D-Net

package eu.dnetlib.openaire.user.security;

import com.google.common.base.Charsets;

import eu.dnetlib.openaire.user.MigrationUser;

import io.jsonwebtoken.Claims;

import io.jsonwebtoken.Jwts;

import io.jsonwebtoken.SignatureAlgorithm;

import org.apache.log4j.Logger;

import org.mitre.openid.connect.model.OIDCAuthenticationToken;

import org.mitre.openid.connect.model.UserInfo;

import java.io.UnsupportedEncodingException;

import java.net.URLEncoder;

import java.nio.charset.Charset;

import java.nio.charset.StandardCharsets;

import java.text.ParseException;

import java.util.Date;

/**

 * Created by kiatrop on 03/04/17.

 */

public class JWTGenerator {

    private static final Logger logger = Logger.getLogger(JWTGenerator.class);

    public static String generateToken(MigrationUser u, String secret) {

        Claims claims = Jwts.claims().setSubject(u.getUsername());

        claims.put("fullname", u.getFullname() + "");

        claims.put("userId", u.getId() + "");

        claims.put("email", u.getEmail() + "");

        claims.put("role", u.getRoleId());

        //expiration

        long nowMillis = System.currentTimeMillis();

        Date now = new Date(nowMillis);

        long ttlMillis = 1800000;

        long expMillis = nowMillis + ttlMillis;

        Date exp = new Date(expMillis);

        return Jwts.builder()

                .setClaims(claims)

                .setExpiration(exp)

                .signWith(SignatureAlgorithm.HS512, secret)

                .compact();

    }

    public static String generateToken(OIDCAuthenticationToken authOIDC, String secret) {

        try {

            Claims claims = Jwts.claims().setSubject(authOIDC.getUserInfo().getSub());

            claims.put("fullname", URLEncoder.encode(authOIDC.getUserInfo().getName(), "UTF-8") + "");

            claims.put("firstname", URLEncoder.encode(authOIDC.getUserInfo().getGivenName(), "UTF-8") + "");

            claims.put("lastname", URLEncoder.encode(authOIDC.getUserInfo().getFamilyName(), "UTF-8") + "");

            claims.put("email", authOIDC.getUserInfo().getEmail() + "");

            //TODO change to edu_person_scoped_affiliations

            //TODO THIS IS TEST

                        claims.put("edu_person_scoped_affiliations", "faculty");

            //TODO change to correct role

            //TODO THIS IS TEST

            claims.put("role", "2");

            //TODO remove

            //TODO THIS IS TEST

//            claims.put("fullname", URLEncoder.encode("Σοφία Μπαλτζή", "UTF-8") + "");

//            claims.put("firstname", URLEncoder.encode("Σοφία", "UTF-8") + "");

//            claims.put("lastname", URLEncoder.encode("Μπαλτζή", "UTF-8") + "");

//            claims.put("email", "sofie.mpl@gmail.com" + "");

//            claims.put("edu_person_scoped_affiliations", "faculty");

            Date exp = new Date(authOIDC.getIdToken().getJWTClaimsSet().getExpirationTime().getTime());

            //TODO DELETE LOGS

            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

            logger.info("fullName: " + authOIDC.getUserInfo().getName());

            logger.info("firstName: " + authOIDC.getUserInfo().getGivenName());

            logger.info("lastName: " + authOIDC.getUserInfo().getFamilyName());

            logger.info("email: " + authOIDC.getUserInfo().getEmail());

            //logger.info("Check everything");

            logger.info("locale: " + authOIDC.getUserInfo().getSource());

            //logger.info("edu_person_scoped_affiliations: " + authOIDC.getUserInfo().getSub());

            logger.info("eduPersonScopedAffiliations: " + "faculty");

            logger.info("expirationTime: " + exp);

            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

            return Jwts.builder()

                    .setClaims(claims)

                    .setExpiration(exp)

                    .signWith(SignatureAlgorithm.HS512, secret)

                    .compact();

        } catch (ParseException e) {

            e.printStackTrace();

            logger.error("JWT Parse Exception from getting Expiration Time ", e);

            return "error";

        } catch (UnsupportedEncodingException e) {

            e.printStackTrace();

            logger.error("UnsupportedEncodingException UTF-8 ", e);

            return "error";

        }

    }

    //TODO DELETE IF IT IS NOT NECESSARY

    public static String generateAccessToken(OIDCAuthenticationToken authOIDC, String secret) {

        Claims claims = Jwts.claims().setId(authOIDC.getAccessTokenValue());

        //TODO DELETE LOGS

        logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

        logger.info("access token: " + authOIDC.getAccessTokenValue());

        logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

        return Jwts.builder()

                .setClaims(claims)

                .signWith(SignatureAlgorithm.HS512, secret)

                .compact();

    }

    public static String generateToken(UserInfo user, String secret) {

        Claims claims = Jwts.claims().setSubject(user.getSub());

        claims.put("email", user.getEmail() + "");

        claims.put("role", "2");

        return Jwts.builder()

                .setClaims(claims)

                .signWith(SignatureAlgorithm.HS512, secret)

                .compact();

    }

}

// How to add it manually

//        long nowMillis = System.currentTimeMillis();

//        //This is my token

//        try {

//            String jwt = Jwts.builder()

//                    .setSubject("Argiro")

//                    .setExpiration(new Date(nowMillis+1800000))

//                    .claim("fullname", "Argiro Kokogianaki")

//                    .claim("id", "8")

//                    .claim("email", "argiro@gmail.com")

//                    .claim("role","2")

//                    .signWith(

//                            SignatureAlgorithm.HS512,

//                            "my-very-secret".getBytes("UTF-8")

//                    )

//                    .compact();