Examples with MasterToken net.petafuel.styx.core.persistence.models.MasterToken used on opensource projects

Example 1 with MasterToken

use of net.petafuel.styx.core.persistence.models.MasterToken in project styx by petafuel.

the class AccessTokenFilter method checkToken.

@Override
public boolean checkToken(String tokenHash) {
    AccessToken accessToken;
    try {
        accessToken = PersistentAccessToken.get(tokenHash);
    } catch (PersistenceEmptyResultSetException persistenceEmptyResultSetException) {
        // if there was no matching token found in the database, always return unauthorized
        ResponseEntity responseEntity = new ResponseEntity(ResponseConstant.UNAUTHORIZED, ResponseCategory.ERROR, ResponseOrigin.CLIENT);
        throw new StyxException(responseEntity);
    }
    if (accessToken.getLastUsedOn() == null && (TimeUnit.MILLISECONDS.toSeconds(new Date().getTime() - accessToken.getCreatedAt().getTime())) > accessToken.getExpiresIn()) {
        MasterToken masterToken = PersistentClientApp.get(accessToken.getClientMasterToken());
        LOG.warn("Access token expired before first usage, invalidated. master={}, access_token_created={}, serviceBinding={}", masterToken.getName(), accessToken.getCreatedAt(), accessToken.getServiceType());
        PersistentAccessToken.setValid(tokenHash, false);
        return false;
    }
    // get master token and check restrictions
    MasterToken masterToken = PersistentClientApp.get(accessToken.getClientMasterToken());
    checkRestrictions(masterToken, accessToken.getServiceType());
    // check if maxUsages is reached
    checkMaxUsages(masterToken, accessToken);
    // log necessary token information
    LOG.info("Request sent with following token information: accessToken={} valid={} serviceType={} usages={} clientReference={} createdAt={} masterTokenName={} masterTokenEnabled={}", accessToken.getId(), accessToken.isValid(), accessToken.getServiceType(), accessToken.getUsages(), accessToken.getClientReference(), accessToken.getCreatedAt(), masterToken.getName(), masterToken.isEnabled());
    // get service requirements from Target-Resource class or method
    List<XS2ATokenType> serviceRequirements = null;
    if (ri.getResourceMethod().getAnnotation(CheckAccessToken.class) != null) {
        serviceRequirements = Arrays.asList(ri.getResourceMethod().getAnnotation(CheckAccessToken.class).allowedServices());
    } else if (ri.getResourceClass().getAnnotation(CheckAccessToken.class) != null) {
        serviceRequirements = Arrays.asList(ri.getResourceClass().getAnnotation(CheckAccessToken.class).allowedServices());
    }
    // Get all TokenTypeMapperSPI implementations
    List<TokenTypeMapperSPI> tokenTypeMapperImpls = new TokenTypeMapperService().providers();
    TokenTypeMapperSPI concreteTokenTypeMapper = tokenTypeMapperImpls.stream().filter(tokenTypeMapperSPI -> tokenTypeMapperSPI.getMapping(accessToken.getServiceType()) != null).findFirst().orElse(null);
    if (concreteTokenTypeMapper == null || (serviceRequirements != null && !serviceRequirements.contains(concreteTokenTypeMapper.getMapping(accessToken.getServiceType())))) {
        if (concreteTokenTypeMapper == null) {
            LOG.error("There was not TokenTypeMapperSPI implementation found within the classpath, tokens cannot be validated against access controll");
        }
        ResponseEntity responseEntity = new ResponseEntity(ResponseConstant.STYX_TOKEN_ACCESS_VIOLATION, ResponseCategory.ERROR, ResponseOrigin.CLIENT);
        throw new StyxException(responseEntity);
    }
    // update lastUsedOn and increase usages of accessToken
    if (ri.getResourceClass().isAnnotationPresent(CheckAccessToken.class) && ri.getResourceClass().getAnnotation(CheckAccessToken.class).incrementUsage()) {
        PersistentAccessToken.updateLastUsedOn(tokenHash);
    }
    return accessToken.isValid() && masterToken.isEnabled();
}

Example 2 with MasterToken

use of net.petafuel.styx.core.persistence.models.MasterToken in project styx by petafuel.

the class AccessTokenFilterUnitTest method testMasterTokenInvalidConfiguration.

@Test
void testMasterTokenInvalidConfiguration() {
    MasterToken masterToken = prepareMasterToken("pis", null);
    AccessTokenFilter accessTokenFilter = new AccessTokenFilter();
    Assertions.assertThrows(StyxException.class, () -> accessTokenFilter.checkRestrictions(masterToken, "pis"));
    try {
        accessTokenFilter.checkRestrictions(masterToken, "pis");
    } catch (StyxException exception) {
        ResponseEntity response = exception.getResponseEntity();
        Assertions.assertEquals(ResponseConstant.STYX_MASTER_TOKEN_RESTRICTED.getReasonPhrase(), response.getMessage());
        Assertions.assertEquals(ResponseConstant.STYX_MASTER_TOKEN_RESTRICTED.getStatusCode(), response.getCode().getStatusCode());
        Assertions.assertEquals(ResponseCategory.ERROR, response.getCategory());
        Assertions.assertEquals(ResponseOrigin.STYX, response.getOrigin());
    }
}

Example 3 with MasterToken

use of net.petafuel.styx.core.persistence.models.MasterToken in project styx by petafuel.

the class AccessTokenFilterUnitTest method testCheckMaxUsagesNotReached.

@Test
void testCheckMaxUsagesNotReached() {
    AccessToken accessToken = new AccessToken();
    accessToken.setServiceType("pis");
    MasterToken masterToken = prepareMasterToken("pis", 5);
    AccessTokenFilter accessTokenFilter = new AccessTokenFilter();
    accessToken.setUsages(1);
    Assertions.assertDoesNotThrow(() -> accessTokenFilter.checkMaxUsages(masterToken, accessToken));
}

Example 4 with MasterToken

use of net.petafuel.styx.core.persistence.models.MasterToken in project styx by petafuel.

the class AccessTokenFilterUnitTest method testMasterTokenRestrictions.

@Test
void testMasterTokenRestrictions() {
    MasterToken masterToken = prepareMasterToken("pis", 5);
    AccessTokenFilter accessTokenFilter = new AccessTokenFilter();
    Assertions.assertDoesNotThrow(() -> accessTokenFilter.checkRestrictions(masterToken, "pis"));
}

Example 5 with MasterToken

use of net.petafuel.styx.core.persistence.models.MasterToken in project styx by petafuel.

the class AccessTokenFilterUnitTest method prepareMasterToken.

/**
 * helper method which sets up a masterToken object with given service Type and maxUsage
 *
 * @param serviceType string service type for which maxUsages will be set
 * @param maxUsage    amount of maxUsage for serviceType
 * @return object of MasterToken
 */
private MasterToken prepareMasterToken(String serviceType, Integer maxUsage) {
    MasterToken masterToken = new MasterToken();
    MasterTokenRestriction masterTokenRestriction = new MasterTokenRestriction();
    masterTokenRestriction.setMaxUsages(maxUsage);
    Map<String, MasterTokenRestriction> restrictionMap = new HashMap<>();
    restrictionMap.put(serviceType, masterTokenRestriction);
    masterToken.setRestrictions(restrictionMap);
    return masterToken;
}