com.github.luomingxuorg.oauth.security.util.JwtUtil Maven / Gradle / Ivy

Go to download
/*
 *  Copyright 2018-2019 LuomingXuOrg
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 *  limitations under the License.
 *
 *  Author : Luoming Xu
 *  File Name : JwtUtil.java
 *  Url: https://github.com/LuomingXuOrg/OAuth
 */

package com.github.luomingxuorg.oauth.security.util;


import com.github.luomingxuorg.oauth.security.conf.JwtTokenConf;
import com.github.luomingxuorg.oauth.security.exception.OAuthException;
import com.github.luomingxuorg.oauth.security.userdetails.UserDetailsExtend;
import io.jsonwebtoken.Claims;
import io.jsonwebtoken.Jwts;
import io.jsonwebtoken.SignatureAlgorithm;
import org.springframework.core.io.ClassPathResource;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;

import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.util.*;

public class JwtUtil
{
    private static final String CLAIM_KEY_OWNER = "KeyOwner";
    private static final String CLAIM_KEY_CREATED = "Created";
    private static final String CLAIM_KEY_REFRESH_DATE = "RefreshDate";
    private static final String CLAIM_KEY_REFRESH_REV = "RefreshRev";
    private static final String CLAIM_KEY_ROLE_AUTHORITY = "OwnerRolesAuthorities";

    private static final ClassPathResource RESOURCE = new ClassPathResource("jwt.jks");

    private static final char[] filePassword = JwtTokenConf.JwtPwd.toCharArray();
    private static PrivateKey privateKey = null;
    private static PublicKey publicKey = null;

    static
    {
        try
        {
            KeyStore keyStore = KeyStore.getInstance("JKS");
            keyStore.load(RESOURCE.getInputStream(), filePassword);
            privateKey = (PrivateKey) keyStore.getKey("jwt", filePassword);
            publicKey = keyStore.getCertificate("jwt").getPublicKey();
        }
        catch (Exception e)
        {
            e.printStackTrace();
        }
    }

    private static final Long expiration = JwtTokenConf.JwtTokenExpiration * 24 * 3600 * 1000;

    private static Date generateExpirationDate()
    {
        return new Date(System.currentTimeMillis() + expiration);
    }

    public static Date getExpirationDate(String token)
    {
        Claims claims = getClaims(token);
        return claims != null ? claims.getExpiration() : null;
    }

    private static Claims getClaims(String token)
    {
        if (token == null)
        {
            return null;
        }

        Claims claims;
        try
        {
            claims = Jwts.parser()
                    .setSigningKey(publicKey)
                    .parseClaimsJws(AESenc.decrypt(token))
                    .getBody();
        }
        catch (Exception e)
        {
            claims = null;
            System.out.println("Get jwt claims failed. ");
            System.out.println("Cause: " + e.getClass().getSimpleName());
            System.out.println("Msg: " + e.getMessage());
        }

        return claims;
    }

    private static Map setClaims(UserDetailsExtend userDetails)
    {
        Map claims = new HashMap<>();
        claims.put(CLAIM_KEY_OWNER, userDetails.getUsername());
        claims.put(CLAIM_KEY_CREATED, new Date());
        claims.put(CLAIM_KEY_REFRESH_DATE, new Date());
        claims.put(CLAIM_KEY_REFRESH_REV, 0);
        claims.put(CLAIM_KEY_ROLE_AUTHORITY, userDetails.getAuthorities());

        return claims;
    }

    @SuppressWarnings("unchecked")
    public static List getAuthority(String token)
    {
        Claims claims = getClaims(token);
        List authorities = null;

        if (claims != null)
        {
            authorities = new ArrayList<>();
            List> list = (List>) claims.get(CLAIM_KEY_ROLE_AUTHORITY);
            for (Map item : list)
            {
                authorities.add(new SimpleGrantedAuthority(item.get("authority")));
            }
        }

        return authorities;
    }

    public static Long getUserId(String token)
    {
        Claims claims = getClaims(token);
        return claims != null ? Long.valueOf(claims.getId()) : null;
    }

    public static String getUsername(String token)
    {
        Claims claims = getClaims(token);
        return claims != null ? claims.getSubject() : null;
    }

    public static Date getCreatedDate(String token)
    {
        Claims claims = getClaims(token);
        return claims != null ? new Date((Long) claims.get(CLAIM_KEY_CREATED)) : null;
    }

    public static Date getRefreshDate(String token)
    {
        Claims claims = getClaims(token);
        return claims != null ? new Date((Long) claims.get(CLAIM_KEY_REFRESH_DATE)) : null;
    }

    public static Integer getRefreshRev(String token)
    {
        Claims claims = getClaims(token);
        return claims != null ? (Integer) claims.get(CLAIM_KEY_REFRESH_REV) : null;
    }

    /**
     * 生成一个jwt_token
     * 
     * subject: user_name
     * id: user_id
     * 
     *
     * @param userDetails
     * @return
     */
    public static String generateToken(UserDetailsExtend userDetails)
    {
        return AESenc.encrypt(Jwts.builder()
                .setClaims(setClaims(userDetails))
                .setSubject(userDetails.getUsername())
                .setId(userDetails.getUserId().toString())
                .setExpiration(generateExpirationDate())
                .signWith(SignatureAlgorithm.RS512, privateKey)
                .compact());
    }

    public static String refreshToken(String token)
    {
        Claims claims = getClaims(token);

        if (claims == null)
        {
            throw new OAuthException("Refresh token failed! Please check your token.");
        }
        claims.put(CLAIM_KEY_REFRESH_DATE, new Date());
        claims.put(CLAIM_KEY_REFRESH_REV, (Integer) claims.get(CLAIM_KEY_REFRESH_REV) + 1);
        return AESenc.encrypt(Jwts.builder()
                .setClaims(claims)
                .setExpiration(generateExpirationDate())
                .signWith(SignatureAlgorithm.RS512, privateKey)
                .compact());
    }
}