I am developing a thick client for my organization that will be pulling in information from multiple data sources including Jira, Confluence, and custom web services. We are considering using Crowd as a SSO service. What I would like to do is only pass my credentials across the wire once, to the Crowd server, and then be able to access all of my data sources for the remainder of the session (like Oauth).
I have figured out fairly easily how to authenticate with the crowd server rest api. I now have an application token and a session token. What I would like to be able to do is call the Jira rest api with those two tokens. Is this possible? Or is there something else I should be doing?
Here is my test case (full test case project on GitHub). We are using the crowd-integration-client-rest 2.7.1 and jira-rest-java-client 1.0 libraries from Atlassian's public maven repository. The basic authentication test executes successfully, but the crowd authentication test fails when we try to call the Jira api with the Crowd token. All the crowd api calls seem to execute successfully. It's not until we call Jira that we run into any trouble. I am attempting to implement the approach described in this answer. Can anybody spot my problem?
JiraIntegrationTest.java
///... Imports and What Not ...
public class JiraIntegrationTest extends TestCase{
@Test
public void testCrowdAuthentication() throws Exception {
System.out.println("\n\n****TestCrowdAuthentication****");
RestCrowdClientFactory factory = new RestCrowdClientFactory();
CrowdClient client = factory.newInstance("http://127.0.0.1:8095/crowd", "crowd-auth-webapp", "password");
assertNotNull("Client should not be null", client);
final CookieConfiguration cookieConfig = client.getCookieConfiguration();
assertNotNull("Cookie Config should not be null", cookieConfig);
System.out.printf("Cookie Config: %1$s, %2$s\n", cookieConfig.getDomain(), cookieConfig.getName());
UserAuthenticationContext userAuthCtx = new UserAuthenticationContext();
userAuthCtx.setName("test");
userAuthCtx.setCredential(new PasswordCredential("test"));
userAuthCtx.setApplication("crowd-auth-webapp");
userAuthCtx.setValidationFactors(new ValidationFactor[0]);
final String token = client.authenticateSSOUser(userAuthCtx);
assertNotNull("Token should not be null", token);
final Session session = client.validateSSOAuthenticationAndGetSession(token, new Vector<ValidationFactor>());
assertNotNull("Session should not be null", session);
assertEquals("Session token and original token should be equal", session.getToken(), token);
System.out.printf("Session Token: %s %n", session.getToken());
System.out.printf("Session Expires: %tc %n", session.getExpiryDate());
JiraRestClientFactory jiraFactory = new com.atlassian.jira.rest.client.internal.jersey.JerseyJiraRestClientFactory();
JiraRestClient jira = jiraFactory.create(new URI("http://127.0.0.1:8080"), new AuthenticationHandler(){
public void configure(ApacheHttpClientConfig config) {
config.getProperties().put(ApacheHttpClientConfig.PROPERTY_HANDLE_COOKIES, true);
Cookie cookie = new Cookie();
cookie.setName(cookieConfig.getName());
cookie.setValue(token);
cookie.setDomain("127.0.0.1:8080");
cookie.setPath("/");
config.getState().getHttpState().addCookie(cookie);
}
public void configure(Filterable filterable, Client client) {}
});
TestJiraClient(jira); //Perform test access. This is where it fails.
}
//...
Here is the output from running this test case: (test.txt)
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.