package org.dromara.common.social.keycloak;
|
|
import cn.hutool.core.codec.Base64;
|
import cn.hutool.core.lang.Dict;
|
import cn.hutool.core.util.StrUtil;
|
import cn.hutool.http.HttpRequest;
|
import cn.hutool.http.HttpResponse;
|
import com.xkcoding.http.support.HttpHeader;
|
import me.zhyd.oauth.cache.AuthStateCache;
|
import me.zhyd.oauth.config.AuthConfig;
|
import me.zhyd.oauth.exception.AuthException;
|
import me.zhyd.oauth.model.AuthCallback;
|
import me.zhyd.oauth.model.AuthToken;
|
import me.zhyd.oauth.model.AuthUser;
|
import me.zhyd.oauth.request.AuthDefaultRequest;
|
import me.zhyd.oauth.utils.HttpUtils;
|
import me.zhyd.oauth.utils.UrlBuilder;
|
import org.dromara.common.core.domain.model.PasswordLoginBody;
|
import org.dromara.common.core.utils.SpringUtils;
|
import org.dromara.common.json.utils.JsonUtils;
|
|
/**
|
* Keycloak OAuth2 认证请求
|
*/
|
public class AuthKeycloakRequest extends AuthDefaultRequest {
|
|
public static final String SERVER_URL = SpringUtils.getProperty("justauth.type.keycloak.server-url");
|
public static final String REALM = SpringUtils.getProperty("justauth.type.keycloak.realm");
|
|
public AuthKeycloakRequest(AuthConfig config) {
|
super(config, AuthKeycloakSource.KEYCLOAK);
|
}
|
|
public AuthKeycloakRequest(AuthConfig config, AuthStateCache authStateCache) {
|
super(config, AuthKeycloakSource.KEYCLOAK, authStateCache);
|
}
|
|
|
public AuthToken getAccessToken(PasswordLoginBody loginBody) {
|
|
HttpRequest request = HttpRequest.post(SERVER_URL + "/realms/" + REALM + "/protocol/openid-connect/token")
|
.form("grant_type", "password")
|
.form("client_id", config.getClientId())
|
.form("client_secret", config.getClientSecret())
|
.form("username", loginBody.getUsername())
|
.form("password", loginBody.getPassword())
|
.form("scope", "openid");
|
|
HttpResponse response = request.execute();
|
|
Dict object = JsonUtils.parseMap(response.body());
|
|
if (object.containsKey("error")) {
|
throw new AuthException(object.getStr("error_description"));
|
}
|
if (object.containsKey("message")) {
|
throw new AuthException(object.getStr("message"));
|
}
|
return AuthToken.builder()
|
.accessToken(object.getStr("access_token"))
|
.refreshToken(object.getStr("refresh_token"))
|
.idToken(object.getStr("id_token"))
|
.tokenType(object.getStr("token_type"))
|
.expireIn(object.getInt("expires_in"))
|
.build();
|
}
|
|
@Override
|
public AuthToken getAccessToken(AuthCallback authCallback) {
|
String body = doPostAuthorizationCode(authCallback.getCode());
|
Dict object = JsonUtils.parseMap(body);
|
|
if (object.containsKey("error")) {
|
throw new AuthException(object.getStr("error_description"));
|
}
|
if (object.containsKey("message")) {
|
throw new AuthException(object.getStr("message"));
|
}
|
|
return AuthToken.builder()
|
.accessToken(object.getStr("access_token"))
|
.refreshToken(object.getStr("refresh_token"))
|
.idToken(object.getStr("id_token"))
|
.tokenType(object.getStr("token_type"))
|
.expireIn(object.getInt("expires_in"))
|
.build();
|
}
|
|
@Override
|
public AuthUser getUserInfo(AuthToken authToken) {
|
String body = doGetUserInfo(authToken);
|
Dict object = JsonUtils.parseMap(body);
|
|
if (object.containsKey("error")) {
|
throw new AuthException(object.getStr("error_description"));
|
}
|
if (object.containsKey("message")) {
|
throw new AuthException(object.getStr("message"));
|
}
|
|
return AuthUser.builder()
|
.uuid(object.getStr("sub"))
|
.username(object.getStr("preferred_username"))
|
.nickname(object.getStr("name"))
|
.email(object.getStr("email"))
|
.token(authToken)
|
.source(this.source.toString())
|
.build();
|
}
|
|
@Override
|
protected String doPostAuthorizationCode(String code) {
|
HttpRequest request = HttpRequest.post(source.accessToken())
|
.header("Authorization", "Basic " + Base64.encode("%s:%s".formatted(config.getClientId(), config.getClientSecret())))
|
.form("grant_type", "authorization_code")
|
.form("code", code)
|
.form("redirect_uri", config.getRedirectUri());
|
HttpResponse response = request.execute();
|
return response.body();
|
}
|
|
@Override
|
protected String doGetUserInfo(AuthToken authToken) {
|
try {
|
return new HttpUtils(config.getHttpConfig()).get(source.userInfo(), null, new HttpHeader()
|
.add("Content-Type", "application/json")
|
.add("Authorization", "Bearer " + authToken.getAccessToken()), false).getBody();
|
} catch (Exception e) {
|
e.printStackTrace();
|
}
|
return null;
|
}
|
|
@Override
|
public String authorize(String state) {
|
return UrlBuilder.fromBaseUrl(super.authorize(state))
|
.queryParam("scope", StrUtil.join("%20", config.getScopes()))
|
.build();
|
}
|
|
|
|
|
}
|
