ar.com.zauber.commons.social.twitter.security.TwitterAuthenticationProvider.java Source code

Introduction

Here is the source code for ar.com.zauber.commons.social.twitter.security.TwitterAuthenticationProvider.java

Source

/**
 * Copyright (c) 2005-2011 Zauber S.A. <http://www.zaubersoftware.com/>
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package ar.com.zauber.commons.social.twitter.security;

import org.apache.commons.lang.Validate;
import org.springframework.security.authentication.AuthenticationProvider;
import org.springframework.security.authentication.AuthenticationServiceException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.userdetails.UserDetails;

import ar.com.zauber.commons.social.oauth.OAuthAccessException;
import ar.com.zauber.commons.social.oauth.OAuthAccessManager;
import ar.com.zauber.commons.social.oauth.OAuthAccessToken;

/**
 * {@link AuthenticationProvider} for Twitter OAuth.
 * 
 * @author Mariano Cortesi
 * @since Feb 3, 2010
 */
public class TwitterAuthenticationProvider implements AuthenticationProvider {

    private final TwitterUserDetailsService userDetailsService;
    private final OAuthAccessManager twitterAccessManager;

    /**
     * Creates the TwitterAuthenticationProvider.
     */
    public TwitterAuthenticationProvider(final TwitterUserDetailsService userDetailsService,
            final OAuthAccessManager twitterAccessManager) {
        Validate.notNull(userDetailsService);
        Validate.notNull(twitterAccessManager);
        this.userDetailsService = userDetailsService;
        this.twitterAccessManager = twitterAccessManager;
    }

    /** @see AuthenticationProvider#authenticate(Authentication) */
    public final Authentication authenticate(final Authentication authentication) throws AuthenticationException {
        Validate.notNull(authentication);
        TwitterAuthenticationToken authenticationToken = (TwitterAuthenticationToken) authentication;

        try {
            Object accessToken = authenticationToken.getCredentials();

            if (accessToken == null) {
                final String oAuthToken = authenticationToken.getOAuthToken();
                final String oAuthVerifier = authenticationToken.getOAuthVerifier();
                accessToken = twitterAccessManager.getAccessToken(oAuthToken, oAuthVerifier);
            }

            UserDetails userDetails = this.userDetailsService
                    .loadUserByTwitterAccessToken((OAuthAccessToken) accessToken);
            return new TwitterAuthenticationToken((OAuthAccessToken) accessToken, userDetails,
                    userDetails.getAuthorities());
        } catch (OAuthAccessException e) {
            throw new AuthenticationServiceException("twitter error", e);
        }
    }

    /** @see AuthenticationProvider#supports(java.lang.Class) */
    public final boolean supports(final Class<? extends Object> authentication) {
        return (TwitterAuthenticationToken.class.isAssignableFrom(authentication));
    }

}