38 |
39 |
19 |
30 |
31 |
47 | {{/each}}
48 | {{else}}
49 |
52 |
--------------------------------------------------------------------------------
/apis-authorization-server-war/src/test/java/org/surfnet/oaaas/config/SpringConfigTest.java:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2012 SURFnet bv, The Netherlands
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | package org.surfnet.oaaas.config;
18 |
19 | import com.googlecode.flyway.core.Flyway;
20 | import org.junit.Test;
21 | import org.junit.runner.RunWith;
22 | import org.springframework.test.context.ContextConfiguration;
23 | import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
24 | import org.surfnet.oaaas.resource.VerifyResource;
25 |
26 | import javax.inject.Inject;
27 | import javax.sql.DataSource;
28 |
29 | import static junit.framework.Assert.assertFalse;
30 | import static junit.framework.Assert.assertTrue;
31 | import static org.junit.Assert.assertNotNull;
32 |
33 | @RunWith(SpringJUnit4ClassRunner.class)
34 | @ContextConfiguration(classes = SpringConfiguration.class)
35 | public class SpringConfigTest {
36 |
37 | @Inject
38 | private DataSource dataSource;
39 |
40 | @Inject
41 | private Flyway flyway;
42 |
43 | @Inject
44 | private VerifyResource verifyResource;
45 |
46 |
47 | @Test
48 | public void wire() {
49 | assertNotNull(dataSource);
50 | assertNotNull(flyway);
51 | assertFalse(verifyResource.isJsonTypeInfoIncluded());
52 | }
53 | }
54 |
--------------------------------------------------------------------------------
/apis-authorization-server-war/src/main/webapp/client/templates/tplAccessTokenGrid.html:
--------------------------------------------------------------------------------
1 |
16 |
17 | Statistics
20 | {{#if resourceServers}} 21 |
22 |
24 | {{#each resourceServers}}
25 | All your Resource Servers and client statistics
23 |Resource Server name: {{name}}
26 | {{#if description}} 27 |Description: {{description}}
28 | {{/if}} 29 || Client App name | 33 |Description | 34 |#Unique clients | 35 |
|---|---|---|
| {{name}} | 41 |{{description}} | 42 |{{tokenCount}} | 43 |
No resource servers configured.
50 | {{/if}} 51 |
18 |
19 |
22 |
23 |
49 | {{else}}
50 |
53 |
--------------------------------------------------------------------------------
/apis-authorization-server/src/test/java/org/surfnet/oaaas/repository/AccessTokenRepositoryTest.java:
--------------------------------------------------------------------------------
1 | /*
2 | * Licensed to the Apache Software Foundation (ASF) under one
3 | * or more contributor license agreements. See the NOTICE file
4 | * distributed with this work for additional information
5 | * regarding copyright ownership. The ASF licenses this file
6 | * to you under the Apache License, Version 2.0 (the
7 | * "License"); you may not use this file except in compliance
8 | * with the License. You may obtain a copy of the License at
9 | *
10 | * http://www.apache.org/licenses/LICENSE-2.0
11 | *
12 | * Unless required by applicable law or agreed to in writing,
13 | * software distributed under the License is distributed on an
14 | * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
15 | * KIND, either express or implied. See the License for the
16 | * specific language governing permissions and limitations
17 | * under the License.
18 | */
19 | package org.surfnet.oaaas.repository;
20 |
21 | import static org.junit.Assert.assertEquals;
22 |
23 | import org.junit.Test;
24 | import org.surfnet.oaaas.model.AccessToken;
25 |
26 | /**
27 | * {@link Test} for {@link AccessTokenRepository}
28 | *
29 | */
30 | public class AccessTokenRepositoryTest extends AbstractTestRepository {
31 |
32 | @Test
33 | public void testPrincipal() {
34 | AccessTokenRepository repo = getRepository(AccessTokenRepository.class);
35 | AccessToken token = repo.findByToken("00-11-22-33");
36 | assertEquals("it-test-enduser",token.getPrincipal().getName());
37 | }
38 |
39 | @Test
40 | public void testCountByResourceOwnerid() {
41 | AccessTokenRepository repo = getRepository(AccessTokenRepository.class);
42 | Number countByResourceOwnerId = repo.countByUniqueResourceOwnerIdAndClientId(99999);
43 | assertEquals(1L,countByResourceOwnerId.longValue());
44 | }
45 | }
46 |
--------------------------------------------------------------------------------
/apis-authorization-server-war/src/main/webapp/client/js/main.js:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2012 SURFnet bv, The Netherlands
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | requirejs.config({
18 | //By default load any module IDs from js/lib
19 | baseUrl: 'js',
20 |
21 | paths: {
22 | lib: "lib"
23 | },
24 |
25 | shim: {
26 |
27 | 'lib/bootstrap': {
28 | deps: ['lib/jquery']
29 | },
30 |
31 | 'jquery-extensions': {
32 | deps: ['lib/jquery']
33 | },
34 |
35 | 'lib/jquery.zclip': {
36 | deps: ['lib/jquery']
37 | },
38 |
39 | 'lib/bootbox.min': {
40 | deps: ['lib/bootstrap']
41 | },
42 |
43 | 'data': {
44 | deps: [
45 | 'lib/jquery'
46 | ]},
47 |
48 | 'client': {
49 | deps: [
50 | 'oauth',
51 | 'jquery-extensions',
52 | 'lib/bootstrap',
53 | 'lib/handlebars',
54 | 'data',
55 | 'resourceServerForm',
56 | 'resourceServerGrid',
57 | 'clientForm',
58 | 'clientGrid',
59 | 'accessTokenGrid',
60 | 'statisticsGrid',
61 | 'popoverBundle',
62 | 'lib/jquery.zclip',
63 | 'lib/bootbox.min'
64 | ]
65 | }
66 | }
67 | });
68 |
69 | require([
70 | "jquery-extensions",
71 | "lib/handlebars",
72 | "lib/bootstrap",
73 | "client"
74 | ]);
--------------------------------------------------------------------------------
/apis-authorization-server-war/src/main/webapp/client/client.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 | Access Tokens
20 | {{#if accessTokens}} 21 || Token | 25 |Resource server | 26 |Client | 27 |Scopes | 28 |Resource owner ID | 29 |Issue date | 30 |Valid until | 31 |Actions | 32 |
|---|---|---|---|---|---|---|---|
| {{token}} | 38 |todo | 39 |{{clientId}} | 40 |{{scopes}} | 41 |{{resourceOwnerId}} | 42 |{{creationDate}} | 43 |{{expiresIn}} | 44 |Delete | 45 |
No access tokens found for current user.
51 | {{/if}} 52 |
24 | 
25 |
27 |
28 |
25 |
27 |
29 |
37 |
40 |
41 |
42 |
44 |
45 |
46 |
47 |
48 |
49 |
--------------------------------------------------------------------------------
/apis-example-resource-server/src/main/java/org/surfnet/oaaas/example/api/domain/Student.java:
--------------------------------------------------------------------------------
1 | /*
2 | * Licensed to the Apache Software Foundation (ASF) under one
3 | * or more contributor license agreements. See the NOTICE file
4 | * distributed with this work for additional information
5 | * regarding copyright ownership. The ASF licenses this file
6 | * to you under the Apache License, Version 2.0 (the
7 | * "License"); you may not use this file except in compliance
8 | * with the License. You may obtain a copy of the License at
9 | *
10 | * http://www.apache.org/licenses/LICENSE-2.0
11 | *
12 | * Unless required by applicable law or agreed to in writing,
13 | * software distributed under the License is distributed on an
14 | * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
15 | * KIND, either express or implied. See the License for the
16 | * specific language governing permissions and limitations
17 | * under the License.
18 | */
19 | package org.surfnet.oaaas.example.api.domain;
20 |
21 | /**
22 | * Student representation
23 | *
24 | */
25 | public class Student {
26 |
27 | private String id;
28 | private String name;
29 | private String email;
30 |
31 | /**
32 | * @return the id
33 | */
34 | public String getId() {
35 | return id;
36 | }
37 | /**
38 | * @param id the id to set
39 | */
40 | public void setId(String id) {
41 | this.id = id;
42 | }
43 | /**
44 | * @return the name
45 | */
46 | public String getName() {
47 | return name;
48 | }
49 | /**
50 | * @param name the name to set
51 | */
52 | public void setName(String name) {
53 | this.name = name;
54 | }
55 | /**
56 | * @return the email
57 | */
58 | public String getEmail() {
59 | return email;
60 | }
61 | /**
62 | * @param email the email to set
63 | */
64 | public void setEmail(String email) {
65 | this.email = email;
66 | }
67 | }
68 |
--------------------------------------------------------------------------------
/apis-authorization-server-war/src/main/webapp/client/templates/tplClientGrid.html:
--------------------------------------------------------------------------------
1 | Powered by SURFnet. Fork me on Github. Licensed under the Apache License 2.0.
43 |
2 | Add another client app
3 |
6 |
7 |
38 | {{else}}
39 |
42 |
--------------------------------------------------------------------------------
/apis-authorization-server/README.md:
--------------------------------------------------------------------------------
1 | Authorization Server jar
2 | ======
3 | The Authorization Server jar module contains all of the main code of the actual Authorization Server war module. It is compliant with the [the draft v2-31 OAuth specification](http://tools.ietf.org/html/draft-ietf-oauth-v2-31).
4 |
5 | The main building blocks of the Authorization Server are:
6 |
7 | * [JAX-RS](http://en.wikipedia.org/wiki/Java_API_for_RESTful_Web_Services) endpoints (by default using the [Jersey](http://jersey.java.net/) implementation).
8 | * CRUD interface for Resource Servers and Client apps
9 | * OAuth2 authorization and token resources for obtaining access (and optionally refresh) tokens
10 | * An endpoint/ resource for validating access tokens (to be leveraged by a Resource Server)
11 | * Pluggable [Filters](http://docs.oracle.com/javaee/1.3/api/javax/servlet/Filter.html) for Resource Owner authentication and user consent handling.
12 | * See `org.surfnet.oaaas.auth.AbstractAuthenticator` and the default implementation `org.surfnet.oaaas.authentication.FormLoginAuthenticator`
13 | * See `org.surfnet.oaaas.auth.AbstractUserConsentHandler` and the default implementation `org.surfnet.oaaas.consent.FormUserConsentHandler`
14 | * Spring configuration to wire everything together
15 | * The main components are annotated using `org.springframework.stereotype@Repository`, `javax.inject.@Named` and `javax.inject.@Inject`
16 | * See `/apis-authorization-server-war/src/main/java/org/surfnet/oaaas/config/SpringConfiguration.java`
17 | * [OpenJPA](http://openjpa.apache.org/) persistence layer
18 | * See `/apis-authorization-server/src/main/resources/META-INF/persistence.xml`
19 | * See `/apis-authorization-server/src/main/resources/db/migration/mysql/V1__auth-server-admin.sql`
20 |
21 | See the documentation in the [README.md](https://github.com/OpenConextApps/apis/blob/master/README.md) in the root project for overall documentation.
22 |
23 |
--------------------------------------------------------------------------------
/apis-authorization-server/src/main/java/org/surfnet/oaaas/cas/PostCasAuthenticationFilter.java:
--------------------------------------------------------------------------------
1 | package org.surfnet.oaaas.cas;
2 |
3 | import javax.servlet.*;
4 | import javax.servlet.http.HttpServletRequest;
5 | import javax.servlet.http.HttpServletResponse;
6 | import java.io.IOException;
7 | import java.util.ArrayList;
8 | import java.util.Arrays;
9 | import java.util.List;
10 |
11 | /**
12 | * Created by bourges on 05/08/14.
13 | */
14 | public class PostCasAuthenticationFilter implements Filter {
15 |
16 | public static String POST_CAS_AUTHENTICATION_INFO = "casUser";
17 | public static String REDIRECT_URL = "redirectURL";
18 |
19 | private ListClient applications
4 | {{#if clients}} 5 || Icon | 9 |Name | 10 |Client ID | 11 |Scopes | 12 |Credentials | 13 |Actions | 14 |
|---|---|---|---|---|---|
| {{name}} 21 | {{description}} 22 | Connected to {{resourceServer.name}} 23 | |
24 | {{clientId}} | 25 |{{scopes}} | 26 |
27 | Contact: {{contactName}} 28 | Client ID : 29 | 30 | Secret : 31 | 32 | |
33 | Delete | 34 |
No clients yet. Add one.
40 | {{/if}} 41 |
2 |
3 | Add another server
4 |
7 |
8 |
38 | {{else}}
39 |
43 |
--------------------------------------------------------------------------------
/apis-authorization-server-war/src/main/webapp/client/js/statisticsGrid.js:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2012 SURFnet bv, The Netherlands
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | var statisticsGridView = (function() {
18 |
19 | var templateId = "tplStatisticsGrid";
20 | var containerSelector = "#contentView";
21 | var handleSelector = "#statisticsGrid";
22 |
23 | return {
24 |
25 | refresh: function(statistics) {
26 | this.hide();
27 | this.show(statistics);
28 | },
29 |
30 | show: function(statistics) {
31 | Template.get(templateId, function(template) {
32 | $(containerSelector).append(template(statistics));
33 | $(containerSelector).css("height", ""); // clear the fixed height
34 | });
35 | },
36 | isVisible: function() {
37 | return $(handleSelector).is(':visible');
38 | },
39 | hide: function() {
40 | $(containerSelector).css("height", $(containerSelector).height()); // set a fixed height to prevent wild swapping of the footer
41 | $(handleSelector).remove();
42 | },
43 | focus: function() {
44 | $(handleSelector).focus();
45 | }
46 | }
47 | })();
48 |
49 | var statisticsGridController = (function() {
50 |
51 | var view = statisticsGridView;
52 |
53 | return {
54 | show: function() {
55 | // first hide to view to prevent multiple views displayed
56 | view.hide();
57 | data.getStatistics(function(statistics) {
58 | view.show(statistics);
59 | });
60 | },
61 | hide: view.hide,
62 | focus: view.focus,
63 | isVisible: view.isVisible
64 | }
65 | })();
66 |
67 |
--------------------------------------------------------------------------------
/apis-example-resource-server/src/main/java/org/surfnet/oaaas/example/api/AuthConfiguration.java:
--------------------------------------------------------------------------------
1 | /*
2 | * Licensed to the Apache Software Foundation (ASF) under one
3 | * or more contributor license agreements. See the NOTICE file
4 | * distributed with this work for additional information
5 | * regarding copyright ownership. The ASF licenses this file
6 | * to you under the Apache License, Version 2.0 (the
7 | * "License"); you may not use this file except in compliance
8 | * with the License. You may obtain a copy of the License at
9 | *
10 | * http://www.apache.org/licenses/LICENSE-2.0
11 | *
12 | * Unless required by applicable law or agreed to in writing,
13 | * software distributed under the License is distributed on an
14 | * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
15 | * KIND, either express or implied. See the License for the
16 | * specific language governing permissions and limitations
17 | * under the License.
18 | */
19 | package org.surfnet.oaaas.example.api;
20 |
21 | /**
22 | * Configuration for Authorization Server
23 | *
24 | */
25 | public class AuthConfiguration {
26 | private String authorizationServerUrl;
27 | private String secret;
28 | private String key;
29 |
30 | /**
31 | * @return the authorizationServerUrl
32 | */
33 | public String getAuthorizationServerUrl() {
34 | return authorizationServerUrl;
35 | }
36 |
37 | /**
38 | * @param authorizationServerUrl
39 | * the authorizationServerUrl to set
40 | */
41 | public void setAuthorizationServerUrl(String authorizationServerUrl) {
42 | this.authorizationServerUrl = authorizationServerUrl;
43 | }
44 |
45 |
46 |
47 | /**
48 | * @return the secret
49 | */
50 | public String getSecret() {
51 | return secret;
52 | }
53 |
54 | /**
55 | * @param secret the secret to set
56 | */
57 | public void setSecret(String secret) {
58 | this.secret = secret;
59 | }
60 |
61 | /**
62 | * @return the key
63 | */
64 | public String getKey() {
65 | return key;
66 | }
67 |
68 | /**
69 | * @param key the key to set
70 | */
71 | public void setKey(String key) {
72 | this.key = key;
73 | }
74 |
75 | }
76 |
--------------------------------------------------------------------------------
/apis-authorization-server/src/main/java/org/surfnet/oaaas/noop/NoopAuthenticator.java:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2012 SURFnet bv, The Netherlands
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | package org.surfnet.oaaas.noop;
18 |
19 | import java.io.IOException;
20 |
21 | import javax.servlet.FilterChain;
22 | import javax.servlet.ServletException;
23 | import javax.servlet.http.HttpServletRequest;
24 | import javax.servlet.http.HttpServletResponse;
25 |
26 | import org.surfnet.oaaas.auth.AbstractAuthenticator;
27 | import org.surfnet.oaaas.auth.principal.AuthenticatedPrincipal;
28 |
29 | /**
30 | * A minimalistic implementation of AbstractAuthenticator that contains no authentication but only fulfills the
31 | * contract of Authenticators.
32 | * Useful for testing and demonstration purposes only, of course not safe for production.
33 | */
34 | public class NoopAuthenticator extends AbstractAuthenticator {
35 |
36 | @Override
37 | public boolean canCommence(HttpServletRequest request) {
38 | return getAuthStateValue(request) != null;
39 | }
40 |
41 | @Override
42 | public void authenticate(HttpServletRequest request, HttpServletResponse response, FilterChain chain,
43 | String authStateValue, String returnUri) throws IOException, ServletException {
44 | super.setAuthStateValue(request, authStateValue);
45 | AuthenticatedPrincipal principal = getAuthenticatedPrincipal();
46 | super.setPrincipal(request, principal);
47 | chain.doFilter(request, response);
48 | }
49 |
50 | protected AuthenticatedPrincipal getAuthenticatedPrincipal() {
51 | return new AuthenticatedPrincipal("noop");
52 | }
53 | }
54 |
--------------------------------------------------------------------------------
/apis-authorization-server/src/test/java/org/surfnet/oaaas/model/ResourceOwnerTest.java:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2012 SURFnet bv, The Netherlands
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | package org.surfnet.oaaas.model;
18 |
19 | import static org.junit.Assert.assertEquals;
20 | import static org.junit.Assert.assertFalse;
21 | import static org.junit.Assert.assertTrue;
22 |
23 | import java.util.Set;
24 |
25 | import javax.validation.ConstraintViolation;
26 |
27 | import org.junit.Before;
28 | import org.junit.Test;
29 |
30 | public class ResourceOwnerTest extends AbstractEntityTest {
31 |
32 | private ResourceOwner resourceOwner;
33 |
34 | private static final String PASSWORD = "password";
35 |
36 | @Before
37 | public void before() {
38 | resourceOwner = new ResourceOwner();
39 | resourceOwner.setUsername("user");
40 | resourceOwner.setPassword(PASSWORD);
41 | }
42 |
43 | @Test
44 | public void validateMinimalistic() {
45 | SetResource servers
5 | {{#if resourceServers}} 6 || Icon | 10 |Resource server | 11 |Client apps | 12 |Scopes | 13 |About | 14 |Actions | 15 |
|---|---|---|---|---|---|
| {{name}} 22 | {{description}} 23 | |
24 | 25 | | {{scopes}} | 26 |
27 | Contact: {{contactName}} 28 | Key : 29 | 30 | Secret : 31 | 32 | |
33 | Delete | 34 |
No resource servers yet. Add one.
40 |After you have added a resource server, you can start adding client applications that actually do something with the protected resources of your resource server. 41 | {{/if}} 42 |
20 | 
21 |
22 |
23 |
21 |
24 |
62 |
63 |
25 |
61 |
26 |
28 |
29 |
60 | Login
27 |
64 |
66 |
67 |
68 |
--------------------------------------------------------------------------------
/apis-authorization-server-war/src/main/webapp/client/js/oauth.js:
--------------------------------------------------------------------------------
1 | /*
2 | * Copyright 2012 SURFnet bv, The Netherlands
3 | *
4 | * Licensed under the Apache License, Version 2.0 (the "License");
5 | * you may not use this file except in compliance with the License.
6 | * You may obtain a copy of the License at
7 | *
8 | * http://www.apache.org/licenses/LICENSE-2.0
9 | *
10 | * Unless required by applicable law or agreed to in writing, software
11 | * distributed under the License is distributed on an "AS IS" BASIS,
12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 | * See the License for the specific language governing permissions and
14 | * limitations under the License.
15 | */
16 |
17 | /**
18 | * OAuth2 Implicit Grant client.
19 | *
20 | * Create with these options:
21 | * var auth = new OAuth({
22 | * context: window,
23 | * clientId: "myClientId",
24 | * redirectUri: "http://myredirecturi", // (optional)
25 | * authorizationEndpoint: "http://localhost/oauth2/authorize"
26 | * });
27 | *
28 | * if (auth.isTokenPresent()) {
29 | * accessToken = auth.extractTokenInfo();
30 | * } else {
31 | * auth.authorize();
32 | * }
33 | *
34 | * @param opt
35 | * @return {Object}
36 | * @constructor
37 | */
38 | var OAuth = function(opt) {
39 | var
40 | options = opt || {},
41 | context = options.context,
42 | oauthTokenInfo = {};
43 |
44 | function buildAuthorizationUrl() {
45 | return options.authorizationEndpoint
46 | + "?"
47 | + "response_type=token"
48 | + "&client_id=" + options.clientId
49 | + "&scope=" + options.scope
50 | // TODO: add scope
51 | + "&redirect_uri=" + options.redirectUri || context.location
52 | }
53 |
54 |
55 |
56 | return {
57 | authorize: function() {
58 | // redirect to authorization endpoint
59 | context.location = buildAuthorizationUrl();
60 | },
61 |
62 | isTokenPresent: function() {
63 | return /access_token=/.test(context.location.hash);
64 | },
65 |
66 | extractTokenInfo: function() {
67 | var hash = context.location.hash.substring(1);
68 | var split = hash.split('&');
69 |
70 | var obj = {};
71 | for(var i = 0; i < split.length; i++){
72 | var kv = split[i].split('=');
73 | obj[kv[0]] = decodeURIComponent(kv[1] ? kv[1].replace(/\+/g, ' ') : kv[1]);
74 | }
75 | oauthTokenInfo = {
76 | accessToken: obj["access_token"],
77 | expires: obj["expires_in"],
78 | scope: obj["scope"],
79 | principal: obj["principal"]
80 | };
81 | context.location.hash = "";
82 | return oauthTokenInfo.accessToken;
83 | },
84 |
85 | principalName: function() {
86 | return oauthTokenInfo.principal;
87 | }
88 | }
89 | };
90 |
91 |
--------------------------------------------------------------------------------
/apis-authorization-server-dist/pom.xml:
--------------------------------------------------------------------------------
1 |
2 |
17 |
18 | Powered by SURFnet. Fork me on Github. Licensed under the Apache License 2.0.
65 |