/*
    * Copyright 2008 Web Cohesion
    *
    * Licensed under the Apache License, Version 2.0 (the "License");
    * you may not use this file except in compliance with the License.
    * You may obtain a copy of the License at
    *
    *   https://www.apache.org/licenses/LICENSE-2.0
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  
  package org.springframework.security.oauth.consumer.net;
  
  import org.springframework.security.oauth.consumer.OAuthConsumerToken;
  import org.springframework.security.oauth.consumer.ProtectedResourceDetails;
  import org.springframework.security.oauth.consumer.OAuthConsumerSupport;
  
  import java.io.IOException;
  import java.net.Proxy;
  import java.net.URL;
  import java.net.URLConnection;
  import java.net.HttpURLConnection;
  import java.util.Map;
  
  /**
   * Stream handler to handle the request stream to a protected resource over HTTP.
   *
   * @author Ryan Heaton
   */
  @SuppressWarnings("restriction")
  public class OAuthOverHttpURLStreamHandler extends sun.net.www.protocol.http.Handler {
  
    private final ProtectedResourceDetails resourceDetails;
    private final OAuthConsumerToken accessToken;
    private final OAuthConsumerSupport support;
    private final String httpMethod;
    private final Map<String, String> additionalParameters;
  
    public OAuthOverHttpURLStreamHandler(ProtectedResourceDetails resourceDetails, OAuthConsumerToken accessToken, OAuthConsumerSupport support, String httpMethod, Map<String, String> additionalParameters) {
      this.resourceDetails = resourceDetails;
      this.accessToken = accessToken;
      this.support = support;
      this.httpMethod = httpMethod;
      this.additionalParameters = additionalParameters;
    }
  
    @Override
    protected URLConnection openConnection(URL url, Proxy proxy) throws IOException {
      HttpURLConnection connection = (HttpURLConnection) super.openConnection(url, proxy);
      connection.setRequestMethod(this.httpMethod);
      if (resourceDetails.isAcceptsAuthorizationHeader()) {
        String authHeader = support.getAuthorizationHeader(resourceDetails, accessToken, url, httpMethod, additionalParameters);
        connection.setRequestProperty("Authorization", authHeader);
      }
      return connection;
    }
  
  }