/*
 * $Id$
 *
 * This file is part of the Cloud Services Integration Platform (CSIP),
 * a Model-as-a-Service framework, API and application suite.
 *
 * 2012-2022, Olaf David and others, OMSLab, Colorado State University.
 *
 * OMSLab licenses this file to you under the MIT license.
 * See the LICENSE file in the project root for more information.
 */
package csip;

import java.util.Arrays;
import java.util.List;

/** PropertyTokenAuthentication
 * 
 * config (as json):
 * 
 *   ...
 *   "csip.token.authentication" : "property",
 *   "csip.auth.tokens": "token1, token1"
 *   ...
 *  
 *
 * @author od
 */
class PropertyTokenAuthentication implements TokenAuthentication {

  List<String> tokens;


  PropertyTokenAuthentication(String t) {
    if (t == null) 
      throw new RuntimeException("Missing configuration: 'csip.auth.tokens'");
    
    tokens = Arrays.asList(t.split("\\s*,\\s*"));
  }


  @Override
  public void validate(String token) throws SecurityException {
    if (token != null && !token.isEmpty() && tokens.contains(token)) 
      return;
    
    throw new SecurityException("Invalid or missing Authentication token '" + token + "'");
  }

}