APP 어댑터용 토큰생성 Proc
This commit is contained in:
Yunsam.Eo
@@ -0,0 +1,477 @@
|
|||||||
|
package com.eactive.eai.custom.adapter.app.impl;
|
||||||
|
|
||||||
|
import java.text.ParseException;
|
||||||
|
import java.util.Arrays;
|
||||||
|
import java.util.HashMap;
|
||||||
|
import java.util.HashSet;
|
||||||
|
import java.util.Properties;
|
||||||
|
import java.util.Set;
|
||||||
|
|
||||||
|
import org.apache.commons.lang3.ArrayUtils;
|
||||||
|
import org.apache.commons.lang3.BooleanUtils;
|
||||||
|
import org.apache.commons.lang3.StringUtils;
|
||||||
|
//import org.codehaus.jackson.map.ObjectMapper;
|
||||||
|
import com.fasterxml.jackson.databind.ObjectMapper;
|
||||||
|
import org.json.simple.JSONObject;
|
||||||
|
import org.json.simple.JSONValue;
|
||||||
|
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
|
||||||
|
import org.springframework.security.core.Authentication;
|
||||||
|
import org.springframework.security.core.GrantedAuthority;
|
||||||
|
import org.springframework.security.core.authority.SimpleGrantedAuthority;
|
||||||
|
import org.springframework.security.core.userdetails.User;
|
||||||
|
import org.springframework.security.oauth2.common.OAuth2AccessToken;
|
||||||
|
import org.springframework.security.oauth2.common.util.OAuth2Utils;
|
||||||
|
import org.springframework.security.oauth2.provider.ClientDetails;
|
||||||
|
import org.springframework.security.oauth2.provider.OAuth2Authentication;
|
||||||
|
import org.springframework.security.oauth2.provider.OAuth2Request;
|
||||||
|
import org.springframework.security.oauth2.provider.TokenRequest;
|
||||||
|
import org.springframework.security.oauth2.provider.token.DefaultTokenServices;
|
||||||
|
import org.springframework.security.oauth2.provider.token.TokenEnhancer;
|
||||||
|
import org.springframework.security.oauth2.provider.token.TokenEnhancerChain;
|
||||||
|
import org.springframework.security.oauth2.provider.token.TokenStore;
|
||||||
|
import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
|
||||||
|
import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
|
||||||
|
|
||||||
|
import com.eactive.eai.adapter.app.BusinessApplication;
|
||||||
|
import com.eactive.eai.adapter.http.dynamic.filter.ApiAuthFilter;
|
||||||
|
import com.eactive.eai.adapter.http.dynamic.filter.JwtAuthException;
|
||||||
|
//import com.eactive.eai.adapter.http.dynamic.filter.JwtAuthFilter;
|
||||||
|
import com.eactive.eai.authserver.service.OAuth2Manager;
|
||||||
|
import com.eactive.eai.authserver.util.BeanUtils;
|
||||||
|
import com.eactive.eai.authserver.vo.ClientVO;
|
||||||
|
import com.eactive.eai.common.util.Logger;
|
||||||
|
//import com.nimbusds.jwt.SignedJWT;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* JWT 토큰을 발급한다.(인증은 요청시스템에서 수행하고 토큰만 발급)
|
||||||
|
*
|
||||||
|
* @author
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
public class JwtTokenCreator implements BusinessApplication {
|
||||||
|
public static Logger logger = Logger.getLogger(Logger.LOGGER_DEFAULT);
|
||||||
|
|
||||||
|
private static final boolean VERYFY_CLIENT_SECRET = true;
|
||||||
|
private static final String[] GRANT_TYPES = { "client_credentials", "authorization_code", "password",
|
||||||
|
"refresh_token" };
|
||||||
|
|
||||||
|
@SuppressWarnings("unchecked")
|
||||||
|
@Override
|
||||||
|
public Object executeApplication(Properties prop, Object messageBytes, Properties tempProp) throws Exception {
|
||||||
|
// 응답전문용 Json Object
|
||||||
|
JSONObject resObject = new JSONObject();
|
||||||
|
|
||||||
|
try {
|
||||||
|
if (messageBytes == null) {
|
||||||
|
throw new Exception("Message is null.");
|
||||||
|
}
|
||||||
|
|
||||||
|
String message = new String((byte[]) messageBytes);
|
||||||
|
if (StringUtils.isBlank(message)) {
|
||||||
|
throw new Exception("Message is empty.");
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* {
|
||||||
|
* "grant_type":"client_credentials",
|
||||||
|
* "client_id":"WNHZOadBfB9UCPPuq6YArKUW87elXmZX",
|
||||||
|
* "client_secret":"JhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9",
|
||||||
|
* "scope":"manage",
|
||||||
|
* "expires_in":3600,
|
||||||
|
* "resource_ids":"aaa, bbb",
|
||||||
|
* "authorities":"ROLE_ADM, ROLE_DEV",
|
||||||
|
* "user_name":"aaaaaaaaaaaaaa",
|
||||||
|
* "support_refresh_token_yn": "Y",
|
||||||
|
* "refresh_token_expires_in":86400,
|
||||||
|
* "refresh_token":"JhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOj~~",
|
||||||
|
* "iss":"AZABBB0000",
|
||||||
|
* "aud":"ZZAAAA0000"
|
||||||
|
* }
|
||||||
|
*/
|
||||||
|
boolean isVerifyClientSecret = VERYFY_CLIENT_SECRET;
|
||||||
|
// 요청전문 Json Object
|
||||||
|
JSONObject jsonObject = (JSONObject) JSONValue.parse(message);
|
||||||
|
|
||||||
|
/* 2022.5.25. yseo
|
||||||
|
* 복합거래여부 확인, 복합거래의 경우 요청전문의 내용을 응답전문에 그대로 복사
|
||||||
|
* 복합거래 : 토큰발급 이후 2차 처리를 위한 Outbound Adapter를 다시 호출하는 거래
|
||||||
|
* 복합거래 대상 EAIServiceCD는 APP Adapter의 프로퍼티(SVC_CD)에 등록해서 관리.
|
||||||
|
*/
|
||||||
|
String svcCds = prop.getProperty("SVC_CD");
|
||||||
|
String[] svcCdArr = org.springframework.util.StringUtils.tokenizeToStringArray(svcCds, ",");
|
||||||
|
Boolean isComplex = ArrayUtils.contains(svcCdArr, tempProp.getProperty("EAISvcCd"))?true:false;
|
||||||
|
if(isComplex) {
|
||||||
|
resObject = jsonObject;
|
||||||
|
}
|
||||||
|
logger.debug("1. isComplex : [" + isComplex + "]");
|
||||||
|
|
||||||
|
String grantType = (String) jsonObject.get(OAuth2Utils.GRANT_TYPE);
|
||||||
|
if (!ArrayUtils.contains(GRANT_TYPES, grantType)) {
|
||||||
|
throw new JwtAuthException("unsupported_grant_type", "Unsupported grant type");
|
||||||
|
}
|
||||||
|
logger.debug("2. grantType : [" + grantType + "]");
|
||||||
|
|
||||||
|
String clientId = (String) jsonObject.get(OAuth2Utils.CLIENT_ID);
|
||||||
|
if (StringUtils.isBlank(clientId)) {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad client credentials(client_id is empty)");
|
||||||
|
/* clientId에 허용된 grantType인지 확인 2022.05.23 yseo*/
|
||||||
|
} else {
|
||||||
|
veryfyGrantType(clientId, grantType);
|
||||||
|
}
|
||||||
|
logger.debug("3. clientId : [" + clientId + "]");
|
||||||
|
|
||||||
|
/* grantType = "client_credentials" 이면 client_secret 체크 2022.05.23 yseo
|
||||||
|
* Mydata 관련해서는 무조건 체크해야함.
|
||||||
|
*/
|
||||||
|
// if (!StringUtils.equalsIgnoreCase(grantType, "client_credentials")) isVerifyClientSecret = false;
|
||||||
|
if (isVerifyClientSecret) {
|
||||||
|
String clientSecret = (String) jsonObject.get("client_secret");
|
||||||
|
if (StringUtils.isBlank(clientSecret)) {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad client credentials(client_secret is empty)");
|
||||||
|
}
|
||||||
|
veryfyClientSecret(clientId, clientSecret);
|
||||||
|
logger.debug("4. clientSecret : [" + clientSecret + "]");
|
||||||
|
}
|
||||||
|
|
||||||
|
Set<String> scopeSet = assignScope((String) jsonObject.get(OAuth2Utils.SCOPE));
|
||||||
|
if (scopeSet == null || scopeSet.size() == 0) {
|
||||||
|
if (!StringUtils.equals(grantType, "refresh_token")) {
|
||||||
|
throw new Exception("scope is empty.");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
logger.debug("5. scopeSet : [" + scopeSet + "]");
|
||||||
|
|
||||||
|
Set<String> resourceIdSet = assignResourceIds((String) jsonObject.get("resource"));
|
||||||
|
Set<GrantedAuthority> authoritiesSet = assignAuthorities((String) jsonObject.get("authorities"));
|
||||||
|
|
||||||
|
String userName = (String) jsonObject.get("user_name");
|
||||||
|
if (StringUtils.equals(grantType, "password") || StringUtils.equals(grantType, "authorization_code")) {
|
||||||
|
if (StringUtils.isBlank(userName)) {
|
||||||
|
throw new Exception("user_name is empty.");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
logger.debug("6. userName : [" + userName + "]");
|
||||||
|
|
||||||
|
/* 요청정보에 expires_in(토큰유효기간) 값이 없는 경우, client정보에 등록된 유효기간 찾아 대체 2022.05.23 yseo*/
|
||||||
|
String expIn = String.valueOf(jsonObject.get(OAuth2AccessToken.EXPIRES_IN));
|
||||||
|
Long expiresIn = null;
|
||||||
|
if (StringUtils.isNumeric(expIn)) {
|
||||||
|
expiresIn = Long.parseLong(expIn);
|
||||||
|
} else if (StringUtils.isBlank(expIn) || StringUtils.equalsIgnoreCase("null", expIn)) {
|
||||||
|
expiresIn = assignDefaultExpiresIn(clientId, "expires_in");
|
||||||
|
} else {
|
||||||
|
throw new Exception("expires_in is not numeric.");
|
||||||
|
}
|
||||||
|
logger.debug("7. expiresIn : [" + expIn + "]");
|
||||||
|
// Long expiresIn = (Long) jsonObject.get(OAuth2AccessToken.EXPIRES_IN);
|
||||||
|
// if (expiresIn == null) {
|
||||||
|
// expiresIn = assignDefaultExpiresIn(clientId, "expires_in");
|
||||||
|
// }
|
||||||
|
|
||||||
|
boolean supportRefreshToken = BooleanUtils.toBoolean((String) jsonObject.getOrDefault("support_refresh_token_yn", "N"));
|
||||||
|
/* 요청정보에 refresh_token_expires_in(리프레시토큰유효기간) 값이 없는 경우, client정보에 등록된 유효기간 찾아 대체 2022.05.23 yseo*/
|
||||||
|
String refreshExpIn = String.valueOf(jsonObject.get("refresh_token_expires_in"));
|
||||||
|
Long refreshTokenExpiresIn = null;
|
||||||
|
if (supportRefreshToken && StringUtils.isNumeric(refreshExpIn)) {
|
||||||
|
refreshTokenExpiresIn = Long.parseLong(refreshExpIn);
|
||||||
|
} else if (supportRefreshToken && (StringUtils.isBlank(refreshExpIn) || StringUtils.equalsIgnoreCase("null", refreshExpIn))) {
|
||||||
|
refreshTokenExpiresIn = assignDefaultExpiresIn(clientId, "refresh_token_expires_in");
|
||||||
|
} else if (supportRefreshToken) {
|
||||||
|
throw new Exception("refresh_token_expires_in is not numeric.");
|
||||||
|
}
|
||||||
|
logger.debug("8. refreshTokenExpiresIn : [" + refreshExpIn + "]");
|
||||||
|
// Long refreshTokenExpiresIn = (Long) jsonObject.get("refresh_token_expires_in");
|
||||||
|
// if (supportRefreshToken && refreshTokenExpiresIn == null) {
|
||||||
|
// refreshTokenExpiresIn = assignDefaultExpiresIn(clientId, "refresh_token_expires_in");
|
||||||
|
// }
|
||||||
|
|
||||||
|
String refreshToken = (String) jsonObject.get("refresh_token");
|
||||||
|
if (StringUtils.equals(grantType, "refresh_token") && StringUtils.isBlank(refreshToken)) {
|
||||||
|
throw new JwtAuthException("invalid_token", "refresh_token is empty.");
|
||||||
|
}
|
||||||
|
logger.debug("9. refreshToken : [" + refreshToken + "]");
|
||||||
|
|
||||||
|
String iss = (String) jsonObject.get("iss");
|
||||||
|
// if (StringUtils.isBlank(iss)) {
|
||||||
|
// iss = assignDefaultStringValue(clientId, "iss");
|
||||||
|
// }
|
||||||
|
// logger.debug("10. iss : [" + iss + "]");
|
||||||
|
//
|
||||||
|
String aud = (String) jsonObject.get("aud");
|
||||||
|
// if (StringUtils.isBlank(aud)) {
|
||||||
|
// aud = assignDefaultStringValue(clientId, "aud");
|
||||||
|
// }
|
||||||
|
// logger.debug("11. aud : [" + aud + "]");
|
||||||
|
|
||||||
|
String tokenStr = createToken(grantType, clientId, scopeSet, resourceIdSet, authoritiesSet, userName, expiresIn,
|
||||||
|
supportRefreshToken, refreshTokenExpiresIn, refreshToken, iss, aud);
|
||||||
|
// logger.debug("#####created tokenStr==>"+tokenStr);
|
||||||
|
|
||||||
|
//20211122 bearer -> Bearer로 변환철. mydata api준수
|
||||||
|
JSONObject jsonObj = (JSONObject) JSONValue.parse(tokenStr);
|
||||||
|
String tokenType = (String)jsonObj.get("token_type");
|
||||||
|
if(StringUtils.isNotBlank(tokenType) && StringUtils.equalsIgnoreCase(tokenType, "bearer")) {
|
||||||
|
jsonObj.put("token_type","Bearer");
|
||||||
|
}
|
||||||
|
jsonObj.remove("jti");
|
||||||
|
jsonObj.put("resource", (String) jsonObject.get("resource"));
|
||||||
|
if (StringUtils.equals(grantType, "password") || StringUtils.equals(grantType, "authorization_code")) {
|
||||||
|
jsonObj.put("refresh_token_expires_in", refreshTokenExpiresIn-1);
|
||||||
|
}
|
||||||
|
tokenStr = jsonObj.toJSONString();
|
||||||
|
logger.debug("##### Bearer checked tokenStr==>"+tokenStr);
|
||||||
|
|
||||||
|
// 복합거래의 경우 발급된 토큰정보를 "TOKEN_DATAGROUP" 그룹으로 추가
|
||||||
|
if(isComplex) {
|
||||||
|
resObject.put("TOKEN_DATAGROUP", jsonObj);
|
||||||
|
} else {
|
||||||
|
resObject.putAll(jsonObj);
|
||||||
|
}
|
||||||
|
String resStr = resObject.toJSONString();
|
||||||
|
|
||||||
|
return resStr.getBytes();
|
||||||
|
} catch (JwtAuthException e) {
|
||||||
|
logger.error(e);
|
||||||
|
|
||||||
|
JSONObject errorJson = new JSONObject();
|
||||||
|
errorJson.put("error", e.getCode());
|
||||||
|
errorJson.put("error_description", e.getMessage());
|
||||||
|
resObject.putAll(errorJson);
|
||||||
|
return resObject.toJSONString().getBytes();
|
||||||
|
} catch (Exception e) {
|
||||||
|
logger.error(e);
|
||||||
|
|
||||||
|
JSONObject errorJson = new JSONObject();
|
||||||
|
errorJson.put("error", "invalid_request");
|
||||||
|
errorJson.put("error_description", e.getMessage());
|
||||||
|
resObject.putAll(errorJson);
|
||||||
|
return resObject.toJSONString().getBytes();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private Set<String> assignResourceIds(String resourceIds) throws Exception {
|
||||||
|
if (StringUtils.isBlank(resourceIds)) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
String[] arr = org.springframework.util.StringUtils.tokenizeToStringArray(resourceIds, ",");
|
||||||
|
Set<String> resourceIdSet = new HashSet<String>();
|
||||||
|
for (String resourceId : arr) {
|
||||||
|
resourceIdSet.add(resourceId);
|
||||||
|
}
|
||||||
|
|
||||||
|
return resourceIdSet;
|
||||||
|
}
|
||||||
|
|
||||||
|
private void veryfyGrantType(String clientId, String grantType) throws JwtAuthException {
|
||||||
|
ClientDetails details = OAuth2Manager.getInstance().getClientDeatilsStore().get(clientId);
|
||||||
|
if (details == null) {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad client credentials(not found)");
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!details.getAuthorizedGrantTypes().contains(grantType)) {
|
||||||
|
throw new JwtAuthException("unsupported_grant_type", "Unsupported grant type for ClientID");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void veryfyClientSecret(String clientId, String clientSecret) throws JwtAuthException {
|
||||||
|
ClientDetails details = OAuth2Manager.getInstance().getClientDeatilsStore().get(clientId);
|
||||||
|
if (details == null) {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad client credentials(not found)");
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!StringUtils.equals(details.getClientSecret(), clientSecret)) {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad client credentials");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private Long assignDefaultExpiresIn(String clientId, String flag) throws JwtAuthException {
|
||||||
|
ClientDetails details = OAuth2Manager.getInstance().getClientDeatilsStore().get(clientId);
|
||||||
|
Long retLong = null;
|
||||||
|
if (details == null) {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad client credentials(not found)");
|
||||||
|
}
|
||||||
|
|
||||||
|
if (StringUtils.equals(flag, "expires_in") && StringUtils.isNotBlank(details.getAccessTokenValiditySeconds().toString())) {
|
||||||
|
retLong = new Long(details.getAccessTokenValiditySeconds());
|
||||||
|
} else if (StringUtils.equals(flag, "refresh_token_expires_in") && StringUtils.isNotBlank(details.getRefreshTokenValiditySeconds().toString())) {
|
||||||
|
retLong = new Long(details.getRefreshTokenValiditySeconds());
|
||||||
|
} else {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad expires_in/refresh_token_expires_in(not found)");
|
||||||
|
}
|
||||||
|
return retLong;
|
||||||
|
}
|
||||||
|
|
||||||
|
private String assignDefaultStringValue(String clientId, String flag) throws Exception {
|
||||||
|
ClientVO client = (ClientVO) OAuth2Manager.getInstance().getClientDeatilsStore().get(clientId);
|
||||||
|
String retStr = "";
|
||||||
|
if (client == null) {
|
||||||
|
throw new JwtAuthException("invalid_client", "Bad client credentials(not found)");
|
||||||
|
}
|
||||||
|
|
||||||
|
if (StringUtils.equals(flag, "iss") && StringUtils.isNotBlank(client.getIssuer())) {
|
||||||
|
retStr = client.getIssuer();
|
||||||
|
} else if (StringUtils.equals(flag, "aud") && StringUtils.isNotBlank(client.getAudience())) {
|
||||||
|
retStr = client.getAudience();
|
||||||
|
} else {
|
||||||
|
throw new Exception("iss/aud is null.");
|
||||||
|
}
|
||||||
|
logger.info("===================>"+flag+" : ["+retStr+"]");
|
||||||
|
return retStr;
|
||||||
|
}
|
||||||
|
|
||||||
|
private Set<String> assignScope(String scopes) throws Exception {
|
||||||
|
if (StringUtils.isBlank(scopes)) {
|
||||||
|
return new HashSet<String>();
|
||||||
|
}
|
||||||
|
|
||||||
|
String[] arr = org.springframework.util.StringUtils.tokenizeToStringArray(scopes, " ");
|
||||||
|
Set<String> scopeSet = new HashSet<String>();
|
||||||
|
for (String scope : arr) {
|
||||||
|
scopeSet.add(scope);
|
||||||
|
}
|
||||||
|
|
||||||
|
return scopeSet;
|
||||||
|
}
|
||||||
|
|
||||||
|
private Set<GrantedAuthority> assignAuthorities(String authorities) throws Exception {
|
||||||
|
if (StringUtils.isBlank(authorities)) {
|
||||||
|
return new HashSet<GrantedAuthority>();
|
||||||
|
}
|
||||||
|
|
||||||
|
String[] arr = org.springframework.util.StringUtils.tokenizeToStringArray(authorities, ",");
|
||||||
|
Set<GrantedAuthority> authoritiesSet = new HashSet<GrantedAuthority>();
|
||||||
|
for (String authority : arr) {
|
||||||
|
authoritiesSet.add(new SimpleGrantedAuthority(authority));
|
||||||
|
}
|
||||||
|
|
||||||
|
return authoritiesSet;
|
||||||
|
}
|
||||||
|
|
||||||
|
private String createToken(String grantType, String clientId, Set<String> scopeSet, Set<String> resourceIdSet,
|
||||||
|
Set<GrantedAuthority> authoritiesSet, String userName, Long expiresIn, boolean supportRefreshToken,
|
||||||
|
Long refreshTokenExpiresIn, String refreshToken, String issuer, String audience) throws Exception {
|
||||||
|
HashMap<String, String> authorizationParameters = new HashMap<String, String>();
|
||||||
|
authorizationParameters.put(OAuth2Utils.GRANT_TYPE, grantType);
|
||||||
|
authorizationParameters.put(OAuth2Utils.CLIENT_ID, clientId);
|
||||||
|
// authorizationParameters.put("iss", issuer);
|
||||||
|
// authorizationParameters.put("aud", audience);
|
||||||
|
if (StringUtils.equals(grantType, "password") || StringUtils.equals(grantType, "authorization_code")) {
|
||||||
|
authorizationParameters.put("user_name", userName);
|
||||||
|
}
|
||||||
|
|
||||||
|
Set<String> responseType = new HashSet<String>();
|
||||||
|
responseType.add(grantType);
|
||||||
|
|
||||||
|
OAuth2Request authorizationRequest = new OAuth2Request(authorizationParameters, clientId, authoritiesSet, true,
|
||||||
|
scopeSet, resourceIdSet, "", responseType, null);
|
||||||
|
|
||||||
|
Authentication authentication = null;
|
||||||
|
if (StringUtils.equals(grantType, "password") || StringUtils.equals(grantType, "authorization_code")) {
|
||||||
|
User userPrincipal = new User(userName, "", true, true, true, true, authoritiesSet);
|
||||||
|
authentication = new UsernamePasswordAuthenticationToken(userPrincipal, null, authoritiesSet);
|
||||||
|
}
|
||||||
|
|
||||||
|
OAuth2Authentication authenticationRequest = new OAuth2Authentication(authorizationRequest, authentication);
|
||||||
|
authenticationRequest.setAuthenticated(true);
|
||||||
|
|
||||||
|
DefaultTokenServices tokenServices = createDefaultTokenServices(supportRefreshToken, expiresIn,
|
||||||
|
refreshTokenExpiresIn);
|
||||||
|
OAuth2AccessToken accessToken = null;
|
||||||
|
if (StringUtils.equals(grantType, "refresh_token")) {
|
||||||
|
tokenServices.setReuseRefreshToken(true);
|
||||||
|
TokenRequest tokenRequest = new TokenRequest(authorizationParameters, clientId, scopeSet, grantType);
|
||||||
|
accessToken = tokenServices.refreshAccessToken(refreshToken, tokenRequest);
|
||||||
|
} else {
|
||||||
|
accessToken = tokenServices.createAccessToken(authenticationRequest);
|
||||||
|
}
|
||||||
|
|
||||||
|
logger.debug("accessToken=" + accessToken.toString());
|
||||||
|
|
||||||
|
return new ObjectMapper().writeValueAsString(accessToken);
|
||||||
|
}
|
||||||
|
|
||||||
|
private DefaultTokenServices createDefaultTokenServices(boolean supportRefreshToken, Long expiresIn,
|
||||||
|
Long refreshTokenExpiresIn) throws Exception {
|
||||||
|
TokenEnhancerChain tokenEnhancerChain = new TokenEnhancerChain();
|
||||||
|
tokenEnhancerChain.setTokenEnhancers(Arrays.asList(tokenEnhancer(), accessTokenConverter()));
|
||||||
|
|
||||||
|
DefaultTokenServices tokenServices = new DefaultTokenServices();
|
||||||
|
tokenServices.setTokenStore(tokenStore());
|
||||||
|
tokenServices.setSupportRefreshToken(supportRefreshToken);
|
||||||
|
tokenServices.setTokenEnhancer(tokenEnhancerChain);
|
||||||
|
if (expiresIn != null) {
|
||||||
|
tokenServices.setAccessTokenValiditySeconds(expiresIn.intValue());
|
||||||
|
}
|
||||||
|
if (supportRefreshToken && refreshTokenExpiresIn != null) {
|
||||||
|
tokenServices.setRefreshTokenValiditySeconds(refreshTokenExpiresIn.intValue());
|
||||||
|
}
|
||||||
|
return tokenServices;
|
||||||
|
}
|
||||||
|
|
||||||
|
private TokenEnhancer tokenEnhancer() {
|
||||||
|
// return BeanUtils.getBean("tokenEnhancer", TokenEnhancer.class);
|
||||||
|
return (TokenEnhancer) accessTokenConverter();
|
||||||
|
}
|
||||||
|
|
||||||
|
private JwtAccessTokenConverter accessTokenConverter() {
|
||||||
|
return BeanUtils.getBean("jwtAccessTokenConverter", JwtAccessTokenConverter.class);
|
||||||
|
}
|
||||||
|
|
||||||
|
private TokenStore tokenStore() {
|
||||||
|
return new JwtTokenStore((JwtAccessTokenConverter) accessTokenConverter());
|
||||||
|
}
|
||||||
|
|
||||||
|
public static void main(String args[]){
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// String token = "Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6ImRlZmF1bHRfc3NsX2tleSJ9.ew0KICAiaXNzIjogIkExQUFFUjAwMDAiLA0KICAiYXVkIjoiWlZBQUVNMDAwMCIsDQogICJqdGkiOiJlYmI4NmUyMi03YzZmLTQzZDItOTZiMy05NjU0MTAyZTE1M2MiLA0KICAiZXhwIjoiMTYzNjk2ODcwOSIsDQogICJzY29wZSI6ImJhbmsubGlzdCINCn0.nF0JeCHJHn7yBzhjEnge_Eqi0aAeD_WTt0iUB2V2VPJV9zWgMW-Npr3fCXlmYP5HoTjeQES5ftrxWLlLMaxRPHDKWwafgwLm3eQt9r_x_j0PRn-KpoZ9xTWy3oKCQvP0DN0IQepLZfM214nCrjdSPCV17oUS03cBW0lIDmXeROSR2auAMZvkSQqF74E_QLEKF3XLk0MM3Jz4nZp1bBj3PfJyCxjy2ibp12TN0vHccGmSItqANsbeVn0sQybdIraNzb9bptLwWe8WYyn3XugEA9-bavPOSPwrGgLENBnHnzWj1L8yS0rXuEjydCwf6HMAbpNVHQpicM0Q3xdl5W1PBA";
|
||||||
|
// String[] components = token.split("\\s");
|
||||||
|
|
||||||
|
//String r "refresh_token_expires_in":"604800","refresh_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6ImRlZmF1bHRfc3NsX2tleSJ9.ew0KICAiaXNzIjogIkExQUFFUjAwMDAiLA0KICAiYXVkIjoiWlZBQUVNMDAwMCIsDQogICJqdGkiOiIwMzI5Y2M3Zi04Y2U2LTQxNzQtYTc5Ny1mMWRjNjg1ZmM5NDAiLA0KICAiZXhwIjoiMTYzNjk2ODcwOSINCn0.dQx6kWm1JCEgueZjUsQJYNDBu2i4P1-jVLKgUH6aX2aBFunlUBtk_zMMFIJb3OvQpz8qPc9xhs1MkM2YHdpJlNleHY3GhhjiQMfYeiCU9yOzv-zuyvOY1pCO0McmHJNdFcxoQfHHFNm4yFay3dOAFE0Z3FQ74nwxrgnzKSucrHCKyGz0pHdLWnWxHNrJMZ4NmaSyPRxU3qxdWFe1soxqgTqpW_SQkTl3D5SWXgevc6zihPPpFhCSOJ39RrJlIVSH1IY5NRAm71AoaZ6ooLsLvPNED3Z7rG-g9coKEU_DASeCNslRZrP0D3azqswFeu-np3zFZUTrgP_TNT6FFReEnA";
|
||||||
|
try {
|
||||||
|
JwtTokenCreator jtc = new JwtTokenCreator();
|
||||||
|
// String me="\"d\"";
|
||||||
|
String message= "{\"refresh_token_expires_in\":\"86400\",\"refresh_token\":null,\"grant_type\":\"authorization_code\",\"support_refresh_token_in\":\"Y\",\"user_name\":\"aaa\",\"scope\":\"bank.list\",\"expires_in\":\"3600\",\"client_id\":\"ZZAAAAPacQmv3ZVhtPISDSA9jb9AWjak\"}";
|
||||||
|
JSONObject jsonObject = (JSONObject) JSONValue.parse(message);
|
||||||
|
String grantType = (String) jsonObject.get(OAuth2Utils.GRANT_TYPE);
|
||||||
|
String clientId = (String) jsonObject.get(OAuth2Utils.CLIENT_ID);
|
||||||
|
// String clientSecret = (String) jsonObject.get("client_secret");
|
||||||
|
Set<String> scopeSet;
|
||||||
|
|
||||||
|
Properties prop = null;
|
||||||
|
byte[] msgBytes = null;
|
||||||
|
msgBytes = message.getBytes();
|
||||||
|
jtc.executeApplication(prop, msgBytes, prop);
|
||||||
|
|
||||||
|
// scopeSet = jtc.assignScope((String) jsonObject.get(OAuth2Utils.SCOPE));
|
||||||
|
//
|
||||||
|
//
|
||||||
|
// Set<String> resourceIdSet = jtc.assignResourceIds((String) jsonObject.get("resource_ids"));
|
||||||
|
// Set<GrantedAuthority> authoritiesSet = jtc.assignAuthorities((String) jsonObject.get("authorities"));
|
||||||
|
//
|
||||||
|
// String userName = (String) jsonObject.get("user_name");
|
||||||
|
//
|
||||||
|
//
|
||||||
|
// Long expiresIn = Long.parseLong(jsonObject.get(OAuth2AccessToken.EXPIRES_IN).toString());
|
||||||
|
// Long refreshTokenExpiresIn = Long.parseLong(jsonObject.get("refresh_token_expires_in").toString());
|
||||||
|
//// Long expiresIn = (Long) jsonObject.get(OAuth2AccessToken.EXPIRES_IN);
|
||||||
|
//// Long refreshTokenExpiresIn = (Long) jsonObject.get("refresh_token_expires_in");
|
||||||
|
// boolean supportRefreshToken = BooleanUtils
|
||||||
|
// .toBoolean((String) jsonObject.getOrDefault("support_refresh_token_yn", "Y"));
|
||||||
|
//
|
||||||
|
// String refreshToken = (String) jsonObject.get("refresh_token");
|
||||||
|
//
|
||||||
|
// jtc.createToken( grantType, clientId, scopeSet, resourceIdSet,authoritiesSet, userName, expiresIn, supportRefreshToken,
|
||||||
|
// refreshTokenExpiresIn, refreshToken);
|
||||||
|
|
||||||
|
} catch (ParseException e) {
|
||||||
|
// TODO Auto-generated catch block
|
||||||
|
e.printStackTrace();
|
||||||
|
} catch (Exception e) {
|
||||||
|
// TODO Auto-generated catch block
|
||||||
|
e.printStackTrace();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user