Apereo-Learning-Analytics-Initiative / OpenLRW

@RestController

public class RefreshTokenEndpoint {

    @Autowired private JwtTokenFactory tokenFactory;

    @Autowired private JwtSettings jwtSettings;

    @Autowired private OrgService orgService;

    @Autowired private TokenVerifier tokenVerifier;

    @Autowired @Qualifier("jwtHeaderTokenExtractor") private TokenExtractor tokenExtractor;

    @RequestMapping(value="/api/auth/token", method=RequestMethod.GET, produces={ MediaType.APPLICATION_JSON_VALUE })

    public @ResponseBody JwtToken refreshToken(HttpServletRequest request, HttpServletResponse response) throws IOException, ServletException {

        String tokenPayload = tokenExtractor.extract(request.getHeader(WebSecurityConfig.JWT_TOKEN_HEADER_PARAM));

        RawAccessJwtToken rawToken = new RawAccessJwtToken(tokenPayload);

        RefreshToken refreshToken = RefreshToken.create(rawToken, jwtSettings.getTokenSigningKey()).orElseThrow(() -> new InvalidJwtToken());

        String jti = refreshToken.getJti();

        if (!tokenVerifier.verify(jti)) {

            throw new InvalidJwtToken();

        }

        String orgId = refreshToken.getSubject();

        String tenantId = refreshToken.getClaims().getBody().get("tenant", String.class);

        Org org;

        try {

          org = orgService.findByTenantIdAndOrgSourcedId(tenantId, orgId);

        } 

        catch (OrgNotFoundException e) {

          throw new AuthenticationCredentialsNotFoundException(e.getMessage());

        }

        List<GrantedAuthority> authorities = Collections.singletonList(new SimpleGrantedAuthority("ROLE_ORG_ADMIN"));        

        UserContext userContext = UserContext.create(org.getMetadata().get(Vocabulary.TENANT), org.getSourcedId(), authorities);        

        return tokenFactory.createAccessJwtToken(userContext);