Examples with OAuth2Exception org.maxkey.authz.oauth2.common.exceptions.OAuth2Exception used on opensource projects

Example 11 with OAuth2Exception

use of org.maxkey.authz.oauth2.common.exceptions.OAuth2Exception in project MaxKey by dromara.

the class AuthorizationEndpoint method getAuthorizationCodeResponse.

// Authorization Code Response
private View getAuthorizationCodeResponse(AuthorizationRequest authorizationRequest, Authentication authUser) {
    try {
        String successfulRedirect = getSuccessfulRedirect(authorizationRequest, generateCode(authorizationRequest, authUser));
        _logger.debug("successfulRedirect " + successfulRedirect);
        return new RedirectView(successfulRedirect, false, true, false);
    } catch (OAuth2Exception e) {
        return new RedirectView(getUnsuccessfulRedirect(authorizationRequest, e, false), false, true, false);
    }
}

Example 12 with OAuth2Exception

use of org.maxkey.authz.oauth2.common.exceptions.OAuth2Exception in project MaxKey by dromara.

the class TokenEndpoint method postAccessToken.

@Operation(summary = "OAuth 2.0 获取AccessToken接口", description = "传递参数token等", method = "POST")
@RequestMapping(value = { OAuth2Constants.ENDPOINT.ENDPOINT_TOKEN, OAuth2Constants.ENDPOINT.ENDPOINT_TENCENT_IOA_TOKEN }, method = RequestMethod.POST)
public ResponseEntity<OAuth2AccessToken> postAccessToken(@RequestParam Map<String, String> parameters) throws HttpRequestMethodNotSupportedException {
    // TokenEndpointAuthenticationFilter
    OAuth2AccessToken token = null;
    try {
        Object principal = WebContext.getAuthentication();
        if (!(principal instanceof Authentication)) {
            throw new InsufficientAuthenticationException("There is no client authentication. Try adding an appropriate authentication.");
        }
        String clientId = getClientId((Authentication) principal);
        ClientDetails authenticatedClient = getClientDetailsService().loadClientByClientId(clientId, true);
        TokenRequest tokenRequest = getOAuth2RequestFactory().createTokenRequest(parameters, authenticatedClient);
        if (clientId != null && !clientId.equals("")) {
            // request.
            if (!clientId.equals(tokenRequest.getClientId())) {
                // authenticated client
                throw new InvalidClientException("Given client ID does not match authenticated client");
            }
        }
        if (authenticatedClient != null) {
            oAuth2RequestValidator.validateScope(tokenRequest, authenticatedClient);
        }
        if (!StringUtils.hasText(tokenRequest.getGrantType())) {
            throw new InvalidRequestException("Missing grant type");
        }
        if (tokenRequest.getGrantType().equals(OAuth2Constants.PARAMETER.GRANT_TYPE_IMPLICIT)) {
            throw new InvalidGrantException("Implicit grant type not supported from token endpoint");
        }
        if (isAuthCodeRequest(parameters)) {
            // The scope was requested or determined during the authorization step
            if (!tokenRequest.getScope().isEmpty()) {
                logger.debug("Clearing scope of incoming token request");
                tokenRequest.setScope(Collections.<String>emptySet());
            }
        }
        logger.debug("request parameters " + parameters);
        /**
         *crystal.sea
         * code must uuid format
         */
        if (parameters.get(OAuth2Constants.PARAMETER.CODE) != null && !StringGenerator.uuidMatches(parameters.get(OAuth2Constants.PARAMETER.CODE))) {
            throw new InvalidRequestException("The code is not valid format .");
        }
        if (isRefreshTokenRequest(parameters)) {
            // A refresh token has its own default scopes, so we should ignore any added by the factory here.
            tokenRequest.setScope(OAuth2Utils.parseParameterList(parameters.get(OAuth2Constants.PARAMETER.SCOPE)));
        }
        // granter grant access token
        token = getTokenGranter().grant(tokenRequest.getGrantType(), tokenRequest);
        if (token == null) {
            throw new UnsupportedGrantTypeException("Unsupported grant type: " + tokenRequest.getGrantType());
        }
    } catch (OAuth2Exception oauth2Exception) {
        token = new DefaultOAuth2AccessToken(oauth2Exception);
    } catch (InsufficientAuthenticationException authenticationException) {
        token = new DefaultOAuth2AccessToken(new OAuth2Exception(authenticationException.getMessage()));
    }
    return getResponse(token);
}

Example 13 with OAuth2Exception

use of org.maxkey.authz.oauth2.common.exceptions.OAuth2Exception in project spring-security-oauth by spring-projects.

the class WhitelabelErrorEndpoint method handleError.

@RequestMapping("/oauth/error")
public ModelAndView handleError(HttpServletRequest request) {
    Map<String, Object> model = new HashMap<String, Object>();
    Object error = request.getAttribute("error");
    // The error summary may contain malicious user input,
    // it needs to be escaped to prevent XSS
    String errorSummary;
    if (error instanceof OAuth2Exception) {
        OAuth2Exception oauthError = (OAuth2Exception) error;
        errorSummary = HtmlUtils.htmlEscape(oauthError.getSummary());
    } else {
        errorSummary = "Unknown error";
    }
    final String errorContent = ERROR.replace("%errorSummary%", errorSummary);
    View errorView = new View() {

        @Override
        public String getContentType() {
            return "text/html";
        }

        @Override
        public void render(Map<String, ?> model, HttpServletRequest request, HttpServletResponse response) throws Exception {
            response.setContentType(getContentType());
            response.getWriter().append(errorContent);
        }
    };
    return new ModelAndView(errorView, model);
}

Example 14 with OAuth2Exception

use of org.maxkey.authz.oauth2.common.exceptions.OAuth2Exception in project spring-security-oauth by spring-projects.

the class DefaultWebResponseExceptionTranslator method translate.

@Override
public ResponseEntity<OAuth2Exception> translate(Exception e) throws Exception {
    // Try to extract a SpringSecurityException from the stacktrace
    Throwable[] causeChain = throwableAnalyzer.determineCauseChain(e);
    Exception ase = (OAuth2Exception) throwableAnalyzer.getFirstThrowableOfType(OAuth2Exception.class, causeChain);
    if (ase != null) {
        return handleOAuth2Exception((OAuth2Exception) ase);
    }
    ase = (AuthenticationException) throwableAnalyzer.getFirstThrowableOfType(AuthenticationException.class, causeChain);
    if (ase != null) {
        return handleOAuth2Exception(new UnauthorizedException(e.getMessage(), e));
    }
    ase = (AccessDeniedException) throwableAnalyzer.getFirstThrowableOfType(AccessDeniedException.class, causeChain);
    if (ase instanceof AccessDeniedException) {
        return handleOAuth2Exception(new ForbiddenException(ase.getMessage(), ase));
    }
    ase = (HttpRequestMethodNotSupportedException) throwableAnalyzer.getFirstThrowableOfType(HttpRequestMethodNotSupportedException.class, causeChain);
    if (ase instanceof HttpRequestMethodNotSupportedException) {
        return handleOAuth2Exception(new MethodNotAllowed(ase.getMessage(), ase));
    }
    return handleOAuth2Exception(new ServerErrorException(HttpStatus.INTERNAL_SERVER_ERROR.getReasonPhrase(), e));
}

Example 15 with OAuth2Exception

use of org.maxkey.authz.oauth2.common.exceptions.OAuth2Exception in project spring-security-oauth by spring-projects.

the class AuthorizationEndpoint method getAuthorizationCodeResponse.

private View getAuthorizationCodeResponse(AuthorizationRequest authorizationRequest, Authentication authUser) {
    try {
        RedirectView redirectView = new RedirectView(getSuccessfulRedirect(authorizationRequest, generateCode(authorizationRequest, authUser)), false, true, false);
        redirectView.setStatusCode(HttpStatus.SEE_OTHER);
        return redirectView;
    } catch (OAuth2Exception e) {
        RedirectView redirectView = new RedirectView(getUnsuccessfulRedirect(authorizationRequest, e, false), false, true, false);
        redirectView.setStatusCode(HttpStatus.SEE_OTHER);
        return redirectView;
    }
}