Examples with CookieHelper.getCookie org.keycloak.services.util.CookieHelper.getCookie used on opensource projects

Example 1 with CookieHelper.getCookie

use of org.keycloak.services.util.CookieHelper.getCookie in project keycloak by keycloak.

the class AuthenticationManager method authenticateIdentityCookie.

public static AuthResult authenticateIdentityCookie(KeycloakSession session, RealmModel realm, boolean checkActive) {
    Cookie cookie = CookieHelper.getCookie(session.getContext().getRequestHeaders().getCookies(), KEYCLOAK_IDENTITY_COOKIE);
    if (cookie == null || "".equals(cookie.getValue())) {
        logger.debugv("Could not find cookie: {0}", KEYCLOAK_IDENTITY_COOKIE);
        return null;
    }
    String tokenString = cookie.getValue();
    AuthResult authResult = verifyIdentityToken(session, realm, session.getContext().getUri(), session.getContext().getConnection(), checkActive, false, null, true, tokenString, session.getContext().getRequestHeaders(), VALIDATE_IDENTITY_COOKIE);
    if (authResult == null) {
        expireIdentityCookie(realm, session.getContext().getUri(), session.getContext().getConnection());
        expireOldIdentityCookie(realm, session.getContext().getUri(), session.getContext().getConnection());
        return null;
    }
    authResult.getSession().setLastSessionRefresh(Time.currentTime());
    return authResult;
}

Example 2 with CookieHelper.getCookie

use of org.keycloak.services.util.CookieHelper.getCookie in project keycloak by keycloak.

the class AuthenticationManager method expireUserSessionCookie.

public static boolean expireUserSessionCookie(KeycloakSession session, UserSessionModel userSession, RealmModel realm, UriInfo uriInfo, HttpHeaders headers, ClientConnection connection) {
    try {
        // check to see if any identity cookie is set with the same session and expire it if necessary
        Cookie cookie = CookieHelper.getCookie(headers.getCookies(), KEYCLOAK_IDENTITY_COOKIE);
        if (cookie == null)
            return true;
        String tokenString = cookie.getValue();
        TokenVerifier<AccessToken> verifier = TokenVerifier.create(tokenString, AccessToken.class).realmUrl(Urls.realmIssuer(uriInfo.getBaseUri(), realm.getName())).checkActive(false).checkTokenType(false).withChecks(VALIDATE_IDENTITY_COOKIE);
        String kid = verifier.getHeader().getKeyId();
        String algorithm = verifier.getHeader().getAlgorithm().name();
        SignatureVerifierContext signatureVerifier = session.getProvider(SignatureProvider.class, algorithm).verifier(kid);
        verifier.verifierContext(signatureVerifier);
        AccessToken token = verifier.verify().getToken();
        UserSessionModel cookieSession = session.sessions().getUserSession(realm, token.getSessionState());
        if (cookieSession == null || !cookieSession.getId().equals(userSession.getId()))
            return true;
        expireIdentityCookie(realm, uriInfo, connection);
        return true;
    } catch (Exception e) {
        return false;
    }
}