Examples with OAuthAppDO org.wso2.carbon.identity.oauth.dao.OAuthAppDO used on opensource projects

Example 1 with OAuthAppDO

use of org.wso2.carbon.identity.oauth.dao.OAuthAppDO in project carbon-apimgt by wso2.

the class SessionDataPublisherImpl method getAppsAuthorizedByUser.

/**
 * Method to retrieve applications authorized for user
 * @param authenticatedUser authenticated user info
 * @return array of authorized applications
 * @throws IdentityOAuthAdminException exception
 */
private OAuthConsumerAppDTO[] getAppsAuthorizedByUser(AuthenticatedUser authenticatedUser) throws IdentityOAuthAdminException {
    OAuthAppDAO appDAO = new OAuthAppDAO();
    String tenantAwareusername = authenticatedUser.getUserName();
    String tenantDomain = authenticatedUser.getTenantDomain();
    String username = UserCoreUtil.addTenantDomainToEntry(tenantAwareusername, tenantDomain);
    String userStoreDomain = authenticatedUser.getUserStoreDomain();
    Set<String> clientIds;
    SystemApplicationDTO[] systemApplicationDTOS;
    SystemApplicationDAO systemApplicationDAO = new SystemApplicationDAO();
    Set<String> systemAppClientIds = new HashSet<>();
    try {
        systemApplicationDTOS = systemApplicationDAO.getApplications(tenantDomain);
        if (systemApplicationDTOS.length < 0) {
            if (log.isDebugEnabled()) {
                log.debug("The tenant: " + tenantDomain + " doesn't have any system apps");
            }
        } else {
            for (SystemApplicationDTO applicationDTO : systemApplicationDTOS) {
                try {
                    if (ApplicationMgtUtil.isUserAuthorized(applicationDTO.getName(), tenantAwareusername)) {
                        systemAppClientIds.add(applicationDTO.getConsumerKey());
                    }
                } catch (IdentityApplicationManagementException e) {
                    log.error("Error occurred while checking the authorization of the application " + applicationDTO.getName(), e);
                }
            }
        }
    } catch (APIMgtDAOException e) {
        log.error("Error thrown while retrieving system applications for the tenant domain " + tenantDomain, e);
    }
    clientIds = systemAppClientIds;
    Set<OAuthConsumerAppDTO> appDTOs = new HashSet<>();
    for (String clientId : clientIds) {
        Set<AccessTokenDO> accessTokenDOs;
        try {
            accessTokenDOs = OAuthTokenPersistenceFactory.getInstance().getAccessTokenDAO().getAccessTokens(clientId, authenticatedUser, userStoreDomain, true);
        } catch (IdentityOAuth2Exception e) {
            throw handleError("Error occurred while retrieving access tokens issued for " + "Client ID : " + clientId + ", User ID : " + username, e);
        }
        if (!accessTokenDOs.isEmpty()) {
            Set<String> distinctClientUserScopeCombo = new HashSet<>();
            for (AccessTokenDO accessTokenDO : accessTokenDOs) {
                AccessTokenDO scopedToken;
                String scopeString = OAuth2Util.buildScopeString(accessTokenDO.getScope());
                try {
                    scopedToken = OAuthTokenPersistenceFactory.getInstance().getAccessTokenDAO().getLatestAccessToken(clientId, authenticatedUser, userStoreDomain, scopeString, true);
                    if (scopedToken != null && !distinctClientUserScopeCombo.contains(clientId + ":" + username)) {
                        OAuthAppDO appDO;
                        try {
                            appDO = appDAO.getAppInformation(scopedToken.getConsumerKey());
                            appDTOs.add(buildConsumerAppDTO(appDO));
                            if (log.isDebugEnabled()) {
                                log.debug("Found App: " + appDO.getApplicationName() + " for user: " + username);
                            }
                        } catch (InvalidOAuthClientException e) {
                            String errorMsg = "Invalid Client ID : " + scopedToken.getConsumerKey();
                            log.error(errorMsg, e);
                            throw new IdentityOAuthAdminException(errorMsg);
                        } catch (IdentityOAuth2Exception e) {
                            String errorMsg = "Error occurred while retrieving app information " + "for Client ID : " + scopedToken.getConsumerKey();
                            log.error(errorMsg, e);
                            throw new IdentityOAuthAdminException(errorMsg);
                        }
                        distinctClientUserScopeCombo.add(clientId + ":" + username);
                    }
                } catch (IdentityOAuth2Exception e) {
                    String errorMsg = "Error occurred while retrieving latest access token issued for Client ID :" + " " + clientId + ", User ID : " + username + " and Scope : " + scopeString;
                    throw handleError(errorMsg, e);
                }
            }
        }
    }
    return appDTOs.toArray(new OAuthConsumerAppDTO[0]);
}

Example 2 with OAuthAppDO

use of org.wso2.carbon.identity.oauth.dao.OAuthAppDO in project carbon-apimgt by wso2.

the class SessionDataPublisherImpl method buildConsumerAppDTO.

/**
 * Method to build a OAuthConsumerAppDTO type object
 * @param appDO required param
 * @return OAuthConsumerAppDTO type object
 */
private OAuthConsumerAppDTO buildConsumerAppDTO(OAuthAppDO appDO) {
    OAuthConsumerAppDTO dto = new OAuthConsumerAppDTO();
    dto.setApplicationName(appDO.getApplicationName());
    dto.setCallbackUrl(appDO.getCallbackUrl());
    dto.setOauthConsumerKey(appDO.getOauthConsumerKey());
    dto.setOauthConsumerSecret(appDO.getOauthConsumerSecret());
    dto.setOAuthVersion(appDO.getOauthVersion());
    dto.setGrantTypes(appDO.getGrantTypes());
    dto.setScopeValidators(appDO.getScopeValidators());
    dto.setUsername(appDO.getAppOwner().toFullQualifiedUsername());
    dto.setState(appDO.getState());
    dto.setPkceMandatory(appDO.isPkceMandatory());
    dto.setPkceSupportPlain(appDO.isPkceSupportPlain());
    dto.setUserAccessTokenExpiryTime(appDO.getUserAccessTokenExpiryTime());
    dto.setApplicationAccessTokenExpiryTime(appDO.getApplicationAccessTokenExpiryTime());
    dto.setRefreshTokenExpiryTime(appDO.getRefreshTokenExpiryTime());
    dto.setIdTokenExpiryTime(appDO.getIdTokenExpiryTime());
    dto.setAudiences(appDO.getAudiences());
    dto.setRequestObjectSignatureValidationEnabled(appDO.isRequestObjectSignatureValidationEnabled());
    dto.setIdTokenEncryptionEnabled(appDO.isIdTokenEncryptionEnabled());
    dto.setIdTokenEncryptionAlgorithm(appDO.getIdTokenEncryptionAlgorithm());
    dto.setIdTokenEncryptionMethod(appDO.getIdTokenEncryptionMethod());
    dto.setBackChannelLogoutUrl(appDO.getBackChannelLogoutUrl());
    dto.setTokenType(appDO.getTokenType());
    dto.setBypassClientCredentials(appDO.isBypassClientCredentials());
    return dto;
}