io.vertx.ext.auth.oauth2.AccessToken Java Examples

The following examples show how to use io.vertx.ext.auth.oauth2.AccessToken. You can vote up the ones you like or vote down the ones you don't like, and go to the original project or source file by following the links above each example. You may check out the related API usage on the sidebar.

Example #1

Source File: CodeAuthenticationMechanism.java From quarkus with Apache License 2.0

6 votes

private void processSuccessfulAuthentication(RoutingContext context, TenantConfigContext configContext,
        AccessToken result, SecurityIdentity securityIdentity) {
    removeCookie(context, configContext, getSessionCookieName(configContext));

    String cookieValue = new StringBuilder(result.opaqueIdToken())
            .append(COOKIE_DELIM)
            .append(result.opaqueAccessToken())
            .append(COOKIE_DELIM)
            .append(result.opaqueRefreshToken()).toString();

    long maxAge = result.idToken().getLong("exp") - result.idToken().getLong("iat");
    if (configContext.oidcConfig.token.lifespanGrace.isPresent()) {
        maxAge += configContext.oidcConfig.token.lifespanGrace.get();
    }
    createCookie(context, configContext, getSessionCookieName(configContext), cookieValue, maxAge);
}

Example #2

Source File: Oauth2TokenTest.java From vertx-auth with Apache License 2.0

6 votes

@Test
public void testNullScope() throws Exception {
  super.setUp();
  oauth2 = KeycloakAuth.create(vertx, OAuth2FlowType.AUTH_CODE, keycloakConfig);

  JsonObject json = new JsonObject(
    "{\n" +
      "    \"access_token\":\"xyz\",\n" +
      "    \"expires_in\":60,\n" +
      "    \"token_type\":\"bearer\",\n" +
      "    \"not-before-policy\":0,\n" +
      "    \"scope\":null\n" +
      "}"
  );

  try {
    AccessToken token = new AccessTokenImpl(json, oauth2);
  } catch (RuntimeException e) {
    fail();
  }
}

Example #3

Source File: KeycloakRBACImpl.java From vertx-auth with Apache License 2.0

6 votes

/**
 * Determine if this token has an associated role.
 * <p>
 * This method is only functional if the token is constructed
 * with a `clientId` parameter.
 * <p>
 * The parameter matches a role specification using the following rules:
 * <p>
 * - If the name contains no colons, then the name is taken as the entire
 * name of a role within the current application, as specified via
 * `clientId`.
 * - If the name starts with the literal `realm:`, the subsequent portion
 * is taken as the name of a _realm-level_ role.
 * - Otherwise, the name is split at the colon, with the first portion being
 * taken as the name of an arbitrary application, and the subsequent portion
 * as the name of a role with that app.
 *
 * @param authority    The role name specifier.
 * @param handler `true` if this token has the specified role, otherwise `false`.
 */
@Override
public void isAuthorized(AccessToken user, String authority, Handler<AsyncResult<Boolean>> handler) {

  JsonObject accessToken = user.accessToken();

  if (accessToken == null) {
    handler.handle(Future.failedFuture("AccessToken is not a valid JWT"));
    return;
  }

  String[] parts = authority.split(":");

  if (parts.length == 1) {
    handler.handle(Future.succeededFuture(hasApplicationRole(accessToken, options.getClientID(), parts[0])));
    return;
  }

  if ("realm".equals(parts[0])) {
    handler.handle(Future.succeededFuture(hasRealmRole(accessToken, parts[1])));
    return;
  }

  handler.handle(Future.succeededFuture(hasApplicationRole(accessToken, parts[0], parts[1])));
}

Example #4

Source File: KeycloakOAuth2.java From apiman with Apache License 2.0

5 votes

@Override
public Authenticator authenticate(Vertx vertx, Map<String, String> config, MultiMap headerMap, Handler<AsyncResult<Void>> resultHandler) {

    OAuth2FlowType flowType = getFlowType(config.get("flowType"));
    JsonObject params = new JsonObject();
    if (config.get("username") != null) {
        params.put("username", config.get("username"));
    }
    if (config.get("password") != null) {
        params.put("password", config.get("password"));
    }

    OAuth2Auth oauth2 = KeycloakAuth.create(vertx,  flowType, mapToJson(config));

    oauth2.getToken(params, tokenResult -> {
        if (tokenResult.succeeded()) {
            log.debug("OAuth2 Keycloak exchange succeeded.");
            AccessToken token = tokenResult.result();
            headerMap.set("Authorization", "Bearer " + token.principal().getString("access_token"));
            resultHandler.handle(Future.succeededFuture());
        } else {
            log.error("Access Token Error: {0}.", tokenResult.cause().getMessage());
            resultHandler.handle(Future.failedFuture(tokenResult.cause()));
        }
      });
    return this;
}

Example #5

Source File: OAuth2.java From apiman with Apache License 2.0

5 votes

@Override
public Authenticator authenticate(Vertx vertx, Map<String, String> config, MultiMap headerMap, Handler<AsyncResult<Void>> resultHandler) {
    OAuth2ClientOptions credentials = new OAuth2ClientOptions(mapToJson(config));
    if (config.get("oauthUri") != null) {
        credentials.setSite(config.get("oauthUri"));
    }
    if (config.get("clientId") != null) {
        credentials.setClientID(config.get("clientId"));
    }

    OAuth2FlowType flowType = getFlowType(config.get("flowType"));
    JsonObject params = new JsonObject();
    if (config.get("username") != null) {
        params.put("username", config.get("username"));
    }
    if (config.get("password") != null) {
        params.put("password", config.get("password"));
    }

    OAuth2Auth oauth2 = OAuth2Auth.create(vertx, flowType, credentials);

    oauth2.getToken(params, tokenResult -> {
      if (tokenResult.succeeded()) {
          log.debug("OAuth2 exchange succeeded.");
          AccessToken token = tokenResult.result();
          headerMap.set("Authorization", "Bearer " + token.principal().getString("access_token"));
          resultHandler.handle(Future.succeededFuture());
      } else {
          log.error("Access Token Error: {0}.", tokenResult.cause().getMessage());
          resultHandler.handle(Future.failedFuture(tokenResult.cause()));
      }
    });
    return this;
}

Example #6

Source File: Oauth2TokenTest.java From vertx-auth with Apache License 2.0

5 votes

@Test
public void keycloakTest() throws Exception {
  super.setUp();
  oauth2 = KeycloakAuth.create(vertx, OAuth2FlowType.AUTH_CODE, keycloakConfig);

  AccessToken token = new AccessTokenImpl(keycloakToken, oauth2);

  assertNotNull(token.opaqueAccessToken());
  assertNotNull(token.opaqueRefreshToken());
  assertNull(token.accessToken());
}

Example #7