Add GraalJS based script engine implementation

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/pom.xml

@@ -130,6 +130,27 @@
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
         </dependency>
+<!--        GraalVM related dependencies-->
+        <dependency>
+            <groupId>org.graalvm.sdk</groupId>
+            <artifactId>graal-sdk</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.graalvm.js</groupId>
+            <artifactId>js</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.graalvm.truffle</groupId>
+            <artifactId>truffle-api</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.graalvm.regex</groupId>
+            <artifactId>regex</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>com.ibm.icu</groupId>
+            <artifactId>icu4j</artifactId>
+        </dependency>
         <dependency>
             <groupId>org.testng</groupId>
             <artifactId>testng</artifactId>

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/AuthenticationDecisionEvaluator.java

@@ -18,6 +18,7 @@
 
 package org.wso2.carbon.identity.application.authentication.framework;
 
+import org.graalvm.polyglot.HostAccess;
 import org.wso2.carbon.identity.application.authentication.framework.context.AuthenticationContext;
 
 import java.io.Serializable;
@@ -39,5 +40,6 @@ public interface AuthenticationDecisionEvaluator extends Serializable {
      * @param context
      * @return
      */
+    @HostAccess.Export
     Object evaluate(AuthenticationContext context, Object... params);
 }

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/loader/UIBasedConfigurationLoader.java

@@ -27,7 +27,7 @@
 import org.wso2.carbon.identity.application.authentication.framework.config.model.StepConfig;
 import org.wso2.carbon.identity.application.authentication.framework.config.model.graph.AuthenticationGraph;
 import org.wso2.carbon.identity.application.authentication.framework.config.model.graph.JsBaseGraphBuilder;
-import org.wso2.carbon.identity.application.authentication.framework.config.model.graph.JsBaseGraphBuilderFactory;
+import org.wso2.carbon.identity.application.authentication.framework.config.model.graph.JsGenericGraphBuilderFactory;
 import org.wso2.carbon.identity.application.authentication.framework.context.AuthenticationContext;
 import org.wso2.carbon.identity.application.authentication.framework.exception.FrameworkException;
 import org.wso2.carbon.identity.application.authentication.framework.internal.FrameworkServiceComponent;
@@ -88,8 +88,8 @@ public SequenceConfig getSequenceConfig(AuthenticationContext context, Map<Strin
             Map<Integer, StepConfig> stepConfigMapCopy = new HashMap<>();
             originalStepConfigMap.forEach((k, v) -> stepConfigMapCopy.put(k, new StepConfig(v)));
             sequenceConfig.getStepMap().clear();
-            JsBaseGraphBuilderFactory jsGraphBuilderFactory = FrameworkServiceDataHolder.getInstance()
-                    .getJsGraphBuilderFactory();
+            JsGenericGraphBuilderFactory jsGraphBuilderFactory = FrameworkServiceDataHolder.getInstance()
+                    .getJsGenericGraphBuilderFactory();
             JsBaseGraphBuilder jsGraphBuilder = jsGraphBuilderFactory.createBuilder(context, stepConfigMapCopy);
             context.setServiceProviderName(serviceProvider.getApplicationName());
             context.setServiceProviderResourceId(serviceProvider.getApplicationResourceId());

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/model/graph/BaseSerializableJsFunction.java

@@ -18,8 +18,6 @@
 
 package org.wso2.carbon.identity.application.authentication.framework.config.model.graph;
 
-import java.io.Serializable;
-
 import javax.script.ScriptEngine;
 
 /**
@@ -30,7 +28,7 @@
  * The current authentication context holds this function in serialized form.
  *
  */
-public interface BaseSerializableJsFunction extends Serializable {
+public interface BaseSerializableJsFunction extends GenericSerializableJsFunction<ScriptEngine> {
 
     void setSource(String name);
 

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/model/graph/DynamicDecisionNode.java

@@ -29,7 +29,7 @@
 public class DynamicDecisionNode extends AbstractAuthGraphNode implements AuthGraphNode {
 
     private static final long serialVersionUID = -2151385170280964420L;
-    private Map<String, BaseSerializableJsFunction> functionMap = new HashMap<>();
+    private Map<String, GenericSerializableJsFunction> functionMap = new HashMap<>();
     private AuthGraphNode defaultEdge;
 
     @Override
@@ -39,18 +39,40 @@ public String getName() {
     }
 
     public Map<String, BaseSerializableJsFunction> getFunctionMap() {
+
+        if (isFunctionMapInstanceOfBaseSerializableJsFunction()) {
+            return Collections.unmodifiableMap((Map<String, BaseSerializableJsFunction>) (Map) functionMap);
+        }
+        return null;
+    }
+
+    public Map<String, GenericSerializableJsFunction> getGenericFunctionMap() {
+
         return Collections.unmodifiableMap(functionMap);
     }
 
     public void addFunction(String outcome, BaseSerializableJsFunction function) {
         functionMap.put(outcome, function);
     }
 
+    public void addGenericFunction(String outcome, GenericSerializableJsFunction function) {
+        functionMap.put(outcome, function);
+    }
+
     public AuthGraphNode getDefaultEdge() {
         return defaultEdge;
     }
 
     public void setDefaultEdge(AuthGraphNode defaultEdge) {
         this.defaultEdge = defaultEdge;
     }
+
+    private boolean isFunctionMapInstanceOfBaseSerializableJsFunction() {
+
+        if (functionMap == null || functionMap.isEmpty()) {
+            return true;
+        }
+        // Get the first element of the map and check if that is an instance of BaseSerializableJsFunction
+        return functionMap.entrySet().iterator().next().getValue() instanceof BaseSerializableJsFunction;
+    }
 }

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/model/graph/GenericSerializableJsFunction.java

@@ -0,0 +1,44 @@
+/*
+ * Copyright (c) 2024, WSO2 LLC. (http://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+package org.wso2.carbon.identity.application.authentication.framework.config.model.graph;
+
+import java.io.Serializable;
+
+/**
+ * Serializable javascript function.
+ * This is required since the next javascript execution may happen on a different node than current node, when user
+ * submits a form in the browser.
+ * The request may come to different node.
+ * The current authentication context holds this function in serialized form.
+ *
+ * @param <T> Script Engine
+ */
+public interface GenericSerializableJsFunction<T> extends Serializable {
+
+    void setSource(String name);
+
+    String getSource();
+
+    boolean isFunction();
+
+    void setFunction(boolean function);
+
+    Object apply(T scriptEngine, Object... params);
+
+}

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/model/graph/JsBaseGraphBuilder.java

@@ -41,6 +41,11 @@ public interface JsBaseGraphBuilder {
 
     AuthenticationDecisionEvaluator getScriptEvaluator(BaseSerializableJsFunction fn);
 
+    default AuthenticationDecisionEvaluator getScriptEvaluator(GenericSerializableJsFunction fn) {
+
+        return null;
+    }
+
     void addLongWaitProcessInternal(AsyncProcess asyncProcess,
                        Map<String, Object> parameterMap);
 

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/model/graph/JsBaseGraphBuilderFactory.java

@@ -30,7 +30,7 @@
  * This factory is there to reuse of script engine and any related expensive objects.
  *
  */
-public interface JsBaseGraphBuilderFactory {
+public interface JsBaseGraphBuilderFactory extends JsGenericGraphBuilderFactory<ScriptEngine> {
 
     void init();
 

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/model/graph/JsGenericGraphBuilderFactory.java

@@ -0,0 +1,46 @@
+/*
+ * Copyright (c) 2024, WSO2 LLC. (http://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+package org.wso2.carbon.identity.application.authentication.framework.config.model.graph;
+
+import org.wso2.carbon.identity.application.authentication.framework.config.model.StepConfig;
+import org.wso2.carbon.identity.application.authentication.framework.context.AuthenticationContext;
+
+import java.util.Map;
+
+/**
+ * Interface for Factory to create a Javascript based sequence builder.
+ * This factory is there to reuse of script engine and any related expensive objects.
+ *
+ * @param <T> Type of the Javascript Engine
+ */
+public interface JsGenericGraphBuilderFactory<T> {
+
+    void init();
+
+    JsBaseGraphBuilder createBuilder(AuthenticationContext context, Map<Integer, StepConfig> stepConfigMapCopy);
+
+    JsBaseGraphBuilder createBuilder(AuthenticationContext authenticationContext,
+                                     Map<Integer, StepConfig> stepConfigMap, AuthGraphNode currentNode);
+
+    T createEngine(AuthenticationContext authenticationContext);
+
+    JsGenericSerializer getJsUtil();
+
+    JsBaseGraphBuilder getCurrentBuilder();
+}

components/authentication-framework/org.wso2.carbon.identity.application.authentication.framework/src/main/java/org/wso2/carbon/identity/application/authentication/framework/config/model/graph/JsGenericSerializer.java

@@ -0,0 +1,48 @@
+/*
+ * Copyright (c) 2024, WSO2 LLC. (http://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+package org.wso2.carbon.identity.application.authentication.framework.config.model.graph;
+
+import org.wso2.carbon.identity.application.authentication.framework.exception.FrameworkException;
+
+/**
+ * Interface for serializer class supports Multiple JS Engines.
+ *
+ * @param <T> Js Engine.
+ */
+public interface JsGenericSerializer<T> {
+
+    /**
+     * Serialize the object using selected serializable function.
+     *
+     * @param value Object to evaluate.
+     * @return Serialized Object.
+     */
+    Object toJsSerializable(Object value);
+
+    /**
+     * De-Serialize the object using selected serializable function.
+     *
+     * @param value  Serialized Object.
+     * @param engine Js Engine.
+     * @return De-Serialize object.
+     * @throws FrameworkException FrameworkException.
+     */
+    Object fromJsSerializable(Object value, T engine) throws FrameworkException;
+
+}