• Home
• com.microsoft.azure
• azure-servicebus
• 1.2.18
• source code
• AzureActiveDirectoryTokenProvider.java

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

com.microsoft.azure.servicebus.security.AzureActiveDirectoryTokenProvider Maven / Gradle / Ivy

package com.microsoft.azure.servicebus.security;

import java.time.Duration;
import java.time.Instant;
import java.util.concurrent.CompletableFuture;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.microsoft.aad.adal4j.AsymmetricKeyCredential;
import com.microsoft.aad.adal4j.AuthenticationCallback;
import com.microsoft.aad.adal4j.AuthenticationContext;
import com.microsoft.aad.adal4j.AuthenticationResult;
import com.microsoft.aad.adal4j.ClientCredential;
import com.microsoft.azure.servicebus.primitives.MessagingFactory;

/**
 * This is a token provider that obtains tokens from Azure Active Directory. It supports multiple modes of authentication with active directory
 * to obtain tokens.
 * @since 1.2.0
 *
 */
public class AzureActiveDirectoryTokenProvider extends TokenProvider
{
    private static final Logger TRACE_LOGGER = LoggerFactory.getLogger(AzureActiveDirectoryTokenProvider.class);
    
    /**
     * Enumeration representing different authentication modes supported by this token provider.
     */
    enum AuthenticationMode
    {
        CLIENT_CREDENTIAL,
        USER_PASSWORD_CREDENTIAL,
        CERTIFICATE
    }
    
    private AuthenticationMode authenticationMode;
    private AuthenticationContext authenticationContext;
    private ClientCredential clientCredential;
    private AsymmetricKeyCredential asymmetricKeyCredential;
    private String clientId;
    private String userName;
    private String password;
    
    /**
     * Creates a token provider that authenticates with active directory using client secret.
     * @param authenticationContext Authentication context pointing to the instance of Azure Active Directory
     * @param clientCredential Client credential containing client id and client secret of the application
     */
    public AzureActiveDirectoryTokenProvider(AuthenticationContext authenticationContext, ClientCredential clientCredential)
    {
        this.authenticationMode = AuthenticationMode.CLIENT_CREDENTIAL;
        this.authenticationContext = authenticationContext;
        this.clientCredential = clientCredential;
    }
    
    /**
     * Creates a token provider that authenticates with active directory using certificate.
     * @param authenticationContext Authentication context pointing to the instance of Azure Active Directory
     * @param asymmetricKeyCredential Key credential containing the certificate to be used for authentication
     */
    public AzureActiveDirectoryTokenProvider(AuthenticationContext authenticationContext, AsymmetricKeyCredential asymmetricKeyCredential)
    {
        this.authenticationMode = AuthenticationMode.CERTIFICATE;
        this.authenticationContext = authenticationContext;
        this.asymmetricKeyCredential = asymmetricKeyCredential;
    }
    
    /**
     * Creates a token provider that authenticates with active directory using username and password.
     * @param authenticationContext Authentication context pointing to the instance of Azure Active Directory
     * @param clientId client id of the application
     * @param userName user name
     * @param password password
     */
    public AzureActiveDirectoryTokenProvider(AuthenticationContext authenticationContext, String clientId, String userName, String password)
    {
        this.authenticationMode = AuthenticationMode.USER_PASSWORD_CREDENTIAL;
        this.authenticationContext = authenticationContext;
        this.clientId = clientId;
        this.userName = userName;
        this.password = password;
    }
    
    @Override
    public CompletableFuture getSecurityTokenAsync(String audience) {
        String addAudienceForSB = SecurityConstants.SERVICEBUS_AAD_AUDIENCE_RESOURCE_URL;
        CompletableFuture tokenGeneratingFuture = new CompletableFuture<>();
        switch(this.authenticationMode)
        {
            case CLIENT_CREDENTIAL:
                this.authenticationContext.acquireToken(addAudienceForSB, this.clientCredential, new FutureCompletingAuthenticationCallback(tokenGeneratingFuture, audience));
                break;
            case USER_PASSWORD_CREDENTIAL:
                this.authenticationContext.acquireToken(addAudienceForSB, this.clientId, this.userName, this.password, new FutureCompletingAuthenticationCallback(tokenGeneratingFuture, audience));
                break;
            case CERTIFICATE:
                this.authenticationContext.acquireToken(addAudienceForSB, this.asymmetricKeyCredential, new FutureCompletingAuthenticationCallback(tokenGeneratingFuture, audience));
                break;
        }
        return tokenGeneratingFuture;
    }
    
    private static class FutureCompletingAuthenticationCallback implements AuthenticationCallback
    {
        private CompletableFuture tokenGeneratingFutue;
        private String audience;
        
        public FutureCompletingAuthenticationCallback(CompletableFuture tokenGeneratingFutue, String audience)
        {
            this.tokenGeneratingFutue = tokenGeneratingFutue;
            this.audience = audience;
        }
        
        @Override
        public void onFailure(Throwable authException) {
            TRACE_LOGGER.error("Getting token from Azure Active Directory failed", authException);
            MessagingFactory.INTERNAL_THREAD_POOL.execute(() -> {this.tokenGeneratingFutue.completeExceptionally(authException);});
        }

        @Override
        public void onSuccess(AuthenticationResult authResult) {
            SecurityToken generatedToken = new SecurityToken(SecurityTokenType.JWT, this.audience, authResult.getAccessToken(), Instant.now(), Instant.now().plus(Duration.ofSeconds(authResult.getExpiresAfter())));
            MessagingFactory.INTERNAL_THREAD_POOL.execute(() -> {tokenGeneratingFutue.complete(generatedToken);});
        }
        
    }
}