Apereo-Learning-Analytics-Initiative / OpenLRW

import io.jsonwebtoken.Claims;

import io.jsonwebtoken.Jwts;

import io.jsonwebtoken.SignatureAlgorithm;

import java.util.UUID;

import java.util.stream.Collectors;

import org.apache.commons.lang3.StringUtils;

import org.joda.time.DateTime;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.stereotype.Component;

import unicon.matthews.security.config.JwtSettings;

import unicon.matthews.security.model.UserContext;

/**

 * Factory class that should be always used to create {@link JwtToken}.

 * 

 * @author vladimir.stankovic

 *

 * May 31, 2016

 */

@Component

public class JwtTokenFactory {

    private final JwtSettings settings;

    /**

     * Factory method for issuing new JWT Tokens.

     * 

     * @param username

     * @param roles

     * @return

     */

    public AccessJwtToken createAccessJwtToken(UserContext userContext) {

        if (StringUtils.isBlank(userContext.getTenantId())) 

            throw new IllegalArgumentException("Cannot create JWT Token without tenantId");

        if (StringUtils.isBlank(userContext.getOrgId())) 

            throw new IllegalArgumentException("Cannot create JWT Token without orgId");

        if (userContext.getAuthorities() == null || userContext.getAuthorities().isEmpty()) 

            throw new IllegalArgumentException("User doesn't have any privileges");

        Claims claims = Jwts.claims().setSubject(userContext.getOrgId());

        claims.put("scopes", userContext.getAuthorities().stream().map(s -> s.toString()).collect(Collectors.toList()));

        claims.put("tenant", userContext.getTenantId());

        DateTime currentTime = new DateTime();

        String token = Jwts.builder()

          .setClaims(claims)

          .setIssuer(settings.getTokenIssuer())

          .setIssuedAt(currentTime.toDate())

          .setExpiration(currentTime.plusMinutes(settings.getTokenExpirationTime()).toDate())

          .signWith(SignatureAlgorithm.HS512, settings.getTokenSigningKey())

        .compact();

        return new AccessJwtToken(token, claims);

    }

    public JwtToken createRefreshToken(UserContext userContext) {

      if (StringUtils.isBlank(userContext.getTenantId())) 

        throw new IllegalArgumentException("Cannot create JWT Token without tenantId");

      if (StringUtils.isBlank(userContext.getOrgId())) 

        throw new IllegalArgumentException("Cannot create JWT Token without orgId");

        Claims claims = Jwts.claims().setSubject(userContext.getOrgId());

        claims.put("scopes", userContext.getAuthorities().stream().map(s -> s.toString()).collect(Collectors.toList()));

        claims.put("tenant", userContext.getTenantId());

        String token = Jwts.builder()

          .setClaims(claims)

          .setIssuer(settings.getTokenIssuer())

          .setId(UUID.randomUUID().toString())

          .setIssuedAt(currentTime.toDate())

          .setExpiration(currentTime.plusMinutes(settings.getRefreshTokenExpTime()).toDate())

          .signWith(SignatureAlgorithm.HS512, settings.getTokenSigningKey())

        .compact();

        return new AccessJwtToken(token, claims);

    }

}