Examples with DefaultOAuth2User org.springframework.security.oauth2.core.user.DefaultOAuth2User used on opensource projects

Example 21 with DefaultOAuth2User

use of org.springframework.security.oauth2.core.user.DefaultOAuth2User in project OsmAnd-tools by osmandapp.

the class WebSecurityConfiguration method oauthGithubUserService.

private DefaultOAuth2UserService oauthGithubUserService() {
    // authorize with admin for specific group
    RestTemplate restTemplate = new RestTemplate();
    restTemplate.setErrorHandler(new DefaultResponseErrorHandler() {

        @Override
        public void handleError(ClientHttpResponse response) throws IOException {
        }
    });
    DefaultOAuth2UserService service = new DefaultOAuth2UserService() {

        @Override
        public OAuth2User loadUser(OAuth2UserRequest userRequest) throws OAuth2AuthenticationException {
            OAuth2User user = super.loadUser(userRequest);
            if (user == null) {
                return null;
            }
            Set<GrantedAuthority> authorities = new LinkedHashSet<>();
            if (!Algorithms.isEmpty(adminOauth2Url) && user.getAttribute("url") != null && user.getAttribute("url").toString().contains("github.com")) {
                Map<String, Object> orgs = checkPermissionAccess(adminOauth2Url, userRequest, user);
                // orgs.get("privacy").equals("closed");
                if (orgs != null) {
                    authorities.add(new SimpleGrantedAuthority(ROLE_ADMIN));
                }
            }
            String userNameAttributeName = userRequest.getClientRegistration().getProviderDetails().getUserInfoEndpoint().getUserNameAttributeName();
            return new DefaultOAuth2User(authorities, user.getAttributes(), userNameAttributeName);
        }

        private Map<String, Object> checkPermissionAccess(Object orgUrl, OAuth2UserRequest userRequest, OAuth2User user) {
            String organizationUrl = String.valueOf(orgUrl);
            HttpHeaders headers = new HttpHeaders();
            headers.setBearerAuth(userRequest.getAccessToken().getTokenValue());
            headers.setAccept(Collections.singletonList(MediaType.APPLICATION_JSON));
            URI uri = UriComponentsBuilder.fromUriString(organizationUrl).build().toUri();
            RequestEntity<?> request = new RequestEntity<>(headers, HttpMethod.GET, uri);
            ResponseEntity<Map<String, Object>> res = restTemplate.exchange(request, new ParameterizedTypeReference<Map<String, Object>>() {
            });
            if (!res.getStatusCode().is2xxSuccessful()) {
                return null;
            }
            return res.getBody();
        }
    };
    return service;
}