Examples with UmaProtectionException org.gluu.oxtrust.exception.UmaProtectionException used on opensource projects

Example 1 with UmaProtectionException

use of org.gluu.oxtrust.exception.UmaProtectionException in project oxTrust by GluuFederation.

the class PassportRestWebService method processAuthorization.

protected Response processAuthorization(String authorization) {
    if (!pasportUmaProtectionService.isEnabled()) {
        log.info("UMA authentication is disabled");
        return getErrorResponse(Response.Status.FORBIDDEN, "Passport configuration was disabled");
    }
    Token patToken;
    try {
        patToken = pasportUmaProtectionService.getPatToken();
    } catch (UmaProtectionException ex) {
        return getErrorResponse(Response.Status.FORBIDDEN, "Failed to obtain PAT token");
    }
    Pair<Boolean, Response> rptTokenValidationResult = umaPermissionService.validateRptToken(patToken, authorization, pasportUmaProtectionService.getUmaResourceId(), pasportUmaProtectionService.getUmaScope());
    if (rptTokenValidationResult.getFirst()) {
        if (rptTokenValidationResult.getSecond() != null) {
            return rptTokenValidationResult.getSecond();
        }
    } else {
        return getErrorResponse(Response.Status.FORBIDDEN, "Invalid GAT/RPT token");
    }
    return null;
}

Example 2 with UmaProtectionException

use of org.gluu.oxtrust.exception.UmaProtectionException in project oxTrust by GluuFederation.

the class BaseUmaProtectionService method processUmaAuthorization.

Response processUmaAuthorization(String authorization, ResourceInfo resourceInfo) throws Exception {
    List<String> scopes = getRequestedScopes(resourceInfo);
    Token patToken = null;
    try {
        patToken = getPatToken();
    } catch (UmaProtectionException ex) {
        return getErrorResponse(Response.Status.INTERNAL_SERVER_ERROR, "Failed to obtain PAT token");
    }
    Pair<Boolean, Response> rptTokenValidationResult;
    if (scopes.isEmpty()) {
        rptTokenValidationResult = umaPermissionService.validateRptToken(patToken, authorization, getUmaResourceId(), scopes);
    } else {
        rptTokenValidationResult = umaPermissionService.validateRptToken(patToken, authorization, getUmaResourceId(), getUmaScope());
    }
    if (rptTokenValidationResult.getFirst()) {
        if (rptTokenValidationResult.getSecond() != null) {
            return rptTokenValidationResult.getSecond();
        }
    } else {
        return getErrorResponse(Response.Status.UNAUTHORIZED, "Invalid GAT/RPT token");
    }
    return null;
}

Example 3 with UmaProtectionException

use of org.gluu.oxtrust.exception.UmaProtectionException in project oxTrust by GluuFederation.

the class BaseUmaProtectionService method retrievePatToken.

private void retrievePatToken() throws UmaProtectionException {
    this.umaPat = null;
    if (umaMetadata == null) {
        return;
    }
    String umaClientKeyStoreFile = getClientKeyStoreFile();
    String umaClientKeyStorePassword = getClientKeyStorePassword();
    if (StringHelper.isEmpty(umaClientKeyStoreFile) || StringHelper.isEmpty(umaClientKeyStorePassword)) {
        throw new UmaProtectionException("UMA JKS keystore path or password is empty");
    }
    if (umaClientKeyStorePassword != null) {
        try {
            umaClientKeyStorePassword = encryptionService.decrypt(umaClientKeyStorePassword);
        } catch (EncryptionException ex) {
            log.error("Failed to decrypt UmaClientKeyStorePassword password", ex);
        }
    }
    try {
        this.umaPat = UmaClient.requestPat(umaMetadata.getTokenEndpoint(), umaClientKeyStoreFile, umaClientKeyStorePassword, getClientId(), getClientKeyId());
        if (this.umaPat == null) {
            this.umaPatAccessTokenExpiration = 0l;
        } else {
            this.umaPatAccessTokenExpiration = computeAccessTokenExpirationTime(this.umaPat.getExpiresIn());
        }
    } catch (Exception ex) {
        throw new UmaProtectionException("Failed to obtain valid UMA PAT token", ex);
    }
    if ((this.umaPat == null) || (this.umaPat.getAccessToken() == null)) {
        throw new UmaProtectionException("Failed to obtain valid UMA PAT token");
    }
}

Example 4 with UmaProtectionException

use of org.gluu.oxtrust.exception.UmaProtectionException in project oxTrust by GluuFederation.

the class BaseUmaProtectionService method retrievePatToken.

private void retrievePatToken() throws UmaProtectionException {
    this.umaPat = null;
    if (umaMetadata == null) {
        return;
    }
    String umaClientKeyStoreFile = getClientKeyStoreFile();
    String umaClientKeyStorePassword = getClientKeyStorePassword();
    if (StringHelper.isEmpty(umaClientKeyStoreFile) || StringHelper.isEmpty(umaClientKeyStorePassword)) {
        throw new UmaProtectionException("UMA JKS keystore path or password is empty");
    }
    if (umaClientKeyStorePassword != null) {
        try {
            umaClientKeyStorePassword = encryptionService.decrypt(umaClientKeyStorePassword);
        } catch (EncryptionException ex) {
            log.error("Failed to decrypt UmaClientKeyStorePassword password", ex);
        }
    }
    try {
        this.umaPat = UmaClient.requestPat(umaMetadata.getTokenEndpoint(), umaClientKeyStoreFile, umaClientKeyStorePassword, getClientId(), getClientKeyId());
        if (this.umaPat == null) {
            this.umaPatAccessTokenExpiration = 0l;
        } else {
            this.umaPatAccessTokenExpiration = computeAccessTokenExpirationTime(this.umaPat.getExpiresIn());
        }
    } catch (Exception ex) {
        throw new UmaProtectionException("Failed to obtain valid UMA PAT token", ex);
    }
    if ((this.umaPat == null) || (this.umaPat.getAccessToken() == null)) {
        throw new UmaProtectionException("Failed to obtain valid UMA PAT token");
    }
}

Example 5 with UmaProtectionException

use of org.gluu.oxtrust.exception.UmaProtectionException in project oxTrust by GluuFederation.

the class BaseUmaProtectionService method processUmaAuthorization.

Response processUmaAuthorization(String authorization, ResourceInfo resourceInfo) throws Exception {
    List<String> scopes = getRequestedScopes(resourceInfo);
    Token patToken = null;
    try {
        patToken = getPatToken();
    } catch (UmaProtectionException ex) {
        return IProtectionService.simpleResponse(Response.Status.INTERNAL_SERVER_ERROR, "Failed to obtain PAT token");
    }
    Pair<Boolean, Response> rptTokenValidationResult;
    if (!scopes.isEmpty()) {
        rptTokenValidationResult = umaPermissionService.validateRptToken(patToken, authorization, getUmaResourceId(), scopes);
    } else {
        rptTokenValidationResult = umaPermissionService.validateRptToken(patToken, authorization, getUmaResourceId(), getUmaScope());
    }
    if (rptTokenValidationResult.getFirst()) {
        if (rptTokenValidationResult.getSecond() != null) {
            return rptTokenValidationResult.getSecond();
        }
    } else {
        return IProtectionService.simpleResponse(Response.Status.UNAUTHORIZED, "Invalid GAT/RPT token");
    }
    return null;
}