com.indeed.authorization.client.OAuthClient Maven / Gradle / Ivy

Go to download
/*
 * Copyright 2022 Indeed
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.indeed.authorization.client;

import com.indeed.authorization.client.exceptions.OAuthBadResponseException;
import com.nimbusds.oauth2.sdk.GeneralException;
import com.nimbusds.oauth2.sdk.TokenRequest;
import com.nimbusds.oauth2.sdk.TokenResponse;
import com.nimbusds.oauth2.sdk.auth.ClientAuthentication;
import com.nimbusds.oauth2.sdk.auth.ClientSecretBasic;
import com.nimbusds.oauth2.sdk.auth.Secret;
import com.nimbusds.oauth2.sdk.id.ClientID;
import com.nimbusds.oauth2.sdk.id.Issuer;
import com.nimbusds.openid.connect.sdk.OIDCTokenResponse;
import com.nimbusds.openid.connect.sdk.OIDCTokenResponseParser;
import com.nimbusds.openid.connect.sdk.op.OIDCProviderMetadata;
import com.nimbusds.openid.connect.sdk.token.OIDCTokens;

import java.io.IOException;
import java.util.Objects;

public abstract class OAuthClient {
    public static final Integer DEFAULT_CONNECTION_TIMEOUT = 5000;
    public static final String EMPLOYER_PARAM_KEY = "employer";

    protected ClientAuthentication clientAuthentication;
    protected final OIDCProviderMetadata oidcProviderMetadata;

    public OAuthClient(
            final String clientId,
            final String clientSecret,
            final String hostname,
            final int timeout)
            throws GeneralException, IOException {
        Objects.requireNonNull(clientId, "clientId must not be null");
        Objects.requireNonNull(clientSecret, "clientSecret must not be null");
        Objects.requireNonNull(hostname, "hostname must not be null");
        this.clientAuthentication =
                new ClientSecretBasic(new ClientID(clientId), new Secret(clientSecret));
        this.oidcProviderMetadata =
                OIDCProviderMetadata.resolve(new Issuer(hostname), timeout, timeout);
    }

    protected OIDCTokens executeTokenRequest(final TokenRequest request)
            throws OAuthBadResponseException {
        try {
            final TokenResponse tokenResponse =
                    OIDCTokenResponseParser.parse(request.toHTTPRequest().send());
            if (!tokenResponse.indicatesSuccess()) {
                throw new OAuthBadResponseException(tokenResponse.toErrorResponse());
            }
            final OIDCTokenResponse successResponse =
                    (OIDCTokenResponse) tokenResponse.toSuccessResponse();
            return successResponse.getOIDCTokens();
        } catch (final Exception e) {
            throw new OAuthBadResponseException(e);
        }
    }
}