ServerAuthenticator.java

Go to the documentation of this file.

package org.openslx.imagemaster.serversession;

import java.nio.ByteBuffer;
import java.util.Map;
import java.util.concurrent.ConcurrentHashMap;

import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.apache.thrift.TException;
import org.openslx.bwlp.thrift.iface.AuthorizationError;
import org.openslx.bwlp.thrift.iface.TAuthorizationException;
import org.openslx.encryption.AsymEncryptionHandler;
import org.openslx.imagemaster.db.models.LocalSatellite;
import org.openslx.imagemaster.util.RandomString;

public class ServerAuthenticator
{

   private static Logger log = LogManager.getLogger( ServerAuthenticator.class );

   private static Map<Integer, byte[]> authenticatingServers = new ConcurrentHashMap<>();

   public static ByteBuffer startServerAuthentication( int satelliteId )
   {
      byte[] secret = RandomString.generateBinary( 100 );
      authenticatingServers.put( satelliteId, secret );
      log.info( "Server of organinzation '" + satelliteId
            + "' starts to authenticate. And got string: '" + secret.length
            + "'" );
      return ByteBuffer.wrap( secret );
   }

   public static void serverAuthenticate( LocalSatellite satellite, ByteBuffer challengeResponse )
         throws TAuthorizationException
   {
      byte[] encryptedBytes = new byte[ challengeResponse.remaining() ];
      challengeResponse.get( encryptedBytes );

      AsymEncryptionHandler verifier = new AsymEncryptionHandler( satellite.getPubkey() );

      if ( !verifier.verifyMessage( encryptedBytes, authenticatingServers.get( satellite.satelliteId ) ) ) {
         throw new TAuthorizationException( AuthorizationError.CHALLENGE_FAILED,
               "You failed the encryption challenge. private and public key don't seem to match." );
      }

      log.info( "Server '" + satellite.satelliteName + "' (" + satellite.organizationId + ") authenticated." );

      authenticatingServers.remove( Integer.valueOf( satellite.organizationId ) );
   }
}