fr.wseduc.webutils.security.oauth.DefaultOAuthResourceProvider Maven / Gradle / Ivy

Go to download
/*
 * Copyright © WebServices pour l'Éducation, 2014
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package fr.wseduc.webutils.security.oauth;

import org.vertx.java.core.Handler;
import org.vertx.java.core.eventbus.EventBus;
import org.vertx.java.core.eventbus.Message;
import org.vertx.java.core.json.JsonObject;

import fr.wseduc.webutils.security.SecureHttpServerRequest;

public class DefaultOAuthResourceProvider implements OAuthResourceProvider {

	private final EventBus eb;
	private static final String OAUTH_ADDRESS = "wse.oauth";

	public DefaultOAuthResourceProvider(EventBus eb) {
		this.eb = eb;
	}

	@Override
	public void validToken(final SecureHttpServerRequest request, final Handler handler) {
		JsonObject headers = new JsonObject();
		for (String name : request.headers().names()) {
			headers.putString(name, request.headers().get(name));
		}
		JsonObject params = new JsonObject();
		for (String name : request.params().names()) {
			params.putString(name, request.params().get(name));
		}
		JsonObject json = new JsonObject()
		.putObject("headers", headers)
		.putObject("params", params);
		request.pause();
		eb.send(OAUTH_ADDRESS, json, new Handler>() {

			@Override
			public void handle(Message res) {
				request.resume();
				if ("ok".equals(res.body().getString("status"))) {
					request.setAttribute("client_id", res.body().getString("client_id"));
					request.setAttribute("remote_user", res.body().getString("remote_user"));
					request.setAttribute("scope", res.body().getString("scope"));
					handler.handle(true);
				} else {
					handler.handle(false);
				}
			}
		});
	}

}