cn.bestwu.api.sign.DefaultApiSign Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of api-sign Show documentation

api-sign

There is a newer version: 1.2.4

package cn.bestwu.api.sign;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerEndpointsConfiguration;

import javax.servlet.http.HttpServletRequest;

/**
 * @author Peter Wu
 */
public class DefaultApiSign extends ApiSignAdpter {

	@Autowired
	private HttpServletRequest request;

	@Autowired
	private AuthorizationServerEndpointsConfiguration serverEndpointsConfiguration;

	@Override protected String loadClientSignKeyByClientId(String client_id) {
		return serverEndpointsConfiguration.getEndpointsConfigurer().getClientDetailsService().loadClientByClientId(client_id).getClientSecret();
	}

	@Override
	protected boolean isAdmin() {
		String isAdminKey = "IS_ADMIN";
		Boolean isAdmin = (Boolean) request.getAttribute(isAdminKey);
		if (isAdmin == null) {
			isAdmin = hasAuthority(SecurityContextHolder.getContext().getAuthentication(), "ROLE_ADMIN");
			request.setAttribute(isAdminKey, isAdmin);
		}
		return isAdmin;
	}

	private boolean hasAuthority(Authentication authentication, String authority) {
		for (GrantedAuthority grantedAuthority : authentication.getAuthorities()) {
			if (grantedAuthority.getAuthority().equals(authority)) {
				return true;
			}
		}
		return false;
	}
}