D-Net

    private static Logger logger = Logger.getLogger(Authorization.class);

    List<String> registeredRoles = new ArrayList<String>(Arrays.asList("Super Administrator", "Portal Administrator", "Expert - Community",

            "Expert - Funder", "Curator - Claim", "Curator - Project", "Curator - Community", "Curator - Institution", "Cuthor", "Registered", "User Manager"));

    List<String> projectCuratorRoles = new ArrayList<String>(Arrays.asList("Curator - Project"));

    UserHandler userHandler = null;

    String originServer = null;

//        }

//    }

//

//        Claims claims = Jwts.parser()

//                .setSigningKey(DatatypeConverter.parseBase64Binary("my-very-secret"))

//                .parseClaimsJws(token).getBody();

    }

        UserInfo userInfo = userHandler.getUserInfo(token);

    }

        if (userInfo != null && userInfo.getEdu_person_entitlements() != null) {

        } else {

            logger.debug(" User has no Valid UserInfo");

            return false;

    }

    public boolean isProjectCurator(String token) {

        UserInfo userInfo = userHandler.getUserInfo(token);

        return isProjectCurator(userInfo);

    }

    public boolean hasValidOrigin(String origin) {

            return true;

        }

        logger.debug("Not valid origin. Origin server is \"" + origin + "\", but expected value is \"" + originServer + "\". If the expec cted value is not right, check properties file. ");

        this.registeredRoles = registeredRoles;

    }

    }

    }

    public List<String> getProjectCuratorRoles() {

        return projectCuratorRoles;

    }

                    .build();

        }

            int total = -1;

                                     @HeaderParam("X-XSRF-TOKEN") String token,

                                     @CookieParam("AccessToken") String  cookie,

                                     @Context HttpServletRequest request) {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            authorization.logStatus(token,cookie);

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

        }

        UserInfo userInfo = authorization.getUserHandler().getUserInfo(token);

            String userMail = userInfo.getEmail();

            int total = -1;

        }

//        logger.debug("Calling API for context with token " + token);

            int total = -1;

            if (contextId == null || contextId.isEmpty()) {

                                    @HeaderParam("X-XSRF-TOKEN") String token,

                                    @CookieParam("AccessToken") String  cookie,

                                    @Context HttpServletRequest request) {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            authorization.logStatus(token,cookie);

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .build();

        }

            int total = -1;

            if (resultId == null || resultId.isEmpty()) {

                                  @HeaderParam("X-XSRF-TOKEN") String token,

                                  @CookieParam("AccessToken") String  cookie,

                                  @Context HttpServletRequest request) {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

                                  @HeaderParam("X-XSRF-TOKEN") String token,

                                  @CookieParam("AccessToken") String  cookie,

                                  @Context HttpServletRequest request) {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

                                 @CookieParam("AccessToken") String  cookie,

                                  @Context HttpServletRequest request) {

        logger.debug("Header  \"Origin\" has value  " + origin);

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            logger.debug("User is not  authorized - Eroor 403");

                    .build();

        }

            logger.debug("User is authorized ! !");

            List<Claim> claims = null;

            int total = -1;

            try {

                claims = fetchClaimHandler.fetchAllClaims(limit, offset, keyword, orderby, descending, types,false);

                                     @HeaderParam("Origin") String origin,

                                     @CookieParam("AccessToken") String  cookie){

         if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)|| !authorization.hasValidOrigin(origin)){

             return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                     .type(MediaType.APPLICATION_JSON)

            try {

                if (authorization.isRegistered(userInfo)) {

                        if (claimHandler.deleteClaim(claimId)) {

                            deletedIds.add(claimId);

                        } else {

                             @HeaderParam("X-XSRF-TOKEN") String token,

                             @HeaderParam("Origin") String origin,

                             @CookieParam("AccessToken") String  cookie) {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token) || !authorization.hasValidOrigin(origin)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

                                  @HeaderParam("X-XSRF-TOKEN") String token,

                                  @HeaderParam("Origin") String origin,

                                  @CookieParam("AccessToken") String  cookie) {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)|| !authorization.hasValidOrigin(origin)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

                                     @HeaderParam("X-XSRF-TOKEN") String token,

                                     @HeaderParam("Origin") String origin,

                                     @CookieParam("AccessToken") String  cookie) {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)|| !authorization.hasValidOrigin(origin)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)|| !authorization.hasValidOrigin(origin)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

                    .build();

    @Produces(MediaType.APPLICATION_JSON)

    public Response fetchCommunities(@HeaderParam("X-XSRF-TOKEN") String token,

                                     @CookieParam("AccessToken") String  cookie) throws ISLookUpServiceException {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

    public Response fetchCommunityCategories(@PathParam("communityid") String communityid,

                                             @HeaderParam("X-XSRF-TOKEN") String token,

                                             @CookieParam("AccessToken") String  cookie) throws ISLookUpServiceException {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

    public Response fetchCategoryConcepts(@PathParam("categoryid") String categoryid,

                                          @HeaderParam("X-XSRF-TOKEN") String token,

                                          @CookieParam("AccessToken") String  cookie) throws ISLookUpServiceException {

        if(token == null || token.isEmpty() || cookie == null || cookie.isEmpty() || !cookie.equals(token)){

            return Response.status(Response.Status.FORBIDDEN).entity(compose403Message("Forbidden: You don't have permission to access. Maybe you are not registered."))

                    .type(MediaType.APPLICATION_JSON)

//         Authorization authorization =  context.getBean(Authorization.class);

//         UserHandler userHandler = context.getBean(UserHandler.class);

//         System.out.println(authorization.getAdminRoles());

    }

                String role = userInfo.getEdu_person_entitlements().get(i);

                logger.debug("AAI role: "+role);

                role = role.split(":")[role.split(":").length-1];

                role = role.replace("+"," ");

                logger.debug("Adding parsed role : "+role);

                userInfo.getEdu_person_entitlements().set(i,role);

    <bean id="authorization" class="eu.dnetlib.openaire.rest.Authorization" >

        <property name="registeredRoles" value="#{'${services.claims.authorization.registeredRoles}'.split(',')}"/>

        <property name="projectCuratorRoles" value="#{'${services.claims.authorization.projectCuratorRoles}'.split(',')}"/>

        <property name="userHandler" ref="userHandler"/>

        <property name="originServer" value="${services.claims.authorization.originServer}"/>