Java OAuth类代码示例

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
public static void writeOAuthJsonResponse(HttpServletResponse response, OAuthResponse oAuthResponse) {

        final int responseStatus = oAuthResponse.getResponseStatus();
        try {

            final Map<String, String> headers = oAuthResponse.getHeaders();
            for (String key : headers.keySet()) {
                response.addHeader(key, headers.get(key));
            }
            // CORS setting
            response.setHeader("Access-Control-Allow-Origin", "*");

            response.setContentType(OAuth.ContentType.JSON);    //json
            response.setStatus(responseStatus);

            final PrintWriter out = response.getWriter();
            out.print(oAuthResponse.getBody());
            out.flush();
        } catch (IOException e) {
            throw new IllegalStateException("Write OAuthResponse error", e);
        }
    }
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
protected AuthenticationToken createToken(ServletRequest request, ServletResponse response) throws Exception {

    HttpServletRequest httpRequest = (HttpServletRequest) request;

    final String accessToken = getAccessToken(httpRequest);
    final AccessToken token = rsService.loadAccessTokenByTokenId(accessToken);

    String username = null;
    if (token != null) {
        LOGGER.debug("Set username and clientId from AccessToken: {}", token);
        username = token.username();
        httpRequest.setAttribute(OAuth.OAUTH_CLIENT_ID, token.clientId());
    } else {
        LOGGER.debug("Not found AccessToken by access_token: {}", accessToken);
    }

    return new OAuth2Token(accessToken, resourceId)
            .setUserId(username);
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
protected AuthenticationToken createToken(ServletRequest request, ServletResponse response) throws Exception {

    HttpServletRequest httpRequest = (HttpServletRequest) request;

    final String accessToken = httpRequest.getParameter(OAuth.OAUTH_ACCESS_TOKEN);
    final AccessToken token = rsService.loadAccessTokenByTokenId(accessToken);

    String username = null;
    if (token != null) {
        username = token.username();
        logger.debug("Set username[{}] and clientId[{}] to request that from AccessToken: {}", username, token.clientId(), token);
        httpRequest.setAttribute(OAuth.OAUTH_CLIENT_ID, token.clientId());
    } else {
        logger.debug("Not found AccessToken by access_token: {}", accessToken);
    }

    return new OAuth2Token(accessToken, resourceId)
            .setUserId(username);
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
public List<Principal> getPrincipals(String requestId) throws WebApiClientException {
    List<Principal> result = null;
    try {
        OAuthClient oAuthClient = new OAuthClient(new URLConnectionClient());
        String pathWithParams = getPathWithParams("/service/hpa/api/delegate/" + getOauthSessionId(), requestId);

        OAuthClientRequest bearerClientRequest = new OAuthBearerClientRequest(new URL(config.getBaseUrl(), pathWithParams).toString()).setAccessToken(accessToken).buildQueryMessage();
        bearerClientRequest.setHeader("X-AsiointivaltuudetAuthorization", getAuthorizationValue(bearerClientRequest.getLocationUri().substring(config.getBaseUrl().toString().length())));

        OAuthResourceResponse resourceResponse = oAuthClient.resource(bearerClientRequest, OAuth.HttpMethod.GET, OAuthResourceResponse.class);

        JavaType resultType = mapper.getTypeFactory().constructParametricType(ArrayList.class, Principal.class);
        return mapper.readValue(resourceResponse.getBody(), resultType);
    } catch (IOException | OAuthSystemException | OAuthProblemException e) {
        handleException(e);
    }
    return result;
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
public Authorization getAuthorization(String principalId, String requestId, String... issues)
        throws WebApiClientException {
    Authorization result = null;
    try {
        OAuthClient oAuthClient = new OAuthClient(new URLConnectionClient());
        String pathWithParams = getPathWithParams("/service/hpa/api/authorization/" + getOauthSessionId() + "/" + principalId, requestId, issues);

        OAuthClientRequest bearerClientRequest = new OAuthBearerClientRequest(new URL(config.getBaseUrl(), pathWithParams).toString()).setAccessToken(accessToken).buildQueryMessage();
        bearerClientRequest.setHeader("X-AsiointivaltuudetAuthorization", getAuthorizationValue(bearerClientRequest.getLocationUri().substring(config.getBaseUrl().toString().length())));

        OAuthResourceResponse resourceResponse = oAuthClient.resource(bearerClientRequest, OAuth.HttpMethod.GET, OAuthResourceResponse.class);

        result = mapper.readValue(resourceResponse.getBody(), Authorization.class);
    } catch (IOException | OAuthProblemException | OAuthSystemException e) {
        handleException(e);
    }
    return result;
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
public AuthorizationList getAuthorizationList(String principalId, String requestId)
        throws WebApiClientException {
    AuthorizationList result = null;
    try {
        OAuthClient oAuthClient = new OAuthClient(new URLConnectionClient());
        String pathWithParams = getPathWithParams("/service/hpa/api/authorizationlist/" + getOauthSessionId() + "/" + principalId, requestId);

        OAuthClientRequest bearerClientRequest = new OAuthBearerClientRequest(new URL(config.getBaseUrl(), pathWithParams).toString()).setAccessToken(accessToken).buildQueryMessage();
        bearerClientRequest.setHeader("X-AsiointivaltuudetAuthorization", getAuthorizationValue(bearerClientRequest.getLocationUri().substring(config.getBaseUrl().toString().length())));

        OAuthResourceResponse resourceResponse = oAuthClient.resource(bearerClientRequest, OAuth.HttpMethod.GET, OAuthResourceResponse.class);

        result = mapper.readValue(resourceResponse.getBody(), AuthorizationList.class);
    } catch (IOException | OAuthProblemException | OAuthSystemException e) {
        handleException(e);
    }
    return result;
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
public String getAuthorizationToken(String principalId, String requestId, String... issues) throws WebApiClientException {
    try {
        OAuthClient oAuthClient = new OAuthClient(new URLConnectionClient());
        String pathWithParams = getPathWithParams("/service/hpa/api/authorization/jwt/" + getOauthSessionId() + "/" + principalId, requestId, issues);

        OAuthClientRequest bearerClientRequest = new OAuthBearerClientRequest(new URL(config.getBaseUrl(), pathWithParams).toString()).setAccessToken(accessToken).buildQueryMessage();
        bearerClientRequest.setHeader("X-AsiointivaltuudetAuthorization", getAuthorizationValue(bearerClientRequest.getLocationUri().substring(config.getBaseUrl().toString().length())));

        OAuthResourceResponse resourceResponse = oAuthClient.resource(bearerClientRequest, OAuth.HttpMethod.GET, OAuthResourceResponse.class);
        return resourceResponse.getBody();
    } catch (IOException | OAuthProblemException | OAuthSystemException e) {
        handleException(e);
    }
    handleException(new WebApiClientException("Could not get Authorization token"));
    // should not get here
    return null;
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
public String getAuthorizationListToken(String principalId, String requestId) throws WebApiClientException {
    try {
        OAuthClient oAuthClient = new OAuthClient(new URLConnectionClient());
        String pathWithParams = getPathWithParams("/service/hpa/api/authorizationlist/jwt/" + getOauthSessionId() + "/" + principalId, requestId);

        OAuthClientRequest bearerClientRequest = new OAuthBearerClientRequest(new URL(config.getBaseUrl(), pathWithParams).toString()).setAccessToken(accessToken).buildQueryMessage();
        bearerClientRequest.setHeader("X-AsiointivaltuudetAuthorization", getAuthorizationValue(bearerClientRequest.getLocationUri().substring(config.getBaseUrl().toString().length())));

        OAuthResourceResponse resourceResponse = oAuthClient.resource(bearerClientRequest, OAuth.HttpMethod.GET, OAuthResourceResponse.class);

        return resourceResponse.getBody();
    } catch (IOException | OAuthProblemException | OAuthSystemException e) {
        handleException(e);
    }
    handleException(new WebApiClientException("Could not get AuthorizationList token"));
    // should not get here
    return null;
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
public List<YpaOrganization> getRolesResponse(String pathWithParams) throws WebApiClientException {
    List<YpaOrganization> result = null;
    OAuthClient oAuthClient = new OAuthClient(new URLConnectionClient());
    try {
        OAuthClientRequest bearerClientRequest = new OAuthBearerClientRequest(new URL(config.getBaseUrl(), pathWithParams).toString()).setAccessToken(accessToken).buildQueryMessage();
        bearerClientRequest.setHeader("X-AsiointivaltuudetAuthorization", getAuthorizationValue(bearerClientRequest.getLocationUri().substring(config.getBaseUrl().toString().length())));

        OAuthResourceResponse resourceResponse = oAuthClient.resource(bearerClientRequest, OAuth.HttpMethod.GET, OAuthResourceResponse.class);

        JavaType resultType = mapper.getTypeFactory().constructParametricType(ArrayList.class, YpaOrganization.class);
        result = mapper.readValue(resourceResponse.getBody(), resultType);
    } catch (IOException | OAuthProblemException | OAuthSystemException e) {
        handleException(e);
    }
    return result;
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
/**
 * oAuth认证失败时的输出
 * @param res
 * @throws OAuthSystemException
 * @throws IOException
 */
private void oAuthFaileResponse(HttpServletResponse res) throws OAuthSystemException, IOException {
    OAuthResponse oauthResponse = OAuthRSResponse
            .errorResponse(HttpServletResponse.SC_UNAUTHORIZED)
            .setRealm(Constants.RESOURCE_SERVER_NAME)
            .setError(OAuthError.ResourceResponse.INVALID_TOKEN)
            .buildHeaderMessage();
    HttpHeaders responseHeaders = new HttpHeaders();
    responseHeaders.add("Content-Type", "application/json; charset=utf-8");
    Gson gson = new GsonBuilder().create();
    res.addHeader(OAuth.HeaderType.WWW_AUTHENTICATE, oauthResponse.getHeader(OAuth.HeaderType.WWW_AUTHENTICATE));
    PrintWriter writer = res.getWriter();
    writer.write(gson.toJson(getStatus(HttpStatus.UNAUTHORIZED.value(),Constants.INVALID_ACCESS_TOKEN)));
    writer.flush();
    writer.close();
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@Override
protected boolean onAccessDenied(ServletRequest request, ServletResponse response)
    throws Exception {
  String error = request.getParameter(OAuthError.OAUTH_ERROR);
  String description = request.getParameter(OAuthError.OAUTH_ERROR_DESCRIPTION);
  if (!OAuthUtils.isEmpty(error))
    return processAuthorizationError(request, response, error, description);
  if (!OAuthUtils.isEmpty(state) && !state.equals(request.getParameter(OAuth.OAUTH_STATE)))
    return processAuthorizationError(request, response, OAuthError.CodeResponse.SERVER_ERROR,
        "server response state inconsistent with sent state");
  Subject subject = getSubject(request, response);
  if (!subject.isAuthenticated()) {
    if (OAuthUtils.isEmpty(request.getParameter(OAuth.OAUTH_CODE))) {
      saveRequestAndRedirectToLogin(request, response);
      return false;
    }
  }
  return executeLogin(request, response);
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
/**
 * create authentication info, by default, this create
 * SimpleAuthenticationInfo with principals using access token as primary
 * principal and a map contains attributes {@link OAuth#OAUTH_ACCESS_TOKEN}
 * and {@link OAuth#OAUTH_EXPIRES_IN} and {@link OAuth#OAUTH_REFRESH_TOKEN}
 * and {@link OAuthConstants#OAUTH_TOKEN_TIME} and
 * {@link OAuthConstants#OAUTH_SCOPES}, the credentials set to byte array of
 * access token. if sub-class override requestAttributes and returned
 * attributes contains key {@link OAuthConstants#OAUTH_PRINCIPAL}, then the
 * value will be used as primary principal.
 * 
 * @param clientToken
 *          the client token
 * @param oAuthResponse
 *          OAuth access token response
 * @return authentication info
 */
protected AuthenticationInfo buildAuthenticationInfo(OAuthClientToken clientToken,
    OAuthAccessTokenResponse oAuthResponse) {
  String accessToken = oAuthResponse.getAccessToken();
  Date tokenTime = new Date();
  Map<String, Object> attributes = requestAttributes(oAuthResponse);
  if (attributes == null)
    attributes = new HashMap<String, Object>();
  else
    attributes = new HashMap<String, Object>(attributes);
  List<Object> principals = new ArrayList<Object>();
  if (attributes.containsKey(OAuthConstants.OAUTH_PRINCIPAL))
    principals.add(attributes.get(OAuthConstants.OAUTH_PRINCIPAL));
  else
    principals.add(accessToken);
  attributes.put(OAuth.OAUTH_ACCESS_TOKEN, accessToken);
  attributes.put(OAuth.OAUTH_EXPIRES_IN, oAuthResponse.getExpiresIn());
  attributes.put(OAuth.OAUTH_REFRESH_TOKEN, oAuthResponse.getRefreshToken());
  attributes.put(OAuthConstants.OAUTH_TOKEN_TIME, tokenTime);
  attributes.put(OAuthConstants.OAUTH_SCOPES, clientToken.getScopes());
  principals.add(attributes);
  PrincipalCollection collection = new SimplePrincipalCollection(principals, getName());
  return new SimpleAuthenticationInfo(collection, accessToken);
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@GetMapping("/login")
public String login(HttpServletRequest request) {
    try {
        OAuthClientRequest oauthResponse = OAuthClientRequest
                .authorizationLocation(authorize_url)
                .setResponseType(OAuth.OAUTH_CODE)
                .setClientId(clientId)
                .setRedirectURI(server + OAUTH_WEIBO_CALLBACK)
                .setState(STATE_LOGIN)
                .buildQueryMessage();
        WebUtils.setSessionAttribute(request, "state", STATE_LOGIN);
        return "redirect:"+oauthResponse.getLocationUri();
    } catch (OAuthSystemException e) {
        e.printStackTrace();
    }

    return "redirect:/500";
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
@PostMapping("/login")
public String login(HttpServletRequest request) {
    String username = request.getParameter("username");
    String password = request.getParameter("password");
    String redirectURI = request.getParameter(OAuth.OAUTH_REDIRECT_URI);

    UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username, password);
    authRequest.setDetails(authenticationDetailsSource.buildDetails(request));
    try {
        Authentication authentication = authenticationManager.authenticate(authRequest);
        if (authentication != null && authentication.isAuthenticated()) {
            SecurityContextHolder.getContext().setAuthentication(authentication);
        }
    } catch (BadCredentialsException er) {
        // nothing here
    }

    StringBuilder sb = new StringBuilder();
    sb.append("/oauth2/authorize").append("?")
            .append(OAuth.OAUTH_CLIENT_ID).append("=").append(request.getParameter(OAuth.OAUTH_CLIENT_ID)).append("&")
            .append(OAuth.OAUTH_RESPONSE_TYPE).append("=").append(request.getParameter(OAuth.OAUTH_RESPONSE_TYPE)).append("&")
            .append(OAuth.OAUTH_SCOPE).append("=").append(request.getParameter(OAuth.OAUTH_SCOPE)).append("&")
            .append(OAuth.OAUTH_STATE).append("=").append(request.getParameter(OAuth.OAUTH_STATE)).append("&")
            .append(OAuth.OAUTH_REDIRECT_URI).append("=").append(request.getParameter(OAuth.OAUTH_REDIRECT_URI));
    return "redirect:" + sb.toString();
}
 

import org.apache.oltu.oauth2.common.OAuth; //导入依赖的package包/类
public void send(Activity activity, String jSONBody) throws OAuthSystemException, OAuthProblemException {
    OAuthClientRequest bearerRequest = new OAuthBearerClientRequest(RUNKEEPER_API_URL + "/fitnessActivities")
            .setAccessToken(accessToken).buildQueryMessage();
    bearerRequest.setBody(jSONBody);
    bearerRequest.setHeader(OAuth.HeaderType.CONTENT_TYPE, NEW_ACTIVITY_CONTENT_TYPE);

    // Seems not to be needed although it's specified here: http://developer.runkeeper.com/healthgraph/example-api-calls
    //bearerRequest.setHeader("accept", "application/vnd.com.runkeeper.FitnessActivity+json");
    //bearerRequest.setHeader("Content-Length", "" + jSONBody.length());

    ConnectivityManager connMgr = (ConnectivityManager)
            activity.getSystemService(activity.getBaseContext().CONNECTIVITY_SERVICE);
    NetworkInfo networkInfo = connMgr.getActiveNetworkInfo();

    if (networkInfo != null && networkInfo.isConnected()) {
        FetchContent fetcher =  new FetchContent(bearerRequest);
        fetcher.execute(MainActivity.AUTHORIZATION_URL);
    } else { }
}