use of io.jans.ca.common.response.IOpResponse in project jans by JanssenProject.
the class RestResource method getObjectForJsonConversion.
private static <T extends IParams> Object getObjectForJsonConversion(CommandType commandType, String paramsAsString, Class<T> paramsClass, String authorization, String AuthorizationRpId) {
LOG.trace("Command: {}", paramsAsString);
T params = read(safeToJson(paramsAsString), paramsClass);
final RpServerConfiguration conf = ServerLauncher.getInjector().getInstance(ConfigurationService.class).get();
if (commandType.isAuthorizationRequired()) {
validateAuthorizationRpId(conf, AuthorizationRpId);
validateAccessToken(authorization, safeToRpId((HasRpIdParams) params, AuthorizationRpId));
}
Command command = new Command(commandType, params);
final IOpResponse response = ServerLauncher.getInjector().getInstance(Processor.class).process(command);
Object forJsonConversion = response;
if (response instanceof POJOResponse) {
forJsonConversion = ((POJOResponse) response).getNode();
}
return forJsonConversion;
}
use of io.jans.ca.common.response.IOpResponse in project jans by JanssenProject.
the class Processor method process.
public IOpResponse process(Command command) {
if (command != null) {
try {
final IOperation<IParams> operation = (IOperation<IParams>) OperationFactory.create(command, ServerLauncher.getInjector());
if (operation != null) {
IParams iParams = Convertor.asParams(operation.getParameterClass(), command);
validationService.validate(iParams);
IOpResponse operationResponse = operation.execute(iParams);
if (operationResponse != null) {
return operationResponse;
} else {
LOG.error("No response from operation. Command: " + command);
}
} else {
LOG.error("Operation is not supported!");
throw new HttpException(ErrorResponseCode.UNSUPPORTED_OPERATION);
}
} catch (ClientErrorException e) {
throw new WebApplicationException(e.getResponse().readEntity(String.class), e.getResponse().getStatus());
} catch (WebApplicationException e) {
LOG.error(e.getLocalizedMessage(), e);
throw e;
} catch (Throwable e) {
LOG.error(e.getMessage(), e);
}
}
throw HttpException.internalError();
}
use of io.jans.ca.common.response.IOpResponse in project jans by JanssenProject.
the class RpGetGetClaimsGatheringUrlOperation method execute.
@Override
public IOpResponse execute(RpGetClaimsGatheringUrlParams params) throws Exception {
validate(params);
final UmaMetadata metadata = getDiscoveryService().getUmaDiscoveryByRpId(params.getRpId());
final Rp rp = getRp();
final String state = StringUtils.isNotBlank(params.getState()) ? getStateService().putState(getStateService().encodeExpiredObject(params.getState(), ExpiredObjectType.STATE)) : getStateService().generateState();
String url = metadata.getClaimsInteractionEndpoint() + "?client_id=" + rp.getClientId() + "&ticket=" + params.getTicket() + "&claims_redirect_uri=" + params.getClaimsRedirectUri() + "&state=" + state;
if (params.getCustomParameters() != null && !params.getCustomParameters().isEmpty()) {
List<String> paramsList = Lists.newArrayList("rp_id", "client_id", "ticket", "state", "claims_redirect_uri");
Map<String, String> customParameterMap = params.getCustomParameters().entrySet().stream().filter(map -> !paramsList.contains(map.getKey())).collect(Collectors.toMap(map -> map.getKey(), map -> map.getValue()));
if (!customParameterMap.isEmpty()) {
url += "&" + Utils.mapAsStringWithEncodedValues(customParameterMap);
}
}
final RpGetClaimsGatheringUrlResponse r = new RpGetClaimsGatheringUrlResponse();
r.setUrl(url);
r.setState(state);
return r;
}
use of io.jans.ca.common.response.IOpResponse in project jans by JanssenProject.
the class RsCheckAccessOperation method execute.
@Override
public IOpResponse execute(final RsCheckAccessParams params) throws Exception {
validate(params);
Rp rp = getRp();
UmaResource resource = rp.umaResource(params.getPath(), params.getHttpMethod());
if (resource == null) {
final ErrorResponse error = new ErrorResponse("invalid_request");
error.setErrorDescription("Resource is not protected with path: " + params.getPath() + " and httpMethod: " + params.getHttpMethod() + ". Please protect your resource first with uma_rs_protect command. Check details on " + CoreUtils.DOC_URL);
LOG.error(error.getErrorDescription());
throw new WebApplicationException(Response.status(Response.Status.BAD_REQUEST).type(MediaType.APPLICATION_JSON_TYPE).entity(Jackson2.asJson(error)).build());
}
PatProvider patProvider = new PatProvider() {
@Override
public String getPatToken() {
return getUmaTokenService().getPat(params.getRpId()).getToken();
}
@Override
public void clearPat() {
// do nothing
}
};
List<String> requiredScopes = getRequiredScopes(params, resource);
CorrectRptIntrospectionResponse status = getIntrospectionService().introspectRpt(params.getRpId(), params.getRpt());
LOG.trace("RPT: " + params.getRpt() + ", status: " + status);
if (!Strings.isNullOrEmpty(params.getRpt()) && status != null && status.getActive() && status.getPermissions() != null) {
for (CorrectUmaPermission permission : status.getPermissions()) {
boolean containsAny = !Collections.disjoint(requiredScopes, permission.getScopes());
LOG.trace("containsAny: " + containsAny + ", requiredScopes: " + requiredScopes + ", permissionScopes: " + permission.getScopes());
if (containsAny) {
if ((permission.getResourceId() != null && permission.getResourceId().equals(resource.getId()))) {
// normal UMA
LOG.debug("RPT has enough permissions, access GRANTED. Path: " + params.getPath() + ", httpMethod:" + params.getHttpMethod() + ", site: " + rp);
return new RsCheckAccessResponse("granted");
}
}
}
}
if (CollectionUtils.isEmpty(params.getScopes()) && !CollectionUtils.isEmpty(resource.getTicketScopes())) {
requiredScopes = resource.getTicketScopes();
}
final RptPreProcessInterceptor rptInterceptor = getOpClientFactory().createRptPreProcessInterceptor(new ResourceRegistrar(patProvider, new ServiceProvider(rp.getOpHost())));
Response response = null;
try {
LOG.trace("Try to register ticket, scopes: " + requiredScopes + ", resourceId: " + resource.getId());
response = rptInterceptor.registerTicketResponse(requiredScopes, resource.getId());
} catch (ClientErrorException e) {
LOG.debug("Failed to register ticket. Entity: " + e.getResponse().readEntity(String.class) + ", status: " + e.getResponse().getStatus(), e);
if (e.getResponse().getStatus() == 400 || e.getResponse().getStatus() == 401) {
LOG.debug("Try maybe PAT is lost on AS, force refresh PAT and request ticket again ...");
// force to refresh PAT
getUmaTokenService().obtainPat(params.getRpId());
response = rptInterceptor.registerTicketResponse(requiredScopes, resource.getId());
} else {
throw e;
}
} catch (Exception e) {
LOG.error(e.getMessage(), e);
throw e;
}
RsCheckAccessResponse opResponse = new RsCheckAccessResponse("denied");
opResponse.setWwwAuthenticateHeader((String) response.getMetadata().getFirst("WWW-Authenticate"));
opResponse.setTicket(((PermissionTicket) response.getEntity()).getTicket());
LOG.debug("Access denied for path: " + params.getPath() + " and httpMethod: " + params.getHttpMethod() + ". Ticket is registered: " + opResponse);
return opResponse;
}
Aggregations