Java CommonHelper.addParameter方法代码示例

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
private String buildCallbackUrlForAuthorizationCodeResponseType(final Authentication authentication,
                                                                final Service service, final String redirectUri,
                                                                final TicketGrantingTicket ticketGrantingTicket) {

    final OAuthCode code = this.oAuthCodeFactory.create(service, authentication, ticketGrantingTicket);
    LOGGER.debug("Generated OAuth code: [{}]", code);
    this.ticketRegistry.addTicket(code);

    final String state = authentication.getAttributes().get(OAuth20Constants.STATE).toString();
    final String nonce = authentication.getAttributes().get(OAuth20Constants.NONCE).toString();

    String callbackUrl = redirectUri;
    callbackUrl = CommonHelper.addParameter(callbackUrl, OAuth20Constants.CODE, code.getId());
    if (StringUtils.isNotBlank(state)) {
        callbackUrl = CommonHelper.addParameter(callbackUrl, OAuth20Constants.STATE, state);
    }
    if (StringUtils.isNotBlank(nonce)) {
        callbackUrl = CommonHelper.addParameter(callbackUrl, OAuth20Constants.NONCE, nonce);
    }
    return callbackUrl;
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
private String buildCallbackUrlForAuthorizationCodeResponseType(Authentication authentication, Service service, String redirectUri, TicketGrantingTicket ticketGrantingTicket) {
	OAuthCode code = this.oAuthCodeFactory.create(service, authentication, ticketGrantingTicket);
	LOGGER.debug("Generated OAuth code: [{}]", code);
	this.ticketRegistry.addTicket(code);
	String state = authentication.getAttributes().get("state").toString();
	String nonce = authentication.getAttributes().get("nonce").toString();
	String callbackUrl = CommonHelper.addParameter(redirectUri, "code", code.getId());
	if(StringUtils.isNotBlank(state)) {
		callbackUrl = CommonHelper.addParameter(callbackUrl, "state", state);
	}

	if(StringUtils.isNotBlank(nonce)) {
		callbackUrl = CommonHelper.addParameter(callbackUrl, "nonce", nonce);
	}

	return callbackUrl;
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
/**
 * Redirect to approve view model and view.
 *
 * @param ctx the ctx
 * @param svc the svc
 * @return the model and view
 */
protected ModelAndView redirectToApproveView(final J2EContext ctx, final OAuthRegisteredService svc) {
    String callbackUrl = ctx.getFullRequestURL();
    callbackUrl = CommonHelper.addParameter(callbackUrl, OAuth20Constants.BYPASS_APPROVAL_PROMPT, "true");
    LOGGER.debug("callbackUrl: [{}]", callbackUrl);

    final Map<String, Object> model = new HashMap<>();
    model.put("service", svc);
    model.put("callbackUrl", callbackUrl);
    model.put("serviceName", svc.getName());
    model.put("deniedApprovalUrl", svc.getAccessStrategy().getUnauthorizedRedirectUrl());

    prepareApprovalViewModel(model, ctx, svc);
    return getApprovalModelAndView(model);
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
/**
 * Adds the token to the URL in question. If we require appsecret_proof, then this method
 * will also add the appsecret_proof parameter to the URL, as Facebook expects.
 *
 * @param url the URL to modify
 * @param accessToken the token we're passing back and forth
 * @return url with additional parameter(s)
 */
protected String addExchangeToken(final String url, final OAuth2AccessToken accessToken) {
    final FacebookProfileDefinition profileDefinition = configuration.getProfileDefinition();
    String computedUrl = url;
    if (configuration.isUseAppsecretProof()) {
        computedUrl = oAuthProfileUrlCalculator.computeAppSecretProof(computedUrl, accessToken, configuration);
    }
    return CommonHelper.addParameter(computedUrl, EXCHANGE_TOKEN_PARAMETER, accessToken.getAccessToken());
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
/**
 * The code in this method is based on this blog post: https://www.sammyk.me/the-single-most-important-way-to-make-your-facebook-app-more-secure
 * and this answer: https://stackoverflow.com/questions/7124735/hmac-sha256-algorithm-for-signature-calculation
 *
 * @param url the URL to which we're adding the proof
 * @param token the application token we pass back and forth
 * @param configuration the current configuration
 * @return URL with the appsecret_proof parameter added
 */
public String computeAppSecretProof(final String url, final OAuth2AccessToken token, final OAuth20Configuration configuration) {
    try {
        Mac sha256_HMAC = Mac.getInstance("HmacSHA256");
        SecretKeySpec secret_key = new SecretKeySpec(configuration.getSecret().getBytes("UTF-8"), "HmacSHA256");
        sha256_HMAC.init(secret_key);
        String proof = org.apache.commons.codec.binary.Hex.encodeHexString(sha256_HMAC.doFinal(token.getAccessToken().getBytes("UTF-8")));
        final String computedUrl = CommonHelper.addParameter(url, APPSECRET_PARAMETER, proof);
        return computedUrl;
    } catch (final Exception e) {
        throw new TechnicalException("Unable to compute appsecret_proof", e);
    }
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
private HttpAction handleInvalidCredentials(final WebContext context, final String username, String message, String errorMessage, int errorCode) throws HttpAction {
    // it's an AJAX request -> unauthorized (instead of a redirection)
    if (getAjaxRequestResolver().isAjax(context)) {
        logger.info("AJAX request detected -> returning " + errorCode);
        return HttpAction.status("AJAX request -> " + errorCode, errorCode, context);
    } else {
        String redirectionUrl = CommonHelper.addParameter(this.loginUrl, this.usernameParameter, username);
        redirectionUrl = CommonHelper.addParameter(redirectionUrl, ERROR_PARAMETER, errorMessage);
        logger.debug("redirectionUrl: {}", redirectionUrl);
        logger.debug(message);
        return HttpAction.redirect(message, context, redirectionUrl);
    }
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
@Override
protected FacebookProfile retrieveUserProfileFromToken(final OAuth2AccessToken accessToken) throws HttpAction {
    String body = sendRequestForData(accessToken, getProfileUrl(accessToken));
    if (body == null) {
        throw new HttpCommunicationException("Not data found for accessToken: " + accessToken);
    }
    final FacebookProfile profile = extractUserProfile(body);
    addAccessTokenToProfile(profile, accessToken);
    if (profile != null && this.requiresExtendedToken) {
        String url = CommonHelper.addParameter(EXCHANGE_TOKEN_URL, OAuthConstants.CLIENT_ID, getKey());
        url = CommonHelper.addParameter(url, OAuthConstants.CLIENT_SECRET, getSecret());
        url = addExchangeToken(url, accessToken);
        final OAuthRequest request = createOAuthRequest(url);
        final long t0 = System.currentTimeMillis();
        final Response response = request.send();
        final int code = response.getCode();
        body = response.getBody();
        final long t1 = System.currentTimeMillis();
        logger.debug("Request took: " + (t1 - t0) + " ms for: " + url);
        logger.debug("response code: {} / response body: {}", code, body);
        if (code == 200) {
            logger.debug("Retrieve extended token from  {}", body);
            final OAuth2AccessToken extendedAccessToken = ((DefaultApi20) getApi()).getAccessTokenExtractor().extract(body);
            logger.debug("Extended token: {}", extendedAccessToken);
            addAccessTokenToProfile(profile, extendedAccessToken);
        } else {
            logger.error("Cannot get extended token: {} / {}", code, body);
        }
    }
    return profile;
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
/**
 * The code in this method is based on this blog post: https://www.sammyk.me/the-single-most-important-way-to-make-your-facebook-app-more-secure
 * and this answer: https://stackoverflow.com/questions/7124735/hmac-sha256-algorithm-for-signature-calculation
 *
 * @param url the URL to which we're adding the proof
 * @param token the application token we pass back and forth
 * @return URL with the appsecret_proof parameter added
 */
protected String computeAppSecretProof(String url, OAuth2AccessToken token) {
    try {
        Mac sha256_HMAC = Mac.getInstance("HmacSHA256");
        SecretKeySpec secret_key = new SecretKeySpec(getSecret().getBytes("UTF-8"), "HmacSHA256");
        sha256_HMAC.init(secret_key);
        String proof = org.apache.commons.codec.binary.Hex.encodeHexString(sha256_HMAC.doFinal(token.getAccessToken().getBytes("UTF-8")));
        url = CommonHelper.addParameter(url, APPSECRET_PARAMETER, proof);
        return url;
    } catch (final Exception e) {
        throw new TechnicalException("Unable to compute appsecret_proof", e);
    }
}
 

import org.pac4j.core.util.CommonHelper; //导入方法依赖的package包/类
/**
 * Adds the token to the URL in question. If we require appsecret_proof, then this method
 * will also add the appsecret_proof parameter to the URL, as Facebook expects.
 *
 * @param url the URL to modify
 * @param accessToken the token we're passing back and forth
 * @return url with additional parameter(s)
 */
protected String addExchangeToken(String url, OAuth2AccessToken accessToken) {
    if (this.useAppsecretProof) {
        url = computeAppSecretProof(url, accessToken);
    }
    return CommonHelper.addParameter(url, EXCHANGE_TOKEN_PARAMETER, accessToken.getAccessToken());
}