com.tngtech.keycloakmock.impl.handler.LogoutRoute Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of mock Show documentation
Base module of keycloak-mock
The newest version!
package com.tngtech.keycloakmock.impl.handler;

import static com.tngtech.keycloakmock.impl.helper.RedirectHelper.KEYCLOAK_SESSION_COOKIE;

import com.tngtech.keycloakmock.impl.UrlConfiguration;
import com.tngtech.keycloakmock.impl.helper.RedirectHelper;
import com.tngtech.keycloakmock.impl.session.SessionRepository;
import io.vertx.core.Handler;
import io.vertx.core.http.Cookie;
import io.vertx.ext.web.RoutingContext;
import java.util.Optional;
import javax.annotation.Nonnull;
import javax.inject.Inject;
import javax.inject.Singleton;

/**
 * @see Logout
 */
@Singleton
public class LogoutRoute implements Handler {

  private static final String LEGACY_REDIRECT_URI = "redirect_uri";

  /**
   * Before Keycloak 18, the logout
   * endpoint had used the {@value #LEGACY_REDIRECT_URI} query parameter.
   */
  private static final String POST_LOGOUT_REDIRECT_URI = "post_logout_redirect_uri";

  @Nonnull private final SessionRepository sessionRepository;
  @Nonnull private final RedirectHelper redirectHelper;
  @Nonnull private final UrlConfiguration baseConfiguration;

  @Inject
  LogoutRoute(
      @Nonnull SessionRepository sessionRepository,
      @Nonnull RedirectHelper redirectHelper,
      @Nonnull UrlConfiguration baseConfiguration) {
    this.sessionRepository = sessionRepository;
    this.redirectHelper = redirectHelper;
    this.baseConfiguration = baseConfiguration;
  }

  @Override
  public void handle(@Nonnull RoutingContext routingContext) {
    String redirectUri = routingContext.queryParams().get(POST_LOGOUT_REDIRECT_URI);
    if (redirectUri == null) { // for backwards compatibility:
      redirectUri = routingContext.queryParams().get(LEGACY_REDIRECT_URI);
    }
    UrlConfiguration requestConfiguration = baseConfiguration.forRequestContext(routingContext);
    invalidateSession(routingContext);
    routingContext
        .response()
        .addCookie(redirectHelper.invalidateSessionCookie(requestConfiguration))
        .putHeader("location", redirectUri)
        .setStatusCode(302)
        .end();
  }

  private void invalidateSession(RoutingContext routingContext) {
    Optional.ofNullable(routingContext.request().getCookie(KEYCLOAK_SESSION_COOKIE))
        .map(Cookie::getValue)
        .map(s -> s.split("/"))
        .filter(s -> s.length > 0)
        .map(s -> s[s.length - 1])
        .ifPresent(sessionRepository::removeSession);
  }
}