io.federecio.dropwizard.sample.OAuth2Resource Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of dropwizard-swagger Show documentation

A simple way to document your REST APIs in DropWizard using Swagger

There is a newer version: 4.0.5-1

package io.federecio.dropwizard.sample;

import static com.google.common.base.Preconditions.checkArgument;
import static com.google.common.base.Strings.isNullOrEmpty;
import java.net.URI;
import java.net.URISyntaxException;
import java.util.UUID;
import javax.ws.rs.BadRequestException;
import javax.ws.rs.DefaultValue;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.QueryParam;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.UriBuilder;
import io.federecio.dropwizard.swagger.SwaggerOAuth2Configuration;

@Path("/oauth2")
public class OAuth2Resource {
    public static final String MOCKED_OAUTH2_TOKEN = UUID.randomUUID()
            .toString();

    private final SwaggerOAuth2Configuration oAuth2Configuration;

    public OAuth2Resource(SwaggerOAuth2Configuration oAuth2Configuration) {
        this.oAuth2Configuration = oAuth2Configuration;
    }

    @GET
    @Path("/auth")
    @Produces(MediaType.APPLICATION_JSON)
    public Response auth(@QueryParam("response_type") String responseType,
            @QueryParam("client_id") @DefaultValue("") String clientId,
            @QueryParam("client_secret") @DefaultValue("") String clientSecret,
            @QueryParam("scope") String scope,
            @QueryParam("state") String state,
            @QueryParam("redirect_uri") String redirectUri,
            @QueryParam("realm") @DefaultValue("") String realm)
            throws URISyntaxException {

        try {
            checkArgument(clientId.equals(oAuth2Configuration.getClientId()),
                    "Bad client id");
            if (!isNullOrEmpty(oAuth2Configuration.getClientSecret())) {
                checkArgument(
                        clientSecret
                                .equals(oAuth2Configuration.getClientSecret()),
                        "Bad client secret");
            }
            checkArgument(realm.equals(oAuth2Configuration.getRealm()),
                    "Bad realm");
        } catch (IllegalArgumentException e) {
            throw new BadRequestException(e.getMessage());
        }

        URI redirectWithAccessToken = UriBuilder.fromUri(redirectUri)
                .queryParam("state", state)
                .queryParam("access_token", MOCKED_OAUTH2_TOKEN).build();
        return Response.seeOther(redirectWithAccessToken).build();
    }
}