code: /**
   * Licensed to the Apache Software Foundation (ASF) under one
   * or more contributor license agreements. See the NOTICE file
   * distributed with this work for additional information
   * regarding copyright ownership. The ASF licenses this file
   * to you under the Apache License, Version 2.0 (the
   * "License"); you may not use this file except in compliance
   * with the License. You may obtain a copy of the License at
   *
   * http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an
   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
   * KIND, either express or implied. See the License for the
   * specific language governing permissions and limitations
   * under the License.
   */
  package org.apache.cxf.ws.security.policy.model;
  
  import javax.xml.namespace.QName;
  import javax.xml.stream.XMLStreamException;
  import javax.xml.stream.XMLStreamWriter;
  
  import org.apache.cxf.ws.security.policy.SP12Constants;
  import org.apache.cxf.ws.security.policy.SPConstants;
  
  /**
   * @author Ruchith Fernando (ruchith.fernando@gmail.com)
   */
  public class HttpsToken extends Token {
  
      private boolean requireClientCertificate;
      private boolean httpBasicAuthentication;
      private boolean httpDigestAuthentication;
  
      public HttpsToken(SPConstants version) {
          super(version);
      }
  
      public boolean isRequireClientCertificate() {
          return requireClientCertificate;
      }
  
      public void setRequireClientCertificate(boolean requireClientCertificate) {
          this.requireClientCertificate = requireClientCertificate;
      }
  
      /**
       * @return the httpBasicAuthentication
       */
      public boolean isHttpBasicAuthentication() {
          return httpBasicAuthentication;
      }
  
      /**
       * @param httpBasicAuthentication the httpBasicAuthentication to set
       */
      public void setHttpBasicAuthentication(boolean httpBasicAuthentication) {
          this.httpBasicAuthentication = httpBasicAuthentication;
      }
  
      /**
       * @return the httpDigestAuthentication
       */
      public boolean isHttpDigestAuthentication() {
          return httpDigestAuthentication;
      }
  
      /**
       * @param httpDigestAuthentication the httpDigestAuthentication to set
       */
      public void setHttpDigestAuthentication(boolean httpDigestAuthentication) {
          this.httpDigestAuthentication = httpDigestAuthentication;
      }
  
      public QName getRealName() {
          return constants.getHttpsToken();
      }
      public QName getName() {
          return SP12Constants.INSTANCE.getHttpsToken();
      }
  
      public void serialize(XMLStreamWriter writer) throws XMLStreamException {
  
          String localname = getRealName().getLocalPart();
          String namespaceURI = getRealName().getNamespaceURI();
  
          String prefix = writer.getPrefix(namespaceURI);
          if (prefix == null) {
              prefix = getRealName().getPrefix();
              writer.setPrefix(prefix, namespaceURI);
          }
  
          // <sp:HttpsToken
          writer.writeStartElement(prefix, localname, namespaceURI);
  
          if (constants.getVersion() == SPConstants.Version.SP_V12) {
  
              if (isRequireClientCertificate() || isHttpBasicAuthentication() || isHttpDigestAuthentication()) {
                  // <wsp:Policy>
                  writer.writeStartElement(SPConstants.POLICY.getPrefix(), SPConstants.POLICY.getLocalPart(),
                                           SPConstants.POLICY.getNamespaceURI());
  
                  /*
                   * The ws policy 1.2 specification states that only one of those should be present, although a
                   * web server (say tomcat) could be normally configured to require both a client certificate
                   * and a http user/pwd authentication. Nevertheless stick to the specification.
                   */
                  if (isHttpBasicAuthentication()) {
                      writer.writeStartElement(prefix, SPConstants.HTTP_BASIC_AUTHENTICATION.getLocalPart(),
                                               namespaceURI);
                      writer.writeEndElement();
                  } else if (isHttpDigestAuthentication()) {
                      writer.writeStartElement(prefix, SPConstants.HTTP_DIGEST_AUTHENTICATION.getLocalPart(),
                                               namespaceURI);
                      writer.writeEndElement();
                  } else if (isRequireClientCertificate()) {
                      writer.writeStartElement(prefix, SPConstants.REQUIRE_CLIENT_CERTIFICATE.getLocalPart(),
                                               namespaceURI);
                      writer.writeEndElement();
                  }
                  // </wsp:Policy>
                  writer.writeEndElement();
              }
          } else {
              // RequireClientCertificate=".."
              writer.writeAttribute(SPConstants.REQUIRE_CLIENT_CERTIFICATE.getLocalPart(), Boolean
                  .toString(isRequireClientCertificate()));
          }
  
          writer.writeEndElement();
          // </sp:HttpsToken>
      }
  }
  