D-Net

package eu.dnetlib.openaire.usermanagement;

import org.apache.commons.io.IOUtils;

import org.apache.http.HttpEntity;

import org.apache.http.HttpHeaders;

import org.apache.http.HttpResponse;

import org.apache.http.NameValuePair;

import org.apache.http.client.entity.UrlEncodedFormEntity;

import org.apache.http.client.methods.HttpPost;

import org.apache.http.entity.StringEntity;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.message.BasicNameValuePair;

import org.apache.log4j.Logger;

import org.mitre.openid.connect.client.service.impl.StaticClientConfigurationService;

import org.mitre.openid.connect.model.OIDCAuthenticationToken;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.security.access.prepost.PreAuthorize;

import org.springframework.security.core.context.SecurityContextHolder;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

import java.io.UnsupportedEncodingException;

import java.nio.charset.StandardCharsets;

import java.util.ArrayList;

import java.util.Base64;

import java.util.List;

public class PersonalTokenServlet extends HttpServlet {

    @Value("${oidc.secret}")

    private String secret;

    @Value("${oidc.id}")

    private String id;

    @Autowired

    private StaticClientConfigurationService staticClientConfigurationService;

    private Logger logger = Logger.getLogger(PersonalTokenServlet.class);

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

    }

    public void doGet(HttpServletRequest request, HttpServletResponse response)

            throws ServletException, IOException {

        System.out.println("IN GET");

        response.setContentType("text/html");

        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.getContext().getAuthentication();

        request.getSession().setAttribute("accessToken", authentication.getAccessTokenValue());

        request.getSession().setAttribute("refreshToken", authentication.getRefreshTokenValue());

        request.getRequestDispatcher("./personal.jsp").include(request, response);

    }

    public void doPost(HttpServletRequest request, HttpServletResponse response) {

        System.out.println("IN POST");

        System.out.println(id);

        System.out.println(secret);

        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.getContext().getAuthentication();

        try {

            CloseableHttpClient httpclient = HttpClients.createDefault();

            HttpPost httppost = new HttpPost("https://openaire-dev.aai-dev.grnet.gr/oidc/revoke");

            httppost.setHeader(HttpHeaders.CONTENT_TYPE, "application/x-www-form-urlencoded");

            String encoding = Base64.getEncoder().encodeToString((id.concat(":").concat(secret)).getBytes("UTF-8"));

            httppost.setHeader(HttpHeaders.AUTHORIZATION, "Basic " + encoding);

            List<NameValuePair> params = new ArrayList<NameValuePair>();

            params.add(new BasicNameValuePair("token", authentication.getAccessTokenValue()));

            params.add(new BasicNameValuePair("token_type_hint", "access_token"));

            httppost.setEntity(new UrlEncodedFormEntity(params, "UTF-8"));

            HttpResponse resp = httpclient.execute(httppost);

            System.out.println("status " + resp.getStatusLine().getStatusCode());

            HttpEntity entity = resp.getEntity();

            System.out.println("REVOKE " + IOUtils.toString(entity.getContent(), StandardCharsets.UTF_8.name()));

            response.sendRedirect("./personalToken");

        } catch (UnsupportedEncodingException uee) {

            logger.error("Error in Base64 encoding.", uee);

            request.getSession().setAttribute("message", "Unable to revoke your token. Please try again later");

            System.out.println("ERROR >>>> " + uee.getMessage());

        }  catch (IOException ioe) {

            logger.error("Error in Base64 encoding.", ioe);

            request.getSession().setAttribute("message", "Unable to revoke your token. Please try again later");

            System.out.println("ERROR >>>> " + ioe.getMessage());

        }

    }

}