Examples with AccessTokenRequestContext org.apereo.cas.support.oauth.web.response.accesstoken.ext.AccessTokenRequestContext used on opensource projects

Example 1 with AccessTokenRequestContext

use of org.apereo.cas.support.oauth.web.response.accesstoken.ext.AccessTokenRequestContext in project cas by apereo.

the class OAuth20AccessTokenEndpointController method examineAndExtractAccessTokenGrantRequest.

private AccessTokenRequestContext examineAndExtractAccessTokenGrantRequest(final HttpServletRequest request, final HttpServletResponse response) {
    val audit = AuditableContext.builder().httpRequest(request).httpResponse(response).build();
    val accessResult = accessTokenGrantAuditableRequestExtractor.execute(audit);
    val execResult = accessResult.getExecutionResult();
    return (AccessTokenRequestContext) execResult.orElseThrow(() -> new UnsupportedOperationException("Access token request is not supported"));
}

Example 2 with AccessTokenRequestContext

use of org.apereo.cas.support.oauth.web.response.accesstoken.ext.AccessTokenRequestContext in project cas by apereo.

the class OAuth20AuthorizeEndpointController method prepareAccessTokenRequestContext.

/**
 * Build access token request context.
 *
 * @param authzRequest      the authz request
 * @param registeredService the registered service
 * @param context           the context
 * @param service           the service
 * @param authentication    the authentication
 * @return the access token request context
 * @throws Exception the exception
 */
protected AccessTokenRequestContext prepareAccessTokenRequestContext(final OAuth20AuthorizationRequest authzRequest, final OAuthRegisteredService registeredService, final JEEContext context, final Service service, final Authentication authentication) throws Exception {
    var payloadBuilder = AccessTokenRequestContext.builder();
    if (authzRequest.isSingleSignOnSessionRequired()) {
        val tgt = getConfigurationContext().fetchTicketGrantingTicketFrom(context);
        payloadBuilder = payloadBuilder.ticketGrantingTicket(tgt);
    }
    val redirectUri = OAuth20Utils.getRequestParameter(context, OAuth20Constants.REDIRECT_URI).map(String::valueOf).orElse(StringUtils.EMPTY);
    val grantType = context.getRequestParameter(OAuth20Constants.GRANT_TYPE).map(String::valueOf).orElseGet(OAuth20GrantTypes.AUTHORIZATION_CODE::getType).toUpperCase();
    val scopes = OAuth20Utils.parseRequestScopes(context);
    val codeChallenge = context.getRequestParameter(OAuth20Constants.CODE_CHALLENGE).map(String::valueOf).orElse(StringUtils.EMPTY);
    val codeChallengeMethod = context.getRequestParameter(OAuth20Constants.CODE_CHALLENGE_METHOD).map(String::valueOf).orElse(StringUtils.EMPTY).toUpperCase();
    val userProfile = OAuth20Utils.getAuthenticatedUserProfile(context, getConfigurationContext().getSessionStore());
    val claims = OAuth20Utils.parseRequestClaims(context);
    val holder = payloadBuilder.service(service).authentication(authentication).registeredService(registeredService).grantType(OAuth20Utils.getGrantType(context)).responseType(OAuth20Utils.getResponseType(context)).codeChallenge(codeChallenge).codeChallengeMethod(codeChallengeMethod).scopes(scopes).clientId(authzRequest.getClientId()).redirectUri(redirectUri).userProfile(userProfile).claims(claims).responseMode(OAuth20Utils.getResponseModeType(context)).build();
    context.getRequestParameters().keySet().forEach(key -> context.getRequestParameter(key).ifPresent(value -> holder.getParameters().put(key, value)));
    LOGGER.debug("Building authorization response for grant type [{}] with scopes [{}] for client id [{}]", grantType, scopes, authzRequest.getClientId());
    return holder;
}

Example 3 with AccessTokenRequestContext

use of org.apereo.cas.support.oauth.web.response.accesstoken.ext.AccessTokenRequestContext in project cas by apereo.

the class OAuth20AccessTokenGrantRequestAuditResourceResolver method resolveFrom.

@Override
public String[] resolveFrom(final JoinPoint auditableTarget, final Object retval) {
    val auditResult = (AuditableExecutionResult) retval;
    val executionResult = auditResult.getExecutionResult();
    if (executionResult.isPresent()) {
        val accessTokenRequest = (AccessTokenRequestContext) executionResult.get();
        val tokenId = accessTokenRequest.getToken() == null ? "N/A" : accessTokenRequest.getToken().getId();
        val values = new HashMap<>();
        values.put("token", tokenId);
        values.put("client_id", accessTokenRequest.getRegisteredService().getClientId());
        values.put("service", accessTokenRequest.getService().getId());
        values.put("grant_type", accessTokenRequest.getGrantType().getType());
        values.put("response_type", accessTokenRequest.getResponseType().getType());
        values.put("scopes", accessTokenRequest.getScopes());
        return new String[] { auditFormat.serialize(values) };
    }
    return ArrayUtils.EMPTY_STRING_ARRAY;
}

Example 4 with AccessTokenRequestContext

use of org.apereo.cas.support.oauth.web.response.accesstoken.ext.AccessTokenRequestContext in project cas by apereo.

the class OAuth20AuthorizationCodeAuthorizationResponseBuilder method build.

@Audit(action = AuditableActions.OAUTH2_CODE_RESPONSE, actionResolverName = AuditActionResolvers.OAUTH2_CODE_RESPONSE_ACTION_RESOLVER, resourceResolverName = AuditResourceResolvers.OAUTH2_CODE_RESPONSE_RESOURCE_RESOLVER)
@Override
public ModelAndView build(final AccessTokenRequestContext holder) throws Exception {
    val authentication = holder.getAuthentication();
    val factory = (OAuth20CodeFactory) configurationContext.getTicketFactory().get(OAuth20Code.class);
    val code = factory.create(holder.getService(), authentication, holder.getTicketGrantingTicket(), holder.getScopes(), holder.getCodeChallenge(), holder.getCodeChallengeMethod(), holder.getClientId(), holder.getClaims(), holder.getResponseType(), holder.getGrantType());
    LOGGER.debug("Generated OAuth code: [{}]", code);
    configurationContext.getCentralAuthenticationService().addTicket(code);
    val ticketGrantingTicket = holder.getTicketGrantingTicket();
    Optional.ofNullable(ticketGrantingTicket).ifPresent(tgt -> {
        FunctionUtils.doAndHandle(ticket -> {
            configurationContext.getCentralAuthenticationService().updateTicket(ticket);
        }, (CheckedFunction<Throwable, TicketGrantingTicket>) throwable -> {
            LOGGER.error("Unable to update ticket-granting-ticket [{}]", ticketGrantingTicket, throwable);
            return null;
        }).accept(tgt);
    });
    return buildCallbackViewViaRedirectUri(holder, code);
}