Apereo-Learning-Analytics-Initiative / OpenLRW

@Component

public class AjaxAuthenticationProvider implements AuthenticationProvider {

    private final OrgService orgService;

    @Autowired

    public AjaxAuthenticationProvider(final OrgService orgService) {

        this.orgService = orgService;

    }

    @Override

    public Authentication authenticate(Authentication authentication) throws AuthenticationException {

        Assert.notNull(authentication, "No authentication data provided");

        String key = (String) authentication.getPrincipal();

        String secret = (String) authentication.getCredentials();

        Org org;

        try {

          org = orgService.findByApiKeyAndApiSecret(key, secret);

        } 

        catch (OrgNotFoundException e) {

          throw new AuthenticationCredentialsNotFoundException(e.getMessage());

        }

        List<GrantedAuthority> authorities = Collections.singletonList(new SimpleGrantedAuthority("ROLE_ORG_ADMIN"));        

        UserContext userContext = UserContext.create(org.getMetadata().get(Vocabulary.TENANT), org.getSourcedId(), authorities);        

        return new UsernamePasswordAuthenticationToken(userContext, null, userContext.getAuthorities());

    }

    @Override

    public boolean supports(Class<?> authentication) {

        return (UsernamePasswordAuthenticationToken.class.isAssignableFrom(authentication));