no.nav.brukerdialog.security.oidc.OpenAmUtils Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of oidc-security Show documentation

There is a newer version: 1.2020.02.21_14.01-cdaccec525a6

package no.nav.brukerdialog.security.oidc;


import javax.ws.rs.client.Client;
import javax.ws.rs.client.Entity;
import javax.ws.rs.core.Response;
import java.io.UnsupportedEncodingException;
import java.net.URLEncoder;
import java.util.Arrays;
import java.util.Map;
import java.util.Optional;


public class OpenAmUtils {

    public static String getSessionToken(String username, String password, String authorizeUrl, Client client) {
        Response response = client
                .target(authorizeUrl)
                .request()
                .header("X-OpenAM-Username", username)
                .header("X-OpenAM-Password", password)
                .header("Content-Type", "application/json")
                .buildPost(Entity.json("{}"))
                .invoke();

        return (String) Optional.ofNullable(response.readEntity(Map.class))
                .map( map -> map.get("tokenId"))
                .orElseThrow(() -> new OidcTokenException("Ingen session token i responsen"));
    }

    public static String getAuthorizationCode(String openAmHost, String sessionToken, String clientId, String redirectUri, Client client) {
        String cookie = "nav-isso=" + sessionToken;
        String uri = openAmHost + "/authorize";
        String encodedRedirectUri;
        try {
            encodedRedirectUri = URLEncoder.encode(redirectUri, "UTF-8");
        } catch (UnsupportedEncodingException e) {
            throw new IllegalArgumentException("Could not URL-encode the redirectUri: " + redirectUri);
        }

        Response response = client
                .target(uri)
                .queryParam("response_type", "code")
                .queryParam("scope", "openid")
                .queryParam("client_id", clientId)
                .queryParam("redirect_uri", encodedRedirectUri)
                .property("jersey.config.client.followRedirects", false)
                .request()
                .header("Content-Type", "application/json")
                .header("Cookie", cookie)
                .buildGet()
                .invoke();

        if(response.getStatus() != 302) {
            throw new OidcTokenException("Feil ved henting av authorization code, fikk status: "+response.getStatus()+" forventet 302");
        }

        String resolvedUri = response.getLocation().getQuery();

        return Arrays.stream(resolvedUri.split("&"))
                .filter( s -> s.contains("code="))
                .map(s -> s.replace("code=",""))
                .findFirst()
                .orElseThrow(() -> new OidcTokenException("Fant ikke authorization code i: "+ resolvedUri));
    }
}