com.nouveauxterritoires.eterritoires.identityserver.openid.connect.client.TaxeUserInfoFetcher.java Source code

Introduction

Here is the source code for com.nouveauxterritoires.eterritoires.identityserver.openid.connect.client.TaxeUserInfoFetcher.java

Source

/*******************************************************************************
 * Copyright 2014 The MITRE Corporation
 *   and the MIT Kerberos and Internet Trust Consortium
 * 
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *   http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 ******************************************************************************/
package com.nouveauxterritoires.eterritoires.identityserver.openid.connect.client;

import org.mitre.openid.connect.client.*;
import java.io.IOException;
import java.net.URI;

import org.apache.http.client.HttpClient;
import org.apache.http.client.utils.URIBuilder;
import org.apache.http.impl.client.SystemDefaultHttpClient;
import org.mitre.openid.connect.config.ServerConfiguration;
import org.mitre.openid.connect.config.ServerConfiguration.UserInfoTokenMethod;
import com.nouveauxterritoires.eterritoires.identityserver.openid.connect.model.TaxeUserInfo;
import org.mitre.openid.connect.model.OIDCAuthenticationToken;
import org.mitre.openid.connect.model.UserInfo;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.http.HttpMethod;
import org.springframework.http.client.ClientHttpRequest;
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
import org.springframework.util.LinkedMultiValueMap;
import org.springframework.util.MultiValueMap;
import org.springframework.web.client.RestTemplate;

import com.google.common.base.Strings;
import com.google.gson.JsonObject;
import com.google.gson.JsonParser;

/**
 * Utility class to fetch userinfo from the userinfo endpoint, if available.
 * @author jricher
 *
 */
public class TaxeUserInfoFetcher {

    private Logger logger = LoggerFactory.getLogger(TaxeUserInfoFetcher.class);

    public UserInfo loadUserInfo(final OIDCAuthenticationToken token) {

        ServerConfiguration serverConfiguration = token.getServerConfiguration();

        if (serverConfiguration == null) {
            logger.warn("No server configuration found.");
            return null;
        }

        if (Strings.isNullOrEmpty(serverConfiguration.getUserInfoUri())) {
            logger.warn("No userinfo endpoint, not fetching.");
            return null;
        }

        try {

            // if we got this far, try to actually get the userinfo
            HttpClient httpClient = new SystemDefaultHttpClient();

            HttpComponentsClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory(httpClient);

            String userInfoString = null;

            if (serverConfiguration.getUserInfoTokenMethod() == null
                    || serverConfiguration.getUserInfoTokenMethod().equals(UserInfoTokenMethod.HEADER)) {
                RestTemplate restTemplate = new RestTemplate(factory) {

                    @Override
                    protected ClientHttpRequest createRequest(URI url, HttpMethod method) throws IOException {
                        ClientHttpRequest httpRequest = super.createRequest(url, method);
                        httpRequest.getHeaders().add("Authorization",
                                String.format("Bearer %s", token.getAccessTokenValue()));
                        return httpRequest;
                    }
                };

                userInfoString = restTemplate.getForObject(serverConfiguration.getUserInfoUri(), String.class);

            } else if (serverConfiguration.getUserInfoTokenMethod().equals(UserInfoTokenMethod.FORM)) {
                MultiValueMap<String, String> form = new LinkedMultiValueMap<String, String>();
                form.add("access_token", token.getAccessTokenValue());

                RestTemplate restTemplate = new RestTemplate(factory);
                userInfoString = restTemplate.postForObject(serverConfiguration.getUserInfoUri(), form,
                        String.class);
            } else if (serverConfiguration.getUserInfoTokenMethod().equals(UserInfoTokenMethod.QUERY)) {
                URIBuilder builder = new URIBuilder(serverConfiguration.getUserInfoUri());
                builder.setParameter("access_token", token.getAccessTokenValue());

                RestTemplate restTemplate = new RestTemplate(factory);
                userInfoString = restTemplate.getForObject(builder.toString(), String.class);
            }

            if (!Strings.isNullOrEmpty(userInfoString)) {

                JsonObject userInfoJson = new JsonParser().parse(userInfoString).getAsJsonObject();

                UserInfo userInfo = TaxeUserInfo.fromJson(userInfoJson);

                return userInfo;
            } else {
                // didn't get anything, return null
                return null;
            }
        } catch (Exception e) {
            logger.warn("Error fetching taxeuserinfo", e);
            return null;
        }

    }

}