1.5. JAAS 영역 생성

프로세스

1. CLI에서 mvn 명령을 사용하여 Maven 프로젝트를 설정합니다. 이 명령은 프로젝트에 대한 디렉터리 구조와 pom.xml 구성 파일을 생성합니다.

   구문

   $ mvn archetype:generate \
   -DgroupId=<group-to-which-your-application-belongs> \
   -DartifactId=<name-of-your-application> \
   -DarchetypeGroupId=org.apache.maven.archetypes \
   -DarchetypeArtifactId=maven-archetype-simple \
   -DinteractiveMode=false

   예제

   $ mvn archetype:generate \
   -DgroupId=com.example.loginmodule \
   -DartifactId=example-custom-login-module \
   -DarchetypeGroupId=org.apache.maven.archetypes \
   -DarchetypeArtifactId=maven-archetype-simple \
   -DinteractiveMode=false

2. 애플리케이션 루트 디렉터리로 이동합니다.

   구문

   $ cd <name-of-your-application>

   예제

   $ cd example-custom-login-module

3. 생성된 pom.xml 파일의 내용을 다음 텍스트로 바꿉니다.

   <?xml version="1.0" encoding="UTF-8"?>
   <project xmlns="http://maven.apache.org/POM/4.0.0"
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
            xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
       <modelVersion>4.0.0</modelVersion>
   
       <groupId>custom.loginmodules</groupId>
       <artifactId>custom-login-modules</artifactId>
       <version>1.0</version>
       <dependencies>
           <dependency>
               <groupId>org.wildfly.security</groupId>
               <artifactId>wildfly-elytron</artifactId>
               <version>1.17.2.Final</version>
           </dependency>
           <dependency>
               <groupId>jakarta.security.enterprise</groupId>
               <artifactId>jakarta.security.enterprise-api</artifactId>
               <version>3.0.0</version>
           </dependency>
       </dependencies>
   
       <properties>
           <maven.compiler.source>11</maven.compiler.source>
           <maven.compiler.target>11</maven.compiler.target>
       </properties>
   
   </project>

4. 이 예제에 필요하지 않으므로 디렉터리 사이트 및 테스트를 제거합니다.

   $ rm -rf src/site/
   $ rm -rf src/test/

프로세스

1. Java 파일을 저장할 디렉터리를 만듭니다.

   구문

   $ mkdir -p src/main/java/<path_based_on_artifactID>

   예제

   $ mkdir -p src/main/java/com/example/loginmodule

2. 소스 파일이 포함된 디렉터리로 이동합니다.

   구문

   $ cd src/main/java/<path_based_on_groupID>

   예제

   $ cd src/main/java/com/example/loginmodule

3. 생성된 App.java 파일을 삭제합니다.

   $ rm App.java

4. 사용자 정의 로그인 모듈 소스에 대한 ExampleCustomLoginModule.java 파일을 생성합니다.

   package com.example.loginmodule;
   
   import org.wildfly.security.auth.principal.NamePrincipal;
   
   import javax.security.auth.Subject;
   import javax.security.auth.callback.Callback;
   import javax.security.auth.callback.CallbackHandler;
   import javax.security.auth.callback.NameCallback;
   import javax.security.auth.callback.PasswordCallback;
   import javax.security.auth.callback.UnsupportedCallbackException;
   import javax.security.auth.login.LoginException;
   import javax.security.auth.spi.LoginModule;
   import java.io.IOException;
   import java.security.Principal;
   import java.util.Arrays;
   import java.util.HashMap;
   import java.util.Map;
   
   
   public class ExampleCustomLoginModule implements LoginModule {
   
       private final Map<String, char[]> usersMap = new HashMap<String, char[]>();
       private Principal principal;
       private Subject subject;
       private CallbackHandler handler;
   
       /**
        * In this example, identities are created as fixed Strings.
        *
        * The identities are:
        *    user1 has the password passwordUser1
        *    user2 has the password passwordUser2
        *
        * Use these credentials when you secure management interfaces
        * or applications with this login module.
        *
        * In a production login module, you would get the identities
        * from a data source.
        *
        */
   
       @Override
       public void initialize(Subject subject, CallbackHandler callbackHandler, Map<String, ?> sharedState, Map<String, ?> options) {
           this.subject = subject;
           this.handler = callbackHandler;
           this.usersMap.put("user1", "passwordUser1".toCharArray());
           this.usersMap.put("user2", "passwordUser2".toCharArray());
       }
   
       @Override
       public boolean login() throws LoginException {
           // obtain the incoming username and password from the callback handler
           NameCallback nameCallback = new NameCallback("Username");
           PasswordCallback passwordCallback = new PasswordCallback("Password", false);
           Callback[] callbacks = new Callback[]{nameCallback, passwordCallback};
           try {
               this.handler.handle(callbacks);
           } catch (UnsupportedCallbackException | IOException e) {
               throw new LoginException("Error handling callback: " + e.getMessage());
           }
   
           final String username = nameCallback.getName();
           this.principal = new NamePrincipal(username);
           final char[] password = passwordCallback.getPassword();
   
           char[] storedPassword = this.usersMap.get(username);
           if (!Arrays.equals(storedPassword, password)) {
               throw new LoginException("Invalid password");
           } else {
               return true;
           }
       }
   
       /**
        * user1 is assigned the roles Admin, User and Guest.
        * In a production login module, you would get the identities
        * from a data source.
        *
        */
   
       @Override
       public boolean commit() throws LoginException {
           if (this.principal.getName().equals("user1")) {
               this.subject.getPrincipals().add(new Roles("Admin"));
               this.subject.getPrincipals().add(new Roles("User"));
               this.subject.getPrincipals().add(new Roles("Guest"));
           }
           return true;
       }
   
       @Override
       public boolean abort() throws LoginException {
           return true;
       }
   
       @Override
       public boolean logout() throws LoginException {
           this.subject.getPrincipals().clear();
           return true;
       }
   
       /**
       * Principal with simple classname 'Roles' will be mapped to the identity's attribute with name 'Roles'.
       */
   
       private static class Roles implements Principal {
   
           private final String name;
   
           Roles(final String name) {
               this.name = name;
           }
   
           /**
            * @return name of the principal. This will be added as a value to the identity's attribute which has a name equal to the simple name of this class. In this example, this value will be added to the attribute with a name 'Roles'.
           */
   
           public String getName() {
               return this.name;
           }
       }
   }

5. &lt ;application_home > 디렉터리에서 JAAS 구성 파일 JAAS-login-modules.conf 를 만듭니다.

   exampleConfiguration {
   	com.example.loginmodule.ExampleCustomLoginModule optional;
   };

   • exampleConfiguration 은 Entry 이름입니다.
   • com.example.loginmodule.ExampleCustomLoginModule 은 로그인 모듈입니다.
   • 선택 사항은 플래그입니다.

6. 로그인 모듈을 컴파일합니다.

   $ mvn package
   ...
   [INFO] ------------------------------------------------------------------------
   [INFO] BUILD SUCCESS
   [INFO] ------------------------------------------------------------------------
   [INFO] Total time: 1.321 s
   [INFO] Finished at: 2022-04-28T14:16:03+05:30
   [INFO] ------------------------------------------------------------------------