1 package org.jasig.cas.adaptors.jdbc;
 2 
 3 import java.security.GeneralSecurityException;
 4 
 5 import org.jasig.cas.authentication.HandlerResult;
 6 import org.jasig.cas.authentication.PreventedException;
 7 import org.jasig.cas.authentication.UsernamePasswordCredential;
 8 import org.jasig.cas.authentication.principal.SimplePrincipal;
 9 import org.springframework.dao.DataAccessException;
10 import org.springframework.dao.IncorrectResultSizeDataAccessException;
11 
12 import javax.security.auth.login.AccountNotFoundException;
13 import javax.security.auth.login.FailedLoginException;
14 import javax.validation.constraints.NotNull;
15 
16 /**
17  * Class that if provided a query that returns a password (parameter of query
18  * must be username) will compare that password to a translated version of the
19  * password provided by the user. If they match, then authentication succeeds.
20  * Default password translator is plaintext translator.
21  *
22  * @author Scott Battaglia
23  * @author Dmitriy Kopylenko
24  * @author Marvin S. Addison
25  *
26  * @since 3.0
27  */
28 public class TyQueryDatabaseAuthenticationHandler extends AbstractJdbcUsernamePasswordAuthenticationHandler {
29 
30     @NotNull
31     private String sql;
32 
33     private boolean useDefaultPassword;
34 
35     private String defaultPassword;
36 
37     /** {@inheritDoc} */
38     @Override
39     protected final HandlerResult authenticateUsernamePasswordInternal(final UsernamePasswordCredential credential)
40             throws GeneralSecurityException, PreventedException {
41 
42         final String username = credential.getUsername();
43         final String password = useDefaultPassword ? defaultPassword : credential.getPassword();
44         final String encryptedPassword = this.getPasswordEncoder().encode(password);
45         try {
46             final String dbPassword = getJdbcTemplate().queryForObject(this.sql, String.class, username);
47             if (!dbPassword.equals(encryptedPassword)) {
48                 throw new FailedLoginException("Password does not match value on record.");
49             }
50         } catch (final IncorrectResultSizeDataAccessException e) {
51             if (e.getActualSize() == 0) {
52                 throw new AccountNotFoundException(username + " not found with SQL query");
53             } else {
54                 throw new FailedLoginException("Multiple records found for " + username);
55             }
56         } catch (final DataAccessException e) {
57             throw new PreventedException("SQL exception while executing query for " + username, e);
58         }
59         return createHandlerResult(credential, new SimplePrincipal(username), null);
60     }
61 
62     /**
63      * @param sql The sql to set.
64      */
65     public void setSql(final String sql) {
66         this.sql = sql;
67     }
68 
69      /**
70      * @param isUseDefaultPassword The useDefaultPassword to set.
71      */
72     public void setUseDefaultPassword(final boolean isUseDefaultPassword) {
73         this.useDefaultPassword = isUseDefaultPassword;
74     }
75 
76      /**
77      * @param defaultPassword The defaultPassword to set.
78      */
79     public void setDefaultPassword(final String defaultPassword) {
80         this.defaultPassword = defaultPassword;
81     }
82 
83 }

1   <bean id="dbAuthenticationHandler"
2     class="org.jasig.cas.adaptors.jdbc.TyQueryDatabaseAuthenticationHandler">
3       <property name="dataSource" ref="dataSource"></property>
4       <property name="sql" value="http://www.mamicode.com/select EmpPass as password from SsoAccount where EmpCode=?"></property>
5       <property name="passwordEncoder" ref="passwordEncoder"></property>
6       <property name="useDefaultPassword" value="http://www.mamicode.com/true"></property>
7       <property name="defaultPassword" value="http://www.mamicode.com/111111"></property>
8   </bean>