tigase.db.jdbc
Class TigaseCustomAuth

java.lang.Object
  tigase.db.jdbc.TigaseCustomAuth

All Implemented Interfaces:

UserAuthRepository

public class TigaseCustomAuth
extends java.lang.Object
implements UserAuthRepository

The user authentication connector allows for customized SQL queries to be used. Queries are defined in the configuration file and they can be either plain SQL queries or stored procedures. If the query starts with characters: { call then the server assumes this is a stored procedure call, otherwise it is executed as a plain SQL query. Each configuration value is stripped from white characters on both ends before processing. Please don't use semicolon ';' at the end of the query as many JDBC drivers get confused and the query may not work for unknown obvious reason. Some queries take arguments. Arguments are marked by question marks '?' in the query. Refer to the configuration parameters description for more details about what parameters are expected in each query. Example configuration. The first example shows how to put a stored procedure as a query with 2 required parameters.

 add-user-query={ call TigAddUserPlainPw(?, ?) }
 

The same query with plain SQL parameters instead:

 add-user-query=insert into users (user_id, password) values (?, ?)
 

Created: Sat Nov 11 22:22:04 2006

Version:

$Rev: 1673 $

Author:

Artur Hefczyc

Field Summary

static java.lang.String	DEF_ADDUSER_KEY Query adding a new user to the database.
static java.lang.String	DEF_ADDUSER_QUERY
static java.lang.String	DEF_CONNVALID_KEY Query executing periodically to ensure active connection with the database.
static java.lang.String	DEF_CONNVALID_QUERY
static java.lang.String	DEF_DELUSER_KEY Removes a user from the database.
static java.lang.String	DEF_DELUSER_QUERY
static java.lang.String	DEF_GETPASSWORD_KEY Retrieves user password from the database for given user_id (JID).
static java.lang.String	DEF_GETPASSWORD_QUERY
static java.lang.String	DEF_INITDB_KEY Database initialization query which is run after the server is started.
static java.lang.String	DEF_INITDB_QUERY
static java.lang.String	DEF_NONSASL_MECHS
static java.lang.String	DEF_NONSASL_MECHS_KEY Comma separated list of NON-SASL authentication mechanisms.
static java.lang.String	DEF_SASL_MECHS
static java.lang.String	DEF_SASL_MECHS_KEY Comma separated list of SASL authentication mechanisms.
static java.lang.String	DEF_UPDATEPASSWORD_KEY Updates (changes) password for a given user_id (JID).
static java.lang.String	DEF_UPDATEPASSWORD_QUERY
static java.lang.String	DEF_USERLOGIN_KEY Performs user login.
static java.lang.String	DEF_USERLOGIN_QUERY
static java.lang.String	DEF_USERLOGOUT_KEY This query is called when user logs out or disconnects.
static java.lang.String	DEF_USERLOGOUT_QUERY
static java.lang.String	DEF_USERS_COUNT_KEY
static java.lang.String	DEF_USERS_COUNT_QUERY
static java.lang.String	DEF_USERS_DOMAIN_COUNT_KEY
static java.lang.String	DEF_USERS_DOMAIN_COUNT_QUERY
static java.lang.String	SP_STARTS_WITH

Fields inherited from interface tigase.db.UserAuthRepository

DATA_KEY, MACHANISM_KEY, PROTOCOL_KEY, PROTOCOL_VAL_NONSASL, PROTOCOL_VAL_SASL, REALM_KEY, RESULT_KEY, SERVER_NAME_KEY, USER_ID_KEY

Constructor Summary

TigaseCustomAuth()

Method Summary

void	addUser(java.lang.String user, java.lang.String password) Describe addUser method here.
boolean	digestAuth(java.lang.String user, java.lang.String digest, java.lang.String id, java.lang.String alg) Describe digestAuth method here.
java.lang.String	getResourceUri() getResourceUri method returns database connection string.
long	getUsersCount() getUsersCount method is thread safe.
long	getUsersCount(java.lang.String domain) This method is only used by the server statistics component to report number of registered users for given domain.
void	initRepository(java.lang.String connection_str, java.util.Map<java.lang.String,java.lang.String> params) Describe initRepository method here.
void	logout(java.lang.String user) Describe logout method here.
boolean	otherAuth(java.util.Map<java.lang.String,java.lang.Object> props) Describe otherAuth method here.
boolean	plainAuth(java.lang.String user, java.lang.String password) Describe plainAuth method here.
void	queryAuth(java.util.Map<java.lang.String,java.lang.Object> authProps) Describe queryAuth method here.
void	removeUser(java.lang.String user) Describe removeUser method here.
void	updatePassword(java.lang.String user, java.lang.String password) Describe updatePassword method here.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEF_CONNVALID_KEY

public static final java.lang.String DEF_CONNVALID_KEY

Query executing periodically to ensure active connection with the database. Takes no arguments. Example query:

 select 1
 

See Also:

Constant Field Values

DEF_INITDB_KEY

public static final java.lang.String DEF_INITDB_KEY

Database initialization query which is run after the server is started. Takes no arguments. Example query:

 update tig_users set online_status = 0
 

See Also:

Constant Field Values

DEF_ADDUSER_KEY

public static final java.lang.String DEF_ADDUSER_KEY

Query adding a new user to the database. Takes 2 arguments: (user_id (JID), password) Example query:

 insert into tig_users (user_id, user_pw) values (?, ?)
 

See Also:

Constant Field Values

DEF_DELUSER_KEY

public static final java.lang.String DEF_DELUSER_KEY

Removes a user from the database. Takes 1 argument: (user_id (JID)) Example query:

 delete from tig_users where user_id = ?
 

See Also:

Constant Field Values

DEF_GETPASSWORD_KEY

public static final java.lang.String DEF_GETPASSWORD_KEY

Retrieves user password from the database for given user_id (JID). Takes 1 argument: (user_id (JID)) Example query:

 select user_pw from tig_users where user_id = ?
 

See Also:

Constant Field Values

DEF_UPDATEPASSWORD_KEY

public static final java.lang.String DEF_UPDATEPASSWORD_KEY

Updates (changes) password for a given user_id (JID). Takes 2 arguments: (password, user_id (JID)) Example query:

 update tig_users set user_pw = ? where user_id = ?
 

See Also:

Constant Field Values

DEF_USERLOGIN_KEY

public static final java.lang.String DEF_USERLOGIN_KEY

Performs user login. Normally used when there is a special SP used for this purpose. This is an alternative way to a method requiring retrieving user password. Therefore at least one of those queries must be defined: user-login-query or get-password-query. If both queries are defined then user-login-query is used. Normally this method should be only used with plain text password authentication or sasl-plain. The Tigase server expects a result set with user_id to be returned from the query if login is successful and empty results set if the login is unsuccessful. Takes 2 arguments: (user_id (JID), password) Example query:

 select user_id from tig_users where (user_id = ?) AND (user_pw = ?)
 

See Also:

Constant Field Values

DEF_USERLOGOUT_KEY

public static final java.lang.String DEF_USERLOGOUT_KEY

This query is called when user logs out or disconnects. It can record that event in the database. Takes 1 argument: (user_id (JID)) Example query:

 update tig_users, set online_status = online_status - 1 where user_id = ?
 

See Also:

Constant Field Values

DEF_USERS_COUNT_KEY

public static final java.lang.String DEF_USERS_COUNT_KEY

See Also:

Constant Field Values

DEF_USERS_DOMAIN_COUNT_KEY

public static final java.lang.String DEF_USERS_DOMAIN_COUNT_KEY

See Also:

Constant Field Values

DEF_NONSASL_MECHS_KEY

public static final java.lang.String DEF_NONSASL_MECHS_KEY

Comma separated list of NON-SASL authentication mechanisms. Possible mechanisms are: password and digest. digest mechanism can work only with get-password-query active and only when password are stored in plain text format in the database.

See Also:

Constant Field Values

DEF_SASL_MECHS_KEY

public static final java.lang.String DEF_SASL_MECHS_KEY

Comma separated list of SASL authentication mechanisms. Possible mechanisms are all mechanisms supported by Java implementation. The most common are: PLAIN, DIGEST-MD5, CRAM-MD5. "Non-PLAIN" mechanisms will work only with the get-password-query active and only when passwords are stored in plain text formay in the database.

See Also:

Constant Field Values

DEF_CONNVALID_QUERY

public static final java.lang.String DEF_CONNVALID_QUERY

See Also:

Constant Field Values

DEF_INITDB_QUERY

public static final java.lang.String DEF_INITDB_QUERY

See Also:

Constant Field Values

DEF_ADDUSER_QUERY

public static final java.lang.String DEF_ADDUSER_QUERY

See Also:

Constant Field Values

DEF_DELUSER_QUERY

public static final java.lang.String DEF_DELUSER_QUERY

See Also:

Constant Field Values

DEF_GETPASSWORD_QUERY

public static final java.lang.String DEF_GETPASSWORD_QUERY

See Also:

Constant Field Values

DEF_UPDATEPASSWORD_QUERY

public static final java.lang.String DEF_UPDATEPASSWORD_QUERY

See Also:

Constant Field Values

DEF_USERLOGIN_QUERY

public static final java.lang.String DEF_USERLOGIN_QUERY

See Also:

Constant Field Values

DEF_USERLOGOUT_QUERY

public static final java.lang.String DEF_USERLOGOUT_QUERY

See Also:

Constant Field Values

DEF_USERS_COUNT_QUERY

public static final java.lang.String DEF_USERS_COUNT_QUERY

See Also:

Constant Field Values

DEF_USERS_DOMAIN_COUNT_QUERY

public static final java.lang.String DEF_USERS_DOMAIN_COUNT_QUERY

See Also:

Constant Field Values

DEF_NONSASL_MECHS

public static final java.lang.String DEF_NONSASL_MECHS

See Also:

Constant Field Values

DEF_SASL_MECHS

public static final java.lang.String DEF_SASL_MECHS

See Also:

Constant Field Values

SP_STARTS_WITH

public static final java.lang.String SP_STARTS_WITH

See Also:

Constant Field Values

Constructor Detail

TigaseCustomAuth

public TigaseCustomAuth()

Method Detail

queryAuth

public void queryAuth(java.util.Map<java.lang.String,java.lang.Object> authProps)

Describe queryAuth method here.

Specified by:

queryAuth in interface UserAuthRepository

Parameters:

authProps - a Map value

initRepository

public void initRepository(java.lang.String connection_str,
                           java.util.Map<java.lang.String,java.lang.String> params)
                    throws DBInitException

Describe initRepository method here.

Specified by:

initRepository in interface UserAuthRepository

Parameters:

connection_str - a String value

params -

Throws:

DBInitException - if an error occurs

getResourceUri

public java.lang.String getResourceUri()

Description copied from interface: UserAuthRepository

getResourceUri method returns database connection string.

Specified by:

getResourceUri in interface UserAuthRepository

Returns:

a String value of database connection string.

getUsersCount

public long getUsersCount()

getUsersCount method is thread safe. It uses local variable for storing Statement.

Specified by:

getUsersCount in interface UserAuthRepository

Returns:

a long number of user accounts in database.

getUsersCount

public long getUsersCount(java.lang.String domain)

Description copied from interface: UserAuthRepository

This method is only used by the server statistics component to report number of registered users for given domain.

Specified by:

getUsersCount in interface UserAuthRepository

Returns:

a long number of registered users in the repository.

plainAuth

public boolean plainAuth(java.lang.String user,
                         java.lang.String password)
                  throws UserNotFoundException,
                         TigaseDBException,
                         AuthorizationException

Describe plainAuth method here.

Specified by:

plainAuth in interface UserAuthRepository

Parameters:

user - a String value

password - a String value

Returns:

a boolean value

Throws:

UserNotFoundException - if an error occurs

TigaseDBException - if an error occurs

AuthorizationException - if an error occurs during authentication process.

digestAuth

public boolean digestAuth(java.lang.String user,
                          java.lang.String digest,
                          java.lang.String id,
                          java.lang.String alg)
                   throws UserNotFoundException,
                          TigaseDBException,
                          AuthorizationException

Describe digestAuth method here.

Specified by:

digestAuth in interface UserAuthRepository

Parameters:

user - a String value

digest - a String value

id - a String value

alg - a String value

Returns:

a boolean value

Throws:

UserNotFoundException - if an error occurs

TigaseDBException - if an error occurs

AuthorizationException - if an error occurs

otherAuth

public boolean otherAuth(java.util.Map<java.lang.String,java.lang.Object> props)
                  throws UserNotFoundException,
                         TigaseDBException,
                         AuthorizationException

Describe otherAuth method here.

Specified by:

otherAuth in interface UserAuthRepository

Parameters:

props - a Map value

Returns:

a boolean value

Throws:

UserNotFoundException - if an error occurs

TigaseDBException - if an error occurs

AuthorizationException - if an error occurs

logout

public void logout(java.lang.String user)
            throws UserNotFoundException,
                   TigaseDBException

Description copied from interface: UserAuthRepository

Describe logout method here.

Specified by:

logout in interface UserAuthRepository

Parameters:

user - a String value

Throws:

UserNotFoundException - if an error occurs

TigaseDBException - if an error occurs

addUser

public void addUser(java.lang.String user,
                    java.lang.String password)
             throws UserExistsException,
                    TigaseDBException

Describe addUser method here.

Specified by:

addUser in interface UserAuthRepository

Parameters:

user - a String value

password - a String value

Throws:

UserExistsException - if an error occurs

TigaseDBException - if an error occurs

updatePassword

public void updatePassword(java.lang.String user,
                           java.lang.String password)
                    throws UserNotFoundException,
                           TigaseDBException

Describe updatePassword method here.

Specified by:

updatePassword in interface UserAuthRepository

Parameters:

user - a String value

password - a String value

Throws:

UserExistsException - if an error occurs

TigaseDBException - if an error occurs

UserNotFoundException

removeUser

public void removeUser(java.lang.String user)
                throws UserNotFoundException,
                       TigaseDBException

Describe removeUser method here.

Specified by:

removeUser in interface UserAuthRepository

Parameters:

user - a String value

Throws:

UserNotFoundException - if an error occurs

TigaseDBException - if an error occurs