init

2019-04-29 23:53:10 +08:00
parent 0650b25b8b
commit 055bed6a58
5255 changed files with 619669 additions and 0 deletions
@@ -0,0 +1,3 @@
+Manifest-Version: 1.0
+Class-Path: 
+
@@ -0,0 +1,96 @@
+/**
+ * 
+ */
+package org.maxkey.authz.token.endpoint;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+import org.maxkey.authz.endpoint.AuthorizeBaseEndpoint;
+import org.maxkey.authz.endpoint.adapter.AbstractAuthorizeAdapter;
+import org.maxkey.authz.token.endpoint.adapter.TokenBasedDefaultAdapter;
+import org.maxkey.config.ApplicationConfig;
+import org.maxkey.constants.BOOLEAN;
+import org.maxkey.constants.PROTOCOLS;
+import org.maxkey.dao.service.TokenBasedDetailsService;
+import org.maxkey.domain.apps.TokenBasedDetails;
+import org.maxkey.util.Instance;
+import org.maxkey.web.WebContext;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.servlet.ModelAndView;
+
+/**
+ * @author Crystal.Sea
+ *
+ */
+@Controller
+public class TokenBasedAuthorizeEndpoint  extends AuthorizeBaseEndpoint{
+
+	final static Logger _logger = LoggerFactory.getLogger(TokenBasedAuthorizeEndpoint.class);
+	@Autowired
+	TokenBasedDetailsService tokenBasedDetailsService;
+	
+	TokenBasedDefaultAdapter defaultTokenBasedAdapter=new TokenBasedDefaultAdapter();
+	
+	@Autowired
+	ApplicationConfig applicationConfig;
+	
+	@RequestMapping("/authorize/tokenbased/{id}")
+	public ModelAndView authorize(
+			HttpServletRequest request,
+			HttpServletResponse response,
+			@PathVariable("id") String id){
+		ModelAndView modelAndView=new ModelAndView();
+		
+		TokenBasedDetails tokenBasedDetails=null;
+		if(id.equals("manage")){
+			tokenBasedDetails=new TokenBasedDetails();
+			tokenBasedDetails.setId("manage");
+			tokenBasedDetails.setName("Manage App");
+			tokenBasedDetails.setProtocol(PROTOCOLS.TOKENBASED);
+			tokenBasedDetails.setIsAdapter(1);
+			tokenBasedDetails.setAdapter("com.connsec.web.authorize.endpoint.adapter.TokenBasedJWTAdapter");
+			tokenBasedDetails.setRedirectUri(applicationConfig.getManageUri());
+			tokenBasedDetails.setExpires("2");
+		}else{
+			tokenBasedDetails=tokenBasedDetailsService.get(id);
+		}
+		
+		_logger.debug(""+tokenBasedDetails);
+		
+		AbstractAuthorizeAdapter adapter;
+		if(BOOLEAN.isTrue(tokenBasedDetails.getIsAdapter())){
+			adapter =(AbstractAuthorizeAdapter)Instance.newInstance(tokenBasedDetails.getAdapter());
+		}else{
+			adapter =(AbstractAuthorizeAdapter)defaultTokenBasedAdapter;
+		}
+		
+		String tokenData=adapter.generateInfo(
+				WebContext.getUserInfo(), 
+				tokenBasedDetails);
+		
+		String encryptTokenData=adapter.encrypt(
+				tokenData, 
+				tokenBasedDetails.getAlgorithmKey(), 
+				tokenBasedDetails.getAlgorithm());
+		
+		String signTokenData=adapter.sign(
+				encryptTokenData, 
+				tokenBasedDetails);
+		
+		modelAndView=adapter.authorize(
+				WebContext.getUserInfo(), 
+				tokenBasedDetails, 
+				signTokenData, 
+				modelAndView);
+		
+		return modelAndView;
+		
+	}
+
+}
@@ -0,0 +1,86 @@
+package org.maxkey.authz.token.endpoint.adapter;
+
+import java.util.Date;
+import java.util.HashMap;
+
+import org.maxkey.authz.endpoint.adapter.AbstractAuthorizeAdapter;
+import org.maxkey.constants.BOOLEAN;
+import org.maxkey.domain.UserInfo;
+import org.maxkey.domain.apps.TokenBasedDetails;
+import org.maxkey.util.DateUtils;
+import org.maxkey.util.JsonUtils;
+import org.maxkey.util.StringGenerator;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.web.servlet.ModelAndView;
+
+public class TokenBasedDefaultAdapter extends AbstractAuthorizeAdapter {
+	final static Logger _logger = LoggerFactory.getLogger(TokenBasedDefaultAdapter.class);
+	@Override
+	public String generateInfo(UserInfo userInfo,Object app) {
+		TokenBasedDetails details=(TokenBasedDetails)app;
+		HashMap<String,String> beanMap=new HashMap<String,String>();
+		
+		beanMap.put("randomId",(new StringGenerator()).uuidGenerate());
+		
+		if(BOOLEAN.isTrue(details.getUid())){
+			beanMap.put("uid",userInfo.getId());
+		}
+		if(BOOLEAN.isTrue(details.getUsername())){
+			beanMap.put("username", userInfo.getUsername());	
+		}
+		if(BOOLEAN.isTrue(details.getEmail())){
+			beanMap.put("email", userInfo.getEmail());
+		}
+		if(BOOLEAN.isTrue(details.getWindowsAccount())){
+			beanMap.put("windowsAccount", userInfo.getWindowsAccount());
+		}
+		if(BOOLEAN.isTrue(details.getEmployeeNumber())){
+			beanMap.put("employeeNumber", userInfo.getEmployeeNumber());
+		}
+		if(BOOLEAN.isTrue(details.getDepartmentId())){
+			beanMap.put("departmentId", userInfo.getDepartmentId());
+		}
+		if(BOOLEAN.isTrue(details.getDepartment())){
+			beanMap.put("department", userInfo.getDepartment());
+		}
+		
+		beanMap.put("displayName", userInfo.getDisplayName());
+		
+		/*
+		 * use UTC date time format
+		 * current date plus expires minute 
+		 */
+		Integer expiresLong=Integer.parseInt(details.getExpires());
+		Date currentDate=new Date();
+		Date expiresDate=DateUtils.addMinutes(currentDate,expiresLong);
+		String expiresString=DateUtils.toUtc(expiresDate);
+		_logger.debug("UTC Local current date : "+DateUtils.toUtcLocal(currentDate));
+		_logger.debug("UTC  current Date : "+DateUtils.toUtc(currentDate));
+		_logger.debug("UTC  expires Date : "+DateUtils.toUtc(expiresDate));
+		
+		beanMap.put("at", DateUtils.toUtc(currentDate));
+		
+		beanMap.put("expires", expiresString);
+		
+		String jsonString=JsonUtils.object2Json(beanMap);
+		_logger.debug("Token : "+jsonString);
+		
+		return jsonString;
+	}
+
+	@Override
+	public String encrypt(String data, String algorithmKey, String algorithm) {
+		return super.encrypt(data, algorithmKey, algorithm);
+	}
+
+	@Override
+	public ModelAndView authorize(UserInfo userInfo, Object app, String data,ModelAndView modelAndView) {
+		modelAndView.setViewName("authorize/tokenbased_sso_submint");
+		TokenBasedDetails details=(TokenBasedDetails)app;
+		modelAndView.addObject("action", details.getRedirectUri());
+		
+		modelAndView.addObject("token",data );
+		return modelAndView;
+	}
+}
@@ -0,0 +1,106 @@
+package org.maxkey.authz.token.endpoint.adapter;
+
+import java.util.Arrays;
+import java.util.Date;
+import java.util.UUID;
+
+import org.joda.time.DateTime;
+import org.maxkey.authz.endpoint.adapter.AbstractAuthorizeAdapter;
+import org.maxkey.config.oidc.OIDCProviderMetadata;
+import org.maxkey.crypto.jwt.signer.service.JwtSigningAndValidationService;
+import org.maxkey.domain.UserInfo;
+import org.maxkey.domain.apps.Applications;
+import org.maxkey.domain.apps.TokenBasedDetails;
+import org.maxkey.web.WebContext;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.web.servlet.ModelAndView;
+
+import com.nimbusds.jose.JWSAlgorithm;
+import com.nimbusds.jose.JWSHeader;
+import com.nimbusds.jwt.JWT;
+import com.nimbusds.jwt.JWTClaimsSet;
+import com.nimbusds.jwt.PlainJWT;
+import com.nimbusds.jwt.SignedJWT;
+
+public class TokenBasedJWTAdapter extends AbstractAuthorizeAdapter {
+	final static Logger _logger = LoggerFactory.getLogger(TokenBasedJWTAdapter.class);
+	@Override
+	public String generateInfo(UserInfo userInfo,Object app) {
+		TokenBasedDetails details=(TokenBasedDetails)app;
+	
+		
+		JwtSigningAndValidationService jwtSignerService= (JwtSigningAndValidationService)WebContext.getBean("jwtSignerValidationService");
+		OIDCProviderMetadata providerMetadata= (OIDCProviderMetadata)WebContext.getBean("oidcProviderMetadata");
+	
+		DateTime currentDateTime=DateTime.now();
+		
+		Date expirationTime=currentDateTime.plusMinutes(Integer.parseInt(details.getExpires())).toDate();
+		_logger.debug("expiration Time : "+expirationTime);
+		
+		JWTClaimsSet jwtClaims =new  JWTClaimsSet.Builder()
+				.issuer(providerMetadata.getIssuer())
+				.subject(userInfo.getUsername())
+				.audience(Arrays.asList(details.getId()))
+				.jwtID(UUID.randomUUID().toString())
+				.issueTime(currentDateTime.toDate())
+				.expirationTime(expirationTime)
+				.claim("email", userInfo.getWorkEmail())
+				.claim("name", userInfo.getUsername())
+				.claim("user_id", userInfo.getId())
+				.claim("external_id", userInfo.getId())
+				.claim("locale", userInfo.getLocale())
+				.claim("kid", jwtSignerService.getDefaultSignerKeyId())
+				.build();
+		
+		_logger.debug("jwt Claims : "+jwtClaims);
+		
+		JWT jwtToken = new PlainJWT(jwtClaims);
+		
+		JWSAlgorithm signingAlg = jwtSignerService.getDefaultSigningAlgorithm();
+		
+		//get PublicKey
+		/*Map<String, JWK>  jwkMap=jwtSignerService.getAllPublicKeys();
+		
+		JWK jwk=jwkMap.get("connsec_rsa1");
+		
+		_logger.debug("isPrivate "+jwk.isPrivate());*/
+		
+		_logger.debug(" signingAlg "+signingAlg);
+		
+		jwtToken = new SignedJWT(new JWSHeader(signingAlg), jwtClaims);
+		// sign it with the server's key
+		jwtSignerService.signJwt((SignedJWT) jwtToken);
+		
+		String tokenString=jwtToken.serialize();
+		_logger.debug("jwt Token : "+tokenString);
+		
+		return tokenString;
+	}
+
+	@Override
+	public String encrypt(String data, String algorithmKey, String algorithm) {
+		return data;
+	}
+
+	@Override
+	public String sign(String data, Applications app) {
+		
+		return data;
+	}
+
+	@Override
+	public ModelAndView authorize(UserInfo userInfo, Object app, String data,ModelAndView modelAndView) {
+		modelAndView.setViewName("authorize/tokenbased_jwt_sso_submint");
+		TokenBasedDetails details=(TokenBasedDetails)app;
+		modelAndView.addObject("action", details.getRedirectUri());
+		_logger.debug("jwt Token data : "+data);
+		
+		modelAndView.addObject("token",data);
+		
+		//return_to
+		
+		return modelAndView;
+	}
+
+}
@@ -0,0 +1,103 @@
+package org.maxkey.authz.token.endpoint.adapter;
+
+import java.util.Arrays;
+import java.util.Date;
+import java.util.UUID;
+
+import org.joda.time.DateTime;
+import org.maxkey.authz.endpoint.adapter.AbstractAuthorizeAdapter;
+import org.maxkey.config.oidc.OIDCProviderMetadata;
+import org.maxkey.crypto.ReciprocalUtils;
+import org.maxkey.crypto.jwt.signer.service.JwtSigningAndValidationService;
+import org.maxkey.crypto.jwt.signer.service.impl.SymmetricSigningAndValidationServiceBuilder;
+import org.maxkey.domain.UserInfo;
+import org.maxkey.domain.apps.Applications;
+import org.maxkey.domain.apps.TokenBasedDetails;
+import org.maxkey.web.WebContext;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.web.servlet.ModelAndView;
+
+import com.nimbusds.jose.JWSAlgorithm;
+import com.nimbusds.jose.JWSHeader;
+import com.nimbusds.jwt.JWT;
+import com.nimbusds.jwt.JWTClaimsSet;
+import com.nimbusds.jwt.PlainJWT;
+import com.nimbusds.jwt.SignedJWT;
+
+public class TokenBasedJWTHS256Adapter extends AbstractAuthorizeAdapter {
+	final static Logger _logger = LoggerFactory.getLogger(TokenBasedJWTHS256Adapter.class);
+	private SymmetricSigningAndValidationServiceBuilder symmetricJwtSignerServiceBuilder=new SymmetricSigningAndValidationServiceBuilder();
+
+	@Override
+	public String generateInfo(UserInfo userInfo,Object app) {
+		TokenBasedDetails details=(TokenBasedDetails)app;
+		
+		OIDCProviderMetadata providerMetadata= (OIDCProviderMetadata)WebContext.getBean("oidcProviderMetadata");
+	
+		DateTime currentDateTime=DateTime.now();
+		
+		Date expirationTime=currentDateTime.plusMinutes(Integer.parseInt(details.getExpires())).toDate();
+		_logger.debug("expiration Time : "+expirationTime);
+		
+		JWTClaimsSet jwtClaims =new  JWTClaimsSet.Builder()
+				.issuer(providerMetadata.getIssuer())
+				.subject(userInfo.getUsername())
+				.audience(Arrays.asList(details.getId()))
+				.jwtID(UUID.randomUUID().toString())
+				.issueTime(currentDateTime.toDate())
+				.expirationTime(expirationTime)
+				.claim("email", userInfo.getWorkEmail())
+				.claim("name", userInfo.getUsername())
+				.claim("user_id", userInfo.getId())
+				.claim("external_id", userInfo.getId())
+				.claim("locale", userInfo.getLocale())
+				.claim("kid", "SYMMETRIC-KEY")
+				.build();
+		
+		_logger.debug("jwt Claims : "+jwtClaims);
+		
+		JWT jwtToken = new PlainJWT(jwtClaims);
+		
+		String sharedSecret=ReciprocalUtils.decoder(details.getAlgorithmKey());
+		
+		_logger.debug("jwt sharedSecret : "+sharedSecret);
+		
+		JwtSigningAndValidationService symmetricJwtSignerService =symmetricJwtSignerServiceBuilder.serviceBuilder(sharedSecret);
+		if(symmetricJwtSignerService!=null){
+			jwtToken = new SignedJWT(new JWSHeader(JWSAlgorithm.HS256), jwtClaims);
+			symmetricJwtSignerService.signJwt((SignedJWT) jwtToken);
+		}
+		
+		String tokenString=jwtToken.serialize();
+		_logger.debug("jwt Token : "+tokenString);
+		
+		return tokenString;
+	}
+
+	@Override
+	public String encrypt(String data, String algorithmKey, String algorithm) {
+		return data;
+	}
+
+	@Override
+	public String sign(String data, Applications app) {
+		
+		return data;
+	}
+
+	@Override
+	public ModelAndView authorize(UserInfo userInfo, Object app, String data,ModelAndView modelAndView) {
+		modelAndView.setViewName("authorize/tokenbased_jwt_sso_submint");
+		TokenBasedDetails details=(TokenBasedDetails)app;
+		modelAndView.addObject("action", details.getRedirectUri());
+		_logger.debug("jwt Token data : "+data);
+		
+		modelAndView.addObject("token",data);
+		
+		//return_to
+		
+		return modelAndView;
+	}
+
+}
@@ -0,0 +1,66 @@
+package org.maxkey.authz.token.endpoint.adapter;
+
+import java.util.Date;
+
+import org.maxkey.authz.endpoint.adapter.AbstractAuthorizeAdapter;
+import org.maxkey.constants.BOOLEAN;
+import org.maxkey.domain.UserInfo;
+import org.maxkey.domain.apps.TokenBasedDetails;
+import org.maxkey.util.DateUtils;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.web.servlet.ModelAndView;
+
+public class TokenBasedSimpleAdapter extends AbstractAuthorizeAdapter {
+	final static Logger _logger = LoggerFactory.getLogger(TokenBasedSimpleAdapter.class);
+	@Override
+	public String generateInfo(UserInfo userInfo,Object app) {
+		TokenBasedDetails details=(TokenBasedDetails)app;
+	
+		String tokenUsername="";
+		
+		if(BOOLEAN.isTrue(details.getUid())){
+			tokenUsername=userInfo.getId();
+		}else if(BOOLEAN.isTrue(details.getUsername())){
+			tokenUsername= userInfo.getUsername();	
+		}else if(BOOLEAN.isTrue(details.getEmail())){
+			tokenUsername=userInfo.getEmail();
+		}else if(BOOLEAN.isTrue(details.getWindowsAccount())){
+			tokenUsername= userInfo.getWindowsAccount();
+		}else if(BOOLEAN.isTrue(details.getEmployeeNumber())){
+			tokenUsername=userInfo.getEmployeeNumber();
+		}else if(BOOLEAN.isTrue(details.getDepartmentId())){
+			tokenUsername= userInfo.getDepartmentId();
+		}
+		
+		/*
+		 * use UTC date time format
+		 */
+		Date currentDate=new Date();
+		_logger.debug("UTC Local current date : "+DateUtils.toUtcLocal(currentDate));
+		_logger.debug("UTC  current Date : "+DateUtils.toUtc(currentDate));
+		
+		
+		String tokenString=tokenUsername+"@@"+DateUtils.toUtc(currentDate);
+		_logger.debug("Token : "+tokenString);
+		
+		return tokenString;
+	}
+
+	@Override
+	public String encrypt(String data, String algorithmKey, String algorithm) {
+		return super.encrypt(data, algorithmKey, algorithm);
+	}
+
+	@Override
+	public ModelAndView authorize(UserInfo userInfo, Object app, String data,ModelAndView modelAndView) {
+		modelAndView.setViewName("authorize/tokenbased_sso_submint");
+		TokenBasedDetails details=(TokenBasedDetails)app;
+		modelAndView.addObject("action", details.getRedirectUri());
+		
+		modelAndView.addObject("token",data);
+		
+		return modelAndView;
+	}
+
+}