178 lines
8.0 KiB
Java
178 lines
8.0 KiB
Java
package eu.eudat.logic.services.operations.authentication;
|
|
|
|
import eu.eudat.data.entities.Credential;
|
|
import eu.eudat.data.entities.UserInfo;
|
|
import eu.eudat.data.entities.UserRole;
|
|
import eu.eudat.data.entities.UserToken;
|
|
import eu.eudat.exceptions.security.NullEmailException;
|
|
import eu.eudat.logic.builders.entity.CredentialBuilder;
|
|
import eu.eudat.logic.builders.entity.UserInfoBuilder;
|
|
import eu.eudat.logic.builders.entity.UserTokenBuilder;
|
|
import eu.eudat.logic.security.validators.TokenValidatorFactoryImpl;
|
|
import eu.eudat.logic.services.ApiContext;
|
|
import eu.eudat.models.data.login.Credentials;
|
|
import eu.eudat.models.data.loginprovider.LoginProviderUser;
|
|
import eu.eudat.models.data.security.Principal;
|
|
import eu.eudat.types.Authorities;
|
|
import org.json.JSONObject;
|
|
import org.slf4j.Logger;
|
|
import org.slf4j.LoggerFactory;
|
|
import org.springframework.core.env.Environment;
|
|
import org.springframework.transaction.annotation.Transactional;
|
|
|
|
import java.util.*;
|
|
|
|
public abstract class AbstractAuthenticationService implements AuthenticationService {
|
|
private static final Logger logger = LoggerFactory.getLogger(AbstractAuthenticationService.class);
|
|
|
|
protected ApiContext apiContext;
|
|
protected Environment environment;
|
|
|
|
public AbstractAuthenticationService(ApiContext apiContext, Environment environment) {
|
|
this.apiContext = apiContext;
|
|
this.environment = environment;
|
|
}
|
|
|
|
protected Date addADay(Date date) {
|
|
Date dt = new Date();
|
|
Calendar c = Calendar.getInstance();
|
|
c.setTime(dt);
|
|
c.add(Calendar.DATE, 1);
|
|
dt = c.getTime();
|
|
return dt;
|
|
}
|
|
|
|
abstract Principal Touch(UserToken token);
|
|
|
|
@Transactional
|
|
protected Credential autoCreateUser(String username, String password) {
|
|
if (!environment.getProperty("autouser.root.username").equals(username) || !environment.getProperty("autouser.root.password").equals(password))
|
|
return null;
|
|
|
|
UserInfo userInfo = this.apiContext.getOperationsContext().getBuilderFactory().getBuilder(UserInfoBuilder.class)
|
|
.name(username).email(environment.getProperty("autouser.root.email")).created(new Date())
|
|
.lastloggedin(new Date()).authorization_level((short) 1).usertype((short) 1)
|
|
.build();
|
|
|
|
userInfo = this.apiContext.getOperationsContext().getDatabaseRepository().getUserInfoDao().createOrUpdate(userInfo);
|
|
|
|
UserRole role = new UserRole();
|
|
role.setRole(Authorities.ADMIN.getValue());
|
|
role.setUserInfo(userInfo);
|
|
this.apiContext.getOperationsContext().getDatabaseRepository().getUserRoleDao().createOrUpdate(role);
|
|
|
|
Credential credential = this.apiContext.getOperationsContext().getBuilderFactory().getBuilder(CredentialBuilder.class)
|
|
.id(UUID.randomUUID()).userInfo(userInfo).publicValue(username).secret(password)
|
|
.provider((int) TokenValidatorFactoryImpl.LoginProvider.NATIVELOGIN.getValue())
|
|
.creationTime(new Date()).lastUpdateTime(new Date()).status(0)
|
|
.build();
|
|
|
|
return this.apiContext.getOperationsContext().getDatabaseRepository().getCredentialDao().createOrUpdate(credential);
|
|
}
|
|
|
|
public Principal Touch(UUID token) {
|
|
UserToken tokenEntry = this.apiContext.getOperationsContext().getDatabaseRepository().getUserTokenDao().find(token);
|
|
if (tokenEntry == null || tokenEntry.getExpiresAt().before(new Date())) return null;
|
|
|
|
return this.Touch(tokenEntry);
|
|
}
|
|
|
|
public void Logout(UUID token) {
|
|
UserToken tokenEntry = this.apiContext.getOperationsContext().getDatabaseRepository().getUserTokenDao().find(token);
|
|
this.apiContext.getOperationsContext().getDatabaseRepository().getUserTokenDao().delete(tokenEntry);
|
|
}
|
|
|
|
public Principal Touch(Credentials credentials) throws NullEmailException {
|
|
Credential credential = this.apiContext.getOperationsContext().getDatabaseRepository().getCredentialDao().getLoggedInCredentials(credentials.getUsername(), credentials.getSecret(), TokenValidatorFactoryImpl.LoginProvider.NATIVELOGIN.getValue());
|
|
|
|
if (credential == null && credentials.getUsername().equals(environment.getProperty("autouser.root.username"))) {
|
|
try {
|
|
credential = this.autoCreateUser(credentials.getUsername(), credentials.getSecret());
|
|
} catch (Exception e) {
|
|
logger.error(e.getMessage(), e);
|
|
return null;
|
|
}
|
|
}
|
|
if (credential == null) return null;
|
|
|
|
UserToken userToken = this.apiContext.getOperationsContext().getBuilderFactory().getBuilder(UserTokenBuilder.class)
|
|
.issuedAt(new Date()).user(credential.getUserInfo())
|
|
.token(UUID.randomUUID()).expiresAt(addADay(new Date()))
|
|
.build();
|
|
|
|
userToken = apiContext.getOperationsContext().getDatabaseRepository().getUserTokenDao().createOrUpdate(userToken);
|
|
|
|
return this.Touch(userToken);
|
|
|
|
}
|
|
|
|
public Principal Touch(LoginProviderUser profile) throws NullEmailException {
|
|
|
|
UserInfo userInfo = apiContext.getOperationsContext().getDatabaseRepository().getUserInfoDao().asQueryable().withHint("userInfo").where((builder, root) -> builder.equal(root.get("email"), profile.getEmail())).getSingleOrDefault();
|
|
|
|
if (userInfo == null) {
|
|
Optional<Credential> optionalCredential = Optional.ofNullable(apiContext.getOperationsContext().getDatabaseRepository().getCredentialDao()
|
|
.asQueryable().withHint("credentialUserInfo")
|
|
.where((builder, root) -> builder.and(builder.equal(root.get("provider"), profile.getProvider().getValue()), builder.equal(root.get("externalId"), profile.getId())))
|
|
.getSingleOrDefault());
|
|
userInfo = optionalCredential.map(Credential::getUserInfo).orElse(null);
|
|
}
|
|
|
|
final Credential credential = this.apiContext.getOperationsContext().getBuilderFactory().getBuilder(CredentialBuilder.class)
|
|
.id(UUID.randomUUID())
|
|
.creationTime(new Date())
|
|
.status(1)
|
|
.lastUpdateTime(new Date())
|
|
.provider(profile.getProvider().getValue())
|
|
.secret(profile.getSecret())
|
|
.externalId(profile.getId())
|
|
.build();
|
|
|
|
if (userInfo == null) {
|
|
userInfo = this.apiContext.getOperationsContext().getBuilderFactory().getBuilder(UserInfoBuilder.class)
|
|
.name(profile.getName()).verified_email(profile.getIsVerified())
|
|
.email(profile.getEmail()).created(new Date()).lastloggedin(new Date())
|
|
.additionalinfo("{\"data\":{\"avatar\":{\"url\":\"" + profile.getAvatarUrl() + "\"}}}")
|
|
.authorization_level((short) 1).usertype((short) 1)
|
|
.build();
|
|
|
|
userInfo = apiContext.getOperationsContext().getDatabaseRepository().getUserInfoDao().createOrUpdate(userInfo);
|
|
credential.setPublicValue(userInfo.getName());
|
|
credential.setUserInfo(userInfo);
|
|
apiContext.getOperationsContext().getDatabaseRepository().getCredentialDao().createOrUpdate(credential);
|
|
|
|
UserRole role = new UserRole();
|
|
role.setRole(Authorities.USER.getValue());
|
|
role.setUserInfo(userInfo);
|
|
apiContext.getOperationsContext().getDatabaseRepository().getUserRoleDao().createOrUpdate(role);
|
|
|
|
} else {
|
|
Map<String, Object> additionalInfo = userInfo.getAdditionalinfo() != null ?
|
|
new JSONObject(userInfo.getAdditionalinfo()).toMap() : new HashMap<>();
|
|
additionalInfo.put("avatarUrl", profile.getAvatarUrl());
|
|
userInfo.setLastloggedin(new Date());
|
|
userInfo.setAdditionalinfo(new JSONObject(additionalInfo).toString());
|
|
Set<Credential> credentials = userInfo.getCredentials();
|
|
if (credentials.contains(credential)) {
|
|
Credential oldCredential = credentials.stream().filter(item -> credential.getProvider().equals(item.getProvider())).findFirst().get();
|
|
credential.setId(oldCredential.getId());
|
|
} else {
|
|
credential.setUserInfo(userInfo);
|
|
credential.setId(UUID.randomUUID());
|
|
credential.setPublicValue(userInfo.getName());
|
|
apiContext.getOperationsContext().getDatabaseRepository().getCredentialDao().createOrUpdate(credential);
|
|
userInfo.getCredentials().add(credential);
|
|
}
|
|
userInfo = apiContext.getOperationsContext().getDatabaseRepository().getUserInfoDao().createOrUpdate(userInfo);
|
|
}
|
|
|
|
UserToken userToken = this.apiContext.getOperationsContext().getBuilderFactory().getBuilder(UserTokenBuilder.class)
|
|
.token(UUID.randomUUID()).user(userInfo)
|
|
.expiresAt(addADay(new Date())).issuedAt(new Date())
|
|
.build();
|
|
|
|
apiContext.getOperationsContext().getDatabaseRepository().getUserTokenDao().createOrUpdate(userToken);
|
|
return Touch(userToken.getToken());
|
|
}
|
|
}
|