/*

  * Licensed to the Apache Software Foundation (ASF) under one

  * or more contributor license agreements.  See the NOTICE file

  * distributed with this work for additional information

  * regarding copyright ownership.  The ASF licenses this file

  * to you under the Apache License, Version 2.0 (the

  * "License"); you may not use this file except in compliance

  * with the License.  You may obtain a copy of the License at

  *

  * http://www.apache.org/licenses/LICENSE-2.0

  *

  * Unless required by applicable law or agreed to in writing,

  * software distributed under the License is distributed on an

  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY

  * KIND, either express or implied.  See the License for the

  * specific language governing permissions and limitations

  * under the License.

  */

 package org.apache.chemistry.opencmis.server.shared;

 import org.apache.chemistry.opencmis.commons.server.CallContext;

 import org.apache.commons.codec.binary.Base64;

 import java.io.Serializable;

 import java.util.HashMap;

 import java.util.Map;

 import javax.servlet.http.HttpServletRequest;

 /**

  * Call Context handler that handles basic authentication.

  */

 public class BasicAuthCallContextHandler implements CallContextHandler, Serializable

 {

     private static final long serialVersionUID = 1L;

     /**

      * Constructor.

      */

     public BasicAuthCallContextHandler(  )

     {

     }

     public Map<String, String> getCallContextMap( HttpServletRequest request )

     {

         Map<String, String> result = null;

         String authHeader = request.getHeader( "Authorization" );

         if ( ( authHeader != null ) && ( authHeader.trim(  ).toLowerCase(  ).startsWith( "basic " ) ) )

         {

             int x = authHeader.lastIndexOf( ' ' );

             if ( x == -1 )

             {

                 return result;

             }

             String credentials = null;

             try

             {

                 credentials = new String( Base64.decodeBase64( authHeader.substring( x + 1 ).getBytes( "ISO-8859-1" ) ),

                         "ISO-8859-1" );

             }

             catch ( Exception e )

             {

                 return result;

             }

             x = credentials.indexOf( ':' );

             if ( x == -1 )

             {

                 return result;

             }

             // extract user and password and add them to map

             result = new HashMap<String, String>(  );

             result.put( CallContext.USERNAME, credentials.substring( 0, x ) );

             result.put( CallContext.PASSWORD, credentials.substring( x + 1 ) );

         }

         return result;

     }

 }