72 lines
3.8 KiB
Java
72 lines
3.8 KiB
Java
package eu.eudat.security.validators.twitter;
|
|
|
|
import eu.eudat.exceptions.NonValidTokenException;
|
|
import eu.eudat.exceptions.UnauthorisedException;
|
|
import eu.eudat.models.login.LoginInfo;
|
|
import eu.eudat.models.loginprovider.LoginProviderUser;
|
|
import eu.eudat.models.security.Principal;
|
|
import eu.eudat.security.validators.TokenValidator;
|
|
import eu.eudat.security.validators.TokenValidatorFactoryImpl;
|
|
import eu.eudat.services.ApiContext;
|
|
import eu.eudat.services.AuthenticationService;
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.core.env.Environment;
|
|
import org.springframework.social.linkedin.api.LinkedIn;
|
|
import org.springframework.social.linkedin.api.LinkedInProfile;
|
|
import org.springframework.social.linkedin.connect.LinkedInServiceProvider;
|
|
import org.springframework.social.oauth1.AuthorizedRequestToken;
|
|
import org.springframework.social.oauth1.OAuthToken;
|
|
import org.springframework.social.oauth2.AccessGrant;
|
|
import org.springframework.social.twitter.api.TwitterProfile;
|
|
import org.springframework.social.twitter.api.impl.TwitterTemplate;
|
|
import org.springframework.social.twitter.connect.TwitterServiceProvider;
|
|
import org.springframework.stereotype.Component;
|
|
|
|
import java.io.IOException;
|
|
import java.security.GeneralSecurityException;
|
|
import java.util.Map;
|
|
|
|
/**
|
|
* Created by ikalyvas on 1/11/2018.
|
|
*/
|
|
@Component("twitterTokenValidator")
|
|
public class TwitterTokenValidator implements TokenValidator {
|
|
|
|
private Environment environment;
|
|
private ApiContext apiContext;
|
|
private AuthenticationService authenticationService;
|
|
private TwitterServiceProvider twitterServiceProvider;
|
|
|
|
@Autowired
|
|
public TwitterTokenValidator(Environment environment, ApiContext apiContext, AuthenticationService authenticationService) {
|
|
this.environment = environment;
|
|
this.apiContext = apiContext;
|
|
this.authenticationService = authenticationService;
|
|
this.twitterServiceProvider = new TwitterServiceProvider(this.environment.getProperty("twitter.login.clientId"), this.environment.getProperty("twitter.login.clientSecret"));
|
|
}
|
|
|
|
@Override
|
|
public Principal validateToken(LoginInfo credentials) throws NonValidTokenException, IOException, GeneralSecurityException {
|
|
String verifier = (String) credentials.getData();
|
|
OAuthToken oAuthToken = new OAuthToken(credentials.getTicket(),verifier);
|
|
AuthorizedRequestToken authorizedRequestToken = new AuthorizedRequestToken(oAuthToken,verifier);
|
|
OAuthToken finalOauthToken = this.twitterServiceProvider.getOAuthOperations().exchangeForAccessToken(authorizedRequestToken,null);
|
|
TwitterTemplate twitterTemplate = new TwitterTemplate(this.environment.getProperty("twitter.login.clientId"), this.environment.getProperty("twitter.login.clientSecret"),finalOauthToken.getValue(),finalOauthToken.getSecret());
|
|
TwitterProfile profile = this.twitterServiceProvider.getApi(finalOauthToken.getValue(),finalOauthToken.getSecret()).userOperations().getUserProfile();
|
|
LoginProviderUser user = new LoginProviderUser();
|
|
|
|
Map values = twitterTemplate.getRestTemplate().getForObject("https://api.twitter.com/1.1/account/verify_credentials.json?include_email=true", Map.class);
|
|
if(values.get("email") == null) throw new UnauthorisedException("Cannot login user.Twitter account did not provide email");
|
|
user.setEmail((String) values.get("email"));
|
|
user.setIsVerified(true); //TODO
|
|
user.setName(profile.getName());
|
|
user.setProvider(TokenValidatorFactoryImpl.LoginProvider.TWITTER);
|
|
user.setSecret(finalOauthToken.getValue());
|
|
return this.authenticationService.Touch(user);
|
|
}
|
|
|
|
public OAuthToken getRequestToken() {
|
|
return this.twitterServiceProvider.getOAuthOperations().fetchRequestToken(this.environment.getProperty("twitter.login.redirect_uri"), null);
|
|
}
|
|
}
|