117 lines
4.5 KiB
Java
117 lines
4.5 KiB
Java
/**
|
|
* ************************************************************************************************
|
|
* <p>
|
|
* <p>
|
|
* This file is part of WebGoat, an Open Web Application Security Project utility. For details,
|
|
* please see http://www.owasp.org/
|
|
* <p>
|
|
* Copyright (c) 2002 - 20014 Bruce Mayhew
|
|
* <p>
|
|
* This program is free software; you can redistribute it and/or modify it under the terms of the
|
|
* GNU General Public License as published by the Free Software Foundation; either version 2 of the
|
|
* License, or (at your option) any later version.
|
|
* <p>
|
|
* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without
|
|
* even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* General Public License for more details.
|
|
* <p>
|
|
* You should have received a copy of the GNU General Public License along with this program; if
|
|
* not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
|
|
* 02111-1307, USA.
|
|
* <p>
|
|
* Getting Source ==============
|
|
* <p>
|
|
* Source for this application is maintained at https://github.com/WebGoat/WebGoat, a repository for free software
|
|
* projects.
|
|
*
|
|
* @author WebGoat
|
|
* @version $Id: $Id
|
|
* @since October 28, 2003
|
|
*/
|
|
package org.owasp.webgoat;
|
|
|
|
import lombok.SneakyThrows;
|
|
import lombok.extern.slf4j.Slf4j;
|
|
import org.owasp.webgoat.plugins.Plugin;
|
|
import org.owasp.webgoat.plugins.PluginClassLoader;
|
|
import org.owasp.webgoat.plugins.PluginEndpointPublisher;
|
|
import org.owasp.webgoat.plugins.PluginsLoader;
|
|
import org.owasp.webgoat.session.Course;
|
|
import org.owasp.webgoat.session.UserTracker;
|
|
import org.owasp.webgoat.session.WebSession;
|
|
import org.owasp.webgoat.session.WebgoatContext;
|
|
import org.springframework.beans.factory.annotation.Qualifier;
|
|
import org.springframework.beans.factory.annotation.Value;
|
|
import org.springframework.boot.SpringApplication;
|
|
import org.springframework.boot.autoconfigure.SpringBootApplication;
|
|
import org.springframework.boot.builder.SpringApplicationBuilder;
|
|
import org.springframework.boot.web.support.SpringBootServletInitializer;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Scope;
|
|
import org.springframework.context.annotation.ScopedProxyMode;
|
|
|
|
import java.io.File;
|
|
import java.util.List;
|
|
|
|
@SpringBootApplication
|
|
@Slf4j
|
|
public class WebGoat extends SpringBootServletInitializer {
|
|
|
|
@Override
|
|
protected SpringApplicationBuilder configure(SpringApplicationBuilder application) {
|
|
return application.sources(WebGoat.class);
|
|
}
|
|
|
|
public static void main(String[] args) throws Exception {
|
|
SpringApplication.run(WebGoat.class, args);
|
|
}
|
|
|
|
@Bean(name = "pluginTargetDirectory")
|
|
public File pluginTargetDirectory(@Value("${webgoat.user.directory}") final String webgoatHome) {
|
|
return new File(webgoatHome);
|
|
}
|
|
|
|
@Bean
|
|
public PluginClassLoader pluginClassLoader() {
|
|
return new PluginClassLoader(PluginClassLoader.class.getClassLoader());
|
|
}
|
|
|
|
@Bean
|
|
public PluginsLoader pluginsLoader(@Qualifier("pluginTargetDirectory") File pluginTargetDirectory, PluginClassLoader classLoader) {
|
|
return new PluginsLoader(pluginTargetDirectory, classLoader);
|
|
}
|
|
|
|
@Bean
|
|
@Scope(value = "session", proxyMode = ScopedProxyMode.TARGET_CLASS)
|
|
public WebSession webSession(WebgoatContext webgoatContext) {
|
|
return new WebSession(webgoatContext);
|
|
}
|
|
|
|
@Bean
|
|
public Course course(PluginsLoader pluginsLoader, PluginEndpointPublisher pluginEndpointPublisher) {
|
|
Course course = new Course();
|
|
List<Plugin> plugins = pluginsLoader.loadPlugins();
|
|
if (plugins.isEmpty()) {
|
|
log.error("No lessons found if you downloaded an official release of WebGoat please take the time to");
|
|
log.error("create a new issue at https://github.com/WebGoat/WebGoat/issues/new");
|
|
log.error("For developers run 'mvn package' first from the root directory.");
|
|
log.error("Stopping WebGoat...");
|
|
System.exit(1); //we always run standalone
|
|
}
|
|
course.createLessonsFromPlugins(plugins);
|
|
plugins.forEach(p -> pluginEndpointPublisher.publish(p));
|
|
|
|
return course;
|
|
}
|
|
|
|
@Bean
|
|
@Scope(value = "session", proxyMode = ScopedProxyMode.TARGET_CLASS)
|
|
@SneakyThrows
|
|
public UserTracker userTracker(@Value("${webgoat.user.directory}") final String webgoatHome, WebSession webSession) {
|
|
UserTracker userTracker = new UserTracker(webgoatHome, webSession.getUserName());
|
|
userTracker.load();
|
|
return userTracker;
|
|
}
|
|
|
|
}
|