com.pawelniewiadomski.jira.openid.authentication.servlet.OAuthCallbackServlet.java Source code

Introduction

Here is the source code for com.pawelniewiadomski.jira.openid.authentication.servlet.OAuthCallbackServlet.java

Source

package com.pawelniewiadomski.jira.openid.authentication.servlet;

import com.atlassian.crowd.embedded.api.CrowdService;
import com.atlassian.fugue.Either;
import com.atlassian.jira.config.util.JiraHome;
import com.atlassian.jira.user.util.UserUtil;
import com.atlassian.jira.util.lang.Pair;
import com.google.common.collect.ImmutableMap;
import com.pawelniewiadomski.jira.openid.authentication.LicenseProvider;
import com.pawelniewiadomski.jira.openid.authentication.activeobjects.OpenIdDao;
import com.pawelniewiadomski.jira.openid.authentication.activeobjects.OpenIdProvider;
import com.pawelniewiadomski.jira.openid.authentication.providers.OAuth2ProviderType;
import com.pawelniewiadomski.jira.openid.authentication.services.AuthenticationService;
import com.pawelniewiadomski.jira.openid.authentication.services.GlobalSettings;
import com.pawelniewiadomski.jira.openid.authentication.services.ProviderTypeFactory;
import org.apache.commons.lang.StringUtils;
import org.apache.log4j.Logger;
import org.apache.oltu.oauth2.client.response.OAuthAuthzResponse;
import org.apache.oltu.oauth2.common.exception.OAuthProblemException;
import org.springframework.beans.factory.annotation.Autowired;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.sql.SQLException;

/**
 * Handling OpenID Connect authentications.
 */
public class OAuthCallbackServlet extends AbstractOpenIdServlet {
    final Logger log = Logger.getLogger(this.getClass());

    @Autowired
    GlobalSettings globalSettings;

    @Autowired
    CrowdService crowdService;

    @Autowired
    UserUtil userUtil;

    @Autowired
    LicenseProvider licenseProvider;

    @Autowired
    JiraHome jiraHome;

    @Autowired
    AuthenticationService authenticationService;

    @Autowired
    TemplateHelper templateHelper;

    @Autowired
    OpenIdDao openIdDao;

    @Autowired
    ProviderTypeFactory providerTypeFactory;

    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        if (!licenseProvider.isValidLicense()) {
            templateHelper.render(request, response, "OpenId.Templates.invalidLicense");
            return;
        }

        final String cid = request.getParameter("cid");
        final OpenIdProvider provider;
        try {
            provider = openIdDao.findByCallbackId(cid);
        } catch (SQLException e) {
            throw new RuntimeException(e);
        }

        if (provider != null) {
            try {
                final OAuthAuthzResponse oar = OAuthAuthzResponse.oauthCodeAuthzResponse(request);
                final String state = (String) request.getSession()
                        .getAttribute(AuthenticationService.STATE_IN_SESSION);
                if (!StringUtils.equals(state, oar.getState())) {
                    templateHelper.render(request, response, "OpenId.Templates.invalidState",
                            ImmutableMap.<String, Object>of("providerName", provider.getName()));
                    return;
                }

                final OAuth2ProviderType providerType = (OAuth2ProviderType) providerTypeFactory
                        .getProviderTypeById(provider.getProviderType());
                final Either<Pair<String, String>, String> userOrError = providerType
                        .getUsernameAndEmail(oar.getCode(), provider, request);

                if (userOrError.isLeft()) {
                    Pair<String, String> usernameAndEmail = userOrError.left().get();
                    authenticationService.showAuthentication(request, response, provider, usernameAndEmail.first(),
                            usernameAndEmail.second());
                } else {
                    templateHelper.render(request, response, "OpenId.Templates.errorWrapper",
                            ImmutableMap.<String, Object>of("content", userOrError.right().get()));
                }
                return;
            } catch (Exception e) {
                if (e instanceof OAuthProblemException) {
                    templateHelper.render(request, response, "OpenId.Templates.oauthError",
                            ImmutableMap.<String, Object>of("providerName", provider.getName(), "errorMessage",
                                    e.getMessage()));
                } else {
                    log.error("OpenID verification failed", e);
                    templateHelper.render(request, response, "OpenId.Templates.error");
                }
                return;
            }
        }

        templateHelper.render(request, response, "OpenId.Templates.error");
    }
}