public void send_request()

in yoko-core/src/main/java/org/apache/yoko/orb/csi/CSIClientRequestInterceptor.java [51:210]

• 111 lines of code
• 18 McCabe index (conditional complexity)

    public void send_request(ClientRequestInfo ri) throws ForwardRequest {
        org.omg.CORBA.Object target = ri.effective_target();

        if (target instanceof org.omg.CORBA.portable.ObjectImpl) {
            boolean isLocal = ((org.omg.CORBA.portable.ObjectImpl) target)
                    ._is_local();

            // save value of isLocal
            if (ri.response_expected())
                CallStatus.pushIsLocal(isLocal);

            // ignore CSI for local calls
            if (isLocal) {
                return;
            }
        }

        boolean target_supports_gssup = false;
        boolean target_requires_gssup = false;

        CompoundSecMech mech = null;

        try {
            TaggedComponent tc = ri
                    .get_effective_component(TAG_CSI_SEC_MECH_LIST.value);

            byte[] data = tc.component_data;

            Any sl_any = codec.decode_value(data, CompoundSecMechListHelper
                    .type());
            CompoundSecMechList sl = CompoundSecMechListHelper.extract(sl_any);

            if (sl.mechanism_list.length == 0) {
                log.fine("empty sec mech list");
                return;
            }

            mech = sl.mechanism_list[0];

        }
        catch (org.omg.CORBA.BAD_PARAM ex) {
            log.fine("no security mechanism");
            return;
        }
        catch (UserException e) {
            MARSHAL me = new MARSHAL("cannot decode local security descriptor",
                                     0, CompletionStatus.COMPLETED_NO);
            me.initCause(e);
            throw me;
        }

        log.fine("transport_mech tag = " + mech.transport_mech.tag);

        String target_name = null;

        AS_ContextSec as = mech.as_context_mech;
        if (as != null) {
            if (java.util.Arrays.equals(GSSUP_OID,
                                        as.client_authentication_mech))
            {
                target_requires_gssup = (as.target_requires & EstablishTrustInClient.value) != 0;
                target_supports_gssup = (as.target_supports & EstablishTrustInClient.value) != 0;

                target_name = decodeGSSExportedName(as.target_name);

                log.fine("decoded target name = " + target_name);
            }
        }

        boolean support_gssup_delegation = false;
        boolean support_x500_delegation = false;

        if (!target_supports_gssup) {

            SAS_ContextSec sas = mech.sas_context_mech;
            for (int i = 0; i < sas.supported_naming_mechanisms.length; i++) {
                if (java.util.Arrays.equals(GSSUP_OID,
                                            sas.supported_naming_mechanisms[i])
                    && (sas.supported_identity_types & ITTPrincipalName.value) != 0)
                {
                    support_gssup_delegation = true;
                    log.fine("target supports GSSUP identity delegation");
                    break;
                }
            }

            if ((sas.supported_identity_types & ITTDistinguishedName.value) != 0) {
                support_x500_delegation = true;
            }

            if (!support_gssup_delegation && !support_x500_delegation) {
                log.fine("target supports security, but not GSSUP/X500");
                return;
            }

        } else {
            log.fine("AS SPEC:" + " target_supports="
                      + target_supports_gssup + " target_requires="
                      + target_requires_gssup);
        }

        AuthenticationInfo authInfo = SecurityContext.getAuthenticationInfo();

        if (authInfo == null) {
            log.fine("no auth info");
            return;
        }

        String name = authInfo.getPrincipalName();
        String realm = authInfo.getRealm();
        String password = authInfo.getPassword();

        SASContextBody sasBody = new SASContextBody();

        EstablishContext establishMsg = new EstablishContext();

        // Indicate stateless CSS
        establishMsg.client_context_id = 0;

        // Make empty authorization token list
        establishMsg.authorization_token = EMPTY_AUTH_ELEMENT;

        String scopedUserName = name + "@" + realm;

        if (support_gssup_delegation) {

            establishMsg.client_authentication_token = EMPTY_BARR;

            //
            // indicate identitytoken as ITTPrincipalName
            //
            IdentityToken identityToken = new IdentityToken();
            identityToken
                    .principal_name(encapsulateByteArray(encodeGSSExportedName(scopedUserName)));
            establishMsg.identity_token = identityToken;

            log.fine("send_request, name: \"" + scopedUserName + "\"");
        } else {

            // Make GSSUP InitialContextToken
            InitialContextToken gssupToken = new InitialContextToken();
            gssupToken.username = utf8encode(scopedUserName);
            gssupToken.target_name = encodeGSSExportedName(realm);
            gssupToken.password = utf8encode(password);

            establishMsg.client_authentication_token = encodeGSSUPToken(gssupToken);

            // Indicate identity token is ITTAbsent
            IdentityToken identityToken = new IdentityToken();
            identityToken.absent(true);
            establishMsg.identity_token = identityToken;

            log.fine("send_request, name: \"" + scopedUserName
                      + "\", pw: \"" + password + "\"");
        }

        sasBody.establish_msg(establishMsg);

        ri.add_request_service_context(encodeSASContextBody(sasBody), true);
    }