leap.oauth2.rs.DefaultOAuth2ResServerConfig Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of leap-oauth2-webapp Show documentation
There is a newer version: 0.7.13b
/*
 * Copyright 2017 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *       http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 */
package leap.oauth2.rs;

import leap.core.BeanFactory;
import leap.core.annotation.ConfigProperty;
import leap.core.annotation.Configurable;
import leap.core.annotation.Inject;
import leap.core.cache.Cache;
import leap.core.cache.CacheManager;
import leap.core.ioc.PostCreateBean;
import leap.core.security.token.jwt.JwtVerifier;
import leap.core.security.token.jwt.RsaVerifier;
import leap.lang.Assert;
import leap.lang.security.RSA;
import leap.web.App;
import leap.web.AppInitializable;
import leap.web.security.SecurityConfigurator;

@Configurable(prefix="oauth2.rs")
public class DefaultOAuth2ResServerConfig implements OAuth2ResServerConfig, OAuth2ResServerConfigurator, PostCreateBean, AppInitializable {

	protected @Inject SecurityConfigurator sc;
    protected @Inject CacheManager         cm;

	protected boolean               enabled;
	protected AuthzServerMode		authzServerMode = AuthzServerMode.NONE;
    protected Boolean               useRemoteUserInfo;
	protected String                remoteTokenInfoEndpointUrl;
    protected String                remoteUserInfoEndpointUrl;
    protected String                tokenEndpointUrl;
    protected String                authorizationEndpointUrl;
	protected String 				resourceServerId;
	protected String 				resourceServerSecret;
	protected Cache cachedInterceptUrls;

	
	protected String				rsaPublicKeyStr;
	protected JwtVerifier           jwtVerifier;
	
	
	@Override
	public OAuth2ResServerConfig config() {
		return this;
	}

    public boolean isEnabled() {
	    return enabled;
    }

	@ConfigProperty
    public OAuth2ResServerConfigurator setEnabled(boolean enabled) {
		this.enabled = enabled;
	    return this;
    }

	@ConfigProperty
	public OAuth2ResServerConfigurator setRsaPublicKeyStr(String publicKey) {
		this.rsaPublicKeyStr = publicKey;
		return this;
	}

	@Override
	public boolean isUseLocalAuthorizationServer() {
		return authzServerMode == AuthzServerMode.LOCAL;
	}

	@Override
	public boolean isUseRemoteAuthorizationServer() {
		return authzServerMode == AuthzServerMode.REMOTE;
	}

	@Override
	public OAuth2ResServerConfigurator useLocalAuthorizationServer() {
		authzServerMode = AuthzServerMode.LOCAL;
		return this;
	}

	@Override
	public OAuth2ResServerConfigurator useRemoteAuthorizationServer() {
		authzServerMode = AuthzServerMode.REMOTE;
		return this;
	}

	@Override
	public OAuth2ResServerConfigurator useRemoteAuthorizationServer(String tokenInfoEndpointUrl) {
		authzServerMode = AuthzServerMode.REMOTE;
		this.setRemoteTokenInfoEndpointUrl(tokenInfoEndpointUrl);
		return this;
	}

	@Override
	public JwtVerifier getJwtVerifier() {
		return jwtVerifier;
	}

	@Override
	public OAuth2ResServerConfigurator useRsaJwtVerifier() {
		Assert.notEmpty(rsaPublicKeyStr,"rsa public key string can not be empty");
		jwtVerifier = new RsaVerifier(RSA.decodePublicKey(rsaPublicKeyStr));
		return this;
	}

	@Override
	public OAuth2ResServerConfigurator useJwtVerifier(JwtVerifier verifier) {
		this.jwtVerifier = verifier;
		return this;
	}

	@ConfigProperty
	public OAuth2ResServerConfigurator setAuthorizationServerMode(AuthzServerMode mode) {
		return this;
	}

	@Override
    public String getRemoteTokenInfoEndpointUrl() {
        return remoteTokenInfoEndpointUrl;
    }

    @ConfigProperty
	public OAuth2ResServerConfigurator setRemoteTokenInfoEndpointUrl(String url) {
	    this.remoteTokenInfoEndpointUrl = url;
	    return this;
	}

    @Override
    public String getRemoteUserInfoEndpointUrl() {
        return remoteUserInfoEndpointUrl;
    }

    @Override
    public OAuth2ResServerConfigurator setRemoteUserInfoEndpointUrl(String url) {
        this.remoteUserInfoEndpointUrl = url;
        return this;
    }

    @Override
    public boolean isUseRemoteUserInfo() {
        return null == useRemoteUserInfo ? isUseRemoteAuthorizationServer() : useRemoteUserInfo;
    }

    @Override
    public OAuth2ResServerConfigurator setUseRemoteUserInfo(Boolean used) {
        this.useRemoteUserInfo = used;
        return this;
    }

    @Override
    public String getTokenEndpointUrl() {
        return tokenEndpointUrl;
    }

    public OAuth2ResServerConfigurator setTokenEndpointUrl(String tokenEndpointUrl) {
        this.tokenEndpointUrl = tokenEndpointUrl;
        return this;
    }

    @Override
    public String getAuthorizationEndpointUrl() {
        return authorizationEndpointUrl;
    }

    public OAuth2ResServerConfigurator setAuthorizationEndpointUrl(String authorizationEndpointUrl) {
        this.authorizationEndpointUrl = authorizationEndpointUrl;
        return this;
    }

    @Override
    public void postCreate(BeanFactory factory) throws Throwable {
        this.cachedInterceptUrls = cm.createSimpleLRUCache(1024);
    }

    @Override
    public void postAppInit(App app) throws Throwable {
        if(enabled) {
            if(!sc.config().isEnabled()) {
                sc.enable(true);
            }
        }
    }

	@Override
	public String getResourceServerId() {
		return resourceServerId;
	}

	@Override
	public String getResourceServerSecret() {
		return resourceServerSecret;
	}

	@Override
	public OAuth2ResServerConfigurator setResourceServerId(String resourceServerId) {
		this.resourceServerId = resourceServerId;
		return this;
	}

	@ConfigProperty
	public OAuth2ResServerConfigurator setResourceServerSecret(String resourceServerSecret) {
		this.resourceServerSecret = resourceServerSecret;
		return this;
	}
}