- * A roaming user works on more than one computer on a network.
- * A roaming user's profile is kept on a server on the network and
- * is loaded onto a system when the user logs on.
- */
- ApplicationData,
- PrinterShortcuts,
- /**
- * The directory that serves as a common repository for application-specific data
- * that is used by the current, non-roaming user.
- */
- LocalApplicationData,
- InternetCache,
- Cookies,
- History,
- CommonApplicationData,
- Windows,
- System,
- ProgramFiles,
- MyPictures,
- /**
- * The user's profile folder.
- * Applications should not create files or folders at this level;
- * they should put their data under the locations referred to by {@link #ApplicationData}.
- */
- UserProfile,
- SystemX86,
- ProgramFilesX86,
- CommonProgramFiles,
- CommonProgramFilesX86,
- CommonTemplates,
- CommonDocuments,
- CommonAdminTools,
- AdminTools,
- CommonMusic,
- CommonPictures,
- CommonVideos,
- Resources,
- LocalizedResources,
- CommonOemLinks,
- CDBurning,
- }
-}
diff --git a/common/src/main/java/com/microsoft/alm/helpers/Func.java b/common/src/main/java/com/microsoft/alm/helpers/Func.java
deleted file mode 100644
index 9e1e80b1..00000000
--- a/common/src/main/java/com/microsoft/alm/helpers/Func.java
+++ /dev/null
@@ -1,20 +0,0 @@
-// Copyright (c) Microsoft. All rights reserved.
-// Licensed under the MIT license. See License.txt in the project root.
-
-package com.microsoft.alm.helpers;
-
-/**
- * Represents a function that accepts one argument and produces a result.
- *
- * @param
- * Favor existing global PAT available from the store unless override from the {@link PromptBehavior}.
- *
- * If there are no existing Global PAT, and prompting is allowed, we will generate a PAT with the given
- * {@link VsoTokenScope} and display name.
- *
- *
- * @param vsoTokenScope
- * If we are generating token, the scope of the newly generated token
- * @param patDisplayName
- * If we are generating token, the display name of the token
- * @param promptBehavior
- * dictates whether we should prompt the user for input or not
- *
- * @return global Personal Access Token
- */
- @Deprecated
- Token getPersonalAccessToken(final VsoTokenScope vsoTokenScope, final String patDisplayName,
- final PromptBehavior promptBehavior);
- /**
- * Retrieve a Personal Access {@link Token} that works for the specified account URI.
- *
- * Favor existing token available from the store unless override from the {@link PromptBehavior}.
- *
- * If there are no existing PAT, and prompting is allowed, we will generate a PAT with the given
- * {@link VsoTokenScope} and display name.
- *
- * @param key
- * The account URI we will be retrieve PAT for
- * @param tokenScope
- * If we are generating token, the scope of the newly generated token
- * @param patDisplayName
- * If we are generating token, the display name of the token
- * @param promptBehavior
- * dictates whether we should prompt the user for input or not
- *
- * @return a Personal Access Token scoped to the specified account URI
- */
- Token getPersonalAccessToken(final URI key, final VsoTokenScope tokenScope,
- final String patDisplayName, final PromptBehavior promptBehavior);
-
- /**
- * Retrieve a Personal Access {@link Token} that works for the specified account URI.
- *
- * Favor existing token available from the store unless override from the {@link PromptBehavior}.
- *
- * If there are no existing PAT, and prompting is allowed, we will generate a PAT with the given
- * {@link VsoTokenScope} and display name.
- *
- * @param key
- * The account URI we will be retrieve PAT for
- * @param tokenScope
- * If we are generating token, the scope of the newly generated token
- * @param patDisplayName
- * If we are generating token, the display name of the token
- * @param promptBehavior
- * dictates whether we should prompt the user for input or not
- * @param oauth2Token
- * if oauth2Token is not null, use it and do not prompt to login via browser
- *
- * @return a Personal Access Token scoped to the specified account URI
- */
- Token getPersonalAccessToken(final URI key, final VsoTokenScope tokenScope,
- final String patDisplayName, final PromptBehavior promptBehavior,
- final TokenPair oauth2Token);
-
- /**
- * Sign out globally from this library only. This function does not perform any server calls to sign the
- * user out.
- *
- * @return {@code true} if the global secret is removed from this library
- * {@code false} otherwise
- */
- boolean signOut();
-
- /**
- * Sign out from this particular URI from this library only. This function does not perform any server calls to
- * sign the user out on the server.
- *
- * @param key
- * Forget the secret stored for the account identified by this URI key
- *
- * @return {@code true} if the global secret is removed from this library
- * {@code false} otherwise
- */
- boolean signOut(final URI key);
-}
diff --git a/core/src/main/java/com/microsoft/alm/auth/BaseAuthenticator.java b/core/src/main/java/com/microsoft/alm/auth/BaseAuthenticator.java
deleted file mode 100644
index 80a7d69f..00000000
--- a/core/src/main/java/com/microsoft/alm/auth/BaseAuthenticator.java
+++ /dev/null
@@ -1,277 +0,0 @@
-// Copyright (c) Microsoft. All rights reserved.
-// Licensed under the MIT license. See License.txt in the project root.
-
-package com.microsoft.alm.auth;
-
-import com.microsoft.alm.secret.Credential;
-import com.microsoft.alm.secret.Secret;
-import com.microsoft.alm.secret.Token;
-import com.microsoft.alm.secret.TokenPair;
-import com.microsoft.alm.secret.VsoTokenScope;
-import com.microsoft.alm.helpers.Debug;
-import com.microsoft.alm.storage.SecretStore;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
-import java.net.URI;
-import java.util.concurrent.atomic.AtomicReference;
-
-/**
- * Abstract authenticator with default implementations
- *
- * Real authenticator should extend this no op authenticator, and they do not have to implement
- * methods that don't make sense to them
- */
-public abstract class BaseAuthenticator implements Authenticator {
-
- private static final Logger logger = LoggerFactory.getLogger(BaseAuthenticator.class);
-
- protected Secret.IUriNameConversion uriToKeyConversion = Secret.DefaultUriNameConversion;
-
- @Override
- public Secret.IUriNameConversion getUriToKeyConversion() {
- return uriToKeyConversion;
- }
-
- @Override
- public void setUriToKeyConversion(final Secret.IUriNameConversion conversion) {
- uriToKeyConversion = conversion;
- }
-
- @Override
- public boolean isCredentialSupported() {
- return false;
- }
-
- @Override
- public Credential getCredential(final URI key) {
- return null;
- }
-
- @Override
- public Credential getCredential(final URI key, final PromptBehavior promptBehavior) {
- return null;
- }
-
- @Override
- public boolean isOAuth2TokenSupported() {
- return false;
- }
-
- @Override
- public TokenPair getOAuth2TokenPair() {
- return null;
- }
-
- @Override
- public TokenPair getOAuth2TokenPair(final PromptBehavior promptBehavior) {
- return null;
- }
-
- @Override
- public TokenPair getOAuth2TokenPair(final URI key, final PromptBehavior promptBehavior) {
- return null;
- }
-
- @Override
- public boolean isPersonalAccessTokenSupported() {
- return false;
- }
-
- @Override
- public Token getPersonalAccessToken(final VsoTokenScope tokenScope, final String patDisplayName,
- final PromptBehavior promptBehavior) {
- return null;
- }
-
- @Override
- public Token getPersonalAccessToken(final URI key, final VsoTokenScope tokenScope,
- final String patDisplayName, final PromptBehavior promptBehavior) {
- return null;
- }
-
- @Override
- public Token getPersonalAccessToken(final URI key, final VsoTokenScope tokenScope,
- final String patDisplayName, final PromptBehavior promptBehavior,
- final TokenPair oauth2Token) {
- return null;
- }
-
- @Override
- public boolean signOut() {
- return false;
- }
-
- @Override
- public boolean signOut(final URI uri) {
- Debug.Assert(uri != null, "uri cannot be null");
-
- logger.debug("Signing out from uri: {}", uri);
- final String key = getKey(uri);
- Debug.Assert(key != null, "key conversion failed");
-
- synchronized (getStore()) {
- logger.debug("Deleting secret for {}", key);
- return getStore().delete(key);
- }
- }
-
- /**
- * Keys are separated by name space, which are just the authentication type of this Authentcator
- *
- * So a PAT key will be different from an OAuth2 Key even for the same URI
- *
- * @param targetUri
- * the URL we are trying to authenticate
- *
- * @return key used to retrieve and store secrets in a secret store
- */
- public String getKey(final URI targetUri) {
- logger.debug("Getting secret for uri: {}", targetUri);
- return this.uriToKeyConversion.convert(targetUri, getAuthType());
- }
-
- protected abstract SecretStore getStore();
-
- /**
- * Common pattern to retrieve a secret from store based on supplied prompt behavior
- */
- public static abstract class SecretRetrieverCredentialPrompt that conforms to IDE standard.
- */
-public class DefaultCredentialPrompt implements CredentialPrompt {
-
- private final Lock lock = new ReentrantLock();
- private final Condition userResponseReceived = lock.newCondition();
-
- private Credential userEnteredCredential;
-
- /**
- * Creates new form DefaultCredentialPrompt
- */
- public DefaultCredentialPrompt() {
- JPanel panel = createJPanel();
-
- frame = new JFrame();
- frame.setSize(380, 180);
-
- frame.setDefaultCloseOperation(JFrame.DISPOSE_ON_CLOSE);
-
- frame.addWindowListener(new WindowAdapter() {
- @Override
- public void windowClosed(WindowEvent e) {
- // closing the windows is the same as cancelling the operation
- jButtonCancelActionPerformed(null);
- }
- });
- frame.add(panel);
- }
-
- /**
- * This method is called from within the constructor to create the panel.
- * WARNING: this code was generated by netbeans gui editor. Modify at your own risk.
- */
- @SuppressWarnings("unchecked")
- private JPanel createJPanel() {
- final JPanel jPanel = new JPanel();
- final JLabel jLabel1 = new javax.swing.JLabel();
- final JLabel jLabel2 = new javax.swing.JLabel();
-
- jTextFieldUsername = new javax.swing.JTextField();
- jPasswordField = new javax.swing.JPasswordField();
- jButtonOK = new javax.swing.JButton();
- jButtonCancel = new javax.swing.JButton();
-
- jLabel1.setText("Username:");
- jLabel2.setText("Password:");
- jButtonOK.setText("OK");
-
- jButtonOK.addActionListener(new java.awt.event.ActionListener() {
- public void actionPerformed(java.awt.event.ActionEvent evt) {
- jButtonOKActionPerformed(evt);
- }
- });
-
- jButtonCancel.setText("Cancel");
- jButtonCancel.addActionListener(new java.awt.event.ActionListener() {
- public void actionPerformed(java.awt.event.ActionEvent evt) {
- jButtonCancelActionPerformed(evt);
- }
- });
-
- javax.swing.GroupLayout layout = new javax.swing.GroupLayout(jPanel);
- jPanel.setLayout(layout);
- layout.setHorizontalGroup(
- layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
- .addGroup(javax.swing.GroupLayout.Alignment.TRAILING, layout.createSequentialGroup()
- .addContainerGap(23, Short.MAX_VALUE)
- .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
- .addGroup(layout.createSequentialGroup()
- .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.TRAILING)
- .addComponent(jLabel2)
- .addComponent(jLabel1))
- .addGap(18, 18, 18)
- .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING, false)
- .addComponent(jTextFieldUsername)
- .addComponent(jPasswordField, javax.swing.GroupLayout.PREFERRED_SIZE, 265, javax.swing.GroupLayout.PREFERRED_SIZE))
- .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED, 5, javax.swing.GroupLayout.PREFERRED_SIZE))
- .addGroup(javax.swing.GroupLayout.Alignment.TRAILING, layout.createSequentialGroup()
- .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED, 180, javax.swing.GroupLayout.PREFERRED_SIZE)
- .addComponent(jButtonOK)
- .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.UNRELATED)
- .addComponent(jButtonCancel)))
- .addGap(18, 18, 18))
- );
- layout.setVerticalGroup(
- layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
- .addGroup(layout.createSequentialGroup()
- .addGap(23, 23, 23)
- .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.BASELINE)
- .addComponent(jLabel1)
- .addComponent(jTextFieldUsername, javax.swing.GroupLayout.PREFERRED_SIZE, javax.swing.GroupLayout.DEFAULT_SIZE, javax.swing.GroupLayout.PREFERRED_SIZE))
- .addGap(18, 18, 18)
- .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.BASELINE)
- .addComponent(jLabel2)
- .addComponent(jPasswordField, javax.swing.GroupLayout.PREFERRED_SIZE, javax.swing.GroupLayout.DEFAULT_SIZE, javax.swing.GroupLayout.PREFERRED_SIZE))
- .addGap(18, 18, 18)
- .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.BASELINE)
- .addComponent(jButtonOK)
- .addComponent(jButtonCancel))
- .addContainerGap(14, Short.MAX_VALUE))
- );
-
- return jPanel;
- }
-
- private void jButtonCancelActionPerformed(java.awt.event.ActionEvent evt) {
- lock.lock();
- try {
- userEnteredCredential = null;
- userResponseReceived.signal();
- } finally {
- lock.unlock();
- }
- }
-
- private void jButtonOKActionPerformed(java.awt.event.ActionEvent evt) {
- lock.lock();
- try {
- final String username = jTextFieldUsername.getText();
- final String password = String.valueOf(jPasswordField.getPassword());
- userEnteredCredential = new Credential(username, password);
-
- userResponseReceived.signal();
- } finally {
- lock.unlock();
- }
- }
-
- private void showPrompt() {
- java.awt.EventQueue.invokeLater(new Runnable() {
- public void run() {
- frame.setVisible(true);
- }
- });
- }
-
- public Credential prompt(URI target) {
- /* Create and display the form */
- showPrompt();
-
- lock.lock();
- try {
- userResponseReceived.awaitUninterruptibly();
-
- return userEnteredCredential;
-
- } finally {
- frame.dispose();
- lock.unlock();
- }
- }
-
- // Variables declaration - do not modify
- private javax.swing.JButton jButtonCancel;
- private javax.swing.JButton jButtonOK;
- private javax.swing.JPasswordField jPasswordField;
- private javax.swing.JTextField jTextFieldUsername;
-
- private JFrame frame;
- // End of variables declaration
-}
-
diff --git a/core/src/main/java/com/microsoft/alm/auth/oauth/AzureAuthority.java b/core/src/main/java/com/microsoft/alm/auth/oauth/AzureAuthority.java
deleted file mode 100644
index fdde848c..00000000
--- a/core/src/main/java/com/microsoft/alm/auth/oauth/AzureAuthority.java
+++ /dev/null
@@ -1,329 +0,0 @@
-// Copyright (c) Microsoft. All rights reserved.
-// Licensed under the MIT license. See License.txt in the project root.
-
-package com.microsoft.alm.auth.oauth;
-
-import com.microsoft.alm.auth.PromptBehavior;
-import com.microsoft.alm.helpers.*;
-import com.microsoft.alm.oauth2.useragent.AuthorizationException;
-import com.microsoft.alm.oauth2.useragent.AuthorizationResponse;
-import com.microsoft.alm.oauth2.useragent.UserAgent;
-import com.microsoft.alm.oauth2.useragent.UserAgentImpl;
-import com.microsoft.alm.secret.Token;
-import com.microsoft.alm.secret.TokenPair;
-import com.microsoft.alm.secret.TokenType;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
-import java.io.IOException;
-import java.net.URI;
-import java.net.URISyntaxException;
-import java.util.UUID;
-import java.util.concurrent.atomic.AtomicReference;
-
-/**
- * Interfaces with Azure to perform authentication and identity services.
- */
-public class AzureAuthority {
-
- private static final Logger logger = LoggerFactory.getLogger(AzureAuthority.class);
-
- /**
- * The base URL for logon services in Azure.
- */
- public static final String AuthorityHostUrlBase = "https://login.microsoftonline.com";
-
- /**
- * Common tenant for discovery of real tenant
- */
- public static final String CommonTenant = "common";
-
- /**
- * The common Url for logon services in Azure.
- */
- public static final String DefaultAuthorityHostUrl = AuthorityHostUrlBase + "/" + CommonTenant;
-
- /**
- * AzureAuthority with common tenant
- */
- public static final AzureAuthority DefaultAzureAuthority = new AzureAuthority();
-
- private static final String VSTS_BASE_DOMAIN = "visualstudio.com";
- private static final String VSTS_RESOURCE_TENANT_HEADER = "X-VSS-ResourceTenant";
-
- private final UserAgent userAgent;
- private final AzureDeviceFlow azureDeviceFlow;
-
- private String authorityHostUrl;
-
- /**
- * Creates a new {@link AzureAuthority} with the default authority host url.
- */
- public AzureAuthority() {
- this(DefaultAuthorityHostUrl);
- }
-
- /**
- * Creates a new {@link AzureAuthority} with an authority host url.
- *
- * @param authorityHostUrl Non-default authority host url.
- */
- public AzureAuthority(final String authorityHostUrl) {
- this(authorityHostUrl, new UserAgentImpl(), new AzureDeviceFlow());
- }
-
- AzureAuthority(final String authorityHostUrl, final UserAgent userAgent, final AzureDeviceFlow azureDeviceFlow) {
- Debug.Assert(UriHelper.isWellFormedUriString(authorityHostUrl), "The authorityHostUrl parameter is invalid.");
- Debug.Assert(userAgent != null, "The userAgent parameter is null.");
-
- this.authorityHostUrl = authorityHostUrl;
- this.userAgent = userAgent;
- this.azureDeviceFlow = azureDeviceFlow;
- }
-
- static URI createAuthorizationEndpointUri(final String authorityHostUrl, final String resource, final String clientId,
- final URI redirectUri, final UserIdentifier userId, final String state,
- final PromptBehavior promptBehavior, final String queryParameters) {
- final QueryString qs = new QueryString();
- qs.put(OAuthParameter.RESOURCE, resource);
- qs.put(OAuthParameter.CLIENT_ID, clientId);
- qs.put(OAuthParameter.RESPONSE_TYPE, OAuthParameter.CODE);
- qs.put(OAuthParameter.REDIRECT_URI, redirectUri.toString());
-
- if (!userId.isAnyUser()
- && (userId.getType() == UserIdentifierType.OPTIONAL_DISPLAYABLE_ID
- || userId.getType() == UserIdentifierType.REQUIRED_DISPLAYABLE_ID)) {
- qs.put(OAuthParameter.LOGIN_HINT, userId.getId());
- }
-
- if (state != null) {
- qs.put(OAuthParameter.STATE, state);
- }
-
- String promptValue = null;
- switch (promptBehavior) {
- case ALWAYS:
- promptValue = PromptValue.LOGIN;
- break;
- case NEVER:
- promptValue = PromptValue.ATTEMPT_NONE;
- break;
- }
- if (promptValue != null) {
- qs.put(OAuthParameter.PROMPT, promptValue);
- }
-
- final StringBuilder sb = new StringBuilder(authorityHostUrl);
- sb.append("/oauth2/authorize?");
- sb.append(qs.toString());
- if (!StringHelper.isNullOrWhiteSpace(queryParameters)) {
- // TODO: 449282: ADAL.NET checks if queryParameters contains any duplicate parameters
- int start = (queryParameters.charAt(0) == '&') ? 1 : 0;
- sb.append('&').append(queryParameters, start, queryParameters.length());
- }
- final URI result;
- try {
- result = new URI(sb.toString());
- } catch (final URISyntaxException e) {
- throw new Error(e);
- }
- return result;
- }
-
- static URI createTokenEndpointUri(final String authorityHostUrl) {
- final StringBuilder sb = new StringBuilder(authorityHostUrl);
- sb.append("/oauth2/token");
- final URI result;
- try {
- result = new URI(sb.toString());
- } catch (final URISyntaxException e) {
- throw new Error(e);
- }
- return result;
- }
-
- static StringContent createTokenRequest(final String resource, final String clientId, final String authorizationCode,
- final URI redirectUri, final UUID correlationId) {
- final QueryString qs = new QueryString();
- qs.put(OAuthParameter.RESOURCE, resource);
- qs.put(OAuthParameter.CLIENT_ID, clientId);
- qs.put(OAuthParameter.GRANT_TYPE, OAuthParameter.AUTHORIZATION_CODE);
- qs.put(OAuthParameter.CODE, authorizationCode);
- qs.put(OAuthParameter.REDIRECT_URI, redirectUri.toString());
- if (correlationId != null && !Guid.Empty.equals(correlationId)) {
- qs.put(OAuthParameter.CORRELATION_ID, correlationId.toString());
- qs.put(OAuthParameter.REQUEST_CORRELATION_ID_IN_RESPONSE, "true");
- }
- final StringContent result = StringContent.createUrlEncoded(qs);
- return result;
- }
-
- static StringContent createTokenRequestByRefreshToken(final String resource, final String clientId,
- final Token refreshToken) {
-
- final QueryString qs = new QueryString();
-
- qs.put(OAuthParameter.RESOURCE, resource);
- qs.put(OAuthParameter.CLIENT_ID, clientId);
- qs.put(OAuthParameter.GRANT_TYPE, OAuthParameter.REFRESH_TOKEN);
- qs.put(OAuthParameter.REFRESH_TOKEN, refreshToken.Value);
-
- final StringContent result = StringContent.createUrlEncoded(qs);
- return result;
- }
-
- /**
- * Determines if there's the targetUri represents a Visual Studio Team Services account
- * backed by Azure Active Directory (AAD).
- *
- * @param targetUri the resource which the authority protects.
- * @return the AAD tenant ID if applicable; {@code null} otherwise.
- */
- public static UUID detectTenantId(final URI targetUri) throws IOException {
- final AtomicReference