io.gravitee.rest.api.security.utils.AuthoritiesProvider Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of gravitee-apim-rest-api-security Show documentation
There is a newer version: 4.5.2
Show newest version
/**
 * Copyright (C) 2015 The Gravitee team (http://gravitee.io)
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *         http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package io.gravitee.rest.api.security.utils;

import static org.springframework.security.core.authority.AuthorityUtils.commaSeparatedStringToAuthorityList;

import io.gravitee.rest.api.model.MembershipMemberType;
import io.gravitee.rest.api.model.MembershipReferenceType;
import io.gravitee.rest.api.model.RoleEntity;
import io.gravitee.rest.api.service.MembershipService;
import io.gravitee.rest.api.service.common.GraviteeContext;
import java.util.HashSet;
import java.util.Set;
import java.util.stream.Collectors;
import org.springframework.security.core.GrantedAuthority;

/**
 * @author Eric LELEU (eric.leleu at graviteesource.com)
 * @author GraviteeSource Team
 */
public class AuthoritiesProvider {

    private final MembershipService membershipService;

    public AuthoritiesProvider(MembershipService membershipService) {
        this.membershipService = membershipService;
    }

    public Set retrieveAuthorities(String userId) {
        final String currentEnvironment = GraviteeContext.getCurrentEnvironment();
        return this.retrieveAuthorities(
                userId,
                GraviteeContext.getCurrentOrganization(),
                currentEnvironment == null ? GraviteeContext.getDefaultEnvironment() : currentEnvironment
            );
    }

    public Set retrieveAuthorities(String userId, String organizationId, String environmentId) {
        final Set authorities = new HashSet<>();

        final Set roles = membershipService.getRoles(
            MembershipReferenceType.PLATFORM,
            "DEFAULT",
            MembershipMemberType.USER,
            userId
        );
        roles.addAll(membershipService.getRoles(MembershipReferenceType.ORGANIZATION, organizationId, MembershipMemberType.USER, userId));
        roles.addAll(membershipService.getRoles(MembershipReferenceType.ENVIRONMENT, environmentId, MembershipMemberType.USER, userId));

        if (!roles.isEmpty()) {
            authorities.addAll(
                commaSeparatedStringToAuthorityList(
                    roles.stream().map(r -> r.getScope().name() + ':' + r.getName()).collect(Collectors.joining(","))
                )
            );
        }

        return authorities;
    }
}