
}
private void consumeQueryMatch(Matcher match) {
if (match.group(MATCH_GROUP_QUERY) != null) {
builder.setHasQuery(true);
consumeQueryToken(match.group(MATCH_GROUP_QUERY_NAKED));
}
}
private void consumeQueryToken(String token) {
if (token != null) {
StringTokenizer tokenizer = new StringTokenizer(token, "?&");
while (tokenizer.hasMoreTokens()) {
consumeQuerySegment(tokenizer.nextToken());
}
}
}
private void consumeQuerySegment(String token) {
if (token != null && token.length() > 0) {
// Shorthand format {queryParam} == queryParam={queryParam=*}
if (TEMPLATE_OPEN_MARKUP == token.charAt(0)) {
Token paramPattern = parseTemplateToken(token, Segment.GLOB_PATTERN);
String paramName = paramPattern.parameterName;
if (paramPattern.originalPattern == null) {
builder.addQuery(paramName, new Token(paramName, null, Segment.GLOB_PATTERN));
// if( Segment.STAR_PATTERN.equals( paramName ) || Segment.GLOB_PATTERN.equals(
// paramName ) ) {
// builder.addQuery( paramName, new Token( paramName, null,
// Segment.GLOB_PATTERN ) );
// } else {
// builder.addQuery( paramName, new Token( paramName, null,
// Segment.GLOB_PATTERN ) );
// }
} else {
builder.addQuery(paramName, new Token(paramName, paramPattern.originalPattern));
}
} else {
String nameValue[] = split(token, '=');
if (nameValue.length == 1) {
String queryName = nameValue[0];
builder.addQuery(queryName, new Token(Segment.ANONYMOUS_PARAM, null));
} else {
String queryName = nameValue[0];
Token paramPattern = parseTemplateToken(nameValue[1], Segment.GLOB_PATTERN);
builder.addQuery(queryName, paramPattern);
}
}
}
}
private void consumeFragmentMatch(Matcher match) {
if (match.group(MATCH_GROUP_FRAGMENT) != null) {
builder.setHasFragment(true);
consumeFragmentToken(match.group(MATCH_GROUP_FRAGMENT_NAKED));
}
}
private void consumeFragmentToken(String token) {
if (token != null && token.length() > 0) {
Token t = parseTemplateToken(token, Segment.STAR_PATTERN);
builder.setFragment(t);
}
}
static final Token parseTemplateToken(final String s, final String defaultEffectivePattern) {
String paramName, actualPattern, effectivePattern;
final int l = s.length();
// If the token isn't the empty string, then
if (l > 0) {
final int b = (s.charAt(0) == TEMPLATE_OPEN_MARKUP ? 1 : -1);
final int e = (s.charAt(l - 1) == TEMPLATE_CLOSE_MARKUP ? l - 1 : -1);
// If this is a parameter template, ie {...}
if ((b > 0) && (e > 0) && (e > b)) {
final int i = s.indexOf(NAME_PATTERN_SEPARATOR, b);
// If this is an anonymous template
if (i < 0) {
paramName = s.substring(b, e);
actualPattern = null;
if (Segment.GLOB_PATTERN.equals(paramName)) {
effectivePattern = Segment.GLOB_PATTERN;
} else {
effectivePattern = defaultEffectivePattern;
}
// Otherwise populate the NVP.
} else {
paramName = s.substring(b, i);
actualPattern = s.substring(i + 1, e);
effectivePattern = actualPattern;
}
// Otherwise it is just a pattern.
} else {
paramName = Segment.ANONYMOUS_PARAM;
actualPattern = s;
effectivePattern = actualPattern;
}
// Otherwise the token has no value.
} else {
paramName = Segment.ANONYMOUS_PARAM;
actualPattern = s;
effectivePattern = actualPattern;
}
final Token token = new Token(paramName, actualPattern, effectivePattern);
return token;
}
// Using this because String.split is very inefficient.
private static String[] split(String s, char d) {
String[] a;
int i = s.indexOf(d);
if (i < 0) {
a = new String[] {s};
} else {
a = new String[] {s.substring(0, i), s.substring(i + 1)};
}
return a;
}
}