com.predic8.membrane.core.interceptor.oauth2.processors.RevocationEndpointProcessor Maven / Gradle / Ivy
/*
* Copyright 2016 predic8 GmbH, www.predic8.com
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
* http://www.apache.org/licenses/LICENSE-2.0
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.predic8.membrane.core.interceptor.oauth2.processors;
import com.predic8.membrane.core.exchange.Exchange;
import com.predic8.membrane.core.http.Response;
import com.predic8.membrane.core.interceptor.Outcome;
import com.predic8.membrane.core.interceptor.authentication.session.SessionManager;
import com.predic8.membrane.core.interceptor.oauth2.Client;
import com.predic8.membrane.core.interceptor.oauth2.OAuth2AuthorizationServerInterceptor;
import com.predic8.membrane.core.interceptor.oauth2.OAuth2Util;
import com.predic8.membrane.core.interceptor.oauth2.ParamNames;
import com.predic8.membrane.core.util.URLParamUtil;
import java.util.Map;
public class RevocationEndpointProcessor extends EndpointProcessor {
public RevocationEndpointProcessor(OAuth2AuthorizationServerInterceptor authServer) {
super(authServer);
}
@Override
public boolean isResponsible(Exchange exc) {
return exc.getRequestURI().startsWith("/oauth2/revoke");
}
@Override
public Outcome process(Exchange exc) throws Exception {
Map params = URLParamUtil.getParams(uriFactory, exc);
if (!params.containsKey("token")) {
exc.setResponse(OAuth2Util.createParameterizedJsonErrorResponse(exc,jsonGen, "error", "invalid_request"));
return Outcome.RETURN;
}
SessionManager.Session session = authServer.getSessionFinder().getSessionForToken(params.get("token"));
if (session == null) { // token doesnt exist -> token is already invalid
exc.setResponse(Response
.ok()
.bodyEmpty()
.build());
return Outcome.RETURN;
}
Client client;
Map userAttributes = session.getUserAttributes();
synchronized (userAttributes){
try {
client = authServer.getClientList().getClient(userAttributes.get(ParamNames.CLIENT_ID));
}
catch(Exception e){
// This should never happen
exc.setResponse(Response
.ok()
.bodyEmpty()
.build());
return Outcome.RETURN;
}
}
String paramClientId = params.get(ParamNames.CLIENT_ID);
String paramClientSecret = params.get(ParamNames.CLIENT_SECRET);
if((paramClientId != null && !client.getClientId().equals(paramClientId)) || (paramClientSecret != null && !client.getClientSecret().equals(paramClientSecret))){
exc.setResponse(OAuth2Util.createParameterizedJsonErrorResponse(exc, jsonGen, "error", "invalid_grant"));
return Outcome.RETURN;
}
try {
authServer.getTokenGenerator().invalidateToken(params.get("token"), client.getClientId(), client.getClientSecret());
} catch (Exception e) {
exc.setResponse(OAuth2Util.createParameterizedJsonErrorResponse(exc, jsonGen, "error", "invalid_grant"));
return Outcome.RETURN;
}
synchronized(session) {
session.clear();
}
exc.setResponse(Response
.ok()
.bodyEmpty()
.build());
return Outcome.RETURN;
}
}