Under what authority could the executive branch require third parties to identify leakers?

Or, if you prefer a normative argument: Do you think Bob Woodward should have been forced to identify Mark Felt?