lekkimworld.comWeb

A TAI code example

Fri, 10 Jun 2011 12:06:58 GMT

To complete my series posts on writing Trust Association Interceptors (TAI's) for Websphere Application Server I wanted to show a real-life example. Not a good example necessarily but an example never the less... :-)

The below example is a very simple TAI that simply does the following:

The initialize() method reads a cookie name from the configuration done in the Websphere Application Server ISC. It illustrates how you can configure a TAI externally without having to hard code it.
The isTargetInterceptor() method looks at the request and sees if a cookie with the configured name is available. If yes it continues to process the request and if not it aborts processing (from the TAI point of view).
The negotiateValidateandEstablishTrust() method does the actual work by simply telling WAS that the username of user is the value from the cookie.

As you see writing a TAI is very simple but extremely powerful. Imagine what could be done if you did SSO between Websphere Application Server and Lotus Domino.

import java.util.Properties;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.ibm.websphere.security.WebTrustAssociationException;
import com.ibm.websphere.security.WebTrustAssociationFailedException;
import com.ibm.wsspi.security.tai.TAIResult;
import com.ibm.wsspi.security.tai.TrustAssociationInterceptor;

public class ExampleTAI implements TrustAssociationInterceptor {
   // declarations
   private String cookie = null;
   
   @Override
   public void cleanup() {
   }

   @Override
   public String getType() {
      return String.format("Example TAI %s", this.getVersion());
   }

   @Override
   public String getVersion() {
      return "1.0";
   }

   @Override
   public int initialize(Properties props) 
      throws WebTrustAssociationFailedException {
      System.out.println("ExampleTAI.initialize()");
      
      // read properties from configuration in WAS
      this.cookie = props.getProperty("cookieName");
      
      // return 0 to indicate success
      return 0;
   }

   @Override
   public boolean isTargetInterceptor(
      HttpServletRequest req) 
      throws WebTrustAssociationException {
      System.out.println("ExampleTAI.isTargetInterceptor()");
      for (Cookie c : req.getCookies()) {
         if (c.getName().equals(this.cookie)) return true;
      }
      return false;
   }

   @Override
   public TAIResult negotiateValidateandEstablishTrust(
      HttpServletRequest req, 
      HttpServletResponse res) 
      throws WebTrustAssociationFailedException {
      System.out.println("ExampleTAI.negotiate...()");
      for (Cookie c : req.getCookies()) {
         if (c.getName().equals(this.cookie)) {
            // send 200 to signal we're okay
            return TAIResult.create(HttpServletResponse.SC_OK, 
                c.getValue());
         }
      }
      
      // not authenticated
      return TAIResult.create(HttpServletResponse.SC_UNAUTHORIZED);
   }

}

XPages OneUI User Interface Developer Documentation

Tue, 13 Oct 2009 05:36:00 GMT

XPages OneUI User Interface Developer Documentation

Monitor Your Web Addiction in Firefox

Thu, 09 Nov 2006 20:30:59 GMT

Do you dare to install this plugin for Firefox - I don't...

Gadget Lounge � Monitor Your Web Addiction in Firefox

Practical Web Services in IBM Lotus Domino 7: What are Web services and why are they important?

Tue, 07 Nov 2006 21:34:19 GMT

New web services article by Julian on developerWorks: Practical Web Services in IBM Lotus Domino 7: What are Web services and why are they important? via Mr. Elgort...

Geek to Live: Top Firefox 2 config tweaks

Thu, 26 Oct 2006 18:38:56 GMT

Geek to Live: Top Firefox 2 config tweaks via Lifehacker.

It's been a busy browser week...

Thu, 26 Oct 2006 14:04:07 GMT

Just upgraded my Firefox to version 2.0 and I'm posting this using it. Total time of upgrading the browser was 35 seconds incl. downloading the installer. Nice! Try that with Internet Explorer... I have a couple of extensions that no longer work since no compatible versions are available:

Qute theme (not an issue since I like the new theme)
View formatted source
Live HTTP Headers

The new version of Firefox adds a number of nice new features such as in-line spellchecking for web-forms.

Update: I had to disable one of my extensions called "Tab Mix". When the extension is enabled Firefox refuses to load new pages once the configured homepage(s) has been loaded. Disabling the extension solves the problem.

Upgraded to IE7

Tue, 24 Oct 2006 10:06:05 GMT

This morning I upgraded my production laptop to Internet Explorer 7. The upgrade was without problems and I haven't experienced any problems with it. While I'll continue using Firefox as my preferred browser I still have some e-banking and some customer stuff I need to do through IE (using the nice IE Tab extension for Firefox) so it's nice to get the security updates etc. that IE7 affords.

I haven't messed too much around with the IE7 but I'm impressed by what I have seen so far (new favorites, RSS support, tabbed browsing and dedicated search bar). I think it will become a strong competitor to Firefox for the non-geeks among us... :-)

Nice review of IE7

Tue, 24 Oct 2006 07:06:28 GMT

Internet Explorer 7 Review on the SuperSite for Windows. The review touches on design, new features, security web standards compliance and when and how to upgrade. A nice read.