/* * Copyright 2019 Amazon.com, Inc. or its affiliates. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the "License"). * You may not use this file except in compliance with the License. * A copy of the License is located at * * http://www.apache.org/licenses/LICENSE-2.0 * * or in the "license" file accompanying this file. This file is distributed * on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either * express or implied. See the License for the specific language governing * permissions and limitations under the License. */ package com.amazon.opendistroforelasticsearch.security.dlic.rest.api; import java.io.IOException; import java.nio.file.Path; import org.elasticsearch.client.Client; import org.elasticsearch.cluster.service.ClusterService; import org.elasticsearch.common.bytes.BytesReference; import org.elasticsearch.common.collect.Tuple; import org.elasticsearch.common.inject.Inject; import org.elasticsearch.common.settings.Settings; import org.elasticsearch.rest.BytesRestResponse; import org.elasticsearch.rest.RestChannel; import org.elasticsearch.rest.RestController; import org.elasticsearch.rest.RestRequest; import org.elasticsearch.rest.RestRequest.Method; import org.elasticsearch.rest.RestStatus; import org.elasticsearch.threadpool.ThreadPool; import com.fasterxml.jackson.databind.JsonNode; import com.amazon.opendistroforelasticsearch.security.auditlog.AuditLog; import com.amazon.opendistroforelasticsearch.security.configuration.AdminDNs; import com.amazon.opendistroforelasticsearch.security.configuration.ConfigurationRepository; import com.amazon.opendistroforelasticsearch.security.dlic.rest.validation.AbstractConfigurationValidator; import com.amazon.opendistroforelasticsearch.security.dlic.rest.validation.NoOpValidator; import com.amazon.opendistroforelasticsearch.security.privileges.PrivilegesEvaluator; import com.amazon.opendistroforelasticsearch.security.securityconf.impl.CType; import com.amazon.opendistroforelasticsearch.security.ssl.transport.PrincipalExtractor; public class AuthTokenProcessorAction extends AbstractApiAction { @Inject public AuthTokenProcessorAction(final Settings settings, final Path configPath, final RestController controller, final Client client, final AdminDNs adminDNs, final ConfigurationRepository cl, final ClusterService cs, final PrincipalExtractor principalExtractor, final PrivilegesEvaluator evaluator, ThreadPool threadPool, AuditLog auditLog) { super(settings, configPath, controller, client, adminDNs, cl, cs, principalExtractor, evaluator, threadPool, auditLog); controller.registerHandler(Method.POST, "/_opendistro/_security/api/authtoken", this); } @Override protected void handlePost(RestChannel channel, final RestRequest request, final Client client, final JsonNode content) throws IOException { // Just do nothing here. Eligible authenticators will intercept calls and // provide own responses. successResponse(channel,""); } @Override protected AbstractConfigurationValidator getValidator(RestRequest request, BytesReference ref, Object... param) { return new NoOpValidator(request, ref, this.settings, param); } @Override protected String getResourceName() { return "authtoken"; } @Override protected CType getConfigName() { return null; } @Override protected Endpoint getEndpoint() { return Endpoint.AUTHTOKEN; } public static class Response { private String authorization; public String getAuthorization() { return authorization; } public void setAuthorization(String authorization) { this.authorization = authorization; } } }