Examples with Jwt io.helidon.security.jwt.Jwt used on opensource projects

Example 16 with Jwt

use of io.helidon.security.jwt.Jwt in project helidon by oracle.

the class JwtProvider method authenticateToken.

private AuthenticationResponse authenticateToken(String token) {
    SignedJwt signedJwt;
    try {
        signedJwt = SignedJwt.parseToken(token);
    } catch (Exception e) {
        // invalid token
        return failOrAbstain("Invalid token" + e);
    }
    if (verifySignature) {
        Errors errors = signedJwt.verifySignature(verifyKeys, defaultJwk);
        if (errors.isValid()) {
            Jwt jwt = signedJwt.getJwt();
            // verify the audience is correct
            Errors validate = jwt.validate(null, expectedAudience);
            if (validate.isValid()) {
                return AuthenticationResponse.success(buildSubject(jwt, signedJwt));
            } else {
                return failOrAbstain("Audience is invalid or missing: " + expectedAudience);
            }
        } else {
            return failOrAbstain(errors.toString());
        }
    } else {
        return AuthenticationResponse.success(buildSubject(signedJwt.getJwt(), signedJwt));
    }
}

Example 17 with Jwt

use of io.helidon.security.jwt.Jwt in project helidon by oracle.

the class JwtAuthProvider method propagate.

private OutboundSecurityResponse propagate(JwtOutboundTarget ot, Subject subject) {
    Map<String, List<String>> headers = new HashMap<>();
    Jwk jwk = signKeys.forKeyId(ot.jwkKid).orElseThrow(() -> new JwtException("Signing JWK with kid: " + ot.jwkKid + " is not defined."));
    Principal principal = subject.principal();
    Jwt.Builder builder = Jwt.builder();
    principal.abacAttributeNames().forEach(name -> {
        principal.abacAttribute(name).ifPresent(val -> builder.addPayloadClaim(name, val));
    });
    principal.abacAttribute("full_name").ifPresentOrElse(name -> builder.addPayloadClaim("name", name), () -> builder.removePayloadClaim("name"));
    builder.subject(principal.id()).preferredUsername(principal.getName()).issuer(issuer).algorithm(jwk.algorithm());
    ot.update(builder);
    // MP specific
    if (!principal.abacAttribute("upn").isPresent()) {
        builder.userPrincipal(principal.getName());
    }
    Security.getRoles(subject).forEach(builder::addUserGroup);
    Jwt jwt = builder.build();
    SignedJwt signed = SignedJwt.sign(jwt, jwk);
    ot.outboundHandler.header(headers, signed.tokenContent());
    return OutboundSecurityResponse.withHeaders(headers);
}

Example 18 with Jwt

use of io.helidon.security.jwt.Jwt in project helidon by oracle.

the class JwtAuthProvider method impersonate.

private OutboundSecurityResponse impersonate(JwtOutboundTarget ot, String username) {
    Map<String, List<String>> headers = new HashMap<>();
    Jwk jwk = signKeys.forKeyId(ot.jwkKid).orElseThrow(() -> new JwtException("Signing JWK with kid: " + ot.jwkKid + " is not defined."));
    Jwt.Builder builder = Jwt.builder();
    builder.addPayloadClaim("name", username);
    builder.subject(username).preferredUsername(username).issuer(issuer).algorithm(jwk.algorithm());
    ot.update(builder);
    Jwt jwt = builder.build();
    SignedJwt signed = SignedJwt.sign(jwt, jwk);
    ot.outboundHandler.header(headers, signed.tokenContent());
    return OutboundSecurityResponse.withHeaders(headers);
}

Example 19 with Jwt

use of io.helidon.security.jwt.Jwt in project helidon by oracle.

the class JsonWebTokenImplTest method testGetClaim.

@Test
void testGetClaim() {
    Jwt jwt = Jwt.builder().issuer("issuer").subject("subject").addUserGroup("users").addUserGroup("admins").build();
    SignedJwt signed = SignedJwt.sign(jwt, Jwk.NONE_JWK);
    JsonWebTokenImpl impl = JsonWebTokenImpl.create(signed);
    assertAll(() -> testClaimType(impl, Claims.sub), () -> testClaimType(impl, Claims.groups), () -> testClaimType(impl, Claims.iss));
}

Example 20 with Jwt

use of io.helidon.security.jwt.Jwt in project helidon by oracle.

the class JsonWebTokenImplTest method testUpnFromSub.

@Test
void testUpnFromSub() {
    String name = "me@example.org";
    Jwt jwt = Jwt.builder().subject(name).build();
    SignedJwt signed = SignedJwt.sign(jwt, Jwk.NONE_JWK);
    JsonWebTokenImpl impl = JsonWebTokenImpl.create(signed);
    assertThat(impl.getName(), is(name));
    assertThat(impl.getClaim(Claims.upn.name()), is(name));
}