uk.gov.nationalarchives.tdr.keycloak.Token.scala Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of tdr-auth-utils_2.13 Show documentation

Helper classes related to Keycloak and authentication for the Transfer Digital Records service

There is a newer version: 0.0.220

package uk.gov.nationalarchives.tdr.keycloak

import java.util.UUID

import com.nimbusds.oauth2.sdk.token.BearerAccessToken
import org.keycloak.representations.AccessToken

import scala.jdk.CollectionConverters._

class Token(private val token: AccessToken, val bearerAccessToken: BearerAccessToken) {
  private def getOtherClaim(name: String): Option[String] = token.getOtherClaims.asScala.get(name).map(_.toString)

  // The method to get the token verifies that the user_id is set so this should never be empty
  def userId: UUID = UUID.fromString(getOtherClaim("user_id").get)
  def name: String = token.getName
  def email: String = token.getEmail
  def transferringBody: Option[String] = getOtherClaim("body")
  def isJudgmentUser: Boolean = getOtherClaim("judgment_user").getOrElse("false").toBoolean
  def isStandardUser: Boolean = getOtherClaim("standard_user").getOrElse("false").toBoolean

  def isTNAUser: Boolean = getOtherClaim("tna_user").getOrElse("false").toBoolean

  def isTransferAdviser: Boolean = getOtherClaim("transfer_adviser").getOrElse("false").toBoolean

  def roles: Set[String] =
    Option(token.getResourceAccess("tdr")) match {
      case Some(access) => access.getRoles.asScala.toSet
      case None => Set()
  }
  def backendChecksRoles: Set[String] =
    Option(token.getResourceAccess("tdr-backend-checks")) match {
      case Some(access) => access.getRoles.asScala.toSet
      case None => Set()
    }

  def reportingRoles: Set[String] =
    Option(token.getResourceAccess("tdr-reporting")) match {
      case Some(access) => access.getRoles.asScala.toSet
      case None => Set()
    }
}
object Token {
  def apply(token: AccessToken, bearerAccessToken: BearerAccessToken): Token = new Token(token, bearerAccessToken)
}