-
Notifications
You must be signed in to change notification settings - Fork 71
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #178 from xbaran4/oauth2-factory
feat: GitHub OAuth authentication with embededOAuthAPI
- Loading branch information
Showing
8 changed files
with
249 additions
and
140 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
95 changes: 95 additions & 0 deletions
95
...github/src/main/java/org/eclipse/che/security/oauth/GitHubOAuthAuthenticatorProvider.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,95 @@ | ||
| /* | ||
| * Copyright (c) 2012-2021 Red Hat, Inc. | ||
| * This program and the accompanying materials are made | ||
| * available under the terms of the Eclipse Public License 2.0 | ||
| * which is available at https://www.eclipse.org/legal/epl-2.0/ | ||
| * | ||
| * SPDX-License-Identifier: EPL-2.0 | ||
| * | ||
| * Contributors: | ||
| * Red Hat, Inc. - initial API and implementation | ||
| */ | ||
| package org.eclipse.che.security.oauth; | ||
|
|
||
| import static com.google.common.base.Strings.isNullOrEmpty; | ||
|
|
||
| import java.io.IOException; | ||
| import java.nio.file.Files; | ||
| import java.nio.file.Path; | ||
| import java.util.Objects; | ||
| import javax.inject.Inject; | ||
| import javax.inject.Named; | ||
| import javax.inject.Provider; | ||
| import javax.inject.Singleton; | ||
| import org.eclipse.che.api.auth.shared.dto.OAuthToken; | ||
| import org.eclipse.che.commons.annotation.Nullable; | ||
| import org.eclipse.che.security.oauth.shared.User; | ||
| import org.slf4j.Logger; | ||
| import org.slf4j.LoggerFactory; | ||
|
|
||
| /** | ||
| * Provides implementation of GitHub {@link OAuthAuthenticator} based on available configuration. | ||
| * | ||
| * @author Pavol Baran | ||
| */ | ||
| @Singleton | ||
| public class GitHubOAuthAuthenticatorProvider implements Provider<OAuthAuthenticator> { | ||
| private static final Logger LOG = LoggerFactory.getLogger(GitHubOAuthAuthenticatorProvider.class); | ||
| private final OAuthAuthenticator authenticator; | ||
|
|
||
| @Inject | ||
| public GitHubOAuthAuthenticatorProvider( | ||
| @Nullable @Named("che.oauth2.github.clientid_filepath") String gitHubClientIdPath, | ||
| @Nullable @Named("che.oauth2.github.clientsecret_filepath") String gitHubClientSecretPath, | ||
| @Nullable @Named("che.oauth.github.redirecturis") String[] redirectUris, | ||
| @Nullable @Named("che.oauth.github.authuri") String authUri, | ||
| @Nullable @Named("che.oauth.github.tokenuri") String tokenUri) | ||
| throws IOException { | ||
| authenticator = | ||
| getOAuthAuthenticator( | ||
| gitHubClientIdPath, gitHubClientSecretPath, redirectUris, authUri, tokenUri); | ||
| LOG.debug("{} GitHub OAuth Authenticator is used.", authenticator); | ||
| } | ||
|
|
||
| @Override | ||
| public OAuthAuthenticator get() { | ||
| return authenticator; | ||
| } | ||
|
|
||
| private OAuthAuthenticator getOAuthAuthenticator( | ||
| String clientIdPath, | ||
| String clientSecretPath, | ||
| String[] redirectUris, | ||
| String authUri, | ||
| String tokenUri) | ||
| throws IOException { | ||
|
|
||
| if (!isNullOrEmpty(clientIdPath) | ||
| && !isNullOrEmpty(clientSecretPath) | ||
| && !isNullOrEmpty(authUri) | ||
| && !isNullOrEmpty(tokenUri) | ||
| && Objects.nonNull(redirectUris) | ||
| && redirectUris.length != 0) { | ||
| String clientId = Files.readString(Path.of(clientIdPath)); | ||
| String clientSecret = Files.readString(Path.of(clientSecretPath)); | ||
| if (!isNullOrEmpty(clientId) && !isNullOrEmpty(clientSecret)) { | ||
| return new GitHubOAuthAuthenticator( | ||
| clientId, clientSecret, redirectUris, authUri, tokenUri); | ||
| } | ||
| } | ||
| return new NoopOAuthAuthenticator(); | ||
| } | ||
|
|
||
| static class NoopOAuthAuthenticator extends OAuthAuthenticator { | ||
| @Override | ||
| public User getUser(OAuthToken accessToken) throws OAuthAuthenticationException { | ||
| throw new OAuthAuthenticationException( | ||
| "The fallback noop authenticator cannot be used for GitHub authentication. Make sure OAuth is properly configured."); | ||
| } | ||
|
|
||
| @Override | ||
| public String getOAuthProvider() { | ||
| return "Noop"; | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.