leap.oauth2.server.endpoint.LogoutEndpoint Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of leap-oauth2-server Show documentation
There is a newer version: 0.7.13b
/*
 * Copyright 2015 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package leap.oauth2.server.endpoint;

import leap.core.AppConfigException;
import leap.core.annotation.Inject;
import leap.lang.Strings;
import leap.lang.intercepting.State;
import leap.oauth2.server.endpoint.logout.PostLogoutHandler;
import leap.web.App;
import leap.web.Request;
import leap.web.Response;
import leap.web.route.Routes;
import leap.web.security.SecurityContextHolder;
import leap.web.security.SecurityInterceptor;
import leap.web.security.authc.AuthenticationContext;
import leap.web.security.authc.AuthenticationManager;
import leap.web.theme.ThemeManager;
import leap.web.view.View;

public class LogoutEndpoint extends AbstractAuthzEndpoint implements SecurityInterceptor {
    
    protected @Inject AuthenticationManager authcManager;
    protected @Inject ThemeManager          themeManager;
    protected @Inject PostLogoutHandler     postLogoutHandler;

    protected View defaultLogoutView;

    @Override
    public void startEndpoint(App app, Routes routes) throws Throwable {
        if(config.isEnabled() && config.isSingleLoginEnabled()) {
            sc.interceptors().add(this);
            
            if(!Strings.isEmpty(config.getLogoutView())) {
                this.defaultLogoutView = themeManager.getDefaultView(config.getLogoutView());
            }

            if(null == defaultLogoutView) {
                throw new AppConfigException("The oauth2 logout view must be configured if logout endpoint enabled");
            }
        }
    }

    @Override
    public State postResolveAuthentication(Request request, Response response, AuthenticationContext context) throws Throwable {
        if(!request.getPath().equals(config.getLogoutEndpointPath())) {
            return State.CONTINUE;
        }
        
        //TODO : validate the request.
        
        //Do Logout
        authcManager.logoutImmediately(request, response);
        postLogoutHandler.handlePostLogout(request, response, SecurityContextHolder.current().getLogoutContext(), defaultLogoutView);
        return State.CONTINUE;
    }
}