Multiple users (#14)

* Commmitting changes for multiple users to log in with basic authentication

* committing default props for users

Author: Paul-doherty-aquaq

src/main/java/uk/co/aquaq/kdb/security/SecurityConfiguration.java

@@ -1,4 +1,3 @@
-
 package uk.co.aquaq.kdb.security;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
@@ -12,6 +11,21 @@
 import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 import org.springframework.web.cors.CorsConfiguration;
 import org.springframework.web.servlet.config.annotation.*;
+import org.w3c.dom.Document;
+import org.w3c.dom.Element;
+import org.w3c.dom.Node;
+import org.w3c.dom.NodeList;
+import org.xml.sax.SAXException;
+
+import javax.xml.parsers.DocumentBuilder;
+import javax.xml.parsers.DocumentBuilderFactory;
+import javax.xml.parsers.ParserConfigurationException;
+import java.io.BufferedReader;
+import java.io.File;
+import java.io.FileReader;
+import java.io.IOException;
+import java.util.HashMap;
+import java.util.Map;
 
 
 @Configuration
@@ -26,12 +40,47 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
     @Value("${basic.authentication.password}")
     String password;
 
+    @Value("${authentication.path}")
+    String passwordFile;
+
+
     @Autowired
     public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
+        if(passwordFile!=null && !passwordFile.isEmpty()) {
+            NodeList nList = getNodeList();
+            addAuthenticationsFromXml(auth, nList);
+        }
         auth.inMemoryAuthentication()
                 .withUser(user).password(password).authorities("ROLE_USER");
     }
 
+    private void addAuthenticationsFromXml(AuthenticationManagerBuilder auth, NodeList nList) throws Exception {
+        for (int temp = 0; temp < nList.getLength(); temp++) {
+            Node nNode = nList.item(temp);
+            if (nNode.getNodeType() == Node.ELEMENT_NODE) {
+                Element eElement = (Element) nNode;
+                String username=eElement.getElementsByTagName("username").item(0)
+                        .getTextContent();
+                String password=eElement.getElementsByTagName("password").item(0)
+                        .getTextContent();
+
+                auth.inMemoryAuthentication()
+                        .withUser(username).password(password).authorities("ROLE_USER");
+            }
+        }
+    }
+
+    private NodeList getNodeList() throws ParserConfigurationException, SAXException, IOException {
+        File file = new File(passwordFile);
+        Map<String, String> authMap=new HashMap<>();
+        DocumentBuilder dBuilder = DocumentBuilderFactory.newInstance()
+                .newDocumentBuilder();
+        Document doc = dBuilder.parse(file);
+        doc.getDocumentElement().normalize();
+
+        return doc.getElementsByTagName("user");
+    }
+
     protected void configure(HttpSecurity http) throws Exception {
         http.csrf().disable()
                 .authorizeRequests()

src/main/resources/application.properties

@@ -22,5 +22,5 @@ basic.authentication.user=user
 basic.authentication.password=pass
 
 springfox.documentation.swagger.v2.path=/kdb-rest-service-documentation
-
+authentication.path=\\Path\to\user\file\\users.xml