org.pac4j.oidc.client.AzureAd2Client Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of pac4j-oidc Show documentation
There is a newer version: 6.1.0
package org.pac4j.oidc.client;

import com.fasterxml.jackson.core.type.TypeReference;
import com.fasterxml.jackson.databind.ObjectMapper;
import lombok.val;
import org.pac4j.core.context.HttpConstants;
import org.pac4j.core.http.callback.CallbackUrlResolver;
import org.pac4j.core.http.callback.PathParameterCallbackUrlResolver;
import org.pac4j.core.util.HttpUtils;
import org.pac4j.oidc.client.azuread.AzureAdResourceRetriever;
import org.pac4j.oidc.config.AzureAd2OidcConfiguration;
import org.pac4j.oidc.exceptions.OidcException;
import org.pac4j.oidc.exceptions.OidcTokenException;
import org.pac4j.oidc.profile.azuread.AzureAdProfile;
import org.pac4j.oidc.profile.azuread.AzureAdProfileCreator;

import java.io.BufferedWriter;
import java.io.IOException;
import java.io.OutputStreamWriter;
import java.net.HttpURLConnection;
import java.nio.charset.StandardCharsets;
import java.util.HashMap;
import java.util.Map;

/**
 * This class is the OpenID Connect client to authenticate users in Microsoft Azure AD v2..
 * More information at: https://docs.microsoft.com/azure/active-directory/develop/active-directory-v2-protocols
 *
 */
public class AzureAd2Client extends OidcClient {

    protected ObjectMapper objectMapper;
    /** Constant typeRef */
    protected static final TypeReference> typeRef = new TypeReference<>() {};

    /**
     * Constructor for AzureAd2Client.
     */
    public AzureAd2Client() {
        objectMapper = new ObjectMapper();
    }

    /**
     * Constructor for AzureAd2Client.
     *
     * @param configuration a {@link AzureAd2OidcConfiguration} object
     */
    public AzureAd2Client(AzureAd2OidcConfiguration configuration) {
        super(configuration);
        objectMapper = new ObjectMapper();
    }

    /** {@inheritDoc} */
    @Override
    protected void internalInit(final boolean forceReinit) {
        getConfiguration().setResourceRetriever(new AzureAdResourceRetriever());
        setProfileCreatorIfUndefined(new AzureAdProfileCreator(getConfiguration(), this));

        super.internalInit(forceReinit);
    }

    /** {@inheritDoc} */
    @Override
    protected CallbackUrlResolver newDefaultCallbackUrlResolver() {
        return new PathParameterCallbackUrlResolver();
    }

    /**
     * Refresh the access token
     * https://docs.microsoft.com/azure/active-directory/develop/v2-oauth2-auth-code-flow#refresh-the-access-token
     *
     * @param azureAdProfile a {@link AzureAdProfile} object
     * @return a {@link String} object
     */
    public String getAccessTokenFromRefreshToken(final AzureAdProfile azureAdProfile) {
        val azureConfig = (AzureAd2OidcConfiguration) getConfiguration();
        HttpURLConnection connection = null;
        try {
            final Map headers = new HashMap<>();
            headers.put(HttpConstants.CONTENT_TYPE_HEADER, HttpConstants.APPLICATION_FORM_ENCODED_HEADER_VALUE);
            headers.put(HttpConstants.ACCEPT_HEADER, HttpConstants.APPLICATION_JSON);
            // get the token endpoint from discovery URI
            val tokenEndpointURL = azureConfig.getOpMetadataResolver().load().getTokenEndpointURI().toURL();
            connection = HttpUtils.openPostConnection(tokenEndpointURL, headers);

            val out = new BufferedWriter(new OutputStreamWriter(connection.getOutputStream(),
                StandardCharsets.UTF_8));
            out.write(azureConfig.makeOauth2TokenRequest(azureAdProfile.getRefreshToken().getValue()));
            out.close();

            val responseCode = connection.getResponseCode();
            if (responseCode != 200) {
                throw new OidcTokenException("request for access token failed: " + HttpUtils.buildHttpErrorMessage(connection));
            }
            var body = HttpUtils.readBody(connection);
            final Map res = objectMapper.readValue(body, typeRef);
            return (String) res.get("access_token");
        } catch (final IOException e) {
            throw new OidcException(e);
        } finally {
            HttpUtils.closeConnection(connection);
        }
    }
}