Class DigestAuthenticator

java/org/apache/tomcat/websocket/DigestAuthenticator.java:32–168

Authenticator supporting the DIGEST authentication method.

 * Authenticator supporting the DIGEST authentication method.
 */
public class DigestAuthenticator extends Authenticator {

    /**
     * Construct a new DigestAuthenticator.
     */
    public DigestAuthenticator() {
        super();
    }

    private static final StringManager sm = StringManager.getManager(DigestAuthenticator.class);

    /**
     * Name of the DIGEST authentication scheme.
     */
    public static final String schemeName = "digest";
    private static final Object cnonceGeneratorLock = new Object();
    private static volatile SecureRandom cnonceGenerator;
    private int nonceCount = 0;
    private long cNonce;

    @Override
    public String getAuthorization(String method, String requestUri, String authenticateHeader, String userName,
            String userPassword, String userRealm) throws AuthenticationException {

        validateUsername(userName);
        validatePassword(userPassword);

        Map<String,String> parameterMap = parseAuthenticateHeader(authenticateHeader);
        String realm = parameterMap.get("realm");

        validateRealm(userRealm, realm);

        String nonce = parameterMap.get("nonce");
        String messageQop = parameterMap.get("qop");
        if (messageQop == null || messageQop.isEmpty()) {
            throw new AuthenticationException(sm.getString("digestAuthenticator.noQop"));
        }
        String algorithm = parameterMap.get("algorithm") == null ? "MD5" : parameterMap.get("algorithm");
        String opaque = parameterMap.get("opaque");
        if (cnonceGenerator == null) {
            synchronized (cnonceGeneratorLock) {
                if (cnonceGenerator == null) {
                    cnonceGenerator = new SecureRandom();
                }
            }
        }
        cNonce = cnonceGenerator.nextLong();
        nonceCount++;

        StringBuilder challenge = new StringBuilder();

        challenge.append("Digest ");
        challenge.append("username=\"").append(userName).append("\",");
        challenge.append("realm=\"").append(realm).append("\",");
        challenge.append("nonce=\"").append(nonce).append("\",");
        challenge.append("uri=\"").append(requestUri).append("\",");

        try {