-
Notifications
You must be signed in to change notification settings - Fork 143
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #443 from auth0/ft-jwt
Refactor JWT decoding logic
- Loading branch information
Showing
14 changed files
with
388 additions
and
78 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
82 changes: 82 additions & 0 deletions
82
auth0/src/main/java/com/auth0/android/request/internal/Jwt.kt
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,82 @@ | ||
| package com.auth0.android.request.internal | ||
|
|
||
| import android.util.Base64 | ||
| import com.google.gson.reflect.TypeToken | ||
| import java.util.* | ||
|
|
||
|
|
||
| /** | ||
| * Internal class meant to decode the given token of type JWT and provide access to its claims. | ||
| */ | ||
| internal class Jwt(rawToken: String) { | ||
|
|
||
| private val decodedHeader: Map<String, Any> | ||
| private val decodedPayload: Map<String, Any> | ||
| val parts: Array<String> | ||
|
|
||
| // header | ||
| val algorithm: String | ||
| val keyId: String? | ||
|
|
||
| // payload | ||
| val subject: String? | ||
| val issuer: String? | ||
| val nonce: String? | ||
| val issuedAt: Date? | ||
| val expiresAt: Date? | ||
| val authorizedParty: String? | ||
| val authenticationTime: Date? | ||
| val audience: List<String> | ||
|
|
||
| init { | ||
| parts = splitToken(rawToken) | ||
| val jsonHeader = parts[0].decodeBase64() | ||
| val jsonPayload = parts[1].decodeBase64() | ||
| val mapAdapter = GsonProvider.gson.getAdapter(object : TypeToken<Map<String, Any>>() {}) | ||
| decodedHeader = mapAdapter.fromJson(jsonHeader) | ||
| decodedPayload = mapAdapter.fromJson(jsonPayload) | ||
|
|
||
| // header claims | ||
| algorithm = decodedHeader["alg"] as String | ||
| keyId = decodedHeader["kid"] as String? | ||
|
|
||
| // payload claims | ||
| subject = decodedPayload["sub"] as String? | ||
| issuer = decodedPayload["iss"] as String? | ||
| nonce = decodedPayload["nonce"] as String? | ||
| issuedAt = (decodedPayload["iat"] as? Double)?.let { Date(it.toLong() * 1000) } | ||
| expiresAt = (decodedPayload["exp"] as? Double)?.let { Date(it.toLong() * 1000) } | ||
| authorizedParty = decodedPayload["azp"] as String? | ||
| authenticationTime = | ||
| (decodedPayload["auth_time"] as? Double)?.let { Date(it.toLong() * 1000) } | ||
| audience = when (val aud = decodedPayload["aud"]) { | ||
| is String -> listOf(aud) | ||
| is List<*> -> aud as List<String> | ||
| else -> emptyList() | ||
| } | ||
| } | ||
|
|
||
| private fun splitToken(token: String): Array<String> { | ||
| var parts = token.split(".").toTypedArray() | ||
| if (parts.size == 2 && token.endsWith(".")) { | ||
| // Tokens with alg='none' have empty String as Signature. | ||
| parts = arrayOf(parts[0], parts[1], "") | ||
| } | ||
| if (parts.size != 3) { | ||
| throw IllegalArgumentException( | ||
| String.format( | ||
| "The token was expected to have 3 parts, but got %s.", | ||
| parts.size | ||
| ) | ||
| ) | ||
| } | ||
| return parts | ||
| } | ||
|
|
||
| private fun String.decodeBase64(): String { | ||
| val bytes: ByteArray = | ||
| Base64.decode(this, Base64.URL_SAFE or Base64.NO_WRAP or Base64.NO_PADDING) | ||
| return String(bytes, Charsets.UTF_8) | ||
| } | ||
|
|
||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.