org.springframework.security.oauth2.config.ClientServiceBeanDefinitionParser Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of spring-security-oauth
Module for providing OAuth support to Spring Security
The newest version!
/*
 * Copyright 2008-2009 Web Cohesion
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.springframework.security.oauth2.config;

import org.springframework.beans.factory.support.BeanDefinitionBuilder;
import org.springframework.beans.factory.xml.AbstractSingleBeanDefinitionParser;
import org.springframework.beans.factory.xml.ParserContext;
import org.springframework.security.core.authority.AuthorityUtils;
import org.springframework.security.oauth2.provider.BaseClientDetails;
import org.springframework.security.oauth2.provider.InMemoryClientDetailsService;
import org.springframework.util.StringUtils;
import org.springframework.util.xml.DomUtils;
import org.w3c.dom.Element;

import java.util.*;

/**
 * @author Ryan Heaton
 * @author Andrew McCall
 */
public class ClientServiceBeanDefinitionParser extends AbstractSingleBeanDefinitionParser {

  @Override
  protected Class getBeanClass(Element element) {
    return InMemoryClientDetailsService.class;
  }

  @Override
  protected void doParse(Element element, ParserContext parserContext, BeanDefinitionBuilder builder) {
    List clientElements = DomUtils.getChildElementsByTagName(element, "client");
    Map clients = new HashMap();
    for (Object item : clientElements) {
      BaseClientDetails client = new BaseClientDetails();
      Element clientElement = (Element) item;
      String clientId = clientElement.getAttribute("clientId");
      if (StringUtils.hasText(clientId)) {
        client.setClientId(clientId);
      }
      else {
        parserContext.getReaderContext().error("A client id must be supplied with the definition of a client.", clientElement);
      }

      String secret = clientElement.getAttribute("secret");
      if (StringUtils.hasText(secret)) {
        client.setClientSecret(secret);
      }

      String scope = clientElement.getAttribute("scope");
      if (StringUtils.hasText(scope)) {
        List scopeList = new ArrayList();
        for (StringTokenizer tokenizer = new StringTokenizer(scope, ","); tokenizer.hasMoreTokens();) {
          scopeList.add(tokenizer.nextToken().trim());
        }
        if (!scopeList.isEmpty()) {
          client.setScope(scopeList);
        }
      }

      String flows = clientElement.getAttribute("authorizedFlows");
      List flowList = new ArrayList();
      if (StringUtils.hasText(flows)) {
        for (StringTokenizer tokenizer = new StringTokenizer(flows, ","); tokenizer.hasMoreTokens();) {
          flowList.add(tokenizer.nextToken().trim());
        }
      }
      else {
        flowList.add("web_server");
      }

      if (!flowList.isEmpty()) {
        client.setAuthorizedFlows(flowList);
      }

      String authorities = clientElement.getAttribute("authorities");
      if (StringUtils.hasText(authorities)) {
        client.setAuthorities(AuthorityUtils.commaSeparatedStringToAuthorityList(authorities));
      }

      clients.put(clientId, client);
    }

    builder.addPropertyValue("clientDetailsStore", clients);
  }
}