com.jetdrone.vertx.yoke.extras.middleware.OAuth2 Maven / Gradle / Ivy

Go to download
package com.jetdrone.vertx.yoke.extras.middleware;

import com.jetdrone.vertx.yoke.Middleware;
import com.jetdrone.vertx.yoke.middleware.YokeRequest;
import com.jetdrone.vertx.yoke.YokeSecurity;
import com.jetdrone.vertx.yoke.core.YokeException;
import org.jetbrains.annotations.NotNull;
import org.vertx.java.core.AsyncResult;
import org.vertx.java.core.Handler;
import org.vertx.java.core.json.JsonArray;
import org.vertx.java.core.json.JsonElement;
import org.vertx.java.core.json.JsonObject;

import javax.crypto.Cipher;
import javax.crypto.Mac;
import javax.xml.bind.DatatypeConverter;
import java.security.Key;
import java.util.Date;
import java.util.UUID;

public abstract class OAuth2 {

    private final String authorize_uri = "/oauth/authorize";
    private final String access_token_uri = "/oauth/access_token";

    private final YokeSecurity security = null; //new YokeSecurity();

    private final Key cryptoKey = security.getKey("AES");
    private final Cipher encCipher = security.getCipher(cryptoKey, Cipher.ENCRYPT_MODE);
    private final Cipher decCipher = security.getCipher(cryptoKey, Cipher.DECRYPT_MODE);
    private final Mac signMac = security.getMac("HmacSHA256");

    public OAuth2() {

    }

    private JsonObject parseAuthorization(String authorization) {
        if (authorization == null) {
            return null;
        }

        final JsonObject response = new JsonObject();

        final String user;
        final String pass;
        final String scheme;

        try {
            String[] parts = authorization.split(" ");
            if (parts.length != 2) {
                return null;
            }

            scheme = parts[0];

            if (!"Basic".equals(scheme)) {
                return null;
            }

            String[] credentials = new String(DatatypeConverter.parseBase64Binary(parts[1])).split(":");
            user = credentials[0];
            pass = credentials[1];

            response.putString("username", user).putString("password", pass);

        } catch (IllegalArgumentException | NullPointerException e) {
            return null;
        }

        return response;
    }

    private String stringify(JsonElement json) {
        // TODO: encrypt + sign
        if (json.isArray()) {
            return ((JsonArray) json).encode();
        } else if (json.isObject()) {
            return ((JsonObject) json).encode();
        }
        return null;
    }

    private String urify(JsonObject json) {
        // TODO: convert json object to uri param encoded string
        return null;
    }

    private JsonElement parse(String str) {
        // TODO: decrypt + verify sign
        if (str.charAt(0) == '{') {
            return new JsonObject(str);
        }
        if (str.charAt(0) == '[') {
            return new JsonArray(str);
        }
        return null;
    }

    private JsonObject generateAccessToken(String user_id, String client_id, String extra_data, JsonObject token_options) {
        JsonObject out = new JsonObject()
                .putString("access_token", stringify(new JsonArray().add(user_id).add(client_id).add(System.currentTimeMillis()).add(extra_data)))
                .putString("refresh_token", null);

        if (token_options != null) {
            out.mergeIn(token_options);
        }

        return out;
    }

    public final Middleware login = new Middleware() {
        @Override
        public void handle(@NotNull YokeRequest request, @NotNull Handler