com.ohadr.authentication.token.SignedTokenGenerator Maven / Gradle / Ivy

Go to download
package com.ohadr.authentication.token;

import java.io.UnsupportedEncodingException;
import java.net.URLEncoder;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.security.Signature;
import java.security.SignatureException;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;

import org.apache.commons.codec.binary.Base64;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;

import com.ohadr.crypto.interfaces.KeystoreService;



@Component
public class SignedTokenGenerator
{
	@Autowired
	private KeystoreService keystoreService;

	private String encodeQueryParams(Map parameters) throws UnsupportedEncodingException
	{
		String result = "";
		for (String paramName : parameters.keySet())
		{
			result += URLEncoder.encode(paramName, "UTF-8");
			result += "=" + URLEncoder.encode(parameters.get(paramName), "UTF-8") + "&";
		}
		return result;
	}

	private String createSignature(String data) throws NoSuchAlgorithmException,
	                                           InvalidKeyException,
	                                           SignatureException
	{
		Signature signature = Signature.getInstance("SHA1withDSA");
		signature.initSign(keystoreService.getPrivateKey());
		signature.update(data.getBytes());
		byte[] raw = signature.sign();
		return Base64.encodeBase64String(raw);
	}

	public String generateToken(String userEmail, String issuer, String deviceName, String clientPublicKey,
	                            int secondsToExpire) throws InvalidKeyException,
	                                                NoSuchAlgorithmException,
	                                                SignatureException,
	                                                UnsupportedEncodingException
	{
		Map parameters = new HashMap();
		parameters.put("user", userEmail);
		parameters.put("issuer", issuer);
		parameters.put("expires", String.valueOf(new Date().getTime() / 1000 + secondsToExpire));
		if (deviceName != null)
		{
			parameters.put("device", deviceName);
		}
		if (clientPublicKey != null)
		{
			parameters.put("pubkey", clientPublicKey);
		}
		String data = encodeQueryParams(parameters);
		String signature = createSignature(data);
		return data + ":" + signature;
	}
}