com.richodemus.dropwizard.jwt.AuthenticationManager Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of dropwizard-jwt Show documentation

JSON Web Token support in Dropwizard using the javax security annotations

The newest version!

package com.richodemus.dropwizard.jwt;

import com.auth0.jwt.JWTSigner;
import com.auth0.jwt.JWTVerifier;
import com.richodemus.dropwizard.jwt.model.Role;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.inject.Inject;
import javax.inject.Named;
import java.time.Duration;
import java.util.HashMap;
import java.util.Map;
import java.util.Optional;

public class AuthenticationManager
{
	private final Logger logger = LoggerFactory.getLogger(getClass());
	private final UserService userService;
	private final Duration tokenDuration;
	private final String secret;

	@Inject
	public AuthenticationManager(final UserService userService,
								 final @Named("tokenDuration") Duration tokenDuration,
								 final @Named("secret") String secret)
	{
		this.userService = userService;
		this.tokenDuration = tokenDuration;
		this.secret = secret;
	}

	public Optional login(String username, String password)
	{
		return userService.login(username, password)
				.flatMap(role -> generateToken(username, role));
	}

	public Token parseToken(final RawToken raw)
	{
		return new TokenParser(secret, raw).parse();
	}

	public Optional refreshToken(RawToken rawToken)
	{
		final Token token = parseToken(rawToken);
		try
		{
			final Map claims = new JWTVerifier(secret).verify(rawToken.stringValue());
		}
		catch (Exception e)
		{
			logger.error("Exception when validating token", e);
			return Optional.empty();
		}
		//todo think more about this, is this enough validation?

		return generateToken(token.getUsername(), new Role(token.getRole()));
	}

	private Optional generateToken(String username, Role role)
	{
		try
		{
			final JWTSigner signer = new JWTSigner(secret);

			Map claims = new HashMap<>();
			claims.put("user", username);
			claims.put("role", role.stringValue());

			//todo set all the other fields such as issuer
			final JWTSigner.Options options = new JWTSigner.Options();
			options.setExpirySeconds((int) tokenDuration.getSeconds());
			return Optional.of(new RawToken(signer.sign(claims, options)));
		}
		catch (Exception e)
		{
			logger.error("Unable to create token for user {}", username, e);
			return Optional.empty();
		}
	}
}