Examples with UserInfo com.nimbusds.openid.connect.sdk.claims.UserInfo used on opensource projects

Example 1 with UserInfo

use of com.nimbusds.openid.connect.sdk.claims.UserInfo in project di-authentication-api by alphagov.

the class UserInfoHandler method handleRequest.

@Override
public APIGatewayProxyResponseEvent handleRequest(APIGatewayProxyRequestEvent input, Context context) {
    return isWarming(input).orElseGet(() -> {
        LOG.info("Request received to the UserInfoHandler");
        if (!headersContainValidHeader(input.getHeaders(), AUTHORIZATION_HEADER, configurationService.getHeadersCaseInsensitive())) {
            LOG.warn("AccessToken is missing from request");
            return generateApiGatewayProxyResponse(401, "", new UserInfoErrorResponse(MISSING_TOKEN).toHTTPResponse().getHeaderMap());
        }
        UserInfo userInfo;
        try {
            AccessTokenInfo accessTokenInfo = accessTokenService.parse(getHeaderValueFromHeaders(input.getHeaders(), AUTHORIZATION_HEADER, configurationService.getHeadersCaseInsensitive()), false);
            userInfo = userInfoService.populateUserInfo(accessTokenInfo);
        } catch (AccessTokenException e) {
            LOG.warn("AccessTokenException. Sending back UserInfoErrorResponse");
            return generateApiGatewayProxyResponse(401, "", new UserInfoErrorResponse(e.getError()).toHTTPResponse().getHeaderMap());
        }
        LOG.info("Successfully processed UserInfo request. Sending back UserInfo response");
        return generateApiGatewayProxyResponse(200, userInfo.toJSONString());
    });
}

Example 2 with UserInfo

use of com.nimbusds.openid.connect.sdk.claims.UserInfo in project di-authentication-api by alphagov.

the class UserInfoServiceTest method shouldPopulateUserInfo.

@Test
void shouldPopulateUserInfo() {
    when(authenticationService.getUserProfileFromSubject(INTERNAL_SUBJECT.getValue())).thenReturn(generateUserprofile());
    AccessTokenStore accessTokenStore = new AccessTokenStore(accessToken.getValue(), INTERNAL_SUBJECT.getValue());
    AccessTokenInfo accessTokenInfo = new AccessTokenInfo(accessTokenStore, SUBJECT.getValue(), SCOPES);
    UserInfo userInfo = userInfoService.populateUserInfo(accessTokenInfo);
    assertEquals(userInfo.getEmailAddress(), EMAIL);
    assertEquals(userInfo.getEmailVerified(), true);
    assertEquals(userInfo.getPhoneNumber(), PHONE_NUMBER);
    assertEquals(userInfo.getPhoneNumberVerified(), true);
}

Example 3 with UserInfo

use of com.nimbusds.openid.connect.sdk.claims.UserInfo in project di-authentication-api by alphagov.

the class UserInfoIntegrationTest method shouldCallUserInfoWithAccessTokenAndReturn200.

@Test
public void shouldCallUserInfoWithAccessTokenAndReturn200() throws JsonProcessingException {
    Subject internalSubject = new Subject();
    Subject publicSubject = new Subject();
    LocalDateTime localDateTime = LocalDateTime.now().plusMinutes(10);
    Date expiryDate = Date.from(localDateTime.atZone(ZoneId.of("UTC")).toInstant());
    List<String> scopes = new ArrayList<>();
    scopes.add("email");
    scopes.add("phone");
    scopes.add("openid");
    JWTClaimsSet claimsSet = new JWTClaimsSet.Builder().claim("scope", scopes).issuer("issuer-id").expirationTime(expiryDate).issueTime(Date.from(LocalDateTime.now().atZone(ZoneId.of("UTC")).toInstant())).claim("client_id", "client-id-one").subject(publicSubject.getValue()).jwtID(UUID.randomUUID().toString()).build();
    SignedJWT signedJWT = tokenSigner.signJwt(claimsSet);
    AccessToken accessToken = new BearerAccessToken(signedJWT.serialize());
    AccessTokenStore accessTokenStore = new AccessTokenStore(accessToken.getValue(), internalSubject.getValue());
    String accessTokenStoreString = new ObjectMapper().writeValueAsString(accessTokenStore);
    redis.addToRedis(ACCESS_TOKEN_PREFIX + CLIENT_ID + "." + publicSubject, accessTokenStoreString, 300L);
    setUpDynamo(internalSubject);
    var response = makeRequest(Optional.empty(), Map.of("Authorization", accessToken.toAuthorizationHeader()), Map.of());
    assertThat(response, hasStatus(200));
    UserInfo expectedUserInfoResponse = new UserInfo(publicSubject);
    expectedUserInfoResponse.setEmailAddress(TEST_EMAIL_ADDRESS);
    expectedUserInfoResponse.setEmailVerified(true);
    expectedUserInfoResponse.setPhoneNumber(FORMATTED_PHONE_NUMBER);
    expectedUserInfoResponse.setPhoneNumberVerified(true);
    assertThat(response.getBody(), equalTo(expectedUserInfoResponse.toJSONString()));
    assertNoAuditEventsReceived(auditTopic);
}

Example 4 with UserInfo

use of com.nimbusds.openid.connect.sdk.claims.UserInfo in project dataverse by IQSS.

the class OIDCAuthProvider method getUserRecord.

/**
 * Receive user data from OIDC provider after authn/z has been successfull. (Callback view uses this)
 * Request a token and access the resource, parse output and return user details.
 * @param code The authz code sent from the provider
 * @param redirectUrl The redirect URL (some providers require this when fetching the access token, e. g. Google)
 * @return A user record containing all user details accessible for us
 * @throws IOException Thrown when communication with the provider fails
 * @throws OAuth2Exception Thrown when we cannot access the user details for some reason
 * @throws InterruptedException Thrown when the requests thread is failing
 * @throws ExecutionException Thrown when the requests thread is failing
 */
@Override
public OAuth2UserRecord getUserRecord(String code, String redirectUrl) throws IOException, OAuth2Exception, InterruptedException, ExecutionException {
    // Create grant object
    AuthorizationGrant codeGrant = new AuthorizationCodeGrant(new AuthorizationCode(code), URI.create(redirectUrl));
    // Get Access Token first
    Optional<BearerAccessToken> accessToken = getAccessToken(codeGrant);
    // Now retrieve User Info
    if (accessToken.isPresent()) {
        Optional<UserInfo> userInfo = getUserInfo(accessToken.get());
        // Construct our internal user representation
        if (userInfo.isPresent()) {
            return getUserRecord(userInfo.get());
        }
    }
    // this should never happen, as we are throwing exceptions like champs before.
    throw new OAuth2Exception(-1, "", "auth.providers.token.failGetUser");
}

Example 5 with UserInfo

use of com.nimbusds.openid.connect.sdk.claims.UserInfo in project di-authentication-api by alphagov.

the class UserInfoService method populateUserInfo.

public UserInfo populateUserInfo(AccessTokenInfo accessTokenInfo, boolean identityEnabled) {
    LOG.info("Populating UserInfo");
    var userInfo = new UserInfo(new Subject(accessTokenInfo.getSubject()));
    if (accessTokenInfo.getScopes().contains(CustomScopeValue.DOC_CHECKING_APP.getValue())) {
        return populateDocAppUserInfo(accessTokenInfo, userInfo);
    }
    var userProfile = authenticationService.getUserProfileFromSubject(accessTokenInfo.getAccessTokenStore().getInternalSubjectId());
    if (accessTokenInfo.getScopes().contains(OIDCScopeValue.EMAIL.getValue())) {
        userInfo.setEmailAddress(userProfile.getEmail());
        userInfo.setEmailVerified(userProfile.isEmailVerified());
    }
    if (accessTokenInfo.getScopes().contains(OIDCScopeValue.PHONE.getValue())) {
        userInfo.setPhoneNumber(userProfile.getPhoneNumber());
        userInfo.setPhoneNumberVerified(userProfile.isPhoneNumberVerified());
    }
    if (accessTokenInfo.getScopes().contains(CustomScopeValue.GOVUK_ACCOUNT.getValue())) {
        userInfo.setClaim("legacy_subject_id", userProfile.getLegacySubjectID());
    }
    if (identityEnabled && Objects.nonNull(accessTokenInfo.getIdentityClaims())) {
        return populateIdentityInfo(accessTokenInfo, userInfo);
    } else {
        LOG.info("No identity claims present");
        return userInfo;
    }
}