D-Net

import com.google.gson.Gson;

import com.google.gson.GsonBuilder;

import com.google.gson.reflect.TypeToken;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpDelete;

import org.apache.http.client.methods.HttpGet;

import java.io.Serializable;

import java.lang.reflect.Array;

import java.lang.reflect.Type;

import java.math.BigDecimal;

import java.util.*;

    @Value("${oidc.issuer}")

    private String issuer;

    public void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        String refreshToken = authentication.getRefreshTokenValue();

        List<String> oldRefreshTokens = null;

            oldRefreshTokens = getOldRefreshTokens(authentication.getRefreshTokenValue(), authentication.getAccessTokenValue());

            deleteOldRefreshTokens(oldRefreshTokens, authentication.getAccessTokenValue());

        } catch (IOException e) {

            logger.error("Error deleting old refresh tokens.", e);

            //TODO should I let user know?

        }

        request.setAttribute("display_refresh_token", "display:block");

        response.sendRedirect("./personalToken");

    }

    private void deleteOldRefreshTokens(List<String> oldRefreshTokens, String accessToken) throws IOException {

        HttpDelete httpDelete;

        CloseableHttpClient httpclient = HttpClients.createDefault();

        for (String refreshTokenId:oldRefreshTokens) {

            httpDelete = new HttpDelete(issuer + "/api/tokens/refresh/" + refreshTokenId);

            httpDelete.setHeader(HttpHeaders.AUTHORIZATION, "Bearer " + accessToken);

            HttpResponse response = httpclient.execute(httpDelete);

            if (response.getStatusLine().getStatusCode()!=200) {

                logger.warn("Could not delete old refresh tokens." + response.getStatusLine().getStatusCode());

                System.out.println("Could not delete old refresh tokens." + response.getStatusLine().getStatusCode());//TODO should I throw exception?

            }

        }

    }

    private List<String> getOldRefreshTokens(String currentRefreshToken, String accessToken) throws IOException {

        HttpGet httpGet = new HttpGet(issuer + "/api/tokens/refresh");

        httpGet.setHeader(HttpHeaders.AUTHORIZATION, "Bearer " + accessToken);

        CloseableHttpClient httpclient = HttpClients.createDefault();

        String jsonResponse = IOUtils.toString(httpclient.execute(httpGet).getEntity().getContent(), StandardCharsets.UTF_8.name());

        Gson gson = new Gson();

        List<String> oldRefreshTokens = null;

        for(RefreshToken refreshToken:gson.fromJson(jsonResponse, RefreshToken[].class)){

            if (oldRefreshTokens == null) {

                oldRefreshTokens = new ArrayList<>();

            }

            if (!refreshToken.getValue().equals(currentRefreshToken)) {

                oldRefreshTokens.add(refreshToken.getId()+"");

            }

        }

        System.out.println("Old refresh tokens... " + oldRefreshTokens);

        return oldRefreshTokens;

                To achieve <b>better rate limits</b> you need to make <b>authenticated requests</b>.

                <p><span uk-icon="icon:info"></span> For more information please read the <a href="">documentation</a>.</p>

                        <div>Get access to the OpenAIRE APIs with your personal access and refresh token.</div>

                        <div>Register your services to get access to the OpenAIRE APIs.</div>

                    <!-- <a  class=" uk-text-danger uk-float-right" title="Revoke access token" onClick="document.revoke.submit();"><span uk-icon="refresh" ></span></a> -->

                    <span uk-icon="icon:info"></span> Your access token is <b>valid for an hour</b>.

              <p>Do not share your personal access token. Send your personal access token only over HTTPS.</p>

              <span uk-icon="icon:info"></span> For further information on how to use the tokens please visit the <a href="">OpenAIRE API Authentication documentation</a>.

            <!--<a  class=" uk-text-danger uk-float-right" title="Revoke refresh token"><span uk-icon="refresh"></span></a>-->

            <div class="uk-h5">Do you need a refresh token?</div>

            <p>OpenAIRE refresh token <b>expires after 1 month</b> and allows you to programmatically get a new access token. </p>

            <button type="submit" class="uk-button uk-button-primary" uk-toggle="target: #refreshWarning">Get a refresh token</button>

            <div id="refreshTokenDiv" style="${display_refresh_token}">

                <c:remove var="display_refresh_token" scope="session"/>

                <div class="uk-alert-warning uk-alert" >

                    Please copy your refresh token and store it confidentially. You will not be able to retrieve it.

                </div>

                <div class="uk-alert-danger uk-alert uk-margin-large-top" >

                    <p>Do not share your refresh token. Send your personal access token only over HTTPS.</p>

                </div>

                <a class="uk-float-right uk-margin-small-left"  onclick="copy('refreshToken')" title="Copy refresh token"><span uk-icon="icon: copy"></span></a>

                <pre><code id="refreshToken">${refreshToken}</code></pre>

            </div>

            <!-- This is the modal -->

            <div id="refreshWarning" uk-modal>

                <div class="uk-modal-dialog uk-modal-body">

                    <form id="refreshForm" action="./personalToken" method="POST">

                        <h2 class="uk-modal-title">Get refresh token</h2>

                        <p>In case you already have a refresh token, it will no longer be valid. Do you want to proceed?</p>

                        <p class="uk-text-right">

                            <button class="uk-button uk-button-default uk-modal-close" type="button">Cancel</button>

                            <button class="uk-button uk-button-primary" type="button" onclick="submit();">Get refresh token</button>

                        </p>

                    </form>

                </div>

            </div>