# SecureJettyMixin.java

    /*
     * Copyright (c) 2011, Paul Merlin. All Rights Reserved.
     *
     * Licensed under the Apache License, Version 2.0 (the "License");
     * you may not use this file except in compliance with the License.
     * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
     * Unless required by applicable law or agreed to in writing, software
     * distributed under the License is distributed on an "AS IS" BASIS,
     * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     * See the License for the specific language governing permissions and
     * limitations under the License.
     *
     */
    package org.qi4j.library.http;

    import javax.management.MBeanServer;
    import javax.servlet.Filter;
    import javax.servlet.Servlet;
    import javax.servlet.ServletContextListener;
    import org.eclipse.jetty.security.ConstraintMapping;
    import org.eclipse.jetty.security.ConstraintSecurityHandler;
    import org.eclipse.jetty.security.SecurityHandler;
    import org.eclipse.jetty.server.HttpConfiguration;
    import org.eclipse.jetty.server.HttpConnectionFactory;
    import org.eclipse.jetty.server.SecureRequestCustomizer;
    import org.eclipse.jetty.server.Server;
    import org.eclipse.jetty.server.ServerConnector;
    import org.eclipse.jetty.server.SslConnectionFactory;
    import org.qi4j.api.common.Optional;
    import org.qi4j.api.configuration.Configuration;
    import org.qi4j.api.entity.Identity;
    import org.qi4j.api.injection.scope.Service;
    import org.qi4j.api.injection.scope.This;
    import org.qi4j.api.service.ServiceReference;
    import org.qi4j.library.http.Interface.Protocol;

    import static org.qi4j.library.http.JettyConfigurationHelper.configureSsl;

    public class SecureJettyMixin
        extends AbstractJettyMixin
    {

        @This
        private Configuration<SecureJettyConfiguration> configuration;

        @Optional
        @Service
        private Iterable<ConstraintService> constraintServices;

        public SecureJettyMixin( @This Identity meAsIdentity,
                                 @Service Server jettyServer,
                                 @Service Iterable<ServiceReference<ServletContextListener>> contextListeners,
                                 @Service Iterable<ServiceReference<Servlet>> servlets,
                                 @Service Iterable<ServiceReference<Filter>> filters,
                                 @Optional @Service MBeanServer mBeanServer )
        {
            super( meAsIdentity.identity().get(), jettyServer, contextListeners, servlets, filters, mBeanServer );
        }

        @Override
        protected JettyConfiguration configuration()
        {
            return configuration.get();
        }

        @Override
        protected HttpConfiguration specializeHttp( HttpConfiguration httpConfig )
        {
            HttpConfiguration httpsConfig = new HttpConfiguration( httpConfig );
            httpsConfig.addCustomizer( new SecureRequestCustomizer() );
            return httpsConfig;
        }

        @Override
        protected SecurityHandler buildSecurityHandler()
        {
            if( constraintServices != null )
            {
                ConstraintSecurityHandler securityHandler = new ConstraintSecurityHandler();
                for( ConstraintService eachConstraintService : constraintServices )
                {
                    ConstraintMapping csMapping = eachConstraintService.buildConstraintMapping();
                    if( csMapping != null )
                    {
                        securityHandler.addConstraintMapping( csMapping );
                    }
                }
                if( !securityHandler.getConstraintMappings().isEmpty() )
                {
                    return securityHandler;
                }
            }
            return super.buildSecurityHandler();
        }

        @Override
        protected ServerConnector buildConnector( Server server, HttpConfiguration httpConfig )
        {
            SslConnectionFactory sslConnFactory = new SslConnectionFactory();
            configureSsl( sslConnFactory, configuration.get() );
            return new ServerConnector( server, sslConnFactory, new HttpConnectionFactory( httpConfig ) );
        }

        @Override
        protected Protocol servedProtocol()
        {
            return Protocol.https;
        }

    }