Examples with OAuth2Registration org.thingsboard.server.common.data.oauth2.OAuth2Registration used on opensource projects

Example 6 with OAuth2Registration

use of org.thingsboard.server.common.data.oauth2.OAuth2Registration in project thingsboard by thingsboard.

the class Oauth2AuthenticationSuccessHandler method onAuthenticationSuccess.

@Override
public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException {
    OAuth2AuthorizationRequest authorizationRequest = httpCookieOAuth2AuthorizationRequestRepository.loadAuthorizationRequest(request);
    String callbackUrlScheme = authorizationRequest.getAttribute(TbOAuth2ParameterNames.CALLBACK_URL_SCHEME);
    String baseUrl;
    if (!StringUtils.isEmpty(callbackUrlScheme)) {
        baseUrl = callbackUrlScheme + ":";
    } else {
        baseUrl = this.systemSecurityService.getBaseUrl(TenantId.SYS_TENANT_ID, new CustomerId(EntityId.NULL_UUID), request);
    }
    try {
        OAuth2AuthenticationToken token = (OAuth2AuthenticationToken) authentication;
        OAuth2Registration registration = oAuth2Service.findRegistration(UUID.fromString(token.getAuthorizedClientRegistrationId()));
        OAuth2AuthorizedClient oAuth2AuthorizedClient = oAuth2AuthorizedClientService.loadAuthorizedClient(token.getAuthorizedClientRegistrationId(), token.getPrincipal().getName());
        OAuth2ClientMapper mapper = oauth2ClientMapperProvider.getOAuth2ClientMapperByType(registration.getMapperConfig().getType());
        SecurityUser securityUser = mapper.getOrCreateUserByClientPrincipal(request, token, oAuth2AuthorizedClient.getAccessToken().getTokenValue(), registration);
        JwtToken accessToken = tokenFactory.createAccessJwtToken(securityUser);
        JwtToken refreshToken = refreshTokenRepository.requestRefreshToken(securityUser);
        clearAuthenticationAttributes(request, response);
        getRedirectStrategy().sendRedirect(request, response, baseUrl + "/?accessToken=" + accessToken.getToken() + "&refreshToken=" + refreshToken.getToken());
    } catch (Exception e) {
        log.debug("Error occurred during processing authentication success result. " + "request [{}], response [{}], authentication [{}]", request, response, authentication, e);
        clearAuthenticationAttributes(request, response);
        String errorPrefix;
        if (!StringUtils.isEmpty(callbackUrlScheme)) {
            errorPrefix = "/?error=";
        } else {
            errorPrefix = "/login?loginError=";
        }
        getRedirectStrategy().sendRedirect(request, response, baseUrl + errorPrefix + URLEncoder.encode(e.getMessage(), StandardCharsets.UTF_8.toString()));
    }
}

Example 7 with OAuth2Registration

use of org.thingsboard.server.common.data.oauth2.OAuth2Registration in project thingsboard by thingsboard.

the class GithubOAuth2ClientMapper method getOrCreateUserByClientPrincipal.

@Override
public SecurityUser getOrCreateUserByClientPrincipal(HttpServletRequest request, OAuth2AuthenticationToken token, String providerAccessToken, OAuth2Registration registration) {
    OAuth2MapperConfig config = registration.getMapperConfig();
    Map<String, String> githubMapperConfig = oAuth2Configuration.getGithubMapper();
    String email = getEmail(githubMapperConfig.get(EMAIL_URL_KEY), providerAccessToken);
    Map<String, Object> attributes = token.getPrincipal().getAttributes();
    OAuth2User oAuth2User = BasicMapperUtils.getOAuth2User(email, attributes, config);
    return getOrCreateSecurityUserFromOAuth2User(oAuth2User, registration);
}

Example 8 with OAuth2Registration

use of org.thingsboard.server.common.data.oauth2.OAuth2Registration in project thingsboard by thingsboard.

the class AbstractOAuth2ClientMapper method getOrCreateSecurityUserFromOAuth2User.

protected SecurityUser getOrCreateSecurityUserFromOAuth2User(OAuth2User oauth2User, OAuth2Registration registration) {
    OAuth2MapperConfig config = registration.getMapperConfig();
    UserPrincipal principal = new UserPrincipal(UserPrincipal.Type.USER_NAME, oauth2User.getEmail());
    User user = userService.findUserByEmail(TenantId.SYS_TENANT_ID, oauth2User.getEmail());
    if (user == null && !config.isAllowUserCreation()) {
        throw new UsernameNotFoundException("User not found: " + oauth2User.getEmail());
    }
    if (user == null) {
        userCreationLock.lock();
        try {
            user = userService.findUserByEmail(TenantId.SYS_TENANT_ID, oauth2User.getEmail());
            if (user == null) {
                user = new User();
                if (oauth2User.getCustomerId() == null && StringUtils.isEmpty(oauth2User.getCustomerName())) {
                    user.setAuthority(Authority.TENANT_ADMIN);
                } else {
                    user.setAuthority(Authority.CUSTOMER_USER);
                }
                TenantId tenantId = oauth2User.getTenantId() != null ? oauth2User.getTenantId() : getTenantId(oauth2User.getTenantName());
                user.setTenantId(tenantId);
                CustomerId customerId = oauth2User.getCustomerId() != null ? oauth2User.getCustomerId() : getCustomerId(user.getTenantId(), oauth2User.getCustomerName());
                user.setCustomerId(customerId);
                user.setEmail(oauth2User.getEmail());
                user.setFirstName(oauth2User.getFirstName());
                user.setLastName(oauth2User.getLastName());
                ObjectNode additionalInfo = objectMapper.createObjectNode();
                if (!StringUtils.isEmpty(oauth2User.getDefaultDashboardName())) {
                    Optional<DashboardId> dashboardIdOpt = user.getAuthority() == Authority.TENANT_ADMIN ? getDashboardId(tenantId, oauth2User.getDefaultDashboardName()) : getDashboardId(tenantId, customerId, oauth2User.getDefaultDashboardName());
                    if (dashboardIdOpt.isPresent()) {
                        additionalInfo.put("defaultDashboardFullscreen", oauth2User.isAlwaysFullScreen());
                        additionalInfo.put("defaultDashboardId", dashboardIdOpt.get().getId().toString());
                    }
                }
                if (registration.getAdditionalInfo() != null && registration.getAdditionalInfo().has("providerName")) {
                    additionalInfo.put("authProviderName", registration.getAdditionalInfo().get("providerName").asText());
                }
                user.setAdditionalInfo(additionalInfo);
                user = userService.saveUser(user);
                if (config.isActivateUser()) {
                    UserCredentials userCredentials = userService.findUserCredentialsByUserId(user.getTenantId(), user.getId());
                    userService.activateUserCredentials(user.getTenantId(), userCredentials.getActivateToken(), passwordEncoder.encode(""));
                }
            }
        } catch (Exception e) {
            log.error("Can't get or create security user from oauth2 user", e);
            throw new RuntimeException("Can't get or create security user from oauth2 user", e);
        } finally {
            userCreationLock.unlock();
        }
    }
    try {
        SecurityUser securityUser = new SecurityUser(user, true, principal);
        return (SecurityUser) new UsernamePasswordAuthenticationToken(securityUser, null, securityUser.getAuthorities()).getPrincipal();
    } catch (Exception e) {
        log.error("Can't get or create security user from oauth2 user", e);
        throw new RuntimeException("Can't get or create security user from oauth2 user", e);
    }
}

Example 9 with OAuth2Registration

use of org.thingsboard.server.common.data.oauth2.OAuth2Registration in project thingsboard by thingsboard.

the class BasicOAuth2ClientMapper method getOrCreateUserByClientPrincipal.

@Override
public SecurityUser getOrCreateUserByClientPrincipal(HttpServletRequest request, OAuth2AuthenticationToken token, String providerAccessToken, OAuth2Registration registration) {
    OAuth2MapperConfig config = registration.getMapperConfig();
    Map<String, Object> attributes = token.getPrincipal().getAttributes();
    String email = BasicMapperUtils.getStringAttributeByKey(attributes, config.getBasic().getEmailAttributeKey());
    OAuth2User oauth2User = BasicMapperUtils.getOAuth2User(email, attributes, config);
    return getOrCreateSecurityUserFromOAuth2User(oauth2User, registration);
}

Example 10 with OAuth2Registration

use of org.thingsboard.server.common.data.oauth2.OAuth2Registration in project thingsboard by thingsboard.

the class CustomOAuth2ClientMapper method getOrCreateUserByClientPrincipal.

@Override
public SecurityUser getOrCreateUserByClientPrincipal(HttpServletRequest request, OAuth2AuthenticationToken token, String providerAccessToken, OAuth2Registration registration) {
    OAuth2MapperConfig config = registration.getMapperConfig();
    OAuth2User oauth2User = getOAuth2User(token, providerAccessToken, config.getCustom());
    return getOrCreateSecurityUserFromOAuth2User(oauth2User, registration);
}