net.officefloor.identity.google.GoogleIdTokenVerifierManagedObjectSource Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of officeidentity_google Show documentation
OfficeFloor plug-in for verifying Google logins
There is a newer version: 3.40.0
Show newest version
/*-
 * #%L
 * Identity for Google Logins
 * %%
 * Copyright (C) 2005 - 2020 Daniel Sagenschneider
 * %%
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 * 
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see .
 * #L%
 */

package net.officefloor.identity.google;

import java.util.Collections;
import java.util.concurrent.TimeUnit;

import com.google.api.client.googleapis.auth.oauth2.GoogleIdTokenVerifier;
import com.google.api.client.http.HttpTransport;
import com.google.api.client.http.javanet.NetHttpTransport;
import com.google.api.client.json.JsonFactory;
import com.google.api.client.json.gson.GsonFactory;

import net.officefloor.compile.impl.util.CompileUtil;
import net.officefloor.compile.properties.Property;
import net.officefloor.frame.api.build.Indexed;
import net.officefloor.frame.api.build.None;
import net.officefloor.frame.api.clock.Clock;
import net.officefloor.frame.api.managedobject.ManagedObject;
import net.officefloor.frame.api.managedobject.source.ManagedObjectExecuteContext;
import net.officefloor.frame.api.managedobject.source.ManagedObjectFunctionBuilder;
import net.officefloor.frame.api.managedobject.source.ManagedObjectSource;
import net.officefloor.frame.api.managedobject.source.ManagedObjectSourceContext;
import net.officefloor.frame.api.managedobject.source.impl.AbstractManagedObjectSource;
import net.officefloor.plugin.managedobject.poll.StatePollContext;
import net.officefloor.plugin.managedobject.poll.StatePoller;

/**
 * {@link ManagedObjectSource} for the {@link GoogleIdTokenVerifier}.
 * 
 * @author Daniel Sagenschneider
 */
public class GoogleIdTokenVerifierManagedObjectSource extends
		AbstractManagedObjectSource implements ManagedObject {

	public static enum Flows {
		CONFIGURE
	}

	public static enum ConfigureDependencies {
		POLL_CONTEXT, FACTORY
	}

	/**
	 * Specifies the {@link GoogleIdTokenVerifierFactory}.
	 * 
	 * @param factory {@link GoogleIdTokenVerifierFactory}.
	 */
	public static void setVerifyFactory(GoogleIdTokenVerifierFactory factory) {
		if (factory != null) {
			threadLocalVerifierFactory.set(factory);
		} else {
			threadLocalVerifierFactory.remove();
		}
	}

	/**
	 * Name of {@link Property} for the Google client id.
	 */
	public static final String PROPERTY_CLIENT_ID = "google.client.id";

	/**
	 * {@link GoogleIdTokenVerifierFactory} to create the
	 * {@link GoogleIdTokenVerifier}.
	 */
	private static ThreadLocal threadLocalVerifierFactory = new ThreadLocal<>();

	/**
	 * {@link Clock}.
	 */
	private Clock clock;

	/**
	 * {@link StatePoller} to load the {@link GoogleIdTokenVerifier}.
	 */
	private StatePoller googleIdTokenVerifier;

	/*
	 * ==================== ManagedObjectSource ============================
	 */

	@Override
	protected void loadSpecification(SpecificationContext context) {
		// No required specification
	}

	@Override
	protected void loadMetaData(MetaDataContext context) throws Exception {
		ManagedObjectSourceContext sourceContext = context.getManagedObjectSourceContext();

		// Load meta-data
		context.setObjectClass(GoogleIdTokenVerifier.class);
		context.addFlow(Flows.CONFIGURE, StatePollContext.class);

		// Obtain the clock
		this.clock = sourceContext.getClock((time) -> time);

		// Obtain the verifier factory
		GoogleIdTokenVerifierFactory factory = threadLocalVerifierFactory.get();
		if (factory == null) {

			// Determine if configure via property
			String audienceId = context.getManagedObjectSourceContext().getProperty(PROPERTY_CLIENT_ID, null);
			if (!CompileUtil.isBlank(audienceId)) {
				JsonFactory jsonFactory = GsonFactory.getDefaultInstance();
				HttpTransport transport = new NetHttpTransport();
				factory = () -> new GoogleIdTokenVerifier.Builder(transport, jsonFactory)
						.setAudience(Collections.singletonList(audienceId)).build();
			}
		}

		// Load PayPal environment
		final GoogleIdTokenVerifierFactory finalFactory = factory;
		ManagedObjectFunctionBuilder loadVerifier = sourceContext
				.addManagedFunction(Flows.CONFIGURE.name(), () -> (functionContext) -> {

					// Obtain the dependencies
					@SuppressWarnings("unchecked")
					StatePollContext pollContext = (StatePollContext) functionContext
							.getObject(0);
					GoogleIdTokenVerifierFactory verifierFactory = finalFactory;
					if (verifierFactory == null) {
						verifierFactory = (GoogleIdTokenVerifierFactory) functionContext.getObject(1);
					}

					// Create the Google Id Token Verifier
					GoogleIdTokenVerifier verifier = verifierFactory.create();
					if (verifier == null) {
						return; // no verifier available
					}

					// Load Verifier
					pollContext.setFinalState(verifier);
				});
		loadVerifier.linkParameter(0, StatePollContext.class);
		if (finalFactory == null) {
			loadVerifier.linkObject(1, sourceContext.addFunctionDependency(
					GoogleIdTokenVerifierFactory.class.getSimpleName(), GoogleIdTokenVerifierFactory.class));
		}
		sourceContext.getFlow(Flows.CONFIGURE).linkFunction(Flows.CONFIGURE.name());
	}

	@Override
	public void start(ManagedObjectExecuteContext context) throws Exception {

		// Trigger loading verifier
		this.googleIdTokenVerifier = StatePoller
				.builder(GoogleIdTokenVerifier.class, this.clock, Flows.CONFIGURE, context, (pollContext) -> this)
				.parameter((pollContext) -> pollContext).defaultPollInterval(5, TimeUnit.SECONDS).build();
	}

	@Override
	protected ManagedObject getManagedObject() throws Throwable {
		return this;
	}

	/*
	 * ======================= ManagedObject ===============================
	 */

	@Override
	public Object getObject() throws Throwable {
		return this.googleIdTokenVerifier.getState(20, TimeUnit.SECONDS);
	}

}