org.codice.ddf.security.oidc.realm.CustomOidcProfileCreator.java Source code

Introduction

Here is the source code for org.codice.ddf.security.oidc.realm.CustomOidcProfileCreator.java

Source

/**
 * Copyright (c) Codice Foundation
 *
 * <p>This is free software: you can redistribute it and/or modify it under the terms of the GNU
 * Lesser General Public License as published by the Free Software Foundation, either version 3 of
 * the License, or any later version.
 *
 * <p>This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
 * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Lesser General Public License for more details. A copy of the GNU Lesser General Public
 * License is distributed along with this program and can be found at
 * <http://www.gnu.org/licenses/lgpl.html>.
 */
package org.codice.ddf.security.oidc.realm;

import static org.pac4j.core.profile.AttributeLocation.PROFILE_ATTRIBUTE;
import static org.pac4j.core.util.CommonHelper.assertNotNull;

import com.nimbusds.jwt.JWT;
import com.nimbusds.jwt.JWTClaimsSet;
import com.nimbusds.oauth2.sdk.token.AccessToken;
import com.nimbusds.oauth2.sdk.token.RefreshToken;
import java.util.Map;
import org.apache.shiro.authc.AuthenticationException;
import org.pac4j.core.context.WebContext;
import org.pac4j.core.profile.ProfileHelper;
import org.pac4j.core.profile.jwt.JwtClaims;
import org.pac4j.oidc.config.OidcConfiguration;
import org.pac4j.oidc.credentials.OidcCredentials;
import org.pac4j.oidc.profile.OidcProfile;
import org.pac4j.oidc.profile.creator.OidcProfileCreator;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class CustomOidcProfileCreator<U extends OidcProfile> extends OidcProfileCreator<U> {

    private static final Logger LOGGER = LoggerFactory.getLogger(CustomOidcProfileCreator.class);

    public CustomOidcProfileCreator(OidcConfiguration configuration) {
        super(configuration);
    }

    @Override
    public U create(OidcCredentials credentials, WebContext context) {
        init();

        final U profile = getProfileDefinition().newProfile();

        final AccessToken accessToken = credentials.getAccessToken();
        if (accessToken != null && !accessToken.getValue().isEmpty()) {
            profile.setAccessToken(accessToken);
        }

        final RefreshToken refreshToken = credentials.getRefreshToken();
        if (refreshToken != null && !refreshToken.getValue().isEmpty()) {
            profile.setRefreshToken(refreshToken);
        }

        final JWT idToken = credentials.getIdToken();
        profile.setIdTokenString(idToken.getParsedString());

        try {
            JWTClaimsSet claimsSet = idToken.getJWTClaimsSet();
            assertNotNull("claimsSet", claimsSet);
            profile.setId(ProfileHelper.sanitizeIdentifier(profile, claimsSet.getSubject()));

            for (final Map.Entry<String, Object> entry : claimsSet.getClaims().entrySet()) {
                if (!JwtClaims.SUBJECT.equals(entry.getKey()) && profile.getAttribute(entry.getKey()) == null) {
                    getProfileDefinition().convertAndAdd(profile, PROFILE_ATTRIBUTE, entry.getKey(),
                            entry.getValue());
                }
            }

            profile.setTokenExpirationAdvance(configuration.getTokenExpirationAdvance());

            return profile;

        } catch (final java.text.ParseException e) {
            throw new AuthenticationException(e);
        }
    }
}