Examples with Tokens com.nimbusds.oauth2.sdk.token.Tokens used on opensource projects

Example 6 with Tokens

use of com.nimbusds.oauth2.sdk.token.Tokens in project Application-Gateway by gianlucafrei.

the class Oauth2Driver method processCallback.

@Override
public UserModel processCallback(ServerHttpRequest request, String stateFromLoginStep, URI callbackUri) throws AuthenticationException {
    var settings = getSettings();
    String authCode = request.getQueryParams().getFirst("code");
    if (authCode == null)
        throw new AuthenticationException("No auth code");
    String stateFromRequest = request.getQueryParams().getFirst("state");
    if (stateFromRequest == null)
        throw new AuthenticationException("No state");
    if (!stateFromLoginStep.equals(stateFromRequest))
        throw new AuthenticationException("State missmatch");
    AuthorizationCode code = new AuthorizationCode(authCode);
    ClientAuthentication clientAuth = new ClientSecretBasic(getClientId(settings), getClientSecret(settings));
    URI tokenEndpoint = getTokenEndpoint(settings);
    AuthorizationGrant codeGrant = new AuthorizationCodeGrant(code, callbackUri);
    Tokens tokens = loadTokens(clientAuth, tokenEndpoint, codeGrant);
    // Load user Email
    return loadUserInfo(tokens);
}

Example 7 with Tokens

use of com.nimbusds.oauth2.sdk.token.Tokens in project Application-Gateway by gianlucafrei.

the class OidcDriver method loadUserInfo.

@Override
protected UserModel loadUserInfo(Tokens tokens) {
    try {
        // Because we have overridden the loadTokens method we can safely convert the tokens object
        OIDCTokens oidcTokens = (OIDCTokens) tokens;
        JWT idToken = oidcTokens.getIDToken();
        JWTClaimsSet jwtClaims = idToken.getJWTClaimsSet();
        AccessToken accessToken = oidcTokens.getAccessToken();
        RefreshToken refreshToken = oidcTokens.getRefreshToken();
        UserModel model = new UserModel(jwtClaims.getSubject());
        model.set("original-id-token", idToken.getParsedString());
        model.set("original-access-token", accessToken.toString());
        for (String claimName : getMappedClaims()) {
            Object claim = jwtClaims.getClaim(claimName);
            if (claim != null) {
                model.set(claimName, claim.toString());
            }
        }
        return model;
    } catch (Exception e) {
        throw new ApplicationException("Could not extract user info", e);
    }
}

Example 8 with Tokens

use of com.nimbusds.oauth2.sdk.token.Tokens in project di-ipv-cri-uk-passport-back by alphagov.

the class AccessTokenHandlerTest method shouldReturnAccessTokenOnSuccessfulExchange.

@Test
void shouldReturnAccessTokenOnSuccessfulExchange() throws Exception {
    APIGatewayProxyRequestEvent event = new APIGatewayProxyRequestEvent();
    String tokenRequestBody = "code=12345&redirect_uri=http://example.com&grant_type=authorization_code&client_id=test_client_id";
    event.setBody(tokenRequestBody);
    AccessToken accessToken = new BearerAccessToken();
    TokenResponse tokenResponse = new AccessTokenResponse(new Tokens(accessToken, null));
    when(mockAccessTokenService.generateAccessToken(any())).thenReturn(tokenResponse);
    when(mockAuthorizationCodeService.getAuthCodeItem("12345")).thenReturn(TEST_AUTH_CODE_ITEM);
    when(mockAccessTokenService.validateTokenRequest(any())).thenReturn(ValidationResult.createValidResult());
    APIGatewayProxyResponseEvent response = handler.handleRequest(event, context);
    Map<String, Object> responseBody = objectMapper.readValue(response.getBody(), new TypeReference<>() {
    });
    assertEquals(ContentType.APPLICATION_JSON.getType(), response.getHeaders().get("Content-Type"));
    assertEquals(200, response.getStatusCode());
    assertEquals(tokenResponse.toSuccessResponse().getTokens().getAccessToken().getValue(), responseBody.get("access_token").toString());
}

Example 9 with Tokens

use of com.nimbusds.oauth2.sdk.token.Tokens in project Kustvakt by KorAP.

the class OpenIdTokenService method createsAccessTokenResponse.

private AccessTokenResponse createsAccessTokenResponse(AccessToken accessToken, RefreshToken refreshToken, Scope scope, String clientId, String userId, ZonedDateTime userAuthenticationTime, String nonce) throws KustvaktException {
    if (scope.contains("openid")) {
        JWTClaimsSet claims = createIdTokenClaims(clientId, userId, userAuthenticationTime, nonce);
        SignedJWT idToken = signIdToken(claims, // default
        new JWSHeader(JWSAlgorithm.RS256), config.getRsaPrivateKey());
        OIDCTokens tokens = new OIDCTokens(idToken, accessToken, refreshToken);
        return new OIDCTokenResponse(tokens);
    } else {
        Tokens tokens = new Tokens(accessToken, refreshToken);
        return new AccessTokenResponse(tokens);
    }
}

Example 10 with Tokens

use of com.nimbusds.oauth2.sdk.token.Tokens in project di-ipv-cri-address-api by alphagov.

the class AccessTokenHandlerTest method shouldReturnAccessTokenOnSuccessfulExchange.

@Test
void shouldReturnAccessTokenOnSuccessfulExchange() throws Exception {
    APIGatewayProxyRequestEvent event = new APIGatewayProxyRequestEvent();
    String tokenRequestBody = "code=12345&redirect_uri=http://test.com&grant_type=authorization_code&client_id=test_client_id";
    event.withBody(tokenRequestBody);
    AddressSessionItem addressSessionItem = mock(AddressSessionItem.class);
    AccessToken accessToken = new BearerAccessToken();
    tokenResponse = new AccessTokenResponse(new Tokens(accessToken, null));
    // TODO: This here as a placeholder pending the story that generates the authorization code
    TokenRequest tokenRequest = mock(TokenRequest.class);
    when(tokenRequest.getAuthorizationGrant()).thenReturn(new AuthorizationCodeGrant(new AuthorizationCode("12345"), URI.create("http://test.com"), null));
    when(mockAddressSessionService.createTokenRequest(tokenRequestBody)).thenReturn(tokenRequest);
    when(mockAddressSessionService.createToken(any())).thenReturn(tokenResponse);
    when(mockAddressSessionService.getAddressSessionItemByValue(any())).thenReturn(addressSessionItem);
    APIGatewayProxyResponseEvent response = handler.handleRequest(event, context);
    Map<String, Object> responseBody = objectMapper.readValue(response.getBody(), new TypeReference<>() {
    });
    assertEquals(ContentType.APPLICATION_JSON.getType(), response.getHeaders().get("Content-Type"));
    assertEquals(HttpStatus.SC_OK, response.getStatusCode());
    assertEquals(tokenResponse.toSuccessResponse().getTokens().getAccessToken().getValue(), responseBody.get("access_token").toString());
}