org.cloudfoundry.identity.uaa.openid.UserInfoEndpoint.java Source code

Introduction

Here is the source code for org.cloudfoundry.identity.uaa.openid.UserInfoEndpoint.java

Source

/*
 * Cloud Foundry 2012.02.03 Beta
 * Copyright (c) [2009-2012] VMware, Inc. All Rights Reserved.
 *
 * This product is licensed to you under the Apache License, Version 2.0 (the "License").
 * You may not use this product except in compliance with the License.
 *
 * This product includes a number of subcomponents with
 * separate copyright notices and license terms. Your use of these
 * subcomponents is subject to the terms and conditions of the
 * subcomponent's license, as noted in the LICENSE file.
 */
package org.cloudfoundry.identity.uaa.openid;

import static org.cloudfoundry.identity.uaa.oauth.Claims.EMAIL;
import static org.cloudfoundry.identity.uaa.oauth.Claims.FAMILY_NAME;
import static org.cloudfoundry.identity.uaa.oauth.Claims.GIVEN_NAME;
import static org.cloudfoundry.identity.uaa.oauth.Claims.NAME;
import static org.cloudfoundry.identity.uaa.oauth.Claims.USER_ID;
import static org.cloudfoundry.identity.uaa.oauth.Claims.USER_NAME;

import java.security.Principal;
import java.util.LinkedHashMap;
import java.util.Map;

import org.cloudfoundry.identity.uaa.authentication.UaaPrincipal;
import org.cloudfoundry.identity.uaa.user.UaaUser;
import org.cloudfoundry.identity.uaa.user.UaaUserDatabase;
import org.springframework.beans.factory.InitializingBean;
import org.springframework.security.oauth2.provider.OAuth2Authentication;
import org.springframework.stereotype.Controller;
import org.springframework.util.Assert;
import org.springframework.util.StringUtils;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;

/**
 * Controller that sends user info to clients wishing to authenticate.
 *
 * @author Dave Syer
 */
@Controller
public class UserInfoEndpoint implements InitializingBean {

    private UaaUserDatabase userDatabase;

    public void setUserDatabase(UaaUserDatabase userDatabase) {
        this.userDatabase = userDatabase;
    }

    @Override
    public void afterPropertiesSet() throws Exception {
        Assert.state(userDatabase != null, "A user database must be provided");
    }

    @RequestMapping(value = "/userinfo")
    @ResponseBody
    public Map<String, String> loginInfo(Principal principal) {
        OAuth2Authentication authentication = (OAuth2Authentication) principal;
        UaaPrincipal uaaPrincipal = extractUaaPrincipal(authentication);
        return getResponse(uaaPrincipal);
    }

    protected UaaPrincipal extractUaaPrincipal(OAuth2Authentication authentication) {
        Object object = authentication.getUserAuthentication().getPrincipal();
        if (object instanceof UaaPrincipal) {
            return (UaaPrincipal) object;
        }
        throw new IllegalStateException("User authentication could not be converted to UaaPrincipal");
    }

    protected Map<String, String> getResponse(UaaPrincipal principal) {
        UaaUser user = userDatabase.retrieveUserByName(principal.getName());
        Map<String, String> response = new LinkedHashMap<String, String>() {
            @Override
            public String put(String key, String value) {
                if (StringUtils.hasText(value)) {
                    return super.put(key, value);
                }
                return null;
            }
        };
        response.put(USER_ID, user.getId());
        response.put(USER_NAME, user.getUsername());
        response.put(GIVEN_NAME, user.getGivenName());
        response.put(FAMILY_NAME, user.getFamilyName());
        response.put(NAME, (user.getGivenName() != null ? user.getGivenName() : "")
                + (user.getFamilyName() != null ? " " + user.getFamilyName() : ""));
        response.put(EMAIL, user.getEmail());
        // TODO: other attributes
        return response;
    }
}