use of com.nimbusds.oauth2.sdk.token.RefreshToken in project pac4j by pac4j.
the class OidcProfileCreator method create.
@Override
@SuppressWarnings("unchecked")
public U create(final OidcCredentials credentials, final WebContext context) {
init();
final AccessToken accessToken = credentials.getAccessToken();
// Create profile
final U profile = getProfileDefinition().newProfile();
profile.setAccessToken(accessToken);
final JWT idToken = credentials.getIdToken();
profile.setIdTokenString(idToken.getParsedString());
// Check if there is a refresh token
final RefreshToken refreshToken = credentials.getRefreshToken();
if (refreshToken != null && !refreshToken.getValue().isEmpty()) {
profile.setRefreshToken(refreshToken);
logger.debug("Refresh Token successful retrieved");
}
try {
// check idToken
final Nonce nonce;
if (configuration.isUseNonce()) {
nonce = new Nonce((String) context.getSessionStore().get(context, OidcConfiguration.NONCE_SESSION_ATTRIBUTE));
} else {
nonce = null;
}
// Check ID Token
final IDTokenClaimsSet claimsSet = this.idTokenValidator.validate(idToken, nonce);
assertNotNull("claimsSet", claimsSet);
profile.setId(ProfileHelper.sanitizeIdentifier(profile, claimsSet.getSubject()));
// User Info request
if (configuration.findProviderMetadata().getUserInfoEndpointURI() != null && accessToken != null) {
final UserInfoRequest userInfoRequest = new UserInfoRequest(configuration.findProviderMetadata().getUserInfoEndpointURI(), (BearerAccessToken) accessToken);
final HTTPRequest userInfoHttpRequest = userInfoRequest.toHTTPRequest();
userInfoHttpRequest.setConnectTimeout(configuration.getConnectTimeout());
userInfoHttpRequest.setReadTimeout(configuration.getReadTimeout());
final HTTPResponse httpResponse = userInfoHttpRequest.send();
logger.debug("Token response: status={}, content={}", httpResponse.getStatusCode(), httpResponse.getContent());
final UserInfoResponse userInfoResponse = UserInfoResponse.parse(httpResponse);
if (userInfoResponse instanceof UserInfoErrorResponse) {
logger.error("Bad User Info response, error={}", ((UserInfoErrorResponse) userInfoResponse).getErrorObject());
} else {
final UserInfoSuccessResponse userInfoSuccessResponse = (UserInfoSuccessResponse) userInfoResponse;
final JWTClaimsSet userInfoClaimsSet;
if (userInfoSuccessResponse.getUserInfo() != null) {
userInfoClaimsSet = userInfoSuccessResponse.getUserInfo().toJWTClaimsSet();
} else {
userInfoClaimsSet = userInfoSuccessResponse.getUserInfoJWT().getJWTClaimsSet();
}
getProfileDefinition().convertAndAdd(profile, userInfoClaimsSet.getClaims(), null);
}
}
// add attributes of the ID token if they don't already exist
for (final Map.Entry<String, Object> entry : idToken.getJWTClaimsSet().getClaims().entrySet()) {
final String key = entry.getKey();
final Object value = entry.getValue();
// it's not the subject and this attribute does not already exist, add it
if (!JwtClaims.SUBJECT.equals(key) && profile.getAttribute(key) == null) {
getProfileDefinition().convertAndAdd(profile, PROFILE_ATTRIBUTE, key, value);
}
}
return profile;
} catch (final IOException | ParseException | JOSEException | BadJOSEException | java.text.ParseException e) {
throw new TechnicalException(e);
}
}
use of com.nimbusds.oauth2.sdk.token.RefreshToken in project pac4j by pac4j.
the class OidcCredentialsTests method testSerialization.
@Test
public void testSerialization() throws ParseException {
final OidcCredentials credentials = new OidcCredentials();
credentials.setCode(new AuthorizationCode(VALUE));
credentials.setAccessToken(new BearerAccessToken(VALUE, 0L, Scope.parse("oidc email")));
credentials.setRefreshToken(new RefreshToken(VALUE));
credentials.setIdToken(JWTParser.parse(ID_TOKEN));
byte[] result = SerializationUtils.serialize(credentials);
final OidcCredentials credentials2 = SerializationUtils.deserialize(result);
assertEquals(credentials.getAccessToken(), credentials2.getAccessToken());
assertEquals(credentials.getRefreshToken(), credentials2.getRefreshToken());
assertEquals(credentials.getIdToken().getParsedString(), credentials2.getIdToken().getParsedString());
}
use of com.nimbusds.oauth2.sdk.token.RefreshToken in project pac4j by pac4j.
the class OidcProfileTests method testReadWriteObjectNullIdToken.
/**
* Test that serialization and deserialization of the OidcProfile work when the Id token is null.
*/
@Test
public void testReadWriteObjectNullIdToken() {
OidcProfile profile = new OidcProfile();
profile.setAccessToken(populatedAccessToken);
profile.setRefreshToken(new RefreshToken(REFRESH_TOKEN));
byte[] result = SerializationUtils.serialize(profile);
profile = SerializationUtils.deserialize(result);
assertNotNull("accessToken", profile.getAccessToken());
assertNotNull("value", profile.getAccessToken().getValue());
assertEquals(profile.getAccessToken().getLifetime(), populatedAccessToken.getLifetime());
assertEquals(profile.getAccessToken().getScope(), populatedAccessToken.getScope());
assertEquals(profile.getRefreshToken().getValue(), REFRESH_TOKEN);
assertNull(profile.getIdTokenString());
}
use of com.nimbusds.oauth2.sdk.token.RefreshToken in project pac4j by pac4j.
the class OidcProfileTests method testClearProfile.
@Test
public void testClearProfile() {
OidcProfile profile = new OidcProfile();
profile.setAccessToken(new BearerAccessToken());
profile.setIdTokenString(ID);
profile.setRefreshToken(new RefreshToken(REFRESH_TOKEN));
profile.clearSensitiveData();
assertNull(profile.getAccessToken());
assertNull(profile.getIdTokenString());
}
use of com.nimbusds.oauth2.sdk.token.RefreshToken in project pac4j by pac4j.
the class OidcProfileTests method testReadWriteObject.
@Test
public void testReadWriteObject() {
OidcProfile profile = new OidcProfile();
profile.setAccessToken(populatedAccessToken);
profile.setIdTokenString(ID_TOKEN);
profile.setRefreshToken(new RefreshToken(REFRESH_TOKEN));
byte[] result = SerializationUtils.serialize(profile);
profile = SerializationUtils.deserialize(result);
assertNotNull("accessToken", profile.getAccessToken());
assertNotNull("value", profile.getAccessToken().getValue());
assertEquals(profile.getAccessToken().getLifetime(), populatedAccessToken.getLifetime());
assertEquals(profile.getAccessToken().getScope(), populatedAccessToken.getScope());
assertEquals(profile.getIdTokenString(), ID_TOKEN);
assertEquals(profile.getRefreshToken().getValue(), REFRESH_TOKEN);
}
Aggregations