leap.oauth2.webapp.user.DefaultUserInfoLookup Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of leap-oauth2-webapp Show documentation
The newest version!
/*
 * Copyright 2017 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *       http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 */

package leap.oauth2.webapp.user;

import leap.core.annotation.Inject;
import leap.core.security.SimpleUserPrincipal;
import leap.core.security.UserPrincipal;
import leap.lang.New;
import leap.lang.Strings;
import leap.lang.codec.Base64;
import leap.lang.http.ContentTypes;
import leap.lang.http.Headers;
import leap.lang.http.client.HttpClient;
import leap.lang.http.client.HttpRequest;
import leap.lang.http.client.HttpResponse;
import leap.lang.json.JSON;
import leap.lang.json.JsonObject;
import leap.lang.json.JsonValue;
import leap.lang.logging.Log;
import leap.lang.logging.LogFactory;
import leap.oauth2.webapp.OAuth2InternalServerException;
import leap.oauth2.webapp.OAuth2Config;
import leap.web.security.user.SimpleUserDetails;

import java.util.Map;

public class DefaultUserInfoLookup implements UserInfoLookup {

    private static final Log log = LogFactory.get(DefaultUserInfoLookup.class);

    protected @Inject OAuth2Config config;
    protected @Inject HttpClient   httpClient;

    @Override
    public UserPrincipal lookupUserInfo(String at, String userId) {
        return requestUserInfo(New.hashMap("access_token", at));
    }

    protected UserPrincipal requestUserInfo(Map params) {
        if(Strings.isEmpty(config.getUserInfoUrl())) {
            throw new IllegalStateException("The userInfoEndpointUrl must be configured when use remote authz server");
        }

        HttpRequest request = httpClient.request(config.getUserInfoUrl());
        if(null != params) {
            params.forEach(request::addQueryParam);
        }

        if(null != config.getClientId()){
            request.addHeader(Headers.AUTHORIZATION, "Basic " +
                    Base64.encode(config.getClientId()+":"+config.getClientSecret()));
        }

        HttpResponse response = request.get();

        if(ContentTypes.APPLICATION_JSON_TYPE.isCompatible(response.getContentType())){
            String content = response.getString();

            log.debug("Received response : {}", content);

            try {
                JsonValue json = JSON.parse(content);

                if(!json.isMap()) {
                    throw new OAuth2InternalServerException("Invalid response from auth server : not a json map");
                }else{
                    JsonObject o = json.asJsonObject();

                    String error = o.getString ("error");
                    if(Strings.isEmpty(error)) {
                        return newUserInfo(o);
                    }else{
                        log.warn("Auth server response error '{}' : {}", error, o.getString("error_description"));
                        return null;
                    }
                }
            } catch (Exception e) {
                log.error(e);
                throw new OAuth2InternalServerException(e.getMessage());
            }
        }else{
            throw new OAuth2InternalServerException("Invalid response from auth server");
        }
    }

    protected UserPrincipal newUserInfo(JsonObject json) {
        SimpleUserPrincipal userInfo = new SimpleUserPrincipal();

        userInfo.setId(json.getString("sub"));
        userInfo.setName(json.getString("name"));
        userInfo.setLoginName(json.getString("login_name"));
        userInfo.setProperties(json.asMap());

        return userInfo;
    }

}