├── .github
    └── workflows
    │   ├── dockerhub.yml
    │   ├── frontend.yml
    │   ├── pull-requests.yml
    │   ├── push-in-develop.yml
    │   ├── push-with-v-tag.yml
    │   └── release-scripts.yml
├── .gitignore
├── .gitlab-ci.yaml
├── .gitmodules
├── .mvn
    └── jvm.config
├── .release-scripts-hooks.sh
├── LICENSE
├── README.md
├── build.docker-compose.yml
├── compare.sql
├── dev.docker-compose.yml
├── docker
    └── build.cmd.sh
├── docs
    ├── sts-usage.md
    └── sts-usage.puml
├── hub.docker-compose.yml
├── keycloak-config
    └── moped.json
├── keycloak-storage-provider
    ├── Dockerfile
    ├── pom.xml
    └── src
    │   └── main
    │       ├── java
    │           └── de
    │           │   └── adorsys
    │           │       └── sts
    │           │           └── keycloak
    │           │               ├── AuthenticatorUtil.java
    │           │               ├── Constants.java
    │           │               ├── auth
    │           │                   ├── CustomDirectAccessAuthenticator.java
    │           │                   ├── CustomUsernamePasswordForm.java
    │           │                   └── CustomUsernamePasswordFormFactory.java
    │           │               ├── mapper
    │           │                   └── CustomClaimMapper.java
    │           │               ├── rest
    │           │                   ├── CustomAuthenticationException.java
    │           │                   ├── CustomLoginRequest.java
    │           │                   └── CustomRestClient.java
    │           │               ├── storageprovider
    │           │                   ├── CustomUser.java
    │           │                   ├── CustomUserStorageProvider.java
    │           │                   ├── CustomUserStorageProviderFactory.java
    │           │                   └── Properties.java
    │           │               └── util
    │           │                   └── ImmutableList.java
    │       └── resources
    │           └── META-INF
    │               └── services
    │                   ├── org.keycloak.authentication.AuthenticatorFactory
    │                   ├── org.keycloak.protocol.ProtocolMapper
    │                   └── org.keycloak.storage.UserStorageProviderFactory
├── mongo.docker-compose.yml
├── mysql5.docker-compose.yml
├── mysql8.docker-compose.yml
├── pom.xml
├── postgres.docker-compose.yml
├── scripts
    ├── docker_push.sh
    ├── mvn_deploy.sh
    └── settings.xml
├── sts-client-example
    ├── .editorconfig
    ├── .eslintrc.json
    ├── .gitignore
    ├── .prettierrc.yaml
    ├── Dockerfile
    ├── README.md
    ├── angular.json
    ├── cypress.config.ts
    ├── cypress
    │   ├── e2e
    │   │   └── spec.cy.ts
    │   ├── fixtures
    │   │   └── example.json
    │   ├── support
    │   │   ├── commands.ts
    │   │   ├── component-index.html
    │   │   ├── component.ts
    │   │   └── e2e.ts
    │   └── tsconfig.json
    ├── docker
    │   └── create_env.json.sh
    ├── e2e
    │   ├── cypress.config.ts
    │   ├── cypress
    │   │   ├── e2e
    │   │   │   ├── app.e2e-spec.ts
    │   │   │   └── spec.cy.ts
    │   │   ├── fixtures
    │   │   │   └── example.json
    │   │   ├── support
    │   │   │   ├── commands.ts
    │   │   │   ├── component-index.html
    │   │   │   ├── component.ts
    │   │   │   └── e2e.ts
    │   │   └── tsconfig.json
    │   └── tsconfig.e2e.json
    ├── package.json
    ├── src
    │   ├── app
    │   │   ├── app.component.css
    │   │   ├── app.component.html
    │   │   ├── app.component.ts
    │   │   ├── app.module.ts
    │   │   ├── env
    │   │   │   ├── app-config.ts
    │   │   │   └── sts-client-config.service.ts
    │   │   └── keycloak
    │   │   │   ├── keycloak.http.ts
    │   │   │   └── keycloak.service.ts
    │   ├── assets
    │   │   └── env.json
    │   ├── environments
    │   │   ├── environment.local.ts
    │   │   ├── environment.prod.ts
    │   │   └── environment.ts
    │   ├── favicon.ico
    │   ├── index.html
    │   ├── main.ts
    │   ├── styles.css
    │   ├── test.ts
    │   ├── tsconfig.app.json
    │   └── tsconfig.spec.json
    └── tsconfig.json
├── sts-common
    ├── .gitignore
    ├── README.LAUNCH.MD
    ├── README.LAUNCH2.MD
    ├── docker-compose.yml
    ├── pom.xml
    ├── samplevm-params.txt
    └── src
    │   ├── main
    │       └── java
    │       │   └── de
    │       │       └── adorsys
    │       │           └── sts
    │       │               └── common
    │       │                   ├── ObjectMapperSPI.java
    │       │                   ├── config
    │       │                       ├── AdminResource.java
    │       │                       └── TokenResource.java
    │       │                   ├── converter
    │       │                       └── KeyConverter.java
    │       │                   ├── encrypter
    │       │                       └── JWEEncryptedSelector.java
    │       │                   ├── exceptions
    │       │                       ├── KeyExtractionException.java
    │       │                       ├── UnsupportedEncAlgorithmException.java
    │       │                       └── UnsupportedKeyLengthException.java
    │       │                   ├── lock
    │       │                       └── LockClient.java
    │       │                   ├── model
    │       │                       ├── BaseTypeByteArray.java
    │       │                       ├── BaseTypeString.java
    │       │                       ├── ByteArray.java
    │       │                       └── KeyAndJwk.java
    │       │                   └── util
    │       │                       ├── Base64Encoder.java
    │       │                       ├── EnvProperties.java
    │       │                       ├── ImmutableLists.java
    │       │                       ├── RandomBase64Generator.java
    │       │                       └── RandomBytesGenerator.java
    │   └── test
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── common
    │                           └── tests
    │                               └── BaseMockitoTest.java
├── sts-e2e-tests
    ├── pom.xml
    └── src
    │   ├── main
    │       └── java
    │       │   └── MavenJarPluginWorkaround.java
    │   └── test
    │       ├── java
    │           └── de
    │           │   └── adorsys
    │           │       └── sts
    │           │           └── tests
    │           │               ├── BaseEndpointTest.java
    │           │               ├── BaseSpringTest.java
    │           │               ├── CleanupDbBeforeAfterClass.java
    │           │               ├── CleanupDbBeforeAfterClassListener.java
    │           │               ├── JpaPersistenceAutoConfiguration.java
    │           │               ├── KeyRotationContext.java
    │           │               ├── Resource.java
    │           │               ├── config
    │           │                   ├── WithAdminConfig.java
    │           │                   ├── WithControllableClock.java
    │           │                   ├── WithPasswordGrantConfig.java
    │           │                   ├── WithPopConfig.java
    │           │                   ├── WithRotation.java
    │           │                   ├── WithServerInfo.java
    │           │                   ├── WithTokenExchangeConfig.java
    │           │                   └── WithoutWebSecurityConfig.java
    │           │               └── e2e
    │           │                   ├── AdminControllerJpaTest.java
    │           │                   ├── KeyRotationScheduleConcurrencyJpaTest.java
    │           │                   ├── PasswordGrantControllerJpaTest.java
    │           │                   ├── PopControllerJpaTest.java
    │           │                   ├── PopControllerRotationJpaTest.java
    │           │                   ├── ServerInfoControllerJpaTest.java
    │           │                   ├── alldbsanity
    │           │                       ├── object
    │           │                       │   └── MongoRotationTest.java
    │           │                       └── rdbms
    │           │                       │   ├── BaseJdbcDbTest.java
    │           │                       │   ├── oldcompat
    │           │                       │       └── MysqlFlywayOldDbCompatTest.java
    │           │                       │   └── rotation
    │           │                       │       ├── MysqlFlywayRotationTest.java
    │           │                       │       ├── MysqlLiquibaseRotationTest.java
    │           │                       │       ├── PostgresFlywayRotationTest.java
    │           │                       │       └── PostgresLiquibaseRotationTest.java
    │           │                   ├── testcomponents
    │           │                       ├── AuthServerTestable.java
    │           │                       ├── AuthServersProviderTestable.java
    │           │                       ├── KeyRetrieverServiceTestable.java
    │           │                       └── PopRotationValidator.java
    │           │                   └── tokenexchange
    │           │                       └── TokenExchangeControllerJpaTest.java
    │       └── resources
    │           ├── application-test-db-mysql.yml
    │           ├── application-test-db-postgres.yml
    │           ├── application-test.yml
    │           ├── fixture
    │               ├── admin_controller_request.json
    │               ├── admin_controller_response.json
    │               ├── key_retriever_service.json
    │               ├── old-compat
    │               │   ├── after_rotation_kept.json
    │               │   ├── after_rotation_with_legacy.json
    │               │   ├── key_entry.sql
    │               │   ├── key_store.sql
    │               │   └── old_entries.json
    │               └── test_token.txt
    │           └── init.sql
├── sts-example
    ├── Dockerfile
    ├── README.md
    ├── pom.xml
    └── src
    │   └── main
    │       ├── java
    │           └── de
    │           │   └── adorsys
    │           │       └── sts
    │           │           └── example
    │           │               ├── ExampleApplication.java
    │           │               ├── api
    │           │                   ├── ExampleResourceController.java
    │           │                   ├── ExampleSecretRestController.java
    │           │                   └── LoginRequest.java
    │           │               ├── config
    │           │                   ├── JpaConfiguration.java
    │           │                   ├── MongoConfiguration.java
    │           │                   ├── RestTemplateConfig.java
    │           │                   ├── SecurityConfiguration.java
    │           │                   └── StsConfiguration.java
    │           │               └── service
    │           │                   └── ExampleLoginAdapter.java
    │       └── resources
    │           ├── application-dev.yml
    │           └── application.yml
├── sts-keymanagement
    ├── README.md
    ├── pom.xml
    ├── sts-keymanagement-api
    │   ├── pom.xml
    │   └── src
    │   │   └── main
    │   │       └── java
    │   │           └── de
    │   │               └── adorsys
    │   │                   └── sts
    │   │                       └── keymanagement
    │   │                           ├── config
    │   │                               └── KeyManagementRotationProperties.java
    │   │                           ├── exceptions
    │   │                               └── SecretDecryptionException.java
    │   │                           ├── model
    │   │                               ├── GeneratedStsEntry.java
    │   │                               ├── ImmutableStsKeyEntry.java
    │   │                               ├── KeyRotationResult.java
    │   │                               ├── KeyState.java
    │   │                               ├── KeyUsage.java
    │   │                               ├── PasswordCallbackHandler.java
    │   │                               ├── ServerKeysHolder.java
    │   │                               ├── StsKeyEntry.java
    │   │                               ├── StsKeyEntryImpl.java
    │   │                               ├── StsKeyStore.java
    │   │                               └── UnmodifyableKeystore.java
    │   │                           ├── persistence
    │   │                               └── KeyStoreRepository.java
    │   │                           └── service
    │   │                               ├── DecryptionService.java
    │   │                               ├── KeyConversionService.java
    │   │                               ├── KeyManagementProperties.java
    │   │                               ├── KeyPairGenerator.java
    │   │                               ├── KeyRotationService.java
    │   │                               ├── KeyStoreGenerator.java
    │   │                               ├── KeyStoreInitializer.java
    │   │                               ├── SecretDecryptionService.java
    │   │                               ├── SecretKeyGenerator.java
    │   │                               ├── SecretProvider.java
    │   │                               └── ServerKeyMapProvider.java
    └── sts-keymanagement-impl
    │   ├── pom.xml
    │   └── src
    │       ├── main
    │           └── java
    │           │   └── de
    │           │       └── adorsys
    │           │           └── sts
    │           │               └── keymanagement
    │           │                   ├── model
    │           │                       └── UnmodifyableKeyStoreViewer.java
    │           │                   ├── persistence
    │           │                       ├── CachedKeyStoreRepository.java
    │           │                       └── InMemoryKeyStoreRepository.java
    │           │                   ├── service
    │           │                       ├── DecryptionServiceImpl.java
    │           │                       ├── KeyConversionServiceImpl.java
    │           │                       ├── KeyManagementService.java
    │           │                       ├── KeyPairGeneratorImpl.java
    │           │                       ├── KeyRotationServiceImpl.java
    │           │                       ├── KeyStoreGeneratorImpl.java
    │           │                       ├── KeyStoreInitializerImpl.java
    │           │                       ├── SecretDecryptionServiceImpl.java
    │           │                       └── SecretKeyGeneratorImpl.java
    │           │                   └── util
    │           │                       ├── DateTimeUtils.java
    │           │                       └── StsServerKeyMap.java
    │       └── test
    │           └── java
    │               └── de
    │                   └── adorsys
    │                       └── sts
    │                           ├── CollectionHelpers.java
    │                           └── keymanagement
    │                               └── service
    │                                   └── KeyRotationServiceTest.java
├── sts-persistence-jpa
    ├── README.md
    ├── pom.xml
    └── src
    │   ├── main
    │       ├── java
    │       │   └── de
    │       │   │   └── adorsys
    │       │   │       └── sts
    │       │   │           └── persistence
    │       │   │               └── jpa
    │       │   │                   ├── DatabaseKeyStoreRepository.java
    │       │   │                   ├── DatabaseSecretRepository.java
    │       │   │                   ├── config
    │       │   │                       ├── EnableJpaPersistence.java
    │       │   │                       └── JpaConfiguration.java
    │       │   │                   ├── entity
    │       │   │                       ├── JpaKeyEntryAttributes.java
    │       │   │                       ├── JpaKeyStore.java
    │       │   │                       └── JpaSecret.java
    │       │   │                   ├── mapping
    │       │   │                       ├── KeyStoreEntityMapper.java
    │       │   │                       └── ZonedDateTimeConverter.java
    │       │   │                   └── repository
    │       │   │                       ├── JpaKeyEntryAttributesRepository.java
    │       │   │                       ├── JpaKeyStoreRepository.java
    │       │   │                       └── JpaSecretRepository.java
    │       └── resources
    │       │   ├── application-flyway.yml
    │       │   ├── application-h2.yml
    │       │   ├── application-jpa.yml
    │       │   ├── application-liquibase.yml
    │       │   ├── application-mysql.yml
    │       │   ├── application-postgres.yml
    │       │   ├── db
    │       │       └── migration
    │       │       │   ├── flyway
    │       │       │       ├── h2
    │       │       │       │   ├── V0.19.0.1__create_hibernate_sequence.sql
    │       │       │       │   ├── V0.19.0.2__create_table_keystore.sql
    │       │       │       │   ├── V0.19.0.3__create_table_keyentry.sql
    │       │       │       │   ├── V0.19.0.5__create_table_lock_persistence.sql
    │       │       │       │   ├── V0.26.0.0__add_lastupdate_to_keystore.sql
    │       │       │       │   ├── V0.27.0.0__create_table_secret.sql
    │       │       │       │   ├── V0.27.1.0__enlarge_secret_column_in_table_secret.sql
    │       │       │       │   └── V0.30.0__migrate_to_shedlock.sql
    │       │       │       ├── mysql
    │       │       │       │   ├── V0.19.1.0__create_table_keystore.sql
    │       │       │       │   ├── V0.19.1.1__create_table_keyentry.sql
    │       │       │       │   ├── V0.19.1.2__create_table_lock_persistence.sql
    │       │       │       │   ├── V0.26.0.0__add_lastupdate_to_keystore.sql
    │       │       │       │   ├── V0.27.0.0__create_table_secret.sql
    │       │       │       │   ├── V0.27.1.0__enlarge_secret_column_in_table_secret.sql
    │       │       │       │   └── V0.30.0__migrate_to_shedlock.sql
    │       │       │       └── postgres
    │       │       │       │   ├── V0.19.0.1__create_hibernate_sequence.sql
    │       │       │       │   ├── V0.19.0.2__create_table_keystore.sql
    │       │       │       │   ├── V0.19.0.3__create_table_keyentry.sql
    │       │       │       │   ├── V0.19.0.5__create_table_lock_persistence.sql
    │       │       │       │   ├── V0.26.0.0__add_lastupdate_to_keystore.sql
    │       │       │       │   ├── V0.27.0.0__create_table_secret.sql
    │       │       │       │   ├── V0.27.1.0__enlarge_secret_column_in_table_secret.sql
    │       │       │       │   └── V0.30.0__migrate_to_shedlock.sql
    │       │       │   └── liquibase
    │       │       │       ├── changelog.yml
    │       │       │       └── changelogs
    │       │       │           ├── 01-create-hibernate-sequence.yml
    │       │       │           ├── 02-create-table-keystore.yml
    │       │       │           ├── 03-create-table-keyentry.yml
    │       │       │           ├── 04-create-table-lock_persistence.yml
    │       │       │           ├── 05-add-lastupdate-to-keystore.yml
    │       │       │           ├── 06-create-table-secret.yml
    │       │       │           ├── 07-enlarge-secret-column_in-table-secret.yml
    │       │       │           ├── 08-create_table_sts_lock.yml
    │       │       │           ├── 09-migrate-lock_persistence.yml
    │       │       │           └── 10-drop_table_lock_persistance.yml
    │       │   └── init-postgres-schema.sql
    │   └── test
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── persistence
    │                           └── jpa
    │                               └── mapping
    │                                   └── ZonedDateTimeConverterTest.java
├── sts-persistence-mongo
    ├── README.md
    ├── pom.xml
    └── src
    │   └── main
    │       ├── java
    │           └── de
    │           │   └── adorsys
    │           │       └── sts
    │           │           └── persistence
    │           │               └── mongo
    │           │                   ├── MongoDatabaseKeyStoreRepository.java
    │           │                   ├── MongoDatabaseSecretRepository.java
    │           │                   ├── config
    │           │                       ├── EnableMongoPersistence.java
    │           │                       └── MongoConfiguration.java
    │           │                   ├── entity
    │           │                       ├── KeyEntryAttributesEntity.java
    │           │                       ├── KeyStoreEntity.java
    │           │                       └── SecretEntity.java
    │           │                   ├── mapper
    │           │                       └── KeyStoreEntityMapper.java
    │           │                   └── repository
    │           │                       ├── MongoKeyStoreRepository.java
    │           │                       └── MongoSecretRepository.java
    │       └── resources
    │           └── application-mongo.yml
├── sts-pop
    ├── README.md
    ├── pom.xml
    └── src
    │   └── main
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── pop
    │                           └── PopService.java
├── sts-resource-server
    ├── pom.xml
    └── src
    │   ├── main
    │       └── java
    │       │   └── de
    │       │       └── adorsys
    │       │           └── sts
    │       │               └── resourceserver
    │       │                   ├── ResourceServerError.java
    │       │                   ├── ResourceServerErrors.java
    │       │                   ├── ResourceServerException.java
    │       │                   ├── ResourceServerInfo.java
    │       │                   ├── exception
    │       │                       └── NoJwkFoundException.java
    │       │                   ├── model
    │       │                       ├── ResourceServer.java
    │       │                       ├── ResourceServerAndSecret.java
    │       │                       ├── ResourceServers.java
    │       │                       └── UserCredentials.java
    │       │                   ├── persistence
    │       │                       ├── InMemoryResourceServerRepository.java
    │       │                       └── ResourceServerRepository.java
    │       │                   ├── processing
    │       │                       ├── ResourceServerProcessor.java
    │       │                       └── ResourceServerProcessorService.java
    │       │                   ├── provider
    │       │                       ├── ResourceServersProvider.java
    │       │                       └── STSPropertiesConstants.java
    │       │                   └── service
    │       │                       ├── CachingKeyRetrieverService.java
    │       │                       ├── EncryptionService.java
    │       │                       ├── JweEncryptionService.java
    │       │                       ├── KeyRetrieverService.java
    │       │                       ├── LoggingEncryptionService.java
    │       │                       ├── LoggingKeyRetrieverService.java
    │       │                       ├── RemoteKeyRetrieverService.java
    │       │                       ├── ResourceServerManagementProperties.java
    │       │                       ├── ResourceServerService.java
    │       │                       ├── SecretEncryptionException.java
    │       │                       └── UserDataRepository.java
    │   └── test
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── resourceserver
    │                           └── service
    │                               └── CachingKeyRetrieverServiceTest.java
├── sts-secret-server
    ├── .mvn
    │   └── jvm.config
    ├── Dockerfile
    ├── README.md
    ├── doc
    │   └── secret-server.draw.io.png
    ├── pom.xml
    └── src
    │   ├── main
    │       ├── java
    │       │   └── de
    │       │   │   └── adorsys
    │       │   │       └── sts
    │       │   │           └── secretserver
    │       │   │               ├── SecretServerApplication.java
    │       │   │               └── configuration
    │       │   │                   ├── CorsProperties.java
    │       │   │                   ├── JpaConfiguration.java
    │       │   │                   ├── MongoConfiguration.java
    │       │   │                   ├── OpenApiConfiguration.java
    │       │   │                   ├── SecurityConfiguration.java
    │       │   │                   └── StsConfiguration.java
    │       └── resources
    │       │   ├── application-dev.yml
    │       │   └── application.yml
    │   └── test
    │       ├── docker
    │           └── moped.json
    │       ├── java
    │           └── de
    │           │   └── adorsys
    │           │       └── sts
    │           │           └── secretserver
    │           │               ├── SecretServerApplicationTest.java
    │           │               ├── configuration
    │           │                   └── TestConfiguration.java
    │           │               └── helper
    │           │                   ├── Authentication.java
    │           │                   └── AuthenticationProperties.java
    │       └── resources
    │           ├── application-IT.yml
    │           └── moped.json
├── sts-secret
    ├── pom.xml
    └── src
    │   └── main
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── secret
    │                           ├── CachingSecretServerClient.java
    │                           ├── EncryptedSecret.java
    │                           ├── LoggingSecretServerClient.java
    │                           ├── Secret.java
    │                           ├── SecretEncryptionException.java
    │                           ├── SecretReadException.java
    │                           ├── SecretRepository.java
    │                           └── SecretServerClient.java
├── sts-server-info
    ├── pom.xml
    └── src
    │   └── main
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── serverinfo
    │                           ├── EnableServerInfo.java
    │                           ├── ServerInfoConfiguration.java
    │                           ├── ServerInfoController.java
    │                           └── ServerInfoResponse.java
├── sts-service-component-example
    ├── Dockerfile
    ├── pom.xml
    └── src
    │   └── main
    │       ├── java
    │           └── de
    │           │   └── adorsys
    │           │       └── sts
    │           │           └── servicecomponentexample
    │           │               ├── JpaConfiguration.java
    │           │               ├── MongoConfiguration.java
    │           │               ├── ServiceComponentExampleApplication.java
    │           │               ├── ServiceComponentExampleConfiguration.java
    │           │               ├── ServiceComponentResourceController.java
    │           │               └── WebSecurityConfig.java
    │       └── resources
    │           ├── application-debug.yml
    │           └── application.yml
├── sts-simple-encryption
    ├── pom.xml
    └── src
    │   ├── main
    │       └── java
    │       │   └── de
    │       │       └── adorsys
    │       │           └── sts
    │       │               └── simpleencryption
    │       │                   ├── EncryptionException.java
    │       │                   ├── JsonMappedObjectEncryption.java
    │       │                   ├── KeyProvider.java
    │       │                   ├── ObjectEncryption.java
    │       │                   ├── StaticKeyEncryptionFactory.java
    │       │                   ├── decrypt
    │       │                       ├── Decrypter.java
    │       │                       └── JweDecrypter.java
    │       │                   ├── encrypt
    │       │                       ├── Encrypter.java
    │       │                       └── JweEncrypter.java
    │       │                   └── keyprovider
    │       │                       ├── StaticAesKeyProvider.java
    │       │                       ├── StaticKeyProviderFactory.java
    │       │                       └── StaticRsaKeyProvider.java
    │   └── test
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── simpleencryption
    │                           ├── AsymmetricEncryptionTest.java
    │                           ├── JacksonObjectMapper.java
    │                           ├── SymmetricEncryptionTest.java
    │                           └── TestObject.java
├── sts-spring
    ├── pom.xml
    └── src
    │   ├── main
    │       └── java
    │       │   └── de
    │       │       └── adorsys
    │       │           └── sts
    │       │               ├── ApplicationEventListener.java
    │       │               ├── ResponseUtils.java
    │       │               ├── admin
    │       │                   ├── AdminConfiguration.java
    │       │                   ├── AdminController.java
    │       │                   └── EnableAdmin.java
    │       │               ├── decryption
    │       │                   ├── DecryptionConfiguration.java
    │       │                   ├── EnableDecryption.java
    │       │                   └── secret
    │       │                   │   ├── EnableSecretDecryption.java
    │       │                   │   └── SecretDecryptionConfiguration.java
    │       │               ├── encryption
    │       │                   ├── EnableEncryption.java
    │       │                   └── EncryptionConfiguration.java
    │       │               ├── filter
    │       │                   └── JWTAuthenticationFilter.java
    │       │               ├── keymanagement
    │       │                   ├── EnableKeyManagement.java
    │       │                   ├── KeyManagementConfiguration.java
    │       │                   ├── KeyManagementConfigurationProperties.java
    │       │                   ├── KeyStoreInitializationRunner.java
    │       │                   └── bouncycastle
    │       │                   │   ├── BouncyCastleProviderConfiguration.java
    │       │                   │   └── BouncyCastleProviderRunner.java
    │       │               ├── keyrotation
    │       │                   ├── EnableKeyRotation.java
    │       │                   ├── KeyRotationConfiguration.java
    │       │                   ├── KeyRotationManagementConfigurationProperties.java
    │       │                   └── KeyRotationSchedule.java
    │       │               ├── lock
    │       │                   └── ExecutionLockConfiguration.java
    │       │               ├── objectmapper
    │       │                   ├── EnableJacksonObjectMapping.java
    │       │                   ├── JacksonConfiguration.java
    │       │                   └── JacksonObjectMapper.java
    │       │               ├── pop
    │       │                   ├── EnablePOP.java
    │       │                   ├── PopConfiguration.java
    │       │                   └── PopController.java
    │       │               ├── resourceserver
    │       │                   ├── EnableResourceServerManagement.java
    │       │                   ├── ResourceServerManagementConfiguration.java
    │       │                   ├── ResourceServerManagementConfigurationProperties.java
    │       │                   ├── ResourceServerProcessingConfiguration.java
    │       │                   └── initializer
    │       │                   │   ├── EnableResourceServerInitialization.java
    │       │                   │   ├── ResourceServerInitializationConfiguration.java
    │       │                   │   ├── ResourceServerInitializer.java
    │       │                   │   └── ResourceServerPropertiesProvider.java
    │       │               ├── secretserver
    │       │                   ├── EnableSecretServer.java
    │       │                   ├── SecretServerConfiguration.java
    │       │                   ├── SecretServerRestController.java
    │       │                   └── encryption
    │       │                   │   ├── EncryptedSecretRepository.java
    │       │                   │   └── InMemorySecretRepository.java
    │       │               ├── secretserverclient
    │       │                   ├── EnableSecretServerClient.java
    │       │                   ├── LoggingSecretProvider.java
    │       │                   ├── SecretServerClientConfiguration.java
    │       │                   ├── SecretServerClientSecretProvider.java
    │       │                   ├── SecurityContextTokenProvider.java
    │       │                   └── TokenProvider.java
    │       │               └── token
    │       │                   ├── TokenCoreConfiguration.java
    │       │                   ├── authentication
    │       │                       ├── AuthServerConfigurationProperties.java
    │       │                       ├── BearerTokenAuthentication.java
    │       │                       ├── ConfigurationPropertiesAuthServerProvider.java
    │       │                       ├── EnableTokenAuthentication.java
    │       │                       ├── LoggingAuthServer.java
    │       │                       ├── LoggingBearerTokenValidator.java
    │       │                       ├── TokenAuthenticationConfiguration.java
    │       │                       ├── TokenAuthenticationService.java
    │       │                       └── securitycontext
    │       │                       │   ├── EnableSecurityContextSecretProviding.java
    │       │                       │   ├── SecurityContextSecretProvider.java
    │       │                       │   └── SecurityContextSecretProvidingConfiguration.java
    │       │                   ├── passwordgrant
    │       │                       ├── EnablePasswordGrant.java
    │       │                       ├── PasswordGrantConfiguration.java
    │       │                       └── PasswordGrantController.java
    │       │                   └── tokenexchange
    │       │                       ├── client
    │       │                           ├── EnableTokenExchangeClient.java
    │       │                           ├── LoggingTokenExchangeClient.java
    │       │                           ├── RestTokenExchangeClient.java
    │       │                           └── TokenExchangeClientConfiguration.java
    │       │                       └── server
    │       │                           ├── EnableTokenExchangeServer.java
    │       │                           ├── TokenExchangeController.java
    │       │                           ├── TokenExchangeRestController.java
    │       │                           └── TokenExchangeServerConfiguration.java
    │   └── test
    │       ├── java
    │           └── de
    │           │   └── adorsys
    │           │       └── sts
    │           │           └── secretserver
    │           │               └── encryption
    │           │                   └── EncryptedSecretRepositoryTest.java
    │       └── resources
    │           └── application-IT.yml
├── sts-token-auth
    ├── pom.xml
    └── src
    │   ├── main
    │       └── java
    │       │   └── de
    │       │       └── adorsys
    │       │           └── sts
    │       │               └── tokenauth
    │       │                   ├── AuthServer.java
    │       │                   ├── AuthServersProvider.java
    │       │                   ├── BearerToken.java
    │       │                   ├── BearerTokenValidator.java
    │       │                   ├── JWTClaimsSetVerifierWithLogs.java
    │       │                   ├── KeycloakTokenRolesParser.java
    │       │                   ├── MultiAuthJWSKeySelector.java
    │       │                   ├── RolesExtractor.java
    │       │                   └── StringListRolesParser.java
    │   └── test
    │       └── java
    │           └── de
    │               └── adorsys
    │                   └── sts
    │                       └── tokenauth
    │                           ├── AuthServerTest.java
    │                           └── JWTClaimsSetVerifierWithLogsTest.java
└── sts-token
    ├── pom.xml
    └── src
        └── main
            └── java
                └── de
                    └── adorsys
                        └── sts
                            └── token
                                ├── InvalidParameterException.java
                                ├── JwtClaimSetHelper.java
                                ├── MissingParameterException.java
                                ├── api
                                    ├── TokenRequestForm.java
                                    └── TokenResponse.java
                                ├── passwordgrant
                                    └── PasswordGrantService.java
                                ├── secretserver
                                    └── TokenExchangeSecretServerClient.java
                                └── tokenexchange
                                    ├── JwtTokenExchangeService.java
                                    ├── LoggingTokenExchangeClaimsService.java
                                    ├── LoggingTokenExchangeService.java
                                    ├── TokenExchangeClaimsService.java
                                    ├── TokenExchangeClient.java
                                    ├── TokenExchangeConstants.java
                                    ├── TokenExchangeRequest.java
                                    ├── TokenExchangeSecretClaimsService.java
                                    ├── TokenExchangeService.java
                                    └── TokenValidationException.java


/.github/workflows/frontend.yml:
--------------------------------------------------------------------------------
 1 | name: Frontend build
 2 | on:
 3 |   workflow_call:
 4 | 
 5 | jobs:
 6 | 
 7 |   build_node:
 8 |     name: Build & Test frontend
 9 |     runs-on: ubuntu-latest
10 |     defaults:
11 |       run:
12 |         working-directory: ./sts-client-example
13 |     steps:
14 |       - name: Step 1 - Checkout repository code
15 |         uses: actions/checkout@v4
16 |         with:
17 |           sparse-checkout: 'sts-client-example'
18 |           sparse-checkout-cone-mode: false
19 | 
20 |       - name: Step 2 - setup node
21 |         uses: actions/setup-node@v4
22 |         with:
23 |           node-version: 20
24 | 
25 |       - run: npm i
26 | 
27 |       - run: npm run prod
28 | 
29 |       - name: Upload artifacts
30 |         uses: actions/upload-artifact@v4
31 |         with:
32 |           name: dist
33 |           path: |
34 |             ${{ github.workspace }}/sts-client-example/dist
35 |             ${{ github.workspace }}/sts-client-example/docker/create_env.json.sh
36 |           overwrite: false
37 |           if-no-files-found: error


--------------------------------------------------------------------------------
/.github/workflows/pull-requests.yml:
--------------------------------------------------------------------------------
 1 | name: Actions on pull requests
 2 | on:
 3 |   pull_request:
 4 |     branches:
 5 |       - develop
 6 |       - master
 7 | 
 8 | jobs:
 9 |   build-java:
10 |     name: Build & Test backend
11 |     runs-on: ubuntu-latest
12 |     steps:
13 |       - name: Step 1 - Checkout repository code
14 |         uses: actions/checkout@v4
15 | 
16 |       - name: Step 2 - Set up JDK 17
17 |         uses: actions/setup-java@v4
18 |         with:
19 |           java-version: '17'
20 |           distribution: 'temurin'
21 |           cache: 'maven'
22 | 
23 |       - name: Step 3 - Build & Test
24 |         run: mvn clean verify -ntp
25 | 
26 |       - name: Upload artifacts
27 |         uses: actions/upload-artifact@v4
28 |         with:
29 |           name: artifacts
30 |           path: |
31 |             ${{ github.workspace }}/**/*.jar
32 |             ${{ github.workspace }}/**/Dockerfile
33 |           overwrite: false
34 |           if-no-files-found: error
35 | 
36 |       - name: Step 4 - Upload coverage reports to Codecov
37 |         uses: codecov/codecov-action@v4
38 |         with:
39 |           token: ${{ secrets.CODECOV_TOKEN }}
40 |           verbose: true
41 | 
42 |   build-frontend:
43 |     uses: ./.github/workflows/frontend.yml
44 |     secrets: inherit
45 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
 1 | # Compiled class file
 2 | *.class
 3 | 
 4 | # Log file
 5 | *.log
 6 | 
 7 | # BlueJ files
 8 | *.ctxt
 9 | 
10 | # Mobile Tools for Java (J2ME)
11 | .mtj.tmp/
12 | 
13 | # Package Files #
14 | *.jar
15 | *.war
16 | *.ear
17 | *.zip
18 | *.tar.gz
19 | *.rar
20 | 
21 | # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
22 | hs_err_pid*
23 | **/target/
24 | 
25 | .classpath
26 | .project
27 | .settings/
28 | src/main/resources/.~lock.sts_login_data.xls#
29 | 
30 | # IntelliJ
31 | .idea/
32 | *.iml
33 | 
34 | **/.DS_Store
35 | 
36 | **/pom.xml.versionsBackup
37 | .docker-build/
38 | .docker/
39 | 
40 | sts_h2_db.*.db
41 | /sts-client-example/package-lock.json
42 | 


--------------------------------------------------------------------------------
/.gitlab-ci.yaml:
--------------------------------------------------------------------------------
 1 | stages:
 2 |   - build
 3 |   - deploy
 4 | 
 5 | cache:
 6 |   paths:
 7 |     - .m2/repository
 8 | 
 9 | variables:
10 |   MAVEN_OPTS: "-Dmaven.repo.local=$CI_PROJECT_DIR/.m2/repository"
11 | 
12 |   DOCKER_HOST: "tcp://docker:2375"
13 |   DOCKER_TLS_CERTDIR: ""
14 | 
15 | Build & Test:
16 |   stage: build
17 |   services:
18 |     - docker:dind
19 |   image: adorsys/ci-build
20 |   script:
21 |     - mvn --settings .travis/settings.xml clean verify -B -V -ntp
22 |     - cd sts-client-example
23 |     - npm ci
24 |     - npm run prod
25 | 
26 | Deploy:
27 |   stage: deploy
28 |   image: adorsys/ci-build
29 |   script:
30 |     - mvn --settings .travis/settings.xml package deploy -Prelease -DskipTests -B -U -ntp
31 |   only:
32 |     - tags
33 | 


--------------------------------------------------------------------------------
/.gitmodules:
--------------------------------------------------------------------------------
1 | [submodule "release-scripts"]
2 | 	path = release-scripts
3 | 	url = https://github.com/borisskert/release-scripts
4 | 


--------------------------------------------------------------------------------
/.mvn/jvm.config:
--------------------------------------------------------------------------------
1 | --add-exports java.base/sun.security.x509=ALL-UNNAMED
2 | 


--------------------------------------------------------------------------------
/build.docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3.1'
 2 | services:
 3 |   sts-maven:
 4 |     image: adorsys/ci-build:latest
 5 |     volumes:
 6 |       - ./:/opt/src
 7 |       - ./.docker-build/.m2:/tmp/m2
 8 |     environment:
 9 |       - JAVA_TOOL_OPTIONS=-Xmx2048m
10 |       - MAVEN_OPTS=-Dmaven.repo.local=/tmp/m2/repository
11 |     working_dir: /opt/src
12 |     entrypoint: ""
13 |     command:
14 |       - /opt/src/docker/build.cmd.sh
15 |   sts-client:
16 |     image: adorsys/ci-build:latest
17 |     volumes:
18 |       - ./sts-client-example:/opt/src
19 |     working_dir: /opt/src
20 |     entrypoint: ""
21 |     command:
22 |       - /opt/src/docker/compile/build.cmd.bash
23 | 


--------------------------------------------------------------------------------
/compare.sql:
--------------------------------------------------------------------------------
1 | select j1_0.id, j1_0.subject, j1_0.value
2 | from sts.secret j1_0 [42122-200]] [
3 | 
4 | select j1_0.id, j1_0.subject, j1_0.value
5 | from sts.secret j1_0];
6 | 


--------------------------------------------------------------------------------
/docker/build.cmd.sh:
--------------------------------------------------------------------------------
1 | #!/bin/sh
2 | set -e
3 | 
4 | mvn clean package
5 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM quay.io/keycloak/keycloak:25.0.2
2 | 
3 | COPY target/keycloak-storage-provider.jar /opt/keycloak/providers/
4 | 
5 | RUN /opt/keycloak/bin/kc.sh
6 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/java/de/adorsys/sts/keycloak/Constants.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keycloak;
2 | 
3 | public interface Constants {
4 |     String STS_LOGIN_URL = "stsLoginUrl";
5 |     String CUSTOM_USER_SECRET_NOTE_KEY = "USER_SECRET";
6 |     String CUSTOM_SCOPE_NOTE_KEY = "SCOPE";
7 | }
8 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/java/de/adorsys/sts/keycloak/auth/CustomUsernamePasswordFormFactory.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keycloak.auth;
 2 | 
 3 | import org.keycloak.authentication.Authenticator;
 4 | import org.keycloak.authentication.authenticators.browser.UsernamePasswordForm;
 5 | import org.keycloak.authentication.authenticators.browser.UsernamePasswordFormFactory;
 6 | import org.keycloak.models.KeycloakSession;
 7 | 
 8 | public class CustomUsernamePasswordFormFactory extends UsernamePasswordFormFactory {
 9 | 
10 |     private static final String PROVIDER_ID = "custom-auth-username-password-form";
11 |     private static final UsernamePasswordForm SINGLETON = new CustomUsernamePasswordForm();
12 | 
13 |     @Override
14 |     public Authenticator create(KeycloakSession session) {
15 |         return SINGLETON;
16 |     }
17 | 
18 |     @Override
19 |     public String getId() {
20 |         return PROVIDER_ID;
21 |     }
22 | 
23 |     @Override
24 |     public String getDisplayType() {
25 |         return "Custom Username Password Form";
26 |     }
27 | 
28 |     @Override
29 |     public String getHelpText() {
30 |         return "Validates a username and password from login form.";
31 |     }
32 | }
33 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/java/de/adorsys/sts/keycloak/rest/CustomAuthenticationException.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keycloak.rest;
2 | 
3 | public class CustomAuthenticationException extends RuntimeException {
4 | 
5 |     public CustomAuthenticationException(String message) {
6 |         super(message);
7 |     }
8 | }
9 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/java/de/adorsys/sts/keycloak/storageprovider/CustomUserStorageProviderFactory.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keycloak.storageprovider;
 2 | 
 3 | import org.keycloak.component.ComponentModel;
 4 | import org.keycloak.models.KeycloakSession;
 5 | import org.keycloak.provider.ProviderConfigProperty;
 6 | import org.keycloak.storage.UserStorageProviderFactory;
 7 | 
 8 | import java.util.Collections;
 9 | import java.util.List;
10 | 
11 | public class CustomUserStorageProviderFactory implements UserStorageProviderFactory<CustomUserStorageProvider> {
12 | 
13 |     @Override
14 |     public CustomUserStorageProvider create(KeycloakSession keycloakSession, ComponentModel componentModel) {
15 |         return new CustomUserStorageProvider(keycloakSession, componentModel);
16 |     }
17 | 
18 |     @Override
19 |     public String getId() {
20 |         return "custom-user-storage-provider";
21 |     }
22 | 
23 |     @Override
24 |     public List<ProviderConfigProperty> getConfigProperties() {
25 |         return Collections.singletonList(
26 |                 Properties.stsAuthEndpointProperty
27 |         );
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/java/de/adorsys/sts/keycloak/storageprovider/Properties.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keycloak.storageprovider;
 2 | 
 3 | import de.adorsys.sts.keycloak.Constants;
 4 | import org.keycloak.provider.ProviderConfigProperty;
 5 | 
 6 | public class Properties {
 7 | 
 8 |     private Properties() {
 9 |         throw new RuntimeException();
10 |     }
11 | 
12 |     public static ProviderConfigProperty stsAuthEndpointProperty = new ProviderConfigProperty();
13 | 
14 |     static {
15 |         stsAuthEndpointProperty.setName(Constants.STS_LOGIN_URL);
16 |         stsAuthEndpointProperty.setLabel("STS login url");
17 |         stsAuthEndpointProperty.setType(ProviderConfigProperty.STRING_TYPE);
18 |         stsAuthEndpointProperty.setHelpText("STS auth endpoint url");
19 |     }
20 | }
21 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/resources/META-INF/services/org.keycloak.authentication.AuthenticatorFactory:
--------------------------------------------------------------------------------
1 | de.adorsys.sts.keycloak.auth.CustomUsernamePasswordFormFactory
2 | de.adorsys.sts.keycloak.auth.CustomDirectAccessAuthenticator
3 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/resources/META-INF/services/org.keycloak.protocol.ProtocolMapper:
--------------------------------------------------------------------------------
1 | de.adorsys.sts.keycloak.mapper.CustomClaimMapper
2 | 


--------------------------------------------------------------------------------
/keycloak-storage-provider/src/main/resources/META-INF/services/org.keycloak.storage.UserStorageProviderFactory:
--------------------------------------------------------------------------------
1 | de.adorsys.sts.keycloak.storageprovider.CustomUserStorageProviderFactory
2 | 


--------------------------------------------------------------------------------
/scripts/mvn_deploy.sh:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 | 
3 | set -e
4 | 
5 | echo "$GPG_SECRET_KEY" | base64 --decode | $GPG_EXECUTABLE --import --no-tty --batch --yes || true
6 | echo "$GPG_OWNERTRUST" | base64 --decode | $GPG_EXECUTABLE --import-ownertrust --no-tty --batch --yes || true
7 | 
8 | mvn clean deploy -ntp --settings scripts/settings.xml gpg:sign -Prelease -DskipTests -U || exit 1
9 | 


--------------------------------------------------------------------------------
/sts-client-example/.editorconfig:
--------------------------------------------------------------------------------
 1 | # Editor configuration, see http://editorconfig.org
 2 | root = true
 3 | 
 4 | [*]
 5 | charset = utf-8
 6 | indent_style = space
 7 | indent_size = 2
 8 | insert_final_newline = true
 9 | trim_trailing_whitespace = true
10 | 
11 | [*.md]
12 | max_line_length = off
13 | trim_trailing_whitespace = false
14 | 


--------------------------------------------------------------------------------
/sts-client-example/.gitignore:
--------------------------------------------------------------------------------
 1 | # See http://help.github.com/ignore-files/ for more about ignoring files.
 2 | 
 3 | # compiled output
 4 | /dist
 5 | /tmp
 6 | /out-tsc
 7 | 
 8 | # dependencies
 9 | /node_modules
10 | 
11 | # IDEs and editors
12 | /.idea
13 | .project
14 | .classpath
15 | .c9/
16 | *.launch
17 | .settings/
18 | *.sublime-workspace
19 | 
20 | # IDE - VSCode
21 | .vscode/*
22 | !.vscode/settings.json
23 | !.vscode/tasks.json
24 | !.vscode/launch.json
25 | !.vscode/extensions.json
26 | 
27 | # misc
28 | /.sass-cache
29 | /connect.lock
30 | /coverage
31 | /libpeerconnection.log
32 | npm-debug.log
33 | testem.log
34 | /typings
35 | yarn-error.log
36 | 
37 | # e2e
38 | /e2e/*.js
39 | /e2e/*.map
40 | 
41 | # System Files
42 | .DS_Store
43 | Thumbs.db
44 | /.angular/
45 | 
46 | .nx/cache
47 | .nx/workspace-data
48 | 


--------------------------------------------------------------------------------
/sts-client-example/.prettierrc.yaml:
--------------------------------------------------------------------------------
 1 | singleQuote: true
 2 | printWidth: 140
 3 | trailingComma: none
 4 | arrowParens: avoid
 5 | semi: true
 6 | overrides:
 7 |   - files: "*.component.html"
 8 |     options:
 9 |       parser: angular
10 |   - files: "*.html"
11 |     options:
12 |       parser: html
13 | 


--------------------------------------------------------------------------------
/sts-client-example/Dockerfile:
--------------------------------------------------------------------------------
1 | # https://github.com/adorsys/dockerhub-pipeline-images/tree/master/nginx
2 | # https://hub.docker.com/r/adorsys/nginx/
3 | FROM adorsys/nginx:ubi
4 | 
5 | COPY ./dist/ .
6 | COPY ./docker/create_env.json.sh /docker-entrypoint.d/
7 | 


--------------------------------------------------------------------------------
/sts-client-example/cypress.config.ts:
--------------------------------------------------------------------------------
 1 | import { defineConfig } from 'cypress'
 2 | 
 3 | export default defineConfig({
 4 |   
 5 |   e2e: {
 6 |     'baseUrl': 'http://localhost:4200'
 7 |   },
 8 |   
 9 |   
10 |   component: {
11 |     devServer: {
12 |       framework: 'angular',
13 |       bundler: 'webpack',
14 |     },
15 |     specPattern: '**/*.cy.ts'
16 |   }
17 |   
18 | })


--------------------------------------------------------------------------------
/sts-client-example/cypress/e2e/spec.cy.ts:
--------------------------------------------------------------------------------
1 | describe('My First Test', () => {
2 |   it('Visits the initial project page', () => {
3 |     cy.visit('/')
4 |     cy.contains('app is running!')
5 |   })
6 | })
7 | 


--------------------------------------------------------------------------------
/sts-client-example/cypress/fixtures/example.json:
--------------------------------------------------------------------------------
1 | {
2 |     "name": "Using fixtures to represent data",
3 |     "email": "hello@cypress.io"
4 | }
5 |  


--------------------------------------------------------------------------------
/sts-client-example/cypress/support/component-index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |   <head>
 4 |     <meta charset="utf-8">
 5 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
 6 |     <meta name="viewport" content="width=device-width,initial-scale=1.0">
 7 |     <title>Components App</title>
 8 |   </head>
 9 |   <body>
10 |     <div data-cy-root></div>
11 |   </body>
12 | </html>


--------------------------------------------------------------------------------
/sts-client-example/cypress/support/component.ts:
--------------------------------------------------------------------------------
 1 | // ***********************************************************
 2 | // This example support/component.ts is processed and
 3 | // loaded automatically before your test files.
 4 | //
 5 | // This is a great place to put global configuration and
 6 | // behavior that modifies Cypress.
 7 | //
 8 | // You can change the location of this file or turn off
 9 | // automatically serving support files with the
10 | // 'supportFile' configuration option.
11 | //
12 | // You can read more here:
13 | // https://on.cypress.io/configuration
14 | // ***********************************************************
15 | 
16 | // Import commands.js using ES2015 syntax:
17 | import './commands'
18 | 
19 | // Alternatively you can use CommonJS syntax:
20 | // require('./commands')
21 | 
22 | import { mount } from 'cypress/angular'
23 | 
24 | // Augment the Cypress namespace to include type definitions for
25 | // your custom command.
26 | // Alternatively, can be defined in cypress/support/component.d.ts
27 | // with a <reference path="./component" /> at the top of your spec.
28 | declare global {
29 |   namespace Cypress {
30 |     interface Chainable {
31 |       mount: typeof mount
32 |     }
33 |   }
34 | }
35 | 
36 | Cypress.Commands.add('mount', mount)
37 | 
38 | // Example use:
39 | // cy.mount(MyComponent)
40 | 


--------------------------------------------------------------------------------
/sts-client-example/cypress/support/e2e.ts:
--------------------------------------------------------------------------------
 1 | // ***********************************************************
 2 | // This example support/e2e.ts is processed and
 3 | // loaded automatically before your test files.
 4 | //
 5 | // This is a great place to put global configuration and
 6 | // behavior that modifies Cypress.
 7 | //
 8 | // You can change the location of this file or turn off
 9 | // automatically serving support files with the
10 | // 'supportFile' configuration option.
11 | //
12 | // You can read more here:
13 | // https://on.cypress.io/configuration
14 | // ***********************************************************
15 | 
16 | // When a command from ./commands is ready to use, import with `import './commands'` syntax
17 | // import './commands';
18 | 


--------------------------------------------------------------------------------
/sts-client-example/cypress/tsconfig.json:
--------------------------------------------------------------------------------
1 | {
2 |   "extends": "../tsconfig.json",
3 |   "include": ["**/*.ts"],
4 |   "compilerOptions": {
5 |     "sourceMap": false,
6 |     "types": ["cypress"]
7 |   }
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-client-example/docker/create_env.json.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | FILE_NAME=/usr/share/nginx/html/env.json
 4 | 
 5 | echo '{' > ${FILE_NAME}
 6 | 
 7 | # convert all env variables to JSON (consider only with prefix)
 8 | # https://stackoverflow.com/a/25765360
 9 | while IFS='=' read -r name value ; do
10 |   if [[ ${name} == "${PREFIX:-NG_}"* ]]; then
11 |     printf '  "%s": "%s",\n' "${name}" "${value//\"/\\\"}" >> ${FILE_NAME}
12 |   fi
13 | done < <(env)
14 | 
15 | # remove last comma
16 | # https://stackoverflow.com/questions/27305177
17 | truncate -s -2 ${FILE_NAME}
18 | 
19 | echo -e "\n}" >> ${FILE_NAME}
20 | 


--------------------------------------------------------------------------------
/sts-client-example/e2e/cypress.config.ts:
--------------------------------------------------------------------------------
 1 | import { defineConfig } from 'cypress'
 2 | 
 3 | export default defineConfig({
 4 |   
 5 |   e2e: {
 6 |     'baseUrl': 'http://localhost:4200'
 7 |   },
 8 |   
 9 |   
10 |   component: {
11 |     devServer: {
12 |       framework: 'angular',
13 |       bundler: 'webpack',
14 |     },
15 |     specPattern: '**/*.cy.ts'
16 |   }
17 |   
18 | })


--------------------------------------------------------------------------------
/sts-client-example/e2e/cypress/e2e/app.e2e-spec.ts:
--------------------------------------------------------------------------------
1 | 
2 | 


--------------------------------------------------------------------------------
/sts-client-example/e2e/cypress/e2e/spec.cy.ts:
--------------------------------------------------------------------------------
1 | describe('sts-client-example App', () => {
2 |   it('should display welcome message', () => {
3 |     cy.visit('/')
4 |     cy.get('app-root h1').should('have.text', 'Welcome to app!')
5 |   })
6 | })
7 | 


--------------------------------------------------------------------------------
/sts-client-example/e2e/cypress/fixtures/example.json:
--------------------------------------------------------------------------------
1 | {
2 |     "name": "Using fixtures to represent data",
3 |     "email": "hello@cypress.io"
4 | }
5 |  


--------------------------------------------------------------------------------
/sts-client-example/e2e/cypress/support/component-index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |   <head>
 4 |     <meta charset="utf-8">
 5 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
 6 |     <meta name="viewport" content="width=device-width,initial-scale=1.0">
 7 |     <title>Components App</title>
 8 |   </head>
 9 |   <body>
10 |     <div data-cy-root></div>
11 |   </body>
12 | </html>


--------------------------------------------------------------------------------
/sts-client-example/e2e/cypress/support/e2e.ts:
--------------------------------------------------------------------------------
 1 | // ***********************************************************
 2 | // This example support/e2e.ts is processed and
 3 | // loaded automatically before your test files.
 4 | //
 5 | // This is a great place to put global configuration and
 6 | // behavior that modifies Cypress.
 7 | //
 8 | // You can change the location of this file or turn off
 9 | // automatically serving support files with the
10 | // 'supportFile' configuration option.
11 | //
12 | // You can read more here:
13 | // https://on.cypress.io/configuration
14 | // ***********************************************************
15 | 
16 | // When a command from ./commands is ready to use, import with `import './commands'` syntax
17 | // import './commands';
18 | 


--------------------------------------------------------------------------------
/sts-client-example/e2e/cypress/tsconfig.json:
--------------------------------------------------------------------------------
1 | {
2 |   "extends": "../tsconfig.json",
3 |   "include": ["**/*.ts"],
4 |   "compilerOptions": {
5 |     "sourceMap": false,
6 |     "types": ["cypress"]
7 |   }
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-client-example/e2e/tsconfig.e2e.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "extends": "../tsconfig.json",
 3 |   "compilerOptions": {
 4 |     "outDir": "../out-tsc/e2e",
 5 |     "baseUrl": "./",
 6 |     "module": "commonjs",
 7 |     "target": "es2022",
 8 |     "types": [
 9 |       "jest",
10 |       "node"
11 |     ]
12 |   }
13 | }
14 | 


--------------------------------------------------------------------------------
/sts-client-example/src/app/app.component.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/adorsys/secure-token-service/33372231e6c52aed0cd4c05d3a5441b2067719d0/sts-client-example/src/app/app.component.css


--------------------------------------------------------------------------------
/sts-client-example/src/app/app.component.html:
--------------------------------------------------------------------------------
 1 | <div id="content-area" class="col-md-9" role="main">
 2 |   <div id="content">
 3 |     <h2><span>Client Example Application</span></h2>
 4 | 
 5 |     <div *ngIf="initSuccess">
 6 |       <div *ngIf="!isLoggedIn">
 7 |         <button (click)="login()">Sign In</button>
 8 |       </div>
 9 | 
10 |       <div *ngIf="isLoggedIn">
11 |         <h3>Secret claims: {{ getSecretClaims() }}</h3>
12 | 
13 |         <button (click)="logout()">Sign Out</button>
14 |       </div>
15 | 
16 |       <button (click)="getSampleData()">GET sample data</button>
17 |       <button (click)="getSecret()">GET secret</button>
18 | 
19 |       <div>{{ sampleData | json }}</div>
20 |     </div>
21 | 
22 |     <div *ngIf="!initSuccess">Initialization failed!</div>
23 |   </div>
24 | </div>
25 | 


--------------------------------------------------------------------------------
/sts-client-example/src/app/app.module.ts:
--------------------------------------------------------------------------------
 1 | import { BrowserModule } from '@angular/platform-browser';
 2 | import { APP_INITIALIZER, NgModule } from '@angular/core';
 3 | 
 4 | import { AppComponent } from './app.component';
 5 | import { KeycloakHttp } from './keycloak/keycloak.http';
 6 | import { KeycloakService } from './keycloak/keycloak.service';
 7 | import { StsClientConfig } from './env/sts-client-config.service';
 8 | import { AppConfig } from './env/app-config';
 9 | import { provideHttpClient } from '@angular/common/http';
10 | 
11 | @NgModule({
12 |   declarations: [AppComponent],
13 |   imports: [BrowserModule],
14 |   providers: [
15 |     AppConfig,
16 |     {
17 |       provide: APP_INITIALIZER,
18 |       useFactory: (config: AppConfig) => () => config.load(),
19 |       deps: [AppConfig],
20 |       multi: true
21 |     },
22 |     provideHttpClient(),
23 |     StsClientConfig,
24 |     KeycloakHttp,
25 |     KeycloakService
26 |   ],
27 |   bootstrap: [AppComponent]
28 | })
29 | export class AppModule {}
30 | 


--------------------------------------------------------------------------------
/sts-client-example/src/app/env/sts-client-config.service.ts:
--------------------------------------------------------------------------------
 1 | import { Injectable } from '@angular/core';
 2 | import { AppConfig } from './app-config';
 3 | 
 4 | @Injectable()
 5 | export class StsClientConfig {
 6 |   constructor(private appConfig: AppConfig) {}
 7 | 
 8 |   public getKeycloakAuthUrl(): string {
 9 |     return this.appConfig.getValue('NG_KEYCLOAK_AUTH_URL');
10 |   }
11 | 
12 |   public getKeycloakRealm(): string {
13 |     return this.appConfig.getValue('NG_KEYCLOAK_REALM');
14 |   }
15 | 
16 |   public getKeycloakClientId(): string {
17 |     return this.appConfig.getValue('NG_KEYCLOAK_CLIENT_ID');
18 |   }
19 | 
20 |   public getKeycloakScope(): string {
21 |     return this.appConfig.getValue('NG_KEYCLOAK_SCOPE');
22 |   }
23 | 
24 |   public getServiceUrl(): string {
25 |     return this.appConfig.getValue('NG_SERVICE_URL');
26 |   }
27 | 
28 |   public getSecretUrl(): string {
29 |     return this.appConfig.getValue('NG_SECRET_URL');
30 |   }
31 | }
32 | 


--------------------------------------------------------------------------------
/sts-client-example/src/app/keycloak/keycloak.http.ts:
--------------------------------------------------------------------------------
 1 | import { Injectable } from '@angular/core';
 2 | import { HttpHeaders, HttpClient } from '@angular/common/http';
 3 | import { KeycloakService } from './keycloak.service';
 4 | import { Observable } from 'rxjs';
 5 | 
 6 | @Injectable()
 7 | export class KeycloakHttp {
 8 |   constructor(
 9 |     private http: HttpClient,
10 |     private keycloak: KeycloakService
11 |   ) {}
12 | 
13 |   request(url: string): Observable<any> {
14 |     const headers = new HttpHeaders();
15 |     if (this.keycloak.hasToken) {
16 |       headers.append('Authorization', `Bearer ${this.keycloak.token}`);
17 |     }
18 | 
19 |     return this.http.get(url, { headers });
20 |   }
21 | }
22 | 


--------------------------------------------------------------------------------
/sts-client-example/src/assets/env.json:
--------------------------------------------------------------------------------
1 | {
2 |   "NG_KEYCLOAK_AUTH_URL": "http://localhost:8180",
3 |   "NG_KEYCLOAK_REALM": "moped",
4 |   "NG_KEYCLOAK_CLIENT_ID": "moped-client",
5 |   "NG_KEYCLOAK_SCOPE": "sts-service-component",
6 |   "NG_SERVICE_URL": "http://localhost:8887/helloworld",
7 |   "NG_SECRET_URL": "http://localhost:8887/secret"
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-client-example/src/environments/environment.local.ts:
--------------------------------------------------------------------------------
1 | export const environment = {
2 |   production: false,
3 |   envJson: 'assets/env.json'
4 | };
5 | 


--------------------------------------------------------------------------------
/sts-client-example/src/environments/environment.prod.ts:
--------------------------------------------------------------------------------
1 | export const environment = {
2 |   production: true,
3 |   envJson: 'env.json'
4 | };
5 | 


--------------------------------------------------------------------------------
/sts-client-example/src/environments/environment.ts:
--------------------------------------------------------------------------------
 1 | // This file can be replaced during build by using the `fileReplacements` array.
 2 | // `ng build ---prod` replaces `environment.ts` with `environment.prod.ts`.
 3 | // The list of file replacements can be found in `angular.json`.
 4 | 
 5 | export const environment = {
 6 |   production: false,
 7 |   envJson: 'env.json'
 8 | };
 9 | 
10 | /*
11 |  * In development mode, for easier debugging, you can ignore zone related error
12 |  * stack frames such as `zone.run`/`zoneDelegate.invokeTask` by importing the
13 |  * below file. Don't forget to comment it out in production mode
14 |  * because it will have a performance impact when errors are thrown
15 |  */
16 | // import 'zone.js/dist/zone-error';  // Included with Angular CLI.
17 | 


--------------------------------------------------------------------------------
/sts-client-example/src/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/adorsys/secure-token-service/33372231e6c52aed0cd4c05d3a5441b2067719d0/sts-client-example/src/favicon.ico


--------------------------------------------------------------------------------
/sts-client-example/src/index.html:
--------------------------------------------------------------------------------
 1 | <!doctype html>
 2 | <html lang="en">
 3 |   <head>
 4 |     <meta charset="utf-8" />
 5 |     <title>StsClientExample</title>
 6 |     <base href="/" />
 7 | 
 8 |     <meta name="viewport" content="width=device-width, initial-scale=1" />
 9 |     <link rel="icon" type="image/x-icon" href="favicon.ico" />
10 |   </head>
11 |   <body>
12 |     <script>
13 |       window.sts__KEYCLOAK_AUTH_URL = '__KEYCLOAK_AUTH_URL__';
14 |     </script>
15 |     <script>
16 |       window.sts__KEYCLOAK_REALM = '__KEYCLOAK_REALM__';
17 |     </script>
18 |     <script>
19 |       window.sts__KEYCLOAK_CLIENT_ID = '__KEYCLOAK_CLIENT_ID__';
20 |     </script>
21 |     <script>
22 |       window.sts__KEYCLOAK_SCOPE = '__KEYCLOAK_SCOPE__';
23 |     </script>
24 |     <script>
25 |       window.sts__SERVICE_URL = '__SERVICE_URL__';
26 |     </script>
27 |     <app-root></app-root>
28 |   </body>
29 | </html>
30 | 


--------------------------------------------------------------------------------
/sts-client-example/src/main.ts:
--------------------------------------------------------------------------------
 1 | import { enableProdMode } from '@angular/core';
 2 | import { platformBrowserDynamic } from '@angular/platform-browser-dynamic';
 3 | 
 4 | import { AppModule } from './app/app.module';
 5 | import { environment } from './environments/environment';
 6 | 
 7 | if (environment.production) {
 8 |   enableProdMode();
 9 | }
10 | 
11 | platformBrowserDynamic().bootstrapModule(AppModule);
12 | 


--------------------------------------------------------------------------------
/sts-client-example/src/styles.css:
--------------------------------------------------------------------------------
1 | /* You can add global styles to this file, and also import other style files */
2 | 


--------------------------------------------------------------------------------
/sts-client-example/src/test.ts:
--------------------------------------------------------------------------------
 1 | // This file is required by karma.conf.js and loads recursively all the .spec and framework files
 2 | 
 3 | import { getTestBed } from '@angular/core/testing';
 4 | import { BrowserDynamicTestingModule, platformBrowserDynamicTesting } from '@angular/platform-browser-dynamic/testing';
 5 | 
 6 | // Unfortunately there's no typing for the `__karma__` variable. Just declare it as any.
 7 | declare const __karma__: any;
 8 | declare const require: any;
 9 | 
10 | // Prevent Karma from running prematurely.
11 | __karma__.loaded = function () {};
12 | 
13 | // First, initialize the Angular testing environment.
14 | getTestBed().initTestEnvironment(BrowserDynamicTestingModule, platformBrowserDynamicTesting(), {
15 |   teardown: { destroyAfterEach: false }
16 | });
17 | // Then we find all the tests.
18 | const context = require.context('./', true, /\.spec\.ts$/);
19 | // And load the modules.
20 | context.keys().map(context);
21 | // Finally, start Karma to run the tests.
22 | __karma__.start();
23 | 


--------------------------------------------------------------------------------
/sts-client-example/src/tsconfig.app.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "extends": "../tsconfig.json",
 3 |   "compilerOptions": {
 4 |     "outDir": "../out-tsc/app",
 5 |     "baseUrl": "./",
 6 |     "types": []
 7 |   },
 8 |   "files": [
 9 |     "main.ts"
10 |   ],
11 |   "include": [
12 |     "src/**/*.d.ts"
13 |   ]
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-client-example/src/tsconfig.spec.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "extends": "../tsconfig.json",
 3 |   "compilerOptions": {
 4 |     "outDir": "../out-tsc/spec",
 5 |     "baseUrl": "./",
 6 |     "types": [
 7 |       "jest",
 8 |       "node"
 9 |     ]
10 |   },
11 |   "files": [
12 |     "test.ts"
13 |   ],
14 |   "include": [
15 |     "**/*.spec.ts",
16 |     "**/*.d.ts"
17 |   ]
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-client-example/tsconfig.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "compileOnSave": false,
 3 |   "compilerOptions": {
 4 |     "outDir": "./dist/out-tsc",
 5 |     "sourceMap": true,
 6 |     "declaration": false,
 7 |     "esModuleInterop": true,
 8 |     "moduleResolution": "node",
 9 |     "emitDecoratorMetadata": true,
10 |     "experimentalDecorators": true,
11 |     "target": "es2022",
12 |     "typeRoots": [
13 |       "node_modules/@types"
14 |     ],
15 |     "lib": [
16 |       "es2017",
17 |       "dom"
18 |     ],
19 |     "module": "es2020",
20 |     "baseUrl": "./",
21 |     "noUnusedParameters": false
22 |   }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-common/.gitignore:
--------------------------------------------------------------------------------
 1 | # Compiled class file
 2 | *.class
 3 | 
 4 | # Log file
 5 | *.log
 6 | 
 7 | # BlueJ files
 8 | *.ctxt
 9 | 
10 | # Mobile Tools for Java (J2ME)
11 | .mtj.tmp/
12 | 
13 | # Package Files #
14 | *.jar
15 | *.war
16 | *.ear
17 | *.zip
18 | *.tar.gz
19 | *.rar
20 | 
21 | # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
22 | hs_err_pid*
23 | /target/
24 | 
25 | .classpath
26 | .project
27 | .settings/
28 | src/main/resources/.~lock.sts_login_data.xls#
29 | 


--------------------------------------------------------------------------------
/sts-common/README.LAUNCH2.MD:
--------------------------------------------------------------------------------
1 | Use this VM Argument to start sts as a java application.
2 | 
3 | Multibanking mock can be user as sample resource server.
4 | 
5 | ```
6 | -DRESOURCE_SERVER_NAMES=mbservice,mbmock -Dmbservice_AUDIENCE_NAME=mbservice -Dmbservice_ENDPOINT_URL=http://localhost:8081 -Dmbservice_JWKS_URL=http://localhost:8081/pop -Dmbservice_USER_SECRET_CLAIM=custom_secret -Dmbmock_AUDIENCE_NAME=http://localhost:10010 -Dmbmock_ENDPOINT_URL=http://localhost:10010 -Dmbmock_JWKS_URL=http://localhost:10010/pop -Dmbmock_USER_SECRET_CLAIM=mbmock_user_secret -DKEYSTORE_PASSWORD=assdfo32814
7 | ```


--------------------------------------------------------------------------------
/sts-common/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3.1'
 2 | services:
 3 |     sts:
 4 |         image: java:openjdk-8u91-jdk
 5 |         working_dir: /app
 6 |         volumes:
 7 |             - ./target:/app
 8 |         environment:
 9 |           server.port: 8080
10 |         command: java -jar /app/sts-core.jar
11 |         ports:
12 |             - "8080:8080"
13 |             


--------------------------------------------------------------------------------
/sts-common/samplevm-params.txt:
--------------------------------------------------------------------------------
1 | -DRESOURCE_SERVER_NAMES=mbk_service,mbk_mock -Dmbk_service_AUDIENCE_NAME=http://localhost:8081 -Dmbk_service_ENDPOINT_URL=http://localhost:8081 -Dmbk_service_JWKS_URL=http://localhost:8081/pop -Dmbk_service__USER_SECRET_CLAIM=mbk_service_user_secret -Dmbk_mock_AUDIENCE_NAME=http://localhost:10010 -Dmbk_mock_ENDPOINT_URL=http://localhost:10010 -Dmbk_mock_JWKS_URL=http://localhost:10010/pop -Dmbk_mock__USER_SECRET_CLAIM=mbk_mock_user_secret -DKEYSTORE_PASSWORD=assdfo32814


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/ObjectMapperSPI.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common;
 2 | 
 3 | import java.io.IOException;
 4 | import java.util.Map;
 5 | 
 6 | public interface ObjectMapperSPI {
 7 | 
 8 | 	<T> T readValue(byte[] src, Class<T> klass) throws IOException;
 9 | 
10 |     <T> T readValue(String src, Class<T> klass) throws IOException;
11 | 	Map<String, String> readValue(String src) throws IOException;
12 | 
13 | 	<T> byte[] writeValueAsBytes(T t) throws IOException;
14 | 	<T> String writeValueAsString(T t) throws IOException;
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/config/AdminResource.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.config;
 2 | 
 3 | import java.lang.annotation.Documented;
 4 | import java.lang.annotation.Retention;
 5 | import java.lang.annotation.RetentionPolicy;
 6 | import java.lang.annotation.Target;
 7 | 
 8 | /**
 9 |  * Marks a resource public so the swagger documentation can be exported.
10 |  *  
11 |  * @author fpo
12 |  *
13 |  */
14 | @Target({ java.lang.annotation.ElementType.TYPE })
15 | @Retention(RetentionPolicy.RUNTIME)
16 | @Documented
17 | public @interface AdminResource {
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/config/TokenResource.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.config;
 2 | 
 3 | import java.lang.annotation.Documented;
 4 | import java.lang.annotation.Retention;
 5 | import java.lang.annotation.RetentionPolicy;
 6 | import java.lang.annotation.Target;
 7 | 
 8 | /**
 9 |  * Marks a resource public so the swagger documentation can be exported.
10 |  *  
11 |  * @author fpo
12 |  *
13 |  */
14 | @Target({ java.lang.annotation.ElementType.TYPE })
15 | @Retention(RetentionPolicy.RUNTIME)
16 | @Documented
17 | public @interface TokenResource {
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/exceptions/KeyExtractionException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.exceptions;
 2 | 
 3 | 
 4 | public class KeyExtractionException extends RuntimeException {
 5 | 	private static final long serialVersionUID = -102550810645375099L;
 6 | 
 7 | 	public KeyExtractionException(String message) {
 8 | 		super(message);
 9 | 	}
10 | 
11 | 	public KeyExtractionException(String message, Throwable cause) {
12 | 		super(message, cause);
13 | 	}
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/exceptions/UnsupportedEncAlgorithmException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.exceptions;
 2 | 
 3 | 
 4 | public class UnsupportedEncAlgorithmException extends RuntimeException {
 5 |     private static final long serialVersionUID = -102550810645375099L;
 6 | 
 7 |     public UnsupportedEncAlgorithmException(String message) {
 8 |         super(message);
 9 |     }
10 | 
11 |     public UnsupportedEncAlgorithmException(String message, Throwable cause) {
12 |         super(message, cause);
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/exceptions/UnsupportedKeyLengthException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.exceptions;
 2 | 
 3 | 
 4 | public class UnsupportedKeyLengthException extends RuntimeException {
 5 | 	private static final long serialVersionUID = -102550810645375099L;
 6 | 
 7 | 	public UnsupportedKeyLengthException(String message) {
 8 | 		super(message);
 9 | 	}
10 | 
11 | 	public UnsupportedKeyLengthException(String message, Throwable cause) {
12 | 		super(message, cause);
13 | 	}
14 | 	
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/lock/LockClient.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.common.lock;
2 | 
3 | public interface LockClient {
4 | 
5 |     void executeIfOwned(String rotationLockName, Runnable toExecute);
6 | }
7 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/model/BaseTypeByteArray.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.model;
 2 | 
 3 | import java.io.Serializable;
 4 | import java.util.Arrays;
 5 | 
 6 | public class BaseTypeByteArray implements Serializable {
 7 |     private byte[] value;
 8 | 
 9 |     protected BaseTypeByteArray() {}
10 | 
11 |     protected BaseTypeByteArray(byte[] value) {
12 |         this.value = value;
13 |     }
14 | 
15 |     public byte[] getValue() {
16 |         return value;
17 |     }
18 | 
19 |     @Override
20 |     public boolean equals(Object o) {
21 |         if (this == o) return true;
22 |         if (o == null || getClass() != o.getClass()) return false;
23 | 
24 |         BaseTypeByteArray that = (BaseTypeByteArray) o;
25 | 
26 |         return Arrays.equals(value, that.value);
27 | 
28 |     }
29 | 
30 |     @Override
31 |     public int hashCode() {
32 |         return value != null ? value.hashCode() : 0;
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/model/BaseTypeString.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.model;
 2 | 
 3 | import java.io.Serializable;
 4 | import java.lang.reflect.Type;
 5 | 
 6 | public class BaseTypeString implements Serializable, Type {
 7 | 
 8 |     private static final long serialVersionUID = 3569239558130703592L;
 9 |     private String value;
10 | 
11 |     protected BaseTypeString() {
12 |     }
13 | 
14 |     protected BaseTypeString(String value) {
15 |         this.value = value;
16 |     }
17 | 
18 |     public String getValue() {
19 |         return value;
20 |     }
21 | 
22 |     @Override
23 |     public String toString() {
24 |         return this.getClass().getSimpleName() + "{\'" + value + "\'}";
25 |     }
26 | 
27 |     @Override
28 |     public boolean equals(Object o) {
29 |         if (this == o) return true;
30 |         if (o == null || getClass() != o.getClass()) return false;
31 | 
32 |         BaseTypeString that = (BaseTypeString) o;
33 | 
34 |         return value != null ? value.equals(that.value) : that.value == null;
35 | 
36 |     }
37 | 
38 |     @Override
39 |     public int hashCode() {
40 |         return value != null ? value.hashCode() : 0;
41 |     }
42 | }
43 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/model/ByteArray.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.model;
 2 | 
 3 | 
 4 | public class ByteArray extends BaseTypeByteArray {
 5 |     public ByteArray(byte[] value) {
 6 |         super(value);
 7 |     }
 8 | 
 9 |     public ByteArray(int[] unsignedOctets) {
10 |         super(toSigned(unsignedOctets));
11 |     }
12 | 
13 |     private static byte[] toSigned(int[] integers) {
14 |         byte[] bytes = new byte[integers.length];
15 | 
16 |         for(int i = 0; i < integers.length; i++) {
17 |             int integer = integers[i];
18 |             bytes[i] = (byte)integer;
19 |         }
20 | 
21 |         return bytes;
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/model/KeyAndJwk.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.model;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWK;
 4 | 
 5 | import java.security.Key;
 6 | 
 7 | public class KeyAndJwk {
 8 |     public final Key key;
 9 |     public final JWK jwk;
10 |     public KeyAndJwk(Key key, JWK jwk) {
11 |         this.key = key;
12 |         this.jwk = jwk;
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/util/Base64Encoder.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.util;
 2 | 
 3 | import de.adorsys.sts.common.model.ByteArray;
 4 | 
 5 | import java.util.Base64;
 6 | 
 7 | public class Base64Encoder {
 8 | 
 9 |     private static final Base64.Encoder BASE64_URL_ENCODER = Base64.getUrlEncoder().withoutPadding();
10 | 
11 |     public String toBase64(ByteArray byteArray) {
12 |         return toBase64(byteArray.getValue());
13 |     }
14 | 
15 |     public String toBase64(byte[] bytes) {
16 |         byte[] encodedBase64InBytes = BASE64_URL_ENCODER.encode(bytes);
17 | 
18 |         return new String(encodedBase64InBytes);
19 |     }
20 | 
21 | }
22 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/util/EnvProperties.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.util;
 2 | 
 3 | public final class EnvProperties {
 4 | 
 5 |     public static String getEnvOrSysProp(String propName, boolean optional) {
 6 | 		String propValue = System.getenv(propName);
 7 | 
 8 | 		if(isBlank(propValue))propValue = System.getProperty(propName);
 9 | 		
10 | 		if(isBlank(propValue)) {
11 | 			if (optional)return null;
12 | 			throw new IllegalStateException("Missing Environmen property " + propName);
13 | 		}
14 | 		return propValue;
15 | 	}
16 | 
17 | 	public static String getEnvOrSysProp(String propName, String defaultValue) {
18 | 		String propValue = System.getenv(propName);
19 | 		
20 | 		if(isBlank(propValue))propValue = System.getProperty(propName);
21 | 		
22 | 		if(isBlank(propValue))return defaultValue;
23 | 		
24 | 		return propValue;
25 | 	}
26 | 
27 | 	private static boolean isBlank(String value) {
28 |     	return null == value || value.isEmpty();
29 | 	}
30 | }
31 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/util/ImmutableLists.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.util;
 2 | 
 3 | import java.util.ArrayList;
 4 | import java.util.Arrays;
 5 | import java.util.Collections;
 6 | import java.util.List;
 7 | 
 8 | public class ImmutableLists {
 9 | 
10 |     private static final List EMPTY_LIST = Collections.unmodifiableList(new ArrayList<>());
11 | 
12 |     public static <T> List<T> emptyList() {
13 |         return EMPTY_LIST;
14 |     }
15 | 
16 |     public static <T> List<T> of(T object, T... objects) {
17 |         ArrayList<T> list = new ArrayList<>();
18 | 
19 |         list.add(object);
20 | 
21 |         if(objects != null) {
22 |             list.addAll(Arrays.asList(objects));
23 |         }
24 | 
25 |         return Collections.unmodifiableList(list);
26 |     }
27 | 
28 |     private ImmutableLists() {
29 |         throw new IllegalStateException("not supported");
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/util/RandomBase64Generator.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.util;
 2 | 
 3 | import de.adorsys.sts.common.model.ByteArray;
 4 | 
 5 | public class RandomBase64Generator {
 6 | 
 7 |     private final RandomBytesGenerator randomBytesGenerator = new RandomBytesGenerator();
 8 |     private final Base64Encoder base64Encoder = new Base64Encoder();
 9 | 
10 |     public String generate(int bytesLength) {
11 |         ByteArray stateBytes = randomBytesGenerator.generate(bytesLength);
12 |         return base64Encoder.toBase64(stateBytes);
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-common/src/main/java/de/adorsys/sts/common/util/RandomBytesGenerator.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.util;
 2 | 
 3 | import de.adorsys.sts.common.model.ByteArray;
 4 | 
 5 | import java.security.SecureRandom;
 6 | 
 7 | public class RandomBytesGenerator {
 8 | 
 9 |     public ByteArray generate(int size) {
10 |         byte[] generatedBytes = new byte[size];
11 | 
12 |         SecureRandom random = new SecureRandom();
13 |         random.nextBytes(generatedBytes);
14 | 
15 |         return new ByteArray(generatedBytes);
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-common/src/test/java/de/adorsys/sts/common/tests/BaseMockitoTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.common.tests;
 2 | 
 3 | import org.junit.jupiter.api.AfterEach;
 4 | import org.junit.jupiter.api.BeforeEach;
 5 | import org.mockito.Mockito;
 6 | import org.mockito.MockitoAnnotations;
 7 | 
 8 | public abstract class BaseMockitoTest {
 9 | 
10 |     private AutoCloseable closeable;
11 | 
12 |     @BeforeEach
13 |     public void setup() {
14 |         closeable = MockitoAnnotations.openMocks(this);
15 |     }
16 | 
17 |     @AfterEach
18 |     public void validate() throws Exception {
19 |         Mockito.validateMockitoUsage();
20 |         closeable.close();
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/main/java/MavenJarPluginWorkaround.java:
--------------------------------------------------------------------------------
1 | public class MavenJarPluginWorkaround {
2 | }
3 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/BaseEndpointTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests;
 2 | 
 3 | import de.adorsys.sts.common.tests.BaseMockitoTest;
 4 | import org.junit.jupiter.api.extension.ExtendWith;
 5 | import org.springframework.beans.factory.annotation.Autowired;
 6 | import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc;
 7 | import org.springframework.boot.test.context.SpringBootTest;
 8 | import org.springframework.test.context.ActiveProfiles;
 9 | import org.springframework.test.context.junit.jupiter.SpringExtension;
10 | import org.springframework.test.web.servlet.MockMvc;
11 | 
12 | /**
13 |  * Endpoint test that assumes we use H2 as backing storage.
14 |  */
15 | @ExtendWith(SpringExtension.class)
16 | @SpringBootTest(properties="spring.main.banner-mode=off", webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT)
17 | @ActiveProfiles("test")
18 | @AutoConfigureMockMvc
19 | public abstract class BaseEndpointTest extends BaseMockitoTest {
20 | 
21 |     @Autowired
22 |     protected MockMvc mvc;
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/BaseSpringTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests;
 2 | 
 3 | import de.adorsys.sts.common.tests.BaseMockitoTest;
 4 | import org.junit.jupiter.api.extension.ExtendWith;
 5 | import org.springframework.boot.test.context.SpringBootTest;
 6 | import org.springframework.test.context.ActiveProfiles;
 7 | import org.springframework.test.context.junit.jupiter.SpringExtension;
 8 | 
 9 | /**
10 |  * Test that assumes we do not do REST calls focusing on pure internals
11 |  */
12 | @ExtendWith(SpringExtension.class)
13 | @SpringBootTest(properties="spring.main.banner-mode=off", webEnvironment = SpringBootTest.WebEnvironment.NONE)
14 | @ActiveProfiles("test")
15 | public abstract class BaseSpringTest extends BaseMockitoTest {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/CleanupDbBeforeAfterClass.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests;
 2 | 
 3 | import org.springframework.test.context.TestExecutionListeners;
 4 | 
 5 | import java.lang.annotation.ElementType;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.RetentionPolicy;
 8 | import java.lang.annotation.Target;
 9 | 
10 | @Target(ElementType.TYPE)
11 | @Retention(RetentionPolicy.RUNTIME)
12 | @TestExecutionListeners(value = CleanupDbBeforeAfterClassListener.class,
13 |         mergeMode = TestExecutionListeners.MergeMode.MERGE_WITH_DEFAULTS)
14 | public @interface CleanupDbBeforeAfterClass {
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/CleanupDbBeforeAfterClassListener.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests;
 2 | 
 3 | import org.springframework.context.ApplicationContext;
 4 | import org.springframework.jdbc.core.JdbcOperations;
 5 | import org.springframework.test.context.TestContext;
 6 | import org.springframework.test.context.support.AbstractTestExecutionListener;
 7 | 
 8 | /**
 9 |  * Listener that drops data in H2 before and after test class.
10 |  */
11 | public class CleanupDbBeforeAfterClassListener extends AbstractTestExecutionListener {
12 | 
13 |     private static final int ORDER = 3000;
14 | 
15 |     @Override
16 |     public int getOrder() {
17 |         return ORDER;
18 |     }
19 | 
20 |     @Override
21 |     public void beforeTestClass(TestContext testContext) {
22 |         dropAll(testContext);
23 |     }
24 | 
25 |     @Override
26 |     public void afterTestClass(TestContext testContext) {
27 |         dropAll(testContext);
28 |     }
29 | 
30 |     private void dropAll(TestContext testContext) {
31 |         ApplicationContext appContext = testContext.getApplicationContext();
32 |         JdbcOperations jdbcOper = appContext.getBean(JdbcOperations.class);
33 |         jdbcOper.update("DROP ALL OBJECTS DELETE FILES");
34 |     }
35 | }
36 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/JpaPersistenceAutoConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.config.EnableJpaPersistence;
 4 | import de.flapdoodle.embed.mongo.spring.autoconfigure.EmbeddedMongoAutoConfiguration;
 5 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 6 | import org.springframework.boot.autoconfigure.mongo.MongoAutoConfiguration;
 7 | 
 8 | import java.lang.annotation.Inherited;
 9 | import java.lang.annotation.Retention;
10 | import java.lang.annotation.RetentionPolicy;
11 | 
12 | @Inherited
13 | @Retention(RetentionPolicy.RUNTIME)
14 | @EnableJpaPersistence
15 | @EnableAutoConfiguration(exclude = {EmbeddedMongoAutoConfiguration.class, MongoAutoConfiguration.class})
16 | public @interface JpaPersistenceAutoConfiguration {
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/Resource.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests;
 2 | 
 3 | import com.google.common.io.Resources;
 4 | import lombok.SneakyThrows;
 5 | import lombok.experimental.UtilityClass;
 6 | 
 7 | import java.nio.charset.StandardCharsets;
 8 | 
 9 | @UtilityClass
10 | public class Resource {
11 | 
12 |     @SneakyThrows
13 |     public String read(String path) {
14 |         return Resources.toString(Resources.getResource(path), StandardCharsets.UTF_8);
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/config/WithAdminConfig.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.config;
 2 | 
 3 | import de.adorsys.sts.admin.EnableAdmin;
 4 | import de.adorsys.sts.resourceserver.initializer.EnableResourceServerInitialization;
 5 | import de.adorsys.sts.resourceserver.persistence.InMemoryResourceServerRepository;
 6 | import de.adorsys.sts.resourceserver.persistence.ResourceServerRepository;
 7 | import org.springframework.context.annotation.Bean;
 8 | import org.springframework.context.annotation.Primary;
 9 | 
10 | @EnableAdmin
11 | @EnableResourceServerInitialization
12 | public class WithAdminConfig {
13 | 
14 |     @Primary
15 |     @Bean
16 |     ResourceServerRepository resourceServerRepository() {
17 |         return new InMemoryResourceServerRepository();
18 |     }
19 | 
20 | }
21 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/config/WithPopConfig.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.tests.config;
2 | 
3 | import de.adorsys.sts.pop.EnablePOP;
4 | 
5 | @EnablePOP
6 | public class WithPopConfig {
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/config/WithRotation.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.tests.config;
2 | 
3 | import de.adorsys.sts.keyrotation.EnableKeyRotation;
4 | 
5 | @EnableKeyRotation
6 | public class WithRotation {
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/config/WithServerInfo.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.tests.config;
2 | 
3 | import de.adorsys.sts.serverinfo.EnableServerInfo;
4 | 
5 | @EnableServerInfo
6 | public class WithServerInfo {
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/config/WithoutWebSecurityConfig.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.config;
 2 | 
 3 | import org.springframework.context.annotation.Bean;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 6 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
 7 | import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
 8 | import org.springframework.security.web.SecurityFilterChain;
 9 | 
10 | @Configuration
11 | @EnableWebSecurity
12 | public class WithoutWebSecurityConfig {
13 | 
14 |     @Bean
15 |     protected SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
16 |         return http
17 |                 .csrf(AbstractHttpConfigurer::disable)
18 |                 .authorizeHttpRequests(request -> request.anyRequest().permitAll())
19 |                 .build();
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/PopControllerRotationJpaTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e;
 2 | 
 3 | import de.adorsys.sts.tests.BaseEndpointTest;
 4 | import de.adorsys.sts.tests.CleanupDbBeforeAfterClass;
 5 | import de.adorsys.sts.tests.JpaPersistenceAutoConfiguration;
 6 | import de.adorsys.sts.tests.KeyRotationContext;
 7 | import de.adorsys.sts.tests.e2e.testcomponents.PopRotationValidator;
 8 | import lombok.SneakyThrows;
 9 | import org.junit.jupiter.api.Test;
10 | import org.springframework.beans.factory.annotation.Autowired;
11 | 
12 | @KeyRotationContext
13 | @JpaPersistenceAutoConfiguration
14 | @CleanupDbBeforeAfterClass
15 | class PopControllerRotationJpaTest extends BaseEndpointTest {
16 | 
17 |     @Autowired
18 |     private PopRotationValidator validator;
19 | 
20 |     @Test
21 |     @SneakyThrows
22 |     void testPopRotates() {
23 |         validator.testPopRotates();
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/alldbsanity/object/MongoRotationTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e.alldbsanity.object;
 2 | 
 3 | import de.adorsys.sts.persistence.mongo.config.EnableMongoPersistence;
 4 | import de.adorsys.sts.tests.BaseSpringTest;
 5 | import de.adorsys.sts.tests.KeyRotationContext;
 6 | import de.adorsys.sts.tests.e2e.testcomponents.PopRotationValidator;
 7 | import org.junit.jupiter.api.Test;
 8 | import org.springframework.beans.factory.annotation.Autowired;
 9 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
10 | import org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration;
11 | import org.springframework.boot.test.context.SpringBootTest;
12 | import org.springframework.test.context.ActiveProfiles;
13 | 
14 | @KeyRotationContext
15 | @EnableMongoPersistence
16 | @EnableAutoConfiguration(exclude = DataSourceAutoConfiguration.class)
17 | @ActiveProfiles(profiles = {"mongo"})
18 | @SpringBootTest(properties = "de.flapdoodle.mongodb.embedded.version=5.0.5")
19 | class MongoRotationTest extends BaseSpringTest {
20 | 
21 |     @Autowired
22 |     private PopRotationValidator validator;
23 | 
24 |     @Test
25 |     void testPopRotates() {
26 |         validator.testPopRotates();
27 |     }
28 | }
29 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/alldbsanity/rdbms/rotation/MysqlFlywayRotationTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e.alldbsanity.rdbms.rotation;
 2 | 
 3 | import de.adorsys.sts.tests.KeyRotationContext;
 4 | import de.adorsys.sts.tests.e2e.alldbsanity.rdbms.BaseJdbcDbTest;
 5 | import de.adorsys.sts.tests.e2e.testcomponents.PopRotationValidator;
 6 | import org.junit.jupiter.api.Test;
 7 | import org.springframework.beans.factory.annotation.Autowired;
 8 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 9 | import org.springframework.test.context.ActiveProfiles;
10 | 
11 | @KeyRotationContext
12 | @EnableAutoConfiguration
13 | @ActiveProfiles(profiles = {"jpa", "flyway", "mysql", "test-db-mysql"})
14 | class MysqlFlywayRotationTest extends BaseJdbcDbTest {
15 | 
16 |     @Autowired
17 |     private PopRotationValidator validator;
18 | 
19 |     @Test
20 |     void testMigratesAndPopRotates() {
21 |         validator.testPopRotates();
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/alldbsanity/rdbms/rotation/MysqlLiquibaseRotationTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e.alldbsanity.rdbms.rotation;
 2 | 
 3 | import de.adorsys.sts.tests.KeyRotationContext;
 4 | import de.adorsys.sts.tests.e2e.alldbsanity.rdbms.BaseJdbcDbTest;
 5 | import de.adorsys.sts.tests.e2e.testcomponents.PopRotationValidator;
 6 | import org.junit.jupiter.api.Test;
 7 | import org.springframework.beans.factory.annotation.Autowired;
 8 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 9 | import org.springframework.test.context.ActiveProfiles;
10 | 
11 | @KeyRotationContext
12 | @EnableAutoConfiguration
13 | @ActiveProfiles(profiles = {"jpa", "liquibase", "mysql", "test-db-mysql"})
14 | class MysqlLiquibaseRotationTest extends BaseJdbcDbTest {
15 | 
16 |     @Autowired
17 |     private PopRotationValidator validator;
18 | 
19 |     @Test
20 |     void testMigratesAndPopRotates() {
21 |         validator.testPopRotates();
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/alldbsanity/rdbms/rotation/PostgresFlywayRotationTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e.alldbsanity.rdbms.rotation;
 2 | 
 3 | import de.adorsys.sts.tests.KeyRotationContext;
 4 | import de.adorsys.sts.tests.e2e.alldbsanity.rdbms.BaseJdbcDbTest;
 5 | import de.adorsys.sts.tests.e2e.testcomponents.PopRotationValidator;
 6 | import org.junit.jupiter.api.Test;
 7 | import org.springframework.beans.factory.annotation.Autowired;
 8 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 9 | import org.springframework.test.context.ActiveProfiles;
10 | 
11 | @KeyRotationContext
12 | @EnableAutoConfiguration
13 | @ActiveProfiles(profiles = {"jpa", "flyway", "postgres", "test-db-postgres"})
14 | class PostgresFlywayRotationTest extends BaseJdbcDbTest {
15 | 
16 |     @Autowired
17 |     private PopRotationValidator validator;
18 | 
19 |     @Test
20 |     void testMigratesAndPopRotates() {
21 |         validator.testPopRotates();
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/alldbsanity/rdbms/rotation/PostgresLiquibaseRotationTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e.alldbsanity.rdbms.rotation;
 2 | 
 3 | import de.adorsys.sts.tests.KeyRotationContext;
 4 | import de.adorsys.sts.tests.e2e.alldbsanity.rdbms.BaseJdbcDbTest;
 5 | import de.adorsys.sts.tests.e2e.testcomponents.PopRotationValidator;
 6 | import org.junit.jupiter.api.Test;
 7 | import org.springframework.beans.factory.annotation.Autowired;
 8 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 9 | import org.springframework.test.context.ActiveProfiles;
10 | 
11 | @KeyRotationContext
12 | @EnableAutoConfiguration
13 | @ActiveProfiles(profiles = {"jpa", "liquibase", "postgres", "test-db-postgres"})
14 | class PostgresLiquibaseRotationTest extends BaseJdbcDbTest {
15 | 
16 |     @Autowired
17 |     private PopRotationValidator validator;
18 | 
19 |     @Test
20 |     void testMigratesAndPopRotates() {
21 |         validator.testPopRotates();
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/testcomponents/AuthServerTestable.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e.testcomponents;
 2 | 
 3 | import com.nimbusds.jose.jwk.OctetSequenceKey;
 4 | import de.adorsys.sts.token.authentication.LoggingAuthServer;
 5 | 
 6 | import java.security.Key;
 7 | 
 8 | public class AuthServerTestable extends LoggingAuthServer {
 9 | 
10 |     public AuthServerTestable(String name, String issUrl, String jwksUrl, int refreshIntervalSeconds, String keyCloakUrl) {
11 |         super(name, issUrl, jwksUrl, refreshIntervalSeconds, keyCloakUrl);
12 |     }
13 | 
14 |     @Override
15 |     public Key getJWK(String keyID) throws JsonWebKeyRetrievalException {
16 |         OctetSequenceKey jwk = new OctetSequenceKey.Builder("12345678901234567890123456789012".getBytes()).build();
17 |         return jwk.toSecretKey();
18 |     }
19 | }
20 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/java/de/adorsys/sts/tests/e2e/testcomponents/KeyRetrieverServiceTestable.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tests.e2e.testcomponents;
 2 | 
 3 | import com.google.common.base.Charsets;
 4 | import com.google.common.io.Resources;
 5 | import com.nimbusds.jose.jwk.JWKSet;
 6 | import de.adorsys.sts.resourceserver.service.KeyRetrieverService;
 7 | import lombok.SneakyThrows;
 8 | 
 9 | import java.net.URL;
10 | 
11 | public class KeyRetrieverServiceTestable implements KeyRetrieverService {
12 |     @Override
13 |     @SneakyThrows
14 |     public JWKSet retrieve(String audience) {
15 |         URL url = Resources.getResource("fixture/key_retriever_service.json");
16 |         return JWKSet.parse(Resources.toString(url, Charsets.UTF_8));
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/resources/application-test-db-mysql.yml:
--------------------------------------------------------------------------------
1 | spring:
2 |   datasource:
3 |     url: jdbc:tc:mysql:8.0.36://127.0.0.1/sts?serverTimezone=UTC
4 |     driver-class-name: org.testcontainers.jdbc.ContainerDatabaseDriver
5 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/resources/application-test-db-postgres.yml:
--------------------------------------------------------------------------------
1 | spring:
2 |   datasource:
3 |     url: jdbc:tc:postgresql:12://127.0.0.1/sts?TC_INITSCRIPT=init.sql
4 |     driver-class-name: org.testcontainers.jdbc.ContainerDatabaseDriver
5 | 


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/resources/fixture/admin_controller_request.json:
--------------------------------------------------------------------------------
1 | {
2 |   "endpointUrl" : "http://localhost:8080/multibanking-service",
3 |   "userSecretClaimName" : "userSecret",
4 |   "idpServer" : false,
5 |   "jwksUrl" : "http://localhost:8000/test",
6 |   "clientId" : "sts-tests",
7 |   "audience" : "add-example"
8 | }


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/resources/fixture/admin_controller_response.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "servers":[
 3 |     {
 4 |       "endpointUrl":null,
 5 |       "userSecretClaimName":null,
 6 |       "idpServer":false,
 7 |       "jwksUrl":"http://localhost:8888/pop",
 8 |       "clientId":null,
 9 |       "audience":"sts"
10 |     },
11 |     {
12 |       "endpointUrl":null,
13 |       "userSecretClaimName":null,
14 |       "idpServer":false,
15 |       "jwksUrl":"http://localhost:8887/pop",
16 |       "clientId":null,
17 |       "audience":"sts-service-component-example"
18 |     },
19 |     {
20 |       "endpointUrl":null,
21 |       "userSecretClaimName":null,
22 |       "idpServer":false,
23 |       "jwksUrl":"http://sts-service-component:8887/service-component/pop",
24 |       "clientId":null,
25 |       "audience":"sts-service-component"
26 |     }]
27 | }


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/resources/fixture/test_token.txt:
--------------------------------------------------------------------------------
1 | eyJraWQiOiJhYmMiLCJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczovL3lvdXItaWRwLWhvc3RuYW1lL2F1dGgvcmVhbG1zL3lvdXItcmVhbG0iLCJodHRwOi8vZXhhbXBsZS5jb20vaXNfcm9vdCI6dHJ1ZSwic3ViIjoiZGV2IiwibmFtZSI6ImUyZSB0ZXN0IiwiaWF0IjoxNTE2MjM5MDIyLCJleHAiOjE2MDA4MTkzODB9._S742nPRhcog8sDXPgy94pwVYcqgHiGEPn-jn2YEQbY


--------------------------------------------------------------------------------
/sts-e2e-tests/src/test/resources/init.sql:
--------------------------------------------------------------------------------
1 | CREATE SCHEMA sts;
2 | 


--------------------------------------------------------------------------------
/sts-example/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM adorsys/java:17
2 | 
3 | WORKDIR /opt/
4 | COPY ./target/sts-example-exec.jar .
5 | 
6 | EXPOSE 8888
7 | 
8 | CMD exec $JAVA_HOME/bin/java $JAVA_OPTS -jar /opt/sts-example-exec.jar
9 | 


--------------------------------------------------------------------------------
/sts-example/README.md:
--------------------------------------------------------------------------------
 1 | # sts-example
 2 | 
 3 | This is an example implementation of a secure-token-service with a fake login adapter included.
 4 | 
 5 | ## Profiles 
 6 | 
 7 | By default this application will use an in-memory h2 database to store keystores.
 8 | Furthermore you can start this application with multiple spring profiles:
 9 | 
10 | | Profile name | Type | Description |
11 | |--------------|------|-------------|
12 | | h2           | Database connector | Uses h2 (file system persistence) database connector |
13 | | mysql        | Database connector | Uses mysql database connector |
14 | | postgres     | Database connector | Uses postgres database connector |
15 | | liquidbase   | Database migration | Uses liquidbase database migration |
16 | | flyway       | Database migration | Uses flyway database migration |
17 | | dev          | Settings           | Uses settings for easier debugging and development |
18 | 
19 | You can combine database-connector and database-migration profiles.
20 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/ExampleApplication.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example;
 2 | 
 3 | import org.springframework.boot.SpringApplication;
 4 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 5 | 
 6 | @SpringBootApplication
 7 | public class ExampleApplication {
 8 | 
 9 |     public static void main(String[] args) {
10 |         SpringApplication.run(ExampleApplication.class, args);
11 |     }
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/api/ExampleResourceController.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.api;
 2 | 
 3 | import de.adorsys.sts.example.service.ExampleLoginAdapter;
 4 | import de.adorsys.sts.resourceserver.service.EncryptionService;
 5 | import jakarta.validation.Valid;
 6 | import org.springframework.beans.factory.annotation.Autowired;
 7 | import org.springframework.web.bind.annotation.PostMapping;
 8 | import org.springframework.web.bind.annotation.RequestBody;
 9 | import org.springframework.web.bind.annotation.RestController;
10 | 
11 | import java.util.ArrayList;
12 | import java.util.Map;
13 | 
14 | @RestController
15 | public class ExampleResourceController {
16 | 
17 |     @Autowired
18 |     private EncryptionService encryptionService;
19 | 
20 |     @Autowired
21 |     private ExampleLoginAdapter loginAdapter;
22 | 
23 |     @PostMapping("/login")
24 |     public Map<String, String> login(@RequestBody @Valid LoginRequest login) {
25 |         String secretToken = loginAdapter.getExampleToken(login.getUsername(), login.getPassword());
26 | 
27 |         ArrayList<String> audiences = new ArrayList<>();
28 |         audiences.addAll(login.getAudiences());
29 |         audiences.add("sts");
30 | 
31 |         return encryptionService.encryptFor(audiences, secretToken);
32 |     }
33 | }
34 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/api/ExampleSecretRestController.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.api;
 2 | 
 3 | import de.adorsys.sts.keymanagement.service.SecretProvider;
 4 | import org.slf4j.Logger;
 5 | import org.slf4j.LoggerFactory;
 6 | import org.springframework.beans.factory.annotation.Autowired;
 7 | import org.springframework.web.bind.annotation.GetMapping;
 8 | import org.springframework.web.bind.annotation.RestController;
 9 | 
10 | @RestController
11 | public class ExampleSecretRestController {
12 | 
13 |     private static final Logger logger = LoggerFactory.getLogger(ExampleSecretRestController.class);
14 | 
15 |     @Autowired
16 |     private SecretProvider secretProvider;
17 | 
18 |     @GetMapping("/secret")
19 |     public String secret() {
20 |         if(logger.isTraceEnabled()) logger.trace("GET /secret start...");
21 | 
22 |         String Secret = secretProvider.get();
23 | 
24 |         if(logger.isTraceEnabled()) logger.trace("GET /secret finish.");
25 | 
26 |         return Secret;
27 |     }
28 | }
29 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/api/LoginRequest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.api;
 2 | 
 3 | import jakarta.validation.constraints.NotNull;
 4 | import jakarta.validation.constraints.Size;
 5 | import lombok.Data;
 6 | 
 7 | import java.util.ArrayList;
 8 | import java.util.List;
 9 | 
10 | @Data
11 | class LoginRequest {
12 | 
13 |     @NotNull
14 |     @Size(min = 1)
15 |     private String username;
16 | 
17 |     @NotNull
18 |     @Size(min = 1)
19 |     private String password;
20 | 
21 |     private List<String> audiences = new ArrayList<>();
22 | }
23 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/config/JpaConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.config;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.config.EnableJpaPersistence;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.context.annotation.Profile;
 6 | 
 7 | @Configuration
 8 | @EnableJpaPersistence
 9 | @Profile({"!mongo"})
10 | public class JpaConfiguration {
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/config/MongoConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.config;
 2 | 
 3 | import de.adorsys.sts.persistence.mongo.config.EnableMongoPersistence;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.context.annotation.Profile;
 6 | 
 7 | @Configuration
 8 | @EnableMongoPersistence
 9 | @Profile({"mongo"})
10 | public class MongoConfiguration {
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/config/RestTemplateConfig.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.config;
 2 | 
 3 | import org.springframework.boot.web.client.RestTemplateBuilder;
 4 | import org.springframework.context.annotation.Bean;
 5 | import org.springframework.context.annotation.Configuration;
 6 | import org.springframework.web.client.RestTemplate;
 7 | 
 8 | @Configuration
 9 | public class RestTemplateConfig {
10 | 
11 |     @Bean
12 |     public RestTemplate restTemplate(RestTemplateBuilder builder) {
13 |         return builder.build();
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/config/StsConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.config;
 2 | 
 3 | import de.adorsys.sts.encryption.EnableEncryption;
 4 | import de.adorsys.sts.keyrotation.EnableKeyRotation;
 5 | import de.adorsys.sts.pop.EnablePOP;
 6 | import de.adorsys.sts.resourceserver.initializer.EnableResourceServerInitialization;
 7 | import de.adorsys.sts.resourceserver.persistence.InMemoryResourceServerRepository;
 8 | import de.adorsys.sts.resourceserver.persistence.ResourceServerRepository;
 9 | import de.adorsys.sts.secretserverclient.EnableSecretServerClient;
10 | import de.adorsys.sts.token.authentication.EnableTokenAuthentication;
11 | import org.springframework.context.annotation.Bean;
12 | import org.springframework.context.annotation.Configuration;
13 | import org.springframework.scheduling.TaskScheduler;
14 | import org.springframework.scheduling.concurrent.ConcurrentTaskScheduler;
15 | 
16 | @Configuration
17 | @EnableResourceServerInitialization
18 | @EnableEncryption
19 | @EnablePOP
20 | //@EnableKeyRotation
21 | @EnableTokenAuthentication
22 | @EnableSecretServerClient
23 | public class StsConfiguration {
24 | 
25 |     @Bean
26 |     ResourceServerRepository resourceServerRepository() {
27 |         return new InMemoryResourceServerRepository();
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/sts-example/src/main/java/de/adorsys/sts/example/service/ExampleLoginAdapter.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.example.service;
 2 | 
 3 | import org.springframework.stereotype.Component;
 4 | 
 5 | @Component
 6 | public class ExampleLoginAdapter {
 7 | 
 8 |     public String getExampleToken(String username, String password) {
 9 |         return "my_secret_example_token: (" + username + ":" + password + ")";
10 |     }
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-keymanagement/README.md:
--------------------------------------------------------------------------------
 1 | # Key Management Service
 2 | 
 3 | This is java component built to generate and manage cryptographic session keys of network components.
 4 | 
 5 | ## Features
 6 | 
 7 | ### Plugable Key Store
 8 | 
 9 | The key management service provide a hoock for plugging in key storage modules.
10 | 
11 | Module must consume and produce a Java KeyStore object.
12 | 
13 | ### Initial Generation of Keys
14 | 
15 | Following keys can be generated at startup 
16 | - signatures key pairs 
17 | - encryption key pairs
18 | - encryption secret keys
19 | 
20 | ### Built in Multi node Support
21 | 
22 | Some custom modules can provide built in multi node, thus providing a way to share the same key among multiple servers in the network.  
23 | 
24 | ### Key rotation
25 | 
26 | The key rotation capability is necessary to:
27 | 
28 | - make sure life span of session keys of network components are limited,
29 | - that private keys used by servers to decrypt "secret data" are destroyed after all derived credentials are expired.  
30 | 
31 | The availability time of a key is for example the max validity time of a bearer token. After a server rotates a key, it can hold old key for at most X-minutes to make sure all tokens issued an containing information to be decrypted using this key are expired.
32 | 
33 | 


--------------------------------------------------------------------------------
/sts-keymanagement/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0"
 3 |          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 5 |     <parent>
 6 |         <artifactId>secure-token-service</artifactId>
 7 |         <groupId>de.adorsys.sts</groupId>
 8 |         <version>1.2.5-SNAPSHOT</version>
 9 |     </parent>
10 |     <modelVersion>4.0.0</modelVersion>
11 | 
12 |     <artifactId>sts-keymanagement</artifactId>
13 |     <packaging>pom</packaging>
14 | 
15 |     <modules>
16 |         <module>sts-keymanagement-api</module>
17 |         <module>sts-keymanagement-impl</module>
18 |     </modules>
19 | </project>
20 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/config/KeyManagementRotationProperties.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.config;
 2 | 
 3 | public interface KeyManagementRotationProperties {
 4 |     KeyRotationProperties getEncKeyPairs();
 5 |     KeyRotationProperties getSignKeyPairs();
 6 |     KeyRotationProperties getSecretKeys();
 7 | 
 8 |     interface KeyRotationProperties {
 9 |         Integer getMinKeys();
10 |         Boolean isEnabled();
11 |     }
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/exceptions/SecretDecryptionException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.exceptions;
 2 | 
 3 | public class SecretDecryptionException extends RuntimeException {
 4 | 
 5 |     public SecretDecryptionException(String message) {
 6 |         super(message);
 7 |     }
 8 | 
 9 |     public SecretDecryptionException(Throwable cause) {
10 |         super(cause);
11 |     }
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/GeneratedStsEntry.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.model;
 2 | 
 3 | import de.adorsys.keymanagement.api.types.template.ProvidedKeyTemplate;
 4 | import lombok.Getter;
 5 | import lombok.RequiredArgsConstructor;
 6 | 
 7 | @Getter
 8 | @RequiredArgsConstructor
 9 | public class GeneratedStsEntry<T extends ProvidedKeyTemplate> {
10 | 
11 |     private final StsKeyEntry entry;
12 |     private final T key;
13 | }
14 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/ImmutableStsKeyEntry.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.model;
 2 | 
 3 | import lombok.RequiredArgsConstructor;
 4 | import lombok.experimental.Delegate;
 5 | 
 6 | import java.time.ZonedDateTime;
 7 | 
 8 | @RequiredArgsConstructor
 9 | public class ImmutableStsKeyEntry implements StsKeyEntry {
10 | 
11 |     @Delegate(excludes = Exclude.class)
12 |     private final StsKeyEntry entry;
13 | 
14 |     private interface Exclude {
15 | 
16 |         void setState(KeyState state);
17 |         void setNotAfter(ZonedDateTime notAfter);
18 |         void setExpireAt(ZonedDateTime expireAt);
19 |     }
20 | 
21 |     @Override
22 |     public void setState(KeyState state) {
23 |         throw new IllegalStateException("Not implemented");
24 |     }
25 | 
26 |     @Override
27 |     public void setNotAfter(ZonedDateTime notAfter) {
28 |         throw new IllegalStateException("Not implemented");
29 |     }
30 | 
31 |     @Override
32 |     public void setExpireAt(ZonedDateTime expireAt) {
33 |         throw new IllegalStateException("Not implemented");
34 |     }
35 | }
36 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/KeyRotationResult.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.model;
 2 | 
 3 | import lombok.Builder;
 4 | import lombok.Getter;
 5 | 
 6 | import java.util.List;
 7 | 
 8 | @Getter
 9 | @Builder
10 | public class KeyRotationResult {
11 | 
12 |     private List<String> removedKeys;
13 |     private List<String> futureKeys;
14 |     private List<String> generatedKeys;
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/KeyState.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keymanagement.model;
2 | 
3 | public enum KeyState {
4 |     CREATED,
5 |     VALID,
6 |     LEGACY,
7 |     EXPIRED
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/KeyUsage.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keymanagement.model;
2 | 
3 | public enum KeyUsage {
4 |     Encryption,
5 |     Signature,
6 |     SecretKey
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/ServerKeysHolder.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.model;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWKSet;
 4 | import lombok.Getter;
 5 | import lombok.RequiredArgsConstructor;
 6 | 
 7 | @Getter
 8 | @RequiredArgsConstructor
 9 | public class ServerKeysHolder {
10 | 
11 | 	private final JWKSet privateKeySet;
12 |     private final JWKSet publicKeySet;
13 | }
14 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/StsKeyEntry.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.model;
 2 | 
 3 | import de.adorsys.keymanagement.api.types.entity.metadata.KeyMetadata;
 4 | 
 5 | import java.time.ZonedDateTime;
 6 | 
 7 | public interface StsKeyEntry extends KeyMetadata {
 8 | 
 9 |     void setState(KeyState state);
10 |     void setNotAfter(ZonedDateTime notAfter);
11 |     void setExpireAt(ZonedDateTime expireAt);
12 | 
13 |     String getAlias();
14 |     ZonedDateTime getCreatedAt();
15 |     ZonedDateTime getNotBefore();
16 |     ZonedDateTime getNotAfter();
17 |     ZonedDateTime getExpireAt();
18 |     Long getValidityInterval();
19 |     Long getLegacyInterval();
20 |     KeyState getState();
21 |     KeyUsage getKeyUsage();
22 | }
23 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/model/StsKeyEntryImpl.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.model;
 2 | 
 3 | import lombok.Builder;
 4 | import lombok.EqualsAndHashCode;
 5 | import lombok.Getter;
 6 | 
 7 | import java.time.ZonedDateTime;
 8 | 
 9 | @Getter
10 | @Builder
11 | @EqualsAndHashCode
12 | public class StsKeyEntryImpl implements StsKeyEntry {
13 | 
14 |     private final String alias;
15 | 
16 |     private final ZonedDateTime createdAt;
17 | 
18 |     private final ZonedDateTime notBefore;
19 | 
20 |     private ZonedDateTime notAfter;
21 | 
22 |     private ZonedDateTime expireAt;
23 | 
24 |     private final Long validityInterval;
25 | 
26 |     private final Long legacyInterval;
27 | 
28 |     private KeyState state;
29 | 
30 |     private final KeyUsage keyUsage;
31 | 
32 |     @Override
33 |     public void setState(KeyState state) {
34 |         this.state = state;
35 |     }
36 | 
37 |     @Override
38 |     public void setNotAfter(ZonedDateTime notAfter) {
39 |         this.notAfter = notAfter;
40 |     }
41 | 
42 |     @Override
43 |     public void setExpireAt(ZonedDateTime expireAt) {
44 |         this.expireAt = expireAt;
45 |     }
46 | }
47 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/persistence/KeyStoreRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.persistence;
 2 | 
 3 | import de.adorsys.sts.keymanagement.model.StsKeyStore;
 4 | 
 5 | import java.time.ZonedDateTime;
 6 | 
 7 | public interface KeyStoreRepository {
 8 | 
 9 |     StsKeyStore load();
10 |     boolean exists();
11 |     void save(StsKeyStore keyStore);
12 |     ZonedDateTime lastUpdate();
13 | }
14 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/DecryptionService.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keymanagement.service;
2 | 
3 | public interface DecryptionService {
4 | 
5 |     String decrypt(String encrypted);
6 | }
7 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/KeyConversionService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.service;
 2 | 
 3 | import de.adorsys.sts.keymanagement.model.ServerKeysHolder;
 4 | import de.adorsys.sts.keymanagement.model.StsKeyStore;
 5 | 
 6 | public interface KeyConversionService {
 7 | 
 8 |     ServerKeysHolder export(StsKeyStore keyStore);
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/KeyPairGenerator.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.service;
 2 | 
 3 | import de.adorsys.keymanagement.api.types.template.provided.ProvidedKeyPair;
 4 | 
 5 | import java.util.function.Supplier;
 6 | 
 7 | public interface KeyPairGenerator {
 8 | 
 9 |     ProvidedKeyPair generateSignatureKey(String alias, Supplier<char[]> keyPassword);
10 | 
11 |     ProvidedKeyPair generateEncryptionKey(String alias, Supplier<char[]> keyPassword);
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/KeyRotationService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.service;
 2 | 
 3 | import de.adorsys.sts.keymanagement.model.KeyRotationResult;
 4 | import de.adorsys.sts.keymanagement.model.StsKeyStore;
 5 | 
 6 | public interface KeyRotationService {
 7 | 
 8 |     KeyRotationResult rotate(StsKeyStore stsKeyStore);
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/KeyStoreInitializer.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keymanagement.service;
2 | 
3 | public interface KeyStoreInitializer {
4 | 
5 |     boolean initialize();
6 | }
7 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/SecretDecryptionService.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keymanagement.service;
2 | 
3 | public interface SecretDecryptionService {
4 | 
5 |     String decryptSecretClaim();
6 | }
7 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/SecretKeyGenerator.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.service;
 2 | 
 3 | import de.adorsys.keymanagement.api.types.template.provided.ProvidedKey;
 4 | 
 5 | import java.util.function.Supplier;
 6 | 
 7 | public interface SecretKeyGenerator {
 8 | 
 9 |     ProvidedKey generate(String alias, Supplier<char[]> keyPassword);
10 | }
11 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/SecretProvider.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.keymanagement.service;
2 | 
3 | public interface SecretProvider {
4 |     String get();
5 | }
6 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-api/src/main/java/de/adorsys/sts/keymanagement/service/ServerKeyMapProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.service;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWKSet;
 4 | import de.adorsys.sts.common.model.KeyAndJwk;
 5 | 
 6 | import java.security.Key;
 7 | 
 8 | public interface ServerKeyMapProvider {
 9 | 
10 |     JWKSet getPublicKeys();
11 | 
12 |     KeyAndJwk randomSecretKey();
13 | 
14 |     KeyAndJwk randomSignKey();
15 | 
16 |     Key getKey(String keyId);
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-impl/src/main/java/de/adorsys/sts/keymanagement/model/UnmodifyableKeyStoreViewer.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.model;
 2 | 
 3 | import lombok.RequiredArgsConstructor;
 4 | 
 5 | import java.security.KeyStore;
 6 | 
 7 | @RequiredArgsConstructor
 8 | public class UnmodifyableKeyStoreViewer {
 9 | 
10 |     private final UnmodifyableKeystore keystore;
11 | 
12 |     public KeyStore getKeyStore() {
13 |         return keystore.getDelegate();
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-impl/src/main/java/de/adorsys/sts/keymanagement/persistence/InMemoryKeyStoreRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.persistence;
 2 | 
 3 | import de.adorsys.sts.keymanagement.model.StsKeyStore;
 4 | 
 5 | import java.time.ZonedDateTime;
 6 | 
 7 | public class InMemoryKeyStoreRepository implements KeyStoreRepository {
 8 | 
 9 |     private StsKeyStore keyStore;
10 | 
11 |     @Override
12 |     public StsKeyStore load() {
13 |         return keyStore;
14 |     }
15 | 
16 |     @Override
17 |     public boolean exists() {
18 |         return keyStore != null;
19 |     }
20 | 
21 |     @Override
22 |     public void save(StsKeyStore keyStore) {
23 |         this.keyStore = keyStore;
24 |     }
25 | 
26 |     @Override
27 |     public ZonedDateTime lastUpdate() {
28 |         if(keyStore != null) {
29 |             return keyStore.getLastUpdate();
30 |         }
31 | 
32 |         throw new RuntimeException("No keystore exiting");
33 |     }
34 | }
35 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-impl/src/main/java/de/adorsys/sts/keymanagement/service/KeyStoreInitializerImpl.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.service;
 2 | 
 3 | import de.adorsys.sts.keymanagement.model.StsKeyStore;
 4 | import de.adorsys.sts.keymanagement.persistence.KeyStoreRepository;
 5 | 
 6 | public class KeyStoreInitializerImpl implements KeyStoreInitializer {
 7 | 
 8 |     private final KeyStoreRepository repository;
 9 |     private final KeyStoreGenerator generator;
10 | 
11 |     public KeyStoreInitializerImpl(
12 |             KeyStoreRepository repository,
13 |             KeyStoreGenerator generator
14 |     ) {
15 |         this.repository = repository;
16 |         this.generator = generator;
17 |     }
18 | 
19 |     @Override
20 |     public boolean initialize() {
21 |         if (!repository.exists()) {
22 |             StsKeyStore keyStore = generator.generate();
23 |             repository.save(keyStore);
24 | 
25 |             return true;
26 |         } else {
27 |             return false;
28 |         }
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-impl/src/main/java/de/adorsys/sts/keymanagement/service/SecretDecryptionServiceImpl.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.service;
 2 | 
 3 | public class SecretDecryptionServiceImpl implements SecretDecryptionService {
 4 | 
 5 |     private final DecryptionService decryptionService;
 6 |     private final SecretProvider secretProvider;
 7 | 
 8 |     public SecretDecryptionServiceImpl(
 9 |             DecryptionService decryptionService,
10 |             SecretProvider secretProvider
11 |     ) {
12 |         this.decryptionService = decryptionService;
13 |         this.secretProvider = secretProvider;
14 |     }
15 | 
16 |     @Override
17 |     public String decryptSecretClaim() {
18 |         String encryptedSecret = secretProvider.get();
19 |         return decryptionService.decrypt(encryptedSecret);
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-impl/src/main/java/de/adorsys/sts/keymanagement/util/DateTimeUtils.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.util;
 2 | 
 3 | import java.time.ZoneOffset;
 4 | import java.time.ZonedDateTime;
 5 | 
 6 | public class DateTimeUtils {
 7 | 
 8 |     public static ZonedDateTime addMillis(ZonedDateTime now, Long millis) {
 9 |         return now.toInstant().plusMillis(millis).atZone(ZoneOffset.UTC);
10 |     }
11 | 
12 |     private DateTimeUtils() {
13 |         throw new IllegalStateException("Not supported");
14 |     }
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-keymanagement/sts-keymanagement-impl/src/test/java/de/adorsys/sts/CollectionHelpers.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts;
 2 | 
 3 | import java.util.ArrayList;
 4 | import java.util.Collections;
 5 | import java.util.List;
 6 | 
 7 | public class CollectionHelpers {
 8 | 
 9 |     public static <T> List<T> asList(T first, T ... others) {
10 |         List<T> list = new ArrayList<>();
11 |         list.add(first);
12 | 
13 |         Collections.addAll(list, others);
14 | 
15 |         return list;
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/java/de/adorsys/sts/persistence/jpa/config/EnableJpaPersistence.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.jpa.config;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         JpaConfiguration.class
14 | })
15 | public @interface EnableJpaPersistence {
16 | }


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/java/de/adorsys/sts/persistence/jpa/entity/JpaKeyStore.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.jpa.entity;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.mapping.ZonedDateTimeConverter;
 4 | import jakarta.persistence.*;
 5 | import lombok.Getter;
 6 | import lombok.Setter;
 7 | 
 8 | import java.time.ZonedDateTime;
 9 | 
10 | @Getter
11 | @Setter
12 | @Entity
13 | @Table(name = "key_store")
14 | public class JpaKeyStore {
15 | 
16 |     @Id
17 |     @GeneratedValue(strategy = GenerationType.IDENTITY)
18 |     private Long id;
19 | 
20 |     private String name;
21 | 
22 |     private String type;
23 | 
24 |     @Column(length = 1024 * 1024)
25 |     private byte[] keystore;
26 | 
27 |     @Convert(converter = ZonedDateTimeConverter.class)
28 |     private ZonedDateTime lastUpdate;
29 | }
30 | 
31 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/java/de/adorsys/sts/persistence/jpa/entity/JpaSecret.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.jpa.entity;
 2 | 
 3 | import jakarta.persistence.*;
 4 | import lombok.Getter;
 5 | import lombok.Setter;
 6 | 
 7 | 
 8 | @Getter
 9 | @Setter
10 | @Entity
11 | @Table(name = "secret")
12 | public class JpaSecret {
13 | 
14 |     @Id
15 |     @SequenceGenerator(name = "hibernate_secret_seq", sequenceName = "hibernate_sequence", allocationSize = 1)
16 |     @GeneratedValue(strategy = GenerationType.IDENTITY, generator = "hibernate_secret_seq")
17 |     private Long id;
18 | 
19 |     private String subject;
20 | 
21 |     private String value;
22 | }
23 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/java/de/adorsys/sts/persistence/jpa/repository/JpaKeyEntryAttributesRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.jpa.repository;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.entity.JpaKeyEntryAttributes;
 4 | import org.springframework.data.repository.CrudRepository;
 5 | import org.springframework.stereotype.Repository;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | @Repository
10 | public interface JpaKeyEntryAttributesRepository extends CrudRepository<JpaKeyEntryAttributes, Long> {
11 | 
12 |     List<JpaKeyEntryAttributes> findAllByKeyStoreId(Long keyStoreId);
13 | 
14 |     JpaKeyEntryAttributes findByAlias(String alias);
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/java/de/adorsys/sts/persistence/jpa/repository/JpaKeyStoreRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.jpa.repository;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.entity.JpaKeyStore;
 4 | import org.springframework.data.jpa.repository.Query;
 5 | import org.springframework.data.repository.CrudRepository;
 6 | import org.springframework.data.repository.query.Param;
 7 | import org.springframework.stereotype.Repository;
 8 | 
 9 | import java.time.ZonedDateTime;
10 | 
11 | @Repository
12 | public interface JpaKeyStoreRepository extends CrudRepository<JpaKeyStore, Long> {
13 | 
14 |     JpaKeyStore findByName(String name);
15 | 
16 |     long countByName(String name);
17 | 
18 |     @Query("select k.lastUpdate from JpaKeyStore k where k.name = :name")
19 |     ZonedDateTime getLastUpdate(@Param("name") String name);
20 | }
21 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/java/de/adorsys/sts/persistence/jpa/repository/JpaSecretRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.jpa.repository;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.entity.JpaSecret;
 4 | import org.springframework.data.jpa.repository.JpaRepository;
 5 | import org.springframework.data.repository.CrudRepository;
 6 | import org.springframework.stereotype.Repository;
 7 | 
 8 | @Repository
 9 | public interface JpaSecretRepository extends JpaRepository<JpaSecret, Long> {
10 | 
11 |     JpaSecret findJpaSecretBySubject(String subject);
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/application-flyway.yml:
--------------------------------------------------------------------------------
1 | spring:
2 |   liquibase:
3 |     enabled: false
4 | 
5 |   flyway:
6 |     enabled: true
7 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/application-h2.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |   liquibase:
 3 |     default-schema: public
 4 | 
 5 |   flyway:
 6 |     locations:
 7 |     - classpath:/db/migration/flyway/h2
 8 | 
 9 |   datasource:
10 |     url: jdbc:h2:./sts_h2_db;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;INIT=CREATE SCHEMA IF NOT EXISTS sts;NON_KEYWORDS=VALUE
11 |   jpa:
12 |     database-platform: org.hibernate.dialect.H2Dialect
13 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/application-jpa.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |   config:
 3 |     activate:
 4 |       on-cloud-platform: "kubernetes"
 5 |       on-profile: "postgres | mysql | h2"
 6 |   jpa:
 7 |     open-in-view: false
 8 |     hibernate:
 9 |       ddl-auto: update
10 |     generate-ddl: true
11 | 
12 |   autoconfigure:
13 |     exclude:
14 |       - org.springframework.boot.autoconfigure.mongo.MongoAutoConfiguration
15 |       - org.springframework.boot.autoconfigure.data.mongo.MongoDataAutoConfiguration
16 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/application-liquibase.yml:
--------------------------------------------------------------------------------
1 | spring:
2 |   liquibase:
3 |     enabled: true
4 |     change-log: classpath:/db/migration/liquibase/changelog.yml
5 | 
6 |   flyway:
7 |     enabled: false
8 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/application-mysql.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |   liquibase:
 3 |     default-schema: sts
 4 | 
 5 |   flyway:
 6 |     locations:
 7 |     - classpath:/db/migration/flyway/mysql
 8 | 
 9 |   datasource:
10 |     url: jdbc:mysql://localhost:3306/sts?serverTimezone=UTC
11 |   jpa:
12 |     database-platform: org.hibernate.dialect.MySQLDialect
13 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/application-postgres.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |   liquibase:
 3 |     default-schema: sts
 4 |   flyway:
 5 |     locations:
 6 |     - classpath:/db/migration/flyway/postgres
 7 | 
 8 |   datasource:
 9 |     url: jdbc:postgresql://localhost:5432/sts
10 |   jpa:
11 |     show-sql: false
12 |     database-platform: org.hibernate.dialect.PostgreSQLDialect
13 |     open-in-view: false
14 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.19.0.1__create_hibernate_sequence.sql:
--------------------------------------------------------------------------------
1 | CREATE SEQUENCE hibernate_sequence START 1;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.19.0.2__create_table_keystore.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.key_store
 2 | (
 3 |   id       BIGINT AUTO_INCREMENT PRIMARY KEY,
 4 |   name     VARCHAR(255) NOT NULL,
 5 |   type     VARCHAR(255) NOT NULL,
 6 |   keystore BYTEA,
 7 | 
 8 |   CONSTRAINT key_store__name__unique UNIQUE (name)
 9 | );
10 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.19.0.3__create_table_keyentry.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.key_entry
 2 | (
 3 |   id                BIGINT AUTO_INCREMENT PRIMARY KEY,
 4 |   key_store_id      INT          NOT NULL REFERENCES sts.key_store,
 5 | 
 6 |   alias             VARCHAR(255) NOT NULL,
 7 | 
 8 |   created_at        TIMESTAMP    NOT NULL,
 9 |   not_before        TIMESTAMP    NOT NULL,
10 |   not_after         TIMESTAMP    NULL,
11 |   expire_at         TIMESTAMP    NULL,
12 | 
13 |   validity_interval BIGINT       NOT NULL,
14 |   legacy_interval   BIGINT       NOT NULL,
15 | 
16 |   state             VARCHAR(255) NOT NULL,
17 |   key_usage         VARCHAR(255) NOT NULL,
18 | 
19 |   CONSTRAINT key_entry__alias__unique UNIQUE (alias)
20 | );
21 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.19.0.5__create_table_lock_persistence.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE sts.lock_persistence (
2 |   id      BIGINT AUTO_INCREMENT PRIMARY KEY,
3 |   name    VARCHAR(256),
4 |   value   VARCHAR(36),
5 |   expires TIMESTAMP
6 | );
7 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.26.0.0__add_lastupdate_to_keystore.sql:
--------------------------------------------------------------------------------
1 | ALTER TABLE sts.key_store ADD COLUMN last_update TIMESTAMP NULL;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.27.0.0__create_table_secret.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE sts.secret
2 | (
3 |   id       BIGINT AUTO_INCREMENT PRIMARY KEY,
4 |   subject  VARCHAR(255)  NOT NULL,
5 |   value    VARCHAR(2047) NOT NULL,
6 | 
7 |   CONSTRAINT secret__name__unique UNIQUE (subject)
8 | );
9 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.27.1.0__enlarge_secret_column_in_table_secret.sql:
--------------------------------------------------------------------------------
1 | ALTER TABLE sts.secret ALTER COLUMN value VARCHAR(4095) NOT NULL;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/h2/V0.30.0__migrate_to_shedlock.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.sts_lock
 2 | (
 3 |     name       VARCHAR(64),
 4 |     lock_until TIMESTAMP(3) NULL,
 5 |     locked_at  TIMESTAMP(3) NULL,
 6 |     locked_by  VARCHAR(255),
 7 |     PRIMARY KEY (name)
 8 | );
 9 | 
10 | INSERT INTO sts.sts_lock
11 | (name, lock_until, locked_at, locked_by)
12 |     (SELECT tbl.name, tbl.exp, NULL, 'lock_persistence' FROM (SELECT name, MAX(expires) AS exp FROM sts.lock_persistence GROUP BY name) tbl);
13 | 
14 | DROP TABLE sts.lock_persistence;
15 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/mysql/V0.19.1.0__create_table_keystore.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.key_store
 2 | (
 3 |   id       INT          NOT NULL AUTO_INCREMENT,
 4 |   name     VARCHAR(255) NOT NULL,
 5 |   type     VARCHAR(255) NOT NULL,
 6 |   keystore LONGBLOB,
 7 | 
 8 |   PRIMARY KEY (id),
 9 |   CONSTRAINT key_store__name__unique UNIQUE (name)
10 | );
11 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/mysql/V0.19.1.1__create_table_keyentry.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.key_entry
 2 | (
 3 |   id                INT          NOT NULL AUTO_INCREMENT,
 4 |   key_store_id      INT          NOT NULL,
 5 | 
 6 |   alias             VARCHAR(255) NOT NULL,
 7 | 
 8 |   created_at        TIMESTAMP    NOT NULL,
 9 |   not_before        TIMESTAMP    NOT NULL,
10 |   not_after         TIMESTAMP    NULL,
11 |   expire_at         TIMESTAMP    NULL,
12 | 
13 |   validity_interval BIGINT       NOT NULL,
14 |   legacy_interval   BIGINT       NOT NULL,
15 | 
16 |   state             VARCHAR(255) NOT NULL,
17 |   key_usage         VARCHAR(255) NOT NULL,
18 | 
19 |   PRIMARY KEY (id),
20 |   FOREIGN KEY (key_store_id) REFERENCES sts.key_store (id) ON DELETE CASCADE,
21 |   CONSTRAINT key_entry__alias__unique UNIQUE (alias)
22 | );
23 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/mysql/V0.19.1.2__create_table_lock_persistence.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE sts.lock_persistence (
2 |   id      INT NOT NULL AUTO_INCREMENT,
3 |   name    VARCHAR(256),
4 |   value   VARCHAR(36),
5 |   expires TIMESTAMP,
6 | 
7 |   PRIMARY KEY (id)
8 | );
9 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/mysql/V0.26.0.0__add_lastupdate_to_keystore.sql:
--------------------------------------------------------------------------------
1 | ALTER TABLE sts.key_store ADD COLUMN last_update TIMESTAMP NULL;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/mysql/V0.27.0.0__create_table_secret.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.secret
 2 | (
 3 |   id       INT           NOT NULL AUTO_INCREMENT,
 4 |   subject  VARCHAR(255)  NOT NULL,
 5 |   value    VARCHAR(2047) NOT NULL,
 6 | 
 7 |   PRIMARY KEY (id),
 8 |   CONSTRAINT secret__name__unique UNIQUE (subject)
 9 | );
10 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/mysql/V0.27.1.0__enlarge_secret_column_in_table_secret.sql:
--------------------------------------------------------------------------------
1 | ALTER TABLE sts.secret MODIFY COLUMN value VARCHAR(4095) NOT NULL;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/mysql/V0.30.0__migrate_to_shedlock.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.sts_lock
 2 | (
 3 |     name       VARCHAR(64),
 4 |     lock_until TIMESTAMP(3) NULL,
 5 |     locked_at  TIMESTAMP(3) NULL,
 6 |     locked_by  VARCHAR(255),
 7 |     PRIMARY KEY (name)
 8 | );
 9 | 
10 | INSERT INTO sts.sts_lock
11 | (name, lock_until, locked_at, locked_by)
12 |     (SELECT tbl.name, tbl.exp, NULL, 'lock_persistence' FROM (SELECT name, MAX(expires) AS exp FROM sts.lock_persistence GROUP BY name) tbl);
13 | 
14 | DROP TABLE sts.lock_persistence;
15 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.19.0.1__create_hibernate_sequence.sql:
--------------------------------------------------------------------------------
1 | CREATE SEQUENCE sts.hibernate_sequence START 1;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.19.0.2__create_table_keystore.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.key_store
 2 | (
 3 |   id       SERIAL PRIMARY KEY,
 4 |   name     VARCHAR(255) NOT NULL,
 5 |   type     VARCHAR(255) NOT NULL,
 6 |   keystore BYTEA,
 7 | 
 8 |   CONSTRAINT key_store__name__unique UNIQUE (name)
 9 | );
10 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.19.0.3__create_table_keyentry.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.key_entry
 2 | (
 3 |   id                SERIAL PRIMARY KEY,
 4 |   key_store_id      INT          NOT NULL REFERENCES sts.key_store,
 5 | 
 6 |   alias             VARCHAR(255) NOT NULL,
 7 | 
 8 |   created_at        TIMESTAMP    NOT NULL,
 9 |   not_before        TIMESTAMP    NOT NULL,
10 |   not_after         TIMESTAMP    NULL,
11 |   expire_at         TIMESTAMP    NULL,
12 | 
13 |   validity_interval BIGINT       NOT NULL,
14 |   legacy_interval   BIGINT       NOT NULL,
15 | 
16 |   state             VARCHAR(255) NOT NULL,
17 |   key_usage         VARCHAR(255) NOT NULL,
18 | 
19 |   CONSTRAINT key_entry__alias__unique UNIQUE (alias)
20 | );
21 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.19.0.5__create_table_lock_persistence.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE sts.lock_persistence (
2 |   id      SERIAL PRIMARY KEY,
3 |   name    VARCHAR(256),
4 |   value   VARCHAR(36),
5 |   expires TIMESTAMP
6 | );
7 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.26.0.0__add_lastupdate_to_keystore.sql:
--------------------------------------------------------------------------------
1 | ALTER TABLE sts.key_store ADD COLUMN last_update TIMESTAMP NULL;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.27.0.0__create_table_secret.sql:
--------------------------------------------------------------------------------
1 | CREATE TABLE sts.secret
2 | (
3 |   id       SERIAL PRIMARY KEY,
4 |   subject  VARCHAR(255)  NOT NULL,
5 |   value    VARCHAR(2047) NOT NULL,
6 | 
7 |   CONSTRAINT secret__name__unique UNIQUE (subject)
8 | );
9 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.27.1.0__enlarge_secret_column_in_table_secret.sql:
--------------------------------------------------------------------------------
1 | ALTER TABLE sts.secret ALTER COLUMN value TYPE VARCHAR(4095);
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/flyway/postgres/V0.30.0__migrate_to_shedlock.sql:
--------------------------------------------------------------------------------
 1 | CREATE TABLE sts.sts_lock
 2 | (
 3 |     name       VARCHAR(64),
 4 |     lock_until TIMESTAMP(3) NULL,
 5 |     locked_at  TIMESTAMP(3) NULL,
 6 |     locked_by  VARCHAR(255),
 7 |     PRIMARY KEY (name)
 8 | );
 9 | 
10 | INSERT INTO sts.sts_lock
11 | (name, lock_until, locked_at, locked_by)
12 |     (SELECT tbl.name, tbl.exp, NULL, 'lock_persistence' FROM (SELECT name, MAX(expires) AS exp FROM sts.lock_persistence GROUP BY name) tbl);
13 | 
14 | DROP TABLE sts.lock_persistence;
15 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelog.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 | - include:
 3 |     file: db/migration/liquibase/changelogs/01-create-hibernate-sequence.yml
 4 | - include:
 5 |     file: db/migration/liquibase/changelogs/02-create-table-keystore.yml
 6 | - include:
 7 |     file: db/migration/liquibase/changelogs/03-create-table-keyentry.yml
 8 | - include:
 9 |     file: db/migration/liquibase/changelogs/04-create-table-lock_persistence.yml
10 | - include:
11 |     file: db/migration/liquibase/changelogs/05-add-lastupdate-to-keystore.yml
12 | - include:
13 |     file: db/migration/liquibase/changelogs/06-create-table-secret.yml
14 | - include:
15 |     file: db/migration/liquibase/changelogs/07-enlarge-secret-column_in-table-secret.yml
16 | - include:
17 |     file: db/migration/liquibase/changelogs/08-create_table_sts_lock.yml
18 | - include:
19 |     file: db/migration/liquibase/changelogs/09-migrate-lock_persistence.yml
20 | - include:
21 |     file: db/migration/liquibase/changelogs/10-drop_table_lock_persistance.yml
22 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/01-create-hibernate-sequence.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 | - changeSet:
 3 |     id: 2
 4 |     author: sts
 5 |     changes:
 6 |     - createSequence:
 7 |         schemaName: sts
 8 |         sequenceName: hibernate_sequence
 9 |         startValue: 1
10 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/02-create-table-keystore.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 | - changeSet:
 3 |     id: 3
 4 |     author: sts
 5 |     changes:
 6 |     - createTable:
 7 |         schemaName: sts
 8 |         tableName: key_store
 9 |         columns:
10 |         - column:
11 |             name: id
12 |             type: int
13 |             autoIncrement: true
14 |             constraints:
15 |               primaryKey: true
16 |               nullable: false
17 |         - column:
18 |             name: name
19 |             type: varchar(255)
20 |             constraints:
21 |               nullable: false
22 |         - column:
23 |             name: type
24 |             type: varchar(255)
25 |             constraints:
26 |               nullable: false
27 |         - column:
28 |             name: keystore
29 |             type: java.sql.Types.BINARY
30 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/04-create-table-lock_persistence.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 | - changeSet:
 3 |     id: 5
 4 |     author: sts
 5 |     changes:
 6 |     - createTable:
 7 |         schemaName: sts
 8 |         tableName: lock_persistence
 9 |         columns:
10 |         - column:
11 |             name: id
12 |             type: int
13 |             autoIncrement: true
14 |             constraints:
15 |               primaryKey: true
16 |               nullable: false
17 |         - column:
18 |             name: name
19 |             type: varchar(256)
20 |             constraints:
21 |               nullable: false
22 |         - column:
23 |             name: value
24 |             type: varchar(36)
25 |             constraints:
26 |               nullable: false
27 |         - column:
28 |             name: expires
29 |             type: datetime
30 |             constraints:
31 |               nullable: false
32 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/05-add-lastupdate-to-keystore.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 | - changeSet:
 3 |     id: 6
 4 |     author: sts
 5 |     changes:
 6 |     - addColumn:
 7 |         schemaName: sts
 8 |         tableName: key_store
 9 |         columns:
10 |         - column:
11 |             name: last_update
12 |             type: datetime
13 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/06-create-table-secret.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 | - changeSet:
 3 |     id: 7
 4 |     author: sts
 5 |     changes:
 6 |     - createTable:
 7 |         schemaName: sts
 8 |         tableName: secret
 9 |         columns:
10 |         - column:
11 |             name: id
12 |             type: int
13 |             autoIncrement: true
14 |             constraints:
15 |               primaryKey: true
16 |               nullable: false
17 |         - column:
18 |             name: subject
19 |             type: varchar(255)
20 |             constraints:
21 |               nullable: false
22 |               unique: true
23 |         - column:
24 |             name: value
25 |             type: varchar(2047)
26 |             constraints:
27 |               nullable: false
28 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/07-enlarge-secret-column_in-table-secret.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 | - changeSet:
 3 |     id: 8
 4 |     author: sts
 5 |     changes:
 6 |     - modifyDataType:
 7 |         schemaName: sts
 8 |         tableName: secret
 9 |         columnName: value
10 |         newDataType: varchar(4095)
11 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/08-create_table_sts_lock.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 |   - changeSet:
 3 |       id: 9
 4 |       author: sts
 5 |       changes:
 6 |         - createTable:
 7 |             schemaName: sts
 8 |             tableName: sts_lock
 9 |             columns:
10 |               - column:
11 |                   name: name
12 |                   type: varchar(64)
13 |                   constraints:
14 |                     primaryKey: true
15 |                     nullable: false
16 |               - column:
17 |                   name: lock_until
18 |                   type: TIMESTAMP(3)
19 |                   defaultValue: null
20 |               - column:
21 |                   name: locked_at
22 |                   type: TIMESTAMP(3)
23 |                   defaultValue: null
24 |               - column:
25 |                   name: locked_by
26 |                   type: varchar(64)
27 |                   constraints:
28 |                     nullable: false
29 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/09-migrate-lock_persistence.yml:
--------------------------------------------------------------------------------
 1 | databaseChangeLog:
 2 |   - property:
 3 |       name: schemaName
 4 |       value: sts
 5 |   - changeSet:
 6 |       id: 10
 7 |       author: sts
 8 |       changes:
 9 |         - sql:
10 |             schemaName: sts
11 |             sql: INSERT INTO ${schemaName}.sts_lock
12 |               (name, lock_until, locked_at, locked_by)
13 |               (SELECT tbl.name, tbl.exp, NULL, 'lock_persistence' FROM (SELECT name, MAX(expires) AS exp FROM ${schemaName}.lock_persistence GROUP BY name) tbl)
14 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/db/migration/liquibase/changelogs/10-drop_table_lock_persistance.yml:
--------------------------------------------------------------------------------
1 | databaseChangeLog:
2 |   - changeSet:
3 |       id: 11
4 |       author: sts
5 |       changes:
6 |         - dropTable:
7 |             schemaName: sts
8 |             tableName: lock_persistence
9 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/main/resources/init-postgres-schema.sql:
--------------------------------------------------------------------------------
1 | CREATE SCHEMA IF NOT EXISTS sts;
2 | 


--------------------------------------------------------------------------------
/sts-persistence-jpa/src/test/java/de/adorsys/sts/persistence/jpa/mapping/ZonedDateTimeConverterTest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.jpa.mapping;
 2 | 
 3 | import org.junit.jupiter.api.BeforeEach;
 4 | import org.junit.jupiter.api.Test;
 5 | 
 6 | import java.sql.Timestamp;
 7 | import java.time.ZoneOffset;
 8 | import java.time.ZonedDateTime;
 9 | 
10 | import static org.assertj.core.api.Assertions.assertThat;
11 | 
12 | class ZonedDateTimeConverterTest {
13 | 
14 |     private ZonedDateTimeConverter converter;
15 | 
16 |     @BeforeEach
17 |     public void setup() {
18 |       converter = new ZonedDateTimeConverter();
19 |     }
20 | 
21 |     @Test
22 |     void should() {
23 | 
24 |         ZonedDateTime zonedDateTime = ZonedDateTime.of(2017, 2, 7, 11, 16, 22, 333, ZoneOffset.UTC);
25 |         Timestamp timestamp = converter.convertToDatabaseColumn(zonedDateTime);
26 | 
27 |         long timeMillis = timestamp.getTime();
28 |         long zonedDateTimeMillis = zonedDateTime.toInstant().toEpochMilli();
29 | 
30 |         assertThat(timeMillis).isEqualTo(zonedDateTimeMillis);
31 | 
32 |         ZonedDateTime backConvertedZonedDateTime = converter.convertToEntityAttribute(timestamp);
33 |         assertThat(backConvertedZonedDateTime.toInstant().toEpochMilli()).isEqualTo(zonedDateTimeMillis);
34 |     }
35 | 
36 | }


--------------------------------------------------------------------------------
/sts-persistence-mongo/README.md:
--------------------------------------------------------------------------------
 1 | # sts-persistence-mongo
 2 | 
 3 | ## Preparation
 4 | 
 5 | 1. You have to add following dependency to your `pom.yml`:
 6 | 
 7 | ```
 8 |     <dependency>
 9 |         <groupId>de.adorsys.sts</groupId>
10 |         <artifactId>sts-persistence-mongo</artifactId>
11 |         <version>${secure-token-service.version}</version>
12 |     </dependency>
13 | ```
14 | 
15 | 2. To use the Mongo-Repository to save your keystore, you have to add the `@EnableMongoPersistence` annotation to your spring configuration class.
16 | 
17 | 3. Use the `mongo` spring profile with following command-line-argument:
18 | 
19 | ```
20 | --spring.profiles.active=mongo
21 | ```
22 | 
23 | Note: Spring provides alternative ways to set profiles.
24 | 
25 | 4. Setup mongo connection configuration:
26 | 
27 | ```
28 | spring:
29 |   data:
30 |     mongodb:
31 |       host: <your mongo host - default: localhost>
32 |       port: <your mongo port -  default: 27017>
33 |       username: <your mongo username -  default: <empty>>
34 |       password: <your mongo password -  default: <empty>>
35 |       database: <your mongo database name -  default: sts>
36 | ```
37 | 


--------------------------------------------------------------------------------
/sts-persistence-mongo/src/main/java/de/adorsys/sts/persistence/mongo/config/EnableMongoPersistence.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.mongo.config;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         MongoConfiguration.class
14 | })
15 | public @interface EnableMongoPersistence {
16 | }


--------------------------------------------------------------------------------
/sts-persistence-mongo/src/main/java/de/adorsys/sts/persistence/mongo/entity/KeyEntryAttributesEntity.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.mongo.entity;
 2 | 
 3 | import de.adorsys.sts.keymanagement.model.KeyState;
 4 | import de.adorsys.sts.keymanagement.model.KeyUsage;
 5 | import lombok.Getter;
 6 | import lombok.NoArgsConstructor;
 7 | import lombok.Setter;
 8 | 
 9 | import java.util.Date;
10 | 
11 | @Getter
12 | @Setter
13 | @NoArgsConstructor
14 | public class KeyEntryAttributesEntity {
15 | 
16 |     private String alias;
17 | 
18 |     private Date createdAt;
19 |     private Date notBefore;
20 |     private Date notAfter;
21 |     private Date expireAt;
22 | 
23 |     private Long validityInterval;
24 |     private Long legacyInterval;
25 | 
26 |     private KeyState state;
27 | 
28 |     private KeyUsage keyUsage;
29 | }
30 | 


--------------------------------------------------------------------------------
/sts-persistence-mongo/src/main/java/de/adorsys/sts/persistence/mongo/entity/KeyStoreEntity.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.mongo.entity;
 2 | 
 3 | import lombok.Getter;
 4 | import lombok.Setter;
 5 | import org.springframework.data.annotation.Id;
 6 | import org.springframework.data.mongodb.core.index.Indexed;
 7 | 
 8 | import java.util.Date;
 9 | import java.util.Map;
10 | 
11 | @Getter
12 | @Setter
13 | public class KeyStoreEntity {
14 | 
15 |     @Id
16 |     private String id;
17 | 
18 |     @Indexed
19 |     private String name;
20 | 
21 |     private String type;
22 | 
23 |     private byte[] keystore;
24 | 
25 |     private Map<String, KeyEntryAttributesEntity> entries;
26 | 
27 |     private Date lastUpdate;
28 | }
29 | 


--------------------------------------------------------------------------------
/sts-persistence-mongo/src/main/java/de/adorsys/sts/persistence/mongo/entity/SecretEntity.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.mongo.entity;
 2 | 
 3 | import lombok.Getter;
 4 | import lombok.Setter;
 5 | import org.springframework.data.annotation.Id;
 6 | import org.springframework.data.mongodb.core.index.Indexed;
 7 | 
 8 | @Getter
 9 | @Setter
10 | public class SecretEntity {
11 | 
12 |     @Id
13 |     private String id;
14 | 
15 |     @Indexed
16 |     private String subject;
17 | 
18 |     private String value;
19 | }
20 | 


--------------------------------------------------------------------------------
/sts-persistence-mongo/src/main/java/de/adorsys/sts/persistence/mongo/repository/MongoKeyStoreRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.mongo.repository;
 2 | 
 3 | import de.adorsys.sts.persistence.mongo.entity.KeyStoreEntity;
 4 | import org.springframework.data.mongodb.repository.MongoRepository;
 5 | import org.springframework.data.mongodb.repository.Query;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | public interface MongoKeyStoreRepository extends MongoRepository<KeyStoreEntity, String> {
10 | 
11 |     KeyStoreEntity findByName(String name);
12 | 
13 |     long countByName(String name);
14 | 
15 |     @Query(value = "{ 'name' : ?0 }", fields = "{ lastUpdate : 1 }")
16 |     List<KeyStoreEntity> findLastUpdate(String name);
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-persistence-mongo/src/main/java/de/adorsys/sts/persistence/mongo/repository/MongoSecretRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.persistence.mongo.repository;
 2 | 
 3 | import de.adorsys.sts.persistence.mongo.entity.SecretEntity;
 4 | import org.springframework.data.mongodb.repository.MongoRepository;
 5 | 
 6 | public interface MongoSecretRepository extends MongoRepository<SecretEntity, String> {
 7 | 
 8 |     SecretEntity findBySubject(String subject);
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-persistence-mongo/src/main/resources/application-mongo.yml:
--------------------------------------------------------------------------------
 1 | spring:
 2 |   flyway:
 3 |     enabled: false
 4 |   liquibase:
 5 |     enabled: false
 6 |   data:
 7 |     mongodb:
 8 |       host: localhost
 9 |       port: 27017
10 |       database: sts
11 |   autoconfigure:
12 |     exclude:
13 |       - org.springframework.boot.autoconfigure.orm.jpa.HibernateJpaAutoConfiguration
14 | 


--------------------------------------------------------------------------------
/sts-pop/src/main/java/de/adorsys/sts/pop/PopService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.pop;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWKSet;
 4 | import de.adorsys.sts.keymanagement.service.ServerKeyMapProvider;
 5 | 
 6 | public class PopService {
 7 | 
 8 |     private final ServerKeyMapProvider keyManagementService;
 9 | 
10 |     public PopService(ServerKeyMapProvider keyManagementService) {
11 |         this.keyManagementService = keyManagementService;
12 |     }
13 | 
14 |     public JWKSet getPublicKeys(){
15 |         return keyManagementService.getPublicKeys();
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/ResourceServerError.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver;
 2 | 
 3 | import de.adorsys.sts.resourceserver.model.ResourceServer;
 4 | 
 5 | public class ResourceServerError {
 6 | 	private String error;
 7 | 	private ResourceServer resourceServer;
 8 | 	
 9 | 	
10 | 	public ResourceServerError() {
11 | 	}
12 | 	public ResourceServerError(String error, ResourceServer resourceServer) {
13 | 		super();
14 | 		this.error = error;
15 | 		this.resourceServer = resourceServer;
16 | 	}
17 | 	public String getError() {
18 | 		return error;
19 | 	}
20 | 	public void setError(String error) {
21 | 		this.error = error;
22 | 	}
23 | 	public ResourceServer getResourceServer() {
24 | 		return resourceServer;
25 | 	}
26 | 	public void setResourceServer(ResourceServer resourceServer) {
27 | 		this.resourceServer = resourceServer;
28 | 	}
29 | }
30 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/ResourceServerErrors.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver;
 2 | 
 3 | import java.util.ArrayList;
 4 | import java.util.List;
 5 | 
 6 | public class ResourceServerErrors {
 7 | 	
 8 | 	private List<ResourceServerError> erros = new ArrayList<>();
 9 | 
10 | 	public List<ResourceServerError> getErros() {
11 | 		return erros;
12 | 	}
13 | 
14 | 	public void setErros(List<ResourceServerError> erros) {
15 | 		this.erros = erros;
16 | 	}
17 | 	
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/ResourceServerException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver;
 2 | 
 3 | public class ResourceServerException extends RuntimeException {
 4 | 	private static final long serialVersionUID = -2576469717846924984L;
 5 | 	private final Object errorData;
 6 | 
 7 | 	public ResourceServerException(Object errorData) {
 8 | 		super();
 9 | 		this.errorData = errorData;
10 | 	}
11 | 
12 | 	public Object getErrorData() {
13 | 		return errorData;
14 | 	}
15 | }
16 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/exception/NoJwkFoundException.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.resourceserver.exception;
2 | 
3 | public class NoJwkFoundException extends RuntimeException {
4 |     public NoJwkFoundException(String message) {
5 |         super(message);
6 |     }
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/model/ResourceServerAndSecret.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.model;
 2 | 
 3 | import lombok.Builder;
 4 | import org.apache.commons.lang3.StringUtils;
 5 | 
 6 | /**
 7 |  * Temporarily holds a resource seerwver and a secret.
 8 |  * 
 9 |  * @author fpo
10 |  *
11 |  */
12 | @Builder
13 | public class ResourceServerAndSecret {
14 | 	private ResourceServer resourceServer;
15 | 	private String rawSecret;
16 | 	private String encryptedSecret;
17 | 	
18 | 	public ResourceServer getResourceServer() {
19 | 		return resourceServer;
20 | 	}
21 | 
22 | 	public String getRawSecret() {
23 | 		return rawSecret;
24 | 	}
25 | 	public void setRawSecret(String rawSecret) {
26 | 		this.rawSecret = rawSecret;
27 | 	}
28 | 	public String getEncryptedSecret() {
29 | 		return encryptedSecret;
30 | 	}
31 | 	public void setEncryptedSecret(String encryptedSecret) {
32 | 		this.encryptedSecret = encryptedSecret;
33 | 	}
34 | 	
35 | 	public boolean hasEncryptedSecret(){
36 | 		return StringUtils.isNotBlank(encryptedSecret);
37 | 	}
38 | 	
39 | }
40 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/persistence/InMemoryResourceServerRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.persistence;
 2 | 
 3 | import de.adorsys.sts.resourceserver.model.ResourceServer;
 4 | 
 5 | import java.util.ArrayList;
 6 | import java.util.Collections;
 7 | import java.util.List;
 8 | 
 9 | public class InMemoryResourceServerRepository implements ResourceServerRepository {
10 | 
11 |     private final List<ResourceServer> resourceServers = new ArrayList<>();
12 | 
13 |     @Override
14 |     public List<ResourceServer> getAll() {
15 |         return Collections.unmodifiableList(resourceServers);
16 |     }
17 | 
18 |     @Override
19 |     public void add(ResourceServer resourceServer) {
20 |         resourceServers.add(resourceServer);
21 |     }
22 | 
23 |     @Override
24 |     public void addAll(Iterable<ResourceServer> resourceServers) {
25 |         for(ResourceServer resourceServer : resourceServers) {
26 |             this.resourceServers.add(resourceServer);
27 |         }
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/persistence/ResourceServerRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.persistence;
 2 | 
 3 | import de.adorsys.sts.resourceserver.model.ResourceServer;
 4 | 
 5 | import java.util.List;
 6 | 
 7 | public interface ResourceServerRepository {
 8 | 
 9 |     List<ResourceServer> getAll();
10 |     void add(ResourceServer resourceServer);
11 |     void addAll(Iterable<ResourceServer> resourceServers);
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/provider/ResourceServersProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.provider;
 2 | 
 3 | import de.adorsys.sts.resourceserver.model.ResourceServer;
 4 | 
 5 | import java.util.List;
 6 | 
 7 | public interface ResourceServersProvider {
 8 | 
 9 |     List<ResourceServer> get();
10 | }
11 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/provider/STSPropertiesConstants.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.provider;
 2 | 
 3 | public class STSPropertiesConstants {
 4 | 
 5 | 	public static final String RESOURCE_SERVER_AUDIENCE_NAME_SUFFIX = "_AUDIENCE_NAME";
 6 | 	public static final String RESOURCE_SERVER_USER_SECRET_CLAIM_SUFFIX = "_USER_SECRET_CLAIM";
 7 | 	public static final String RESOURCE_SERVER_CLIENT_ID_SUFFIX = "_CLIENT_ID";
 8 | 	public static final String RESOURCE_SERVER_JWKS_URL_SUFFIX = "_JWKS_URL";
 9 | 	public static final String RESOURCE_SERVER_ENDPOINT_URL_SUFFIX = "_ENDPOINT_URL";
10 | 	public static final String RESOURCE_SERVER_NAMES = "RESOURCE_SERVER_NAMES";
11 | 
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/service/CachingKeyRetrieverService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.service;
 2 | 
 3 | import com.google.common.cache.CacheBuilder;
 4 | import com.google.common.cache.CacheLoader;
 5 | import com.google.common.cache.LoadingCache;
 6 | import com.nimbusds.jose.jwk.JWKSet;
 7 | 
 8 | import java.util.concurrent.TimeUnit;
 9 | 
10 | public class CachingKeyRetrieverService implements KeyRetrieverService {
11 | 
12 |     private final LoadingCache<String, JWKSet> jwkSets;
13 | 
14 |     public CachingKeyRetrieverService(
15 |             KeyRetrieverService keyRetrieverService,
16 |             int maximumSize,
17 |             int expireAfterAccessInMinutes
18 |     ) {
19 |         jwkSets = CacheBuilder.newBuilder()
20 |                 .maximumSize(maximumSize)
21 |                 .expireAfterAccess(expireAfterAccessInMinutes, TimeUnit.MINUTES)
22 |                 .build(CacheLoader.from(keyRetrieverService::retrieve));
23 |     }
24 | 
25 |     @Override
26 |     public JWKSet retrieve(String audience) {
27 |         return jwkSets.getUnchecked(audience);
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/service/EncryptionService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.service;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWK;
 4 | 
 5 | import java.util.Map;
 6 | 
 7 | public interface EncryptionService {
 8 | 
 9 |     String encryptFor(String audience, String secret);
10 |     Map<String, String> encryptFor(Iterable<String> audiences, String secret);
11 |     String encrypt(JWK jwk, String rawSecret) throws SecretEncryptionException;
12 | 
13 | }
14 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/service/KeyRetrieverService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.service;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWKSet;
 4 | 
 5 | 
 6 | 
 7 | public interface KeyRetrieverService {
 8 |      JWKSet retrieve(String audience) ;
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/service/LoggingKeyRetrieverService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.service;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWKSet;
 4 | import org.slf4j.Logger;
 5 | import org.slf4j.LoggerFactory;
 6 | 
 7 | public class LoggingKeyRetrieverService implements KeyRetrieverService {
 8 |     private static final Logger logger = LoggerFactory.getLogger(LoggingKeyRetrieverService.class);
 9 | 
10 |     private final KeyRetrieverService decoratedKeyRetrieverService;
11 | 
12 |     public LoggingKeyRetrieverService(
13 |             KeyRetrieverService keyRetrieverService
14 |     ) {
15 |         this.decoratedKeyRetrieverService = keyRetrieverService;
16 |     }
17 | 
18 |     @Override
19 |     public JWKSet retrieve(String audience) {
20 |         if(logger.isTraceEnabled()) logger.trace("retrieve started...");
21 | 
22 |         JWKSet retrieveJwkSet = decoratedKeyRetrieverService.retrieve(audience);
23 | 
24 |         if(logger.isTraceEnabled()) logger.trace("retrieve finished.");
25 | 
26 |         return retrieveJwkSet;
27 |     }
28 | }
29 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/service/ResourceServerManagementProperties.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.service;
 2 | 
 3 | import de.adorsys.sts.resourceserver.model.ResourceServer;
 4 | 
 5 | import java.util.List;
 6 | 
 7 | public interface ResourceServerManagementProperties {
 8 | 
 9 |     List<ResourceServer> getResourceServers();
10 |     ResourceRetrieverProperties getResourceRetriever();
11 | 
12 |     interface ResourceRetrieverProperties {
13 |         Integer getHttpConnectTimeout();
14 |         Integer getHttpReadTimeout();
15 |         Integer getHttpSizeLimit();
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/service/SecretEncryptionException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.service;
 2 | 
 3 | public class SecretEncryptionException extends RuntimeException {
 4 | 	private static final long serialVersionUID = -1605381931967929560L;
 5 | 
 6 | 	public SecretEncryptionException(Throwable cause) {
 7 |         super(cause);
 8 |     }
 9 | 
10 |     public SecretEncryptionException(String message) {
11 |         super(message);
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/sts-resource-server/src/main/java/de/adorsys/sts/resourceserver/service/UserDataRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.service;
 2 | 
 3 | import de.adorsys.sts.resourceserver.model.UserCredentials;
 4 | 
 5 | public interface UserDataRepository {
 6 | 
 7 | 	/**
 8 | 	 * Add a new user to this system.
 9 | 	 * 
10 | 	 * @param user
11 | 	 * @param password
12 | 	 */
13 | 	public void addAccount(String user, String password);
14 | 
15 | 	/**
16 | 	 * Checks is user has an account with this system
17 | 	 * 
18 | 	 * @return
19 | 	 */
20 | 	public boolean hasAccount(String user);
21 | 	
22 | 	public UserCredentials loadUserCredentials(String user, String password);
23 | 
24 | 	public void storeUserCredentials(String user, String password, UserCredentials userCredentials);
25 | }
26 | 


--------------------------------------------------------------------------------
/sts-secret-server/.mvn/jvm.config:
--------------------------------------------------------------------------------
1 | --add-exports java.base/sun.security.x509=ALL-UNNAMED
2 | 


--------------------------------------------------------------------------------
/sts-secret-server/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM adorsys/java:17
2 | 
3 | WORKDIR /opt/
4 | COPY ./target/sts-secret-server-exec.jar .
5 | 
6 | EXPOSE 8080
7 | 
8 | CMD exec $JAVA_HOME/bin/java $JAVA_OPTS -jar /opt/sts-secret-server-exec.jar
9 | 


--------------------------------------------------------------------------------
/sts-secret-server/doc/secret-server.draw.io.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/adorsys/secure-token-service/33372231e6c52aed0cd4c05d3a5441b2067719d0/sts-secret-server/doc/secret-server.draw.io.png


--------------------------------------------------------------------------------
/sts-secret-server/src/main/java/de/adorsys/sts/secretserver/SecretServerApplication.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver;
 2 | 
 3 | import org.springframework.boot.SpringApplication;
 4 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 5 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 6 | import org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration;
 7 | import org.springframework.boot.autoconfigure.security.servlet.UserDetailsServiceAutoConfiguration;
 8 | 
 9 | @SpringBootApplication(exclude = {UserDetailsServiceAutoConfiguration.class, SecurityAutoConfiguration.class})
10 | public class SecretServerApplication {
11 |     public static void main(String[] args) {
12 |         SpringApplication.run(SecretServerApplication.class, args);
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-secret-server/src/main/java/de/adorsys/sts/secretserver/configuration/CorsProperties.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver.configuration;
 2 | 
 3 | import lombok.Data;
 4 | import org.springframework.boot.context.properties.ConfigurationProperties;
 5 | import org.springframework.context.annotation.Configuration;
 6 | 
 7 | @Configuration
 8 | @ConfigurationProperties(prefix = "cors")
 9 | @Data
10 | public class CorsProperties {
11 | 
12 |     private boolean disbaled;
13 |     private String[] allowedOrigins;
14 |     private String[] allowedHeaders;
15 |     private String[] allowedMethods;
16 | }


--------------------------------------------------------------------------------
/sts-secret-server/src/main/java/de/adorsys/sts/secretserver/configuration/JpaConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver.configuration;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.config.EnableJpaPersistence;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.context.annotation.Profile;
 6 | 
 7 | @Configuration
 8 | @EnableJpaPersistence
 9 | @Profile({"!mongo"})
10 | public class JpaConfiguration {
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-secret-server/src/main/java/de/adorsys/sts/secretserver/configuration/MongoConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver.configuration;
 2 | 
 3 | import de.adorsys.sts.persistence.mongo.config.EnableMongoPersistence;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.context.annotation.Profile;
 6 | 
 7 | @Configuration
 8 | @EnableMongoPersistence
 9 | @Profile({"mongo"})
10 | public class MongoConfiguration {
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-secret-server/src/main/java/de/adorsys/sts/secretserver/configuration/OpenApiConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver.configuration;
 2 | 
 3 | import io.swagger.v3.oas.models.OpenAPI;
 4 | import io.swagger.v3.oas.models.info.Info;
 5 | import org.springframework.context.annotation.Bean;
 6 | import org.springframework.context.annotation.Configuration;
 7 | 
 8 | @Configuration
 9 | public class OpenApiConfiguration {
10 | 
11 |     @Bean
12 |     public OpenAPI api() {
13 |         return new OpenAPI()
14 |                 .info(new Info().title("Secure-Token-Service"));
15 |     }
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-secret-server/src/main/java/de/adorsys/sts/secretserver/configuration/StsConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver.configuration;
 2 | 
 3 | import de.adorsys.sts.resourceserver.persistence.InMemoryResourceServerRepository;
 4 | import de.adorsys.sts.resourceserver.persistence.ResourceServerRepository;
 5 | import de.adorsys.sts.secretserver.EnableSecretServer;
 6 | import org.springframework.context.annotation.Bean;
 7 | import org.springframework.context.annotation.Configuration;
 8 | 
 9 | @Configuration
10 | @EnableSecretServer
11 | public class StsConfiguration {
12 | 
13 |     @Bean
14 |     public ResourceServerRepository resourceServerRepository() {
15 |         return new InMemoryResourceServerRepository();
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-secret-server/src/test/docker/moped.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "id": "moped",
 3 |   "realm": "moped",
 4 |   "displayName": "MOPED Realm",
 5 |   "enabled": true,
 6 |   "users": [
 7 |     {
 8 |       "username": "user1",
 9 |       "email": "my1@mail.de",
10 |       "enabled": true,
11 |       "firstName": "My",
12 |       "lastName": "User 1",
13 |       "credentials": [
14 |         {
15 |           "type": "password",
16 |           "value": "user1_pwd"
17 |         }
18 |       ]
19 |     }, {
20 |       "username": "user2",
21 |       "email": "my2@mail.de",
22 |       "enabled": true,
23 |       "firstName": "My",
24 |       "lastName": "User 2",
25 |       "credentials": [
26 |         {
27 |           "type": "password",
28 |           "value": "user2_pwd"
29 |         }
30 |       ]
31 |     }
32 |   ],
33 |   "clients": [
34 |     {
35 |       "clientId": "moped-client",
36 |       "name": "moped-client",
37 |       "description": "Moped-Client",
38 |       "enabled": true,
39 |       "clientAuthenticatorType": "client-secret",
40 |       "secret": "my-special-client-secret",
41 |       "directAccessGrantsEnabled": true,
42 |       "redirectUris": [
43 |         "*"
44 |       ],
45 |       "webOrigins": [
46 |         "*"
47 |       ]
48 |     }
49 |   ]
50 | }
51 | 


--------------------------------------------------------------------------------
/sts-secret-server/src/test/java/de/adorsys/sts/secretserver/configuration/TestConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver.configuration;
 2 | 
 3 | import de.adorsys.sts.decryption.EnableDecryption;
 4 | import de.adorsys.sts.secretserver.EnableSecretServer;
 5 | import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
 6 | import org.springframework.boot.context.properties.EnableConfigurationProperties;
 7 | import org.springframework.context.annotation.Bean;
 8 | import org.springframework.context.annotation.ComponentScan;
 9 | import org.springframework.context.annotation.Configuration;
10 | import org.springframework.web.client.RestTemplate;
11 | 
12 | @Configuration
13 | @EnableConfigurationProperties
14 | @EnableAutoConfiguration
15 | @ComponentScan(basePackages = {"de.adorsys.sts.secretserver.helper"})
16 | @EnableSecretServer
17 | @EnableDecryption
18 | public class TestConfiguration {
19 | 
20 |     @Bean
21 |     public RestTemplate restTemplate() {
22 |         return new RestTemplate();
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/sts-secret-server/src/test/resources/moped.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "id": "moped",
 3 |   "realm": "moped",
 4 |   "displayName": "MOPED Realm",
 5 |   "enabled": true,
 6 |   "users": [
 7 |     {
 8 |       "username": "user1",
 9 |       "email": "my1@mail.de",
10 |       "enabled": true,
11 |       "firstName": "My",
12 |       "lastName": "User 1",
13 |       "credentials": [
14 |         {
15 |           "type": "password",
16 |           "value": "user1_pwd"
17 |         }
18 |       ]
19 |     }, {
20 |       "username": "user2",
21 |       "email": "my2@mail.de",
22 |       "enabled": true,
23 |       "firstName": "My",
24 |       "lastName": "User 2",
25 |       "credentials": [
26 |         {
27 |           "type": "password",
28 |           "value": "user2_pwd"
29 |         }
30 |       ]
31 |     }
32 |   ],
33 |   "clients": [
34 |     {
35 |       "clientId": "moped-client",
36 |       "name": "moped-client",
37 |       "description": "Moped-Client",
38 |       "enabled": true,
39 |       "clientAuthenticatorType": "client-secret",
40 |       "secret": "my-special-client-secret",
41 |       "directAccessGrantsEnabled": true,
42 |       "redirectUris": [
43 |         "*"
44 |       ],
45 |       "webOrigins": [
46 |         "*"
47 |       ]
48 |     }
49 |   ]
50 | }
51 | 


--------------------------------------------------------------------------------
/sts-secret/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0"
 3 |          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 5 |     <parent>
 6 |         <artifactId>secure-token-service</artifactId>
 7 |         <groupId>de.adorsys.sts</groupId>
 8 |         <version>1.2.5-SNAPSHOT</version>
 9 |     </parent>
10 |     <modelVersion>4.0.0</modelVersion>
11 | 
12 |     <artifactId>sts-secret</artifactId>
13 |     <dependencies>
14 |         <dependency>
15 |             <groupId>de.adorsys.sts</groupId>
16 |             <artifactId>sts-resource-server</artifactId>
17 |         </dependency>
18 |         <dependency>
19 |             <groupId>de.adorsys.sts</groupId>
20 |             <artifactId>sts-keymanagement-api</artifactId>
21 |         </dependency>
22 |     </dependencies>
23 | </project>
24 | 


--------------------------------------------------------------------------------
/sts-secret/src/main/java/de/adorsys/sts/secret/EncryptedSecret.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secret;
 2 | 
 3 | import de.adorsys.sts.common.model.BaseTypeString;
 4 | 
 5 | public class EncryptedSecret extends BaseTypeString {
 6 |     public EncryptedSecret(String value) {
 7 |         super(value);
 8 |     }
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-secret/src/main/java/de/adorsys/sts/secret/LoggingSecretServerClient.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secret;
 2 | 
 3 | import org.slf4j.Logger;
 4 | import org.slf4j.LoggerFactory;
 5 | 
 6 | import java.util.Map;
 7 | 
 8 | public class LoggingSecretServerClient implements SecretServerClient {
 9 |     private static final Logger logger = LoggerFactory.getLogger(LoggingSecretServerClient.class);
10 | 
11 |     private final SecretServerClient decoratedSecretServerClient;
12 | 
13 |     public LoggingSecretServerClient(SecretServerClient secretServerClient) {
14 |         this.decoratedSecretServerClient = secretServerClient;
15 |     }
16 | 
17 |     @Override
18 |     public String getSecret(String token, Map<String, String> additionalHeaders) {
19 |         if(logger.isTraceEnabled()) logger.trace("get secret for token start...");
20 | 
21 |         String secret = decoratedSecretServerClient.getSecret(token, additionalHeaders);
22 | 
23 |         if(logger.isTraceEnabled()) logger.trace("get secret for token finished.");
24 | 
25 |         return secret;
26 |     }
27 | 
28 | }
29 | 


--------------------------------------------------------------------------------
/sts-secret/src/main/java/de/adorsys/sts/secret/Secret.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secret;
 2 | 
 3 | import de.adorsys.sts.common.model.BaseTypeString;
 4 | import de.adorsys.sts.common.util.RandomBase64Generator;
 5 | 
 6 | public class Secret extends BaseTypeString {
 7 |     private static final RandomBase64Generator RANDOM_BASE_64_GENERATOR = new RandomBase64Generator();
 8 | 
 9 |     public Secret(String value) {
10 |         super(value);
11 |     }
12 | 
13 |     public static Secret generateRandom(int bytesLength) {
14 |         String generatedBase64 = RANDOM_BASE_64_GENERATOR.generate(bytesLength);
15 |         return new Secret(generatedBase64);
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-secret/src/main/java/de/adorsys/sts/secret/SecretEncryptionException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secret;
 2 | 
 3 | public class SecretEncryptionException extends RuntimeException {
 4 | 
 5 |     private static final long serialVersionUID = 6772836071562447738L;
 6 | 
 7 |     public SecretEncryptionException(String message) {
 8 |         super(message);
 9 |     }
10 | }
11 | 


--------------------------------------------------------------------------------
/sts-secret/src/main/java/de/adorsys/sts/secret/SecretReadException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secret;
 2 | 
 3 | public class SecretReadException extends RuntimeException {
 4 |     private static final long serialVersionUID = -3515348046171117968L;
 5 | 
 6 |     public SecretReadException(String message) {
 7 |         super(message);
 8 |     }
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-secret/src/main/java/de/adorsys/sts/secret/SecretRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secret;
 2 | 
 3 | import java.util.Optional;
 4 | 
 5 | public interface SecretRepository {
 6 | 
 7 |     Secret get(String subject) throws SecretEncryptionException;
 8 |     Optional<Secret> tryToGet(String subject) throws SecretReadException;
 9 |     void save(String subject, Secret secret);
10 | }
11 | 


--------------------------------------------------------------------------------
/sts-secret/src/main/java/de/adorsys/sts/secret/SecretServerClient.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secret;
 2 | 
 3 | import java.util.HashMap;
 4 | import java.util.Map;
 5 | 
 6 | public interface SecretServerClient {
 7 | 
 8 |     /**
 9 |      * Provides the decrypted BASE64 encoded secret for the user using the specified token.
10 |      */
11 |     default String getSecret(String token) {
12 |         return getSecret(token, new HashMap<>());
13 |     }
14 | 
15 |     /**
16 |      * Provides the decrypted BASE64 encoded secret for the user using the specified token.
17 |      */
18 |     String getSecret(String token, Map<String, String> additionalHeaders);
19 | }
20 | 


--------------------------------------------------------------------------------
/sts-server-info/src/main/java/de/adorsys/sts/serverinfo/EnableServerInfo.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.serverinfo;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         ServerInfoConfiguration.class
14 | })
15 | public @interface EnableServerInfo {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-server-info/src/main/java/de/adorsys/sts/serverinfo/ServerInfoConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.serverinfo;
 2 | 
 3 | import org.springframework.context.annotation.ComponentScan;
 4 | import org.springframework.context.annotation.Configuration;
 5 | 
 6 | @Configuration
 7 | @ComponentScan(basePackages = {
 8 |         "de.adorsys.sts.serverinfo"
 9 | })
10 | public class ServerInfoConfiguration {
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-service-component-example/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM adorsys/java:17
2 | 
3 | WORKDIR /opt/
4 | COPY ./target/sts-service-component-example-exec.jar .
5 | 
6 | EXPOSE 8887
7 | 
8 | CMD exec $JAVA_HOME/bin/java $JAVA_OPTS -jar /opt/sts-service-component-example-exec.jar
9 | 


--------------------------------------------------------------------------------
/sts-service-component-example/src/main/java/de/adorsys/sts/servicecomponentexample/JpaConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.servicecomponentexample;
 2 | 
 3 | import de.adorsys.sts.persistence.jpa.config.EnableJpaPersistence;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.context.annotation.Profile;
 6 | 
 7 | @Configuration
 8 | @EnableJpaPersistence
 9 | @Profile({"!mongo"})
10 | public class JpaConfiguration {
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-service-component-example/src/main/java/de/adorsys/sts/servicecomponentexample/MongoConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.servicecomponentexample;
 2 | 
 3 | import de.adorsys.sts.persistence.mongo.config.EnableMongoPersistence;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.context.annotation.Profile;
 6 | 
 7 | @Configuration
 8 | @EnableMongoPersistence
 9 | @Profile({"mongo"})
10 | public class MongoConfiguration {
11 | }
12 | 


--------------------------------------------------------------------------------
/sts-service-component-example/src/main/java/de/adorsys/sts/servicecomponentexample/ServiceComponentExampleApplication.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.servicecomponentexample;
 2 | 
 3 | import org.springframework.boot.SpringApplication;
 4 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 5 | 
 6 | @SpringBootApplication
 7 | public class ServiceComponentExampleApplication {
 8 | 
 9 |     public static void main(String[] args) {
10 |         SpringApplication.run(ServiceComponentExampleApplication.class, args);
11 |     }
12 | }
13 | 


--------------------------------------------------------------------------------
/sts-service-component-example/src/main/java/de/adorsys/sts/servicecomponentexample/ServiceComponentExampleConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.servicecomponentexample;
 2 | 
 3 | import de.adorsys.sts.decryption.EnableDecryption;
 4 | import de.adorsys.sts.decryption.secret.EnableSecretDecryption;
 5 | import de.adorsys.sts.keyrotation.EnableKeyRotation;
 6 | import de.adorsys.sts.objectmapper.EnableJacksonObjectMapping;
 7 | import de.adorsys.sts.pop.EnablePOP;
 8 | import de.adorsys.sts.token.authentication.EnableTokenAuthentication;
 9 | import de.adorsys.sts.token.authentication.securitycontext.EnableSecurityContextSecretProviding;
10 | import org.springframework.context.annotation.Configuration;
11 | 
12 | @Configuration
13 | @EnableTokenAuthentication
14 | @EnablePOP
15 | @EnableDecryption
16 | @EnableKeyRotation
17 | @EnableSecretDecryption
18 | @EnableSecurityContextSecretProviding
19 | @EnableJacksonObjectMapping
20 | public class ServiceComponentExampleConfiguration {
21 | }
22 | 


--------------------------------------------------------------------------------
/sts-service-component-example/src/main/java/de/adorsys/sts/servicecomponentexample/ServiceComponentResourceController.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.servicecomponentexample;
 2 | 
 3 | import de.adorsys.sts.keymanagement.service.SecretDecryptionService;
 4 | import org.springframework.beans.factory.annotation.Autowired;
 5 | import org.springframework.web.bind.annotation.GetMapping;
 6 | import org.springframework.web.bind.annotation.RestController;
 7 | 
 8 | @RestController
 9 | public class ServiceComponentResourceController {
10 | 
11 |     private final SecretDecryptionService secretDecryptionService;
12 | 
13 |     @Autowired
14 |     public ServiceComponentResourceController(SecretDecryptionService secretDecryptionService) {
15 |         this.secretDecryptionService = secretDecryptionService;
16 |     }
17 | 
18 |     @GetMapping("/helloworld")
19 |     public String helloWorld() {
20 |         return secretDecryptionService.decryptSecretClaim();
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/sts-service-component-example/src/main/resources/application-debug.yml:
--------------------------------------------------------------------------------
1 | logging:
2 |   level.de.adorsys.sts.keyrotation.KeyRotationSchedule: 'debug'
3 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/EncryptionException.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.simpleencryption;
2 | 
3 | public class EncryptionException extends RuntimeException {
4 |     public EncryptionException(Throwable cause) {
5 |         super(cause);
6 |     }
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/KeyProvider.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.simpleencryption;
2 | 
3 | import java.security.Key;
4 | 
5 | public interface KeyProvider {
6 |     Key getKeyForEncryption();
7 |     Key getKeyForDecryption(String keyId);
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/ObjectEncryption.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.simpleencryption;
 2 | 
 3 | import java.util.Optional;
 4 | 
 5 | public interface ObjectEncryption {
 6 |     <T> T decrypt(String encrypted, Class<T> type) throws EncryptionException;
 7 |     String decrypt(String encrypted) throws EncryptionException;
 8 | 
 9 |     <T> Optional<T> tryToDecrypt(String encrypted, Class<T> type);
10 |     Optional<String> tryToDecrypt(String encrypted);
11 | 
12 |     String encrypt(Object object) throws EncryptionException;
13 |     String encrypt(String plainText) throws EncryptionException;
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/StaticKeyEncryptionFactory.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.simpleencryption;
 2 | 
 3 | import com.nimbusds.jose.EncryptionMethod;
 4 | import com.nimbusds.jose.JWEAlgorithm;
 5 | import de.adorsys.sts.common.ObjectMapperSPI;
 6 | import de.adorsys.sts.simpleencryption.decrypt.JweDecrypter;
 7 | import de.adorsys.sts.simpleencryption.encrypt.JweEncrypter;
 8 | import de.adorsys.sts.simpleencryption.keyprovider.StaticKeyProviderFactory;
 9 | 
10 | public class StaticKeyEncryptionFactory {
11 | 
12 |     private final ObjectMapperSPI objectMapper;
13 | 
14 |     public StaticKeyEncryptionFactory(ObjectMapperSPI objectMapper) {
15 |         this.objectMapper = objectMapper;
16 |     }
17 | 
18 |     public ObjectEncryption create(String alg, String enc, String key) {
19 |         KeyProvider keyProvider = StaticKeyProviderFactory.createKeyProvider(alg, enc, key);
20 | 
21 |         JWEAlgorithm jweAlgorithm = JWEAlgorithm.parse(alg);
22 |         EncryptionMethod jweEncryptionMethod = EncryptionMethod.parse(enc);
23 | 
24 |         return new JsonMappedObjectEncryption(
25 |                 objectMapper,
26 |                 new JweEncrypter(keyProvider, jweAlgorithm, jweEncryptionMethod),
27 |                 new JweDecrypter(keyProvider)
28 |         );
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/decrypt/Decrypter.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.simpleencryption.decrypt;
 2 | 
 3 | import java.util.Optional;
 4 | 
 5 | public interface Decrypter {
 6 | 
 7 |     String decrypt(String encrypted);
 8 |     Optional<String> tryToDecrypt(String encrypted);
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/encrypt/Encrypter.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.simpleencryption.encrypt;
2 | 
3 | public interface Encrypter {
4 |     String encrypt(String plainText);
5 | }
6 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/encrypt/JweEncrypter.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.simpleencryption.encrypt;
 2 | 
 3 | import com.nimbusds.jose.*;
 4 | import de.adorsys.sts.common.encrypter.JWEEncryptedSelector;
 5 | import de.adorsys.sts.simpleencryption.EncryptionException;
 6 | import de.adorsys.sts.simpleencryption.KeyProvider;
 7 | 
 8 | public class JweEncrypter implements Encrypter {
 9 | 
10 |     private final JWEEncrypter jweEncrypter;
11 |     private final JWEHeader header;
12 | 
13 |     public JweEncrypter(KeyProvider keyProvider, final JWEAlgorithm alg, final EncryptionMethod enc) {
14 |         jweEncrypter = JWEEncryptedSelector.getEncrypter(keyProvider.getKeyForEncryption(), alg, enc);
15 |         header = new JWEHeader(alg, enc);
16 |     }
17 | 
18 |     public String encrypt(String plainText) {
19 |         Payload payload = new Payload(plainText);
20 |         JWEObject jweObject = new JWEObject(header, payload);
21 | 
22 |         try {
23 |             jweObject.encrypt(jweEncrypter);
24 |         } catch (JOSEException e) {
25 |             throw new EncryptionException(e);
26 |         }
27 | 
28 |         return jweObject.serialize();
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/keyprovider/StaticAesKeyProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.simpleencryption.keyprovider;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWK;
 4 | import de.adorsys.sts.common.converter.KeyConverter;
 5 | import de.adorsys.sts.simpleencryption.KeyProvider;
 6 | 
 7 | import java.security.Key;
 8 | import java.text.ParseException;
 9 | 
10 | class StaticAesKeyProvider implements KeyProvider {
11 |     private final String key;
12 | 
13 |     StaticAesKeyProvider(String key) {
14 |         this.key = key;
15 |     }
16 | 
17 |     @Override
18 |     public Key getKeyForEncryption() {
19 |         return extractSecretKey(key);
20 |     }
21 | 
22 |     @Override
23 |     public Key getKeyForDecryption(String keyId) {
24 |         return extractSecretKey(key);
25 |     }
26 | 
27 |     private static Key extractSecretKey(String jwkAsString) {
28 |         Key key;
29 | 
30 |         try {
31 |             JWK parsedKey = JWK.parse(jwkAsString);
32 |             key = KeyConverter.toPrivateOrSecret(parsedKey, "AES");
33 |         } catch (ParseException e) {
34 |             throw new IllegalArgumentException(e);
35 |         }
36 | 
37 |         return key;
38 |     }
39 | }
40 | 


--------------------------------------------------------------------------------
/sts-simple-encryption/src/main/java/de/adorsys/sts/simpleencryption/keyprovider/StaticRsaKeyProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.simpleencryption.keyprovider;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWK;
 4 | import de.adorsys.sts.common.converter.KeyConverter;
 5 | import de.adorsys.sts.simpleencryption.KeyProvider;
 6 | 
 7 | import java.security.Key;
 8 | import java.text.ParseException;
 9 | 
10 | class StaticRsaKeyProvider implements KeyProvider {
11 |     private final String key;
12 | 
13 |     StaticRsaKeyProvider(String key) {
14 |         this.key = key;
15 |     }
16 | 
17 |     @Override
18 |     public Key getKeyForEncryption() {
19 |         JWK parsedKey = tryToParseJwk(key);
20 |         return KeyConverter.toPublic(parsedKey);
21 |     }
22 | 
23 |     @Override
24 |     public Key getKeyForDecryption(String keyId) {
25 |         JWK parsedKey = tryToParseJwk(key);
26 |         return KeyConverter.toPrivateOrSecret(parsedKey);
27 |     }
28 | 
29 |     private JWK tryToParseJwk(String key) {
30 |         JWK parsedKey;
31 | 
32 |         try {
33 |             parsedKey = JWK.parse(key);
34 |         } catch (ParseException e) {
35 |             throw new IllegalArgumentException(e);
36 |         }
37 | 
38 |         return parsedKey;
39 |     }
40 | }
41 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/ApplicationEventListener.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts;
 2 | 
 3 | import org.slf4j.Logger;
 4 | import org.slf4j.LoggerFactory;
 5 | import org.springframework.boot.context.event.ApplicationReadyEvent;
 6 | import org.springframework.context.event.ContextClosedEvent;
 7 | import org.springframework.context.event.EventListener;
 8 | import org.springframework.stereotype.Component;
 9 | 
10 | @Component
11 | public class ApplicationEventListener {
12 | 
13 |     private static final Logger log = LoggerFactory.getLogger(ApplicationEventListener.class);
14 | 
15 |     @EventListener(ApplicationReadyEvent.class)
16 |     public void applicationReadyEvent() {
17 |         log.info("Application started");
18 |     }
19 | 
20 |     @EventListener(ContextClosedEvent.class)
21 |     public void contextClosedEvent() {
22 |         log.info("Application stopped");
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/admin/AdminConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.admin;
 2 | 
 3 | import de.adorsys.sts.resourceserver.ResourceServerManagementConfiguration;
 4 | import org.springframework.context.annotation.ComponentScan;
 5 | import org.springframework.context.annotation.Configuration;
 6 | import org.springframework.context.annotation.Import;
 7 | 
 8 | @Configuration
 9 | @ComponentScan(basePackages = {
10 |         "de.adorsys.sts.admin"
11 | })
12 | @Import(ResourceServerManagementConfiguration.class)
13 | public class AdminConfiguration {
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/admin/EnableAdmin.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.admin;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         AdminConfiguration.class
14 | })
15 | public @interface EnableAdmin {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/decryption/DecryptionConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.decryption;
 2 | 
 3 | import de.adorsys.sts.keymanagement.KeyManagementConfiguration;
 4 | import de.adorsys.sts.keymanagement.service.DecryptionService;
 5 | import de.adorsys.sts.keymanagement.service.DecryptionServiceImpl;
 6 | import de.adorsys.sts.keymanagement.service.KeyManagementService;
 7 | import org.springframework.context.annotation.*;
 8 | 
 9 | @Configuration
10 | @ComponentScan(
11 |         basePackages = {"de.adorsys.sts.decryption"},
12 |         excludeFilters = @ComponentScan.Filter(
13 |                 pattern = "de.adorsys.sts.decryption.secret.*",
14 |                 type = FilterType.REGEX
15 |         )
16 | )
17 | @Import(KeyManagementConfiguration.class)
18 | public class DecryptionConfiguration {
19 | 
20 |     @Bean
21 |     public DecryptionService decryptionService(
22 |             KeyManagementService keyManagementService
23 |     ) {
24 |         return new DecryptionServiceImpl(keyManagementService);
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/decryption/EnableDecryption.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.decryption;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         DecryptionConfiguration.class
14 | })
15 | public @interface EnableDecryption {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/decryption/secret/EnableSecretDecryption.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.decryption.secret;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         SecretDecryptionConfiguration.class
14 | })
15 | public @interface EnableSecretDecryption {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/decryption/secret/SecretDecryptionConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.decryption.secret;
 2 | 
 3 | import de.adorsys.sts.decryption.DecryptionConfiguration;
 4 | import de.adorsys.sts.keymanagement.service.DecryptionService;
 5 | import de.adorsys.sts.keymanagement.service.SecretDecryptionService;
 6 | import de.adorsys.sts.keymanagement.service.SecretDecryptionServiceImpl;
 7 | import de.adorsys.sts.keymanagement.service.SecretProvider;
 8 | import org.springframework.context.annotation.*;
 9 | 
10 | @Configuration
11 | @ComponentScan(
12 |         basePackages = {"de.adorsys.sts.decryption.secret"},
13 |         excludeFilters = @ComponentScan.Filter(
14 |                 pattern = "de.adorsys.sts.decryption.secret.secretclaim.*",
15 |                 type = FilterType.REGEX
16 |         )
17 | )
18 | @Import(DecryptionConfiguration.class)
19 | public class SecretDecryptionConfiguration {
20 | 
21 |     @Bean
22 |     SecretDecryptionService secretDecryptionService(
23 |             DecryptionService decryptionService,
24 |             SecretProvider secretProvider
25 |     ) {
26 |         return new SecretDecryptionServiceImpl(
27 |                 decryptionService,
28 |                 secretProvider
29 |         );
30 |     }
31 | }
32 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/encryption/EnableEncryption.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.encryption;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         EncryptionConfiguration.class
14 | })
15 | public @interface EnableEncryption {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/keymanagement/EnableKeyManagement.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         KeyManagementConfiguration.class
14 | })
15 | public @interface EnableKeyManagement {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/keymanagement/bouncycastle/BouncyCastleProviderConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.bouncycastle;
 2 | 
 3 | import org.springframework.context.annotation.ComponentScan;
 4 | import org.springframework.context.annotation.Configuration;
 5 | 
 6 | @Configuration
 7 | @ComponentScan("de.adorsys.sts.keymanagement.bouncycastle")
 8 | public class BouncyCastleProviderConfiguration {
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/keymanagement/bouncycastle/BouncyCastleProviderRunner.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keymanagement.bouncycastle;
 2 | 
 3 | import org.bouncycastle.jce.provider.BouncyCastleProvider;
 4 | import org.springframework.boot.ApplicationArguments;
 5 | import org.springframework.boot.ApplicationRunner;
 6 | import org.springframework.stereotype.Component;
 7 | 
 8 | import javax.crypto.NoSuchPaddingException;
 9 | import java.security.Provider;
10 | import java.security.Security;
11 | 
12 | @Component
13 | public class BouncyCastleProviderRunner implements ApplicationRunner {
14 |     private static final String BOUNCY_CASTLE_PROVIDER_NAME = "BC";
15 | 
16 |     @Override
17 |     public void run(ApplicationArguments applicationArguments) throws Exception {
18 |         Security.addProvider(new BouncyCastleProvider());
19 |         Provider bcProvider = Security.getProvider(BOUNCY_CASTLE_PROVIDER_NAME);
20 | 
21 |         if(bcProvider==null) {
22 |             throw new IllegalStateException( new NoSuchPaddingException(BOUNCY_CASTLE_PROVIDER_NAME));
23 |         }
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/keyrotation/EnableKeyRotation.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.keyrotation;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         KeyRotationConfiguration.class
14 | })
15 | public @interface EnableKeyRotation {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/objectmapper/EnableJacksonObjectMapping.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.objectmapper;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         JacksonConfiguration.class
14 | })
15 | public @interface EnableJacksonObjectMapping {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/objectmapper/JacksonConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.objectmapper;
 2 | 
 3 | import de.adorsys.sts.common.ObjectMapperSPI;
 4 | import org.springframework.context.annotation.Bean;
 5 | import org.springframework.context.annotation.Configuration;
 6 | 
 7 | @Configuration
 8 | public class JacksonConfiguration {
 9 | 
10 |     @Bean
11 |     ObjectMapperSPI objectMapper() {
12 |         return new JacksonObjectMapper();
13 |     }
14 | }
15 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/pop/EnablePOP.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.pop;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         PopConfiguration.class
14 | })
15 | public @interface EnablePOP {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/pop/PopConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.pop;
 2 | 
 3 | import de.adorsys.sts.keymanagement.KeyManagementConfiguration;
 4 | import de.adorsys.sts.keymanagement.service.KeyManagementService;
 5 | import org.springframework.context.annotation.Bean;
 6 | import org.springframework.context.annotation.ComponentScan;
 7 | import org.springframework.context.annotation.Configuration;
 8 | import org.springframework.context.annotation.Import;
 9 | 
10 | @Configuration
11 | @ComponentScan(basePackages = {
12 |         "de.adorsys.sts.pop"
13 | })
14 | @Import(KeyManagementConfiguration.class)
15 | public class PopConfiguration {
16 | 
17 |     @Bean
18 |     public PopService popService(
19 |             KeyManagementService keyManagementService
20 |     ) {
21 |         return new PopService(keyManagementService);
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/resourceserver/EnableResourceServerManagement.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         ResourceServerManagementConfiguration.class
14 | })
15 | @Deprecated
16 | public @interface EnableResourceServerManagement {
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/resourceserver/ResourceServerManagementConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver;
 2 | 
 3 | import de.adorsys.sts.resourceserver.persistence.ResourceServerRepository;
 4 | import de.adorsys.sts.resourceserver.service.ResourceServerService;
 5 | import org.springframework.context.annotation.Bean;
 6 | import org.springframework.context.annotation.ComponentScan;
 7 | 
 8 | @ComponentScan(basePackageClasses = ResourceServerManagementConfigurationProperties.class)
 9 | public class ResourceServerManagementConfiguration {
10 | 
11 |     @Bean
12 |     public ResourceServerService resourceServerService(
13 |             ResourceServerRepository repository
14 |     ) {
15 |         return new ResourceServerService(repository);
16 |     }
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/resourceserver/ResourceServerProcessingConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver;
 2 | 
 3 | import de.adorsys.sts.encryption.EncryptionConfiguration;
 4 | import de.adorsys.sts.resourceserver.processing.ResourceServerProcessor;
 5 | import de.adorsys.sts.resourceserver.service.EncryptionService;
 6 | import de.adorsys.sts.resourceserver.service.ResourceServerService;
 7 | import org.springframework.context.annotation.Bean;
 8 | import org.springframework.context.annotation.Configuration;
 9 | import org.springframework.context.annotation.Import;
10 | 
11 | @Configuration
12 | @Import(EncryptionConfiguration.class)
13 | public class ResourceServerProcessingConfiguration {
14 | 
15 |     @Bean
16 |     public ResourceServerProcessor resourceServerProcessor(
17 |             ResourceServerService resourceServerService,
18 |             EncryptionService encryptionService
19 |     ) {
20 |         return new ResourceServerProcessor(resourceServerService, encryptionService);
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/resourceserver/initializer/EnableResourceServerInitialization.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.initializer;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         ResourceServerInitializationConfiguration.class
14 | })
15 | public @interface EnableResourceServerInitialization {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/resourceserver/initializer/ResourceServerInitializationConfiguration.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.resourceserver.initializer;
2 | 
3 | import org.springframework.context.annotation.ComponentScan;
4 | 
5 | @ComponentScan("de.adorsys.sts.resourceserver.initializer")
6 | public class ResourceServerInitializationConfiguration {
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/resourceserver/initializer/ResourceServerInitializer.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.initializer;
 2 | 
 3 | import de.adorsys.sts.resourceserver.persistence.ResourceServerRepository;
 4 | import de.adorsys.sts.resourceserver.provider.ResourceServersProvider;
 5 | import org.springframework.beans.factory.annotation.Autowired;
 6 | import org.springframework.boot.ApplicationArguments;
 7 | import org.springframework.boot.ApplicationRunner;
 8 | import org.springframework.core.annotation.Order;
 9 | import org.springframework.stereotype.Component;
10 | 
11 | @Component
12 | @Order(value=ResourceServerInitializer.ORDER)
13 | public class ResourceServerInitializer implements ApplicationRunner {
14 | 	public static final int ORDER =  1;
15 | 
16 | 	private final ResourceServerRepository repository;
17 | 	private final ResourceServersProvider provider;
18 | 
19 | 	@Autowired
20 | 	public ResourceServerInitializer(ResourceServerRepository repository, ResourceServersProvider provider) {
21 | 		this.repository = repository;
22 | 		this.provider = provider;
23 | 	}
24 | 
25 | 	@Override
26 | 	public void run(ApplicationArguments args) throws Exception {
27 | 		repository.addAll(provider.get());
28 | 	}
29 | }
30 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/resourceserver/initializer/ResourceServerPropertiesProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.resourceserver.initializer;
 2 | 
 3 | import de.adorsys.sts.resourceserver.model.ResourceServer;
 4 | import de.adorsys.sts.resourceserver.provider.ResourceServersProvider;
 5 | import de.adorsys.sts.resourceserver.service.ResourceServerManagementProperties;
 6 | import org.springframework.beans.factory.annotation.Autowired;
 7 | import org.springframework.stereotype.Component;
 8 | 
 9 | import java.util.List;
10 | 
11 | @Component
12 | public class ResourceServerPropertiesProvider implements ResourceServersProvider {
13 | 
14 |     private final ResourceServerManagementProperties properties;
15 | 
16 |     @Autowired
17 |     public ResourceServerPropertiesProvider(ResourceServerManagementProperties properties) {
18 |         this.properties = properties;
19 |     }
20 | 
21 |     @Override
22 |     public List<ResourceServer> get() {
23 |         return properties.getResourceServers();
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserver/EnableSecretServer.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         SecretServerConfiguration.class
14 | })
15 | public @interface EnableSecretServer {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserver/SecretServerRestController.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver;
 2 | 
 3 | import de.adorsys.sts.common.config.TokenResource;
 4 | import de.adorsys.sts.token.tokenexchange.TokenExchangeService;
 5 | import de.adorsys.sts.token.tokenexchange.server.TokenExchangeController;
 6 | import io.swagger.v3.oas.annotations.tags.Tag;
 7 | import org.springframework.web.bind.annotation.RequestMapping;
 8 | import org.springframework.web.bind.annotation.RestController;
 9 | 
10 | @RestController
11 | @Tag(name = "Token Exchange")
12 | @TokenResource
13 | @RequestMapping("${sts.secret-server.endpoint:/secret-server/token-exchange}")
14 | public class SecretServerRestController extends TokenExchangeController {
15 |     public SecretServerRestController(TokenExchangeService tokenExchangeService) {
16 |         super(tokenExchangeService);
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserver/encryption/InMemorySecretRepository.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserver.encryption;
 2 | 
 3 | import de.adorsys.sts.secret.Secret;
 4 | import de.adorsys.sts.secret.SecretEncryptionException;
 5 | import de.adorsys.sts.secret.SecretReadException;
 6 | import de.adorsys.sts.secret.SecretRepository;
 7 | 
 8 | import java.util.HashMap;
 9 | import java.util.Map;
10 | import java.util.Optional;
11 | 
12 | public class InMemorySecretRepository implements SecretRepository {
13 |     private final Map<String, Secret> secrets = new HashMap<>();
14 | 
15 |     @Override
16 |     public Secret get(String subject) throws SecretEncryptionException {
17 |         return secrets.get(subject);
18 |     }
19 | 
20 |     @Override
21 |     public Optional<Secret> tryToGet(String subject) throws SecretReadException {
22 |         Secret maybeSecret = secrets.get(subject);
23 |         return Optional.ofNullable(maybeSecret);
24 |     }
25 | 
26 |     @Override
27 |     public void save(String subject, Secret secret) {
28 |         secrets.put(subject, secret);
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserverclient/EnableSecretServerClient.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserverclient;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         SecretServerClientConfiguration.class
14 | })
15 | public @interface EnableSecretServerClient {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserverclient/LoggingSecretProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserverclient;
 2 | 
 3 | import de.adorsys.sts.keymanagement.service.SecretProvider;
 4 | import org.slf4j.Logger;
 5 | import org.slf4j.LoggerFactory;
 6 | 
 7 | public class LoggingSecretProvider implements SecretProvider {
 8 |     private static final Logger logger = LoggerFactory.getLogger(LoggingSecretProvider.class);
 9 | 
10 |     private final SecretProvider decoratedSecretProvider;
11 | 
12 |     public LoggingSecretProvider(SecretProvider secretProvider) {
13 |         this.decoratedSecretProvider = secretProvider;
14 |     }
15 | 
16 |     @Override
17 |     public String get() {
18 |         if(logger.isTraceEnabled()) logger.trace("get secret start...");
19 | 
20 |         String secret = decoratedSecretProvider.get();
21 | 
22 |         if(logger.isTraceEnabled()) logger.trace("get secret finished.");
23 | 
24 |         return secret;
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserverclient/SecretServerClientSecretProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserverclient;
 2 | 
 3 | import de.adorsys.sts.keymanagement.service.SecretProvider;
 4 | import de.adorsys.sts.secret.SecretServerClient;
 5 | import org.springframework.beans.factory.annotation.Autowired;
 6 | import org.springframework.stereotype.Component;
 7 | 
 8 | @Component
 9 | public class SecretServerClientSecretProvider implements SecretProvider {
10 | 
11 |     private final TokenProvider tokenProvider;
12 |     private final SecretServerClient secretServerClient;
13 | 
14 |     @Autowired
15 |     public SecretServerClientSecretProvider(TokenProvider tokenProvider, SecretServerClient secretServerClient) {
16 |         this.tokenProvider = tokenProvider;
17 |         this.secretServerClient = secretServerClient;
18 |     }
19 | 
20 |     @Override
21 |     public String get() {
22 |         String token = tokenProvider.get();
23 |         return secretServerClient.getSecret(token);
24 |     }
25 | }
26 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserverclient/SecurityContextTokenProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.secretserverclient;
 2 | 
 3 | import de.adorsys.sts.token.authentication.BearerTokenAuthentication;
 4 | import org.springframework.security.core.context.SecurityContext;
 5 | import org.springframework.security.core.context.SecurityContextHolder;
 6 | import org.springframework.stereotype.Component;
 7 | 
 8 | @Component
 9 | public class SecurityContextTokenProvider implements TokenProvider {
10 | 
11 |     @Override
12 |     public String get() {
13 |         SecurityContext context = SecurityContextHolder.getContext();
14 |         BearerTokenAuthentication authentication = (BearerTokenAuthentication)context.getAuthentication();
15 | 
16 |         return authentication.getToken();
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/secretserverclient/TokenProvider.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.secretserverclient;
2 | 
3 | public interface TokenProvider {
4 |     String get();
5 | }
6 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/TokenCoreConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token;
 2 | 
 3 | import de.adorsys.sts.encryption.EncryptionConfiguration;
 4 | import de.adorsys.sts.keymanagement.KeyManagementConfiguration;
 5 | import de.adorsys.sts.resourceserver.processing.ResourceServerProcessor;
 6 | import de.adorsys.sts.resourceserver.service.EncryptionService;
 7 | import de.adorsys.sts.resourceserver.service.ResourceServerService;
 8 | import org.springframework.context.annotation.Bean;
 9 | import org.springframework.context.annotation.Configuration;
10 | import org.springframework.context.annotation.Import;
11 | 
12 | @Configuration
13 | @Import({EncryptionConfiguration.class, KeyManagementConfiguration.class})
14 | public class TokenCoreConfiguration {
15 | 
16 |     @Bean
17 |     public ResourceServerProcessor resourceServerProcessor(
18 |             ResourceServerService resourceServerService,
19 |             EncryptionService encryptionService
20 |     ) {
21 |         return new ResourceServerProcessor(resourceServerService, encryptionService);
22 |     }
23 | }
24 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/authentication/AuthServerConfigurationProperties.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.authentication;
 2 | 
 3 | import lombok.Getter;
 4 | import lombok.Setter;
 5 | import org.springframework.boot.context.properties.ConfigurationProperties;
 6 | import org.springframework.stereotype.Component;
 7 | import org.springframework.validation.annotation.Validated;
 8 | 
 9 | import java.util.ArrayList;
10 | import java.util.List;
11 | 
12 | @Component
13 | @ConfigurationProperties(prefix = "sts")
14 | @Validated
15 | public class AuthServerConfigurationProperties {
16 | 
17 |     private List<AuthServerProperties> authservers = new ArrayList<>();
18 | 
19 |     public List<AuthServerProperties> getAuthservers() {
20 |         return authservers;
21 |     }
22 | 
23 |     public void setAuthservers(List<AuthServerProperties> authservers) {
24 |         this.authservers = authservers;
25 |     }
26 | 
27 |     @Getter
28 |     @Setter
29 |     public static class AuthServerProperties {
30 |         private String name;
31 |         private String issUrl;
32 |         private String jwksUrl;
33 |         private Integer refreshIntervalSeconds = 600;
34 |         private String keyCloakUrl;
35 |     }
36 | }
37 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/authentication/BearerTokenAuthentication.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.authentication;
 2 | 
 3 | import com.fasterxml.jackson.annotation.JsonIgnore;
 4 | import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
 5 | import org.springframework.security.core.GrantedAuthority;
 6 | 
 7 | import java.util.Collection;
 8 | 
 9 | public class BearerTokenAuthentication extends UsernamePasswordAuthenticationToken {
10 | 
11 |     private static final long serialVersionUID = -778888356552035882L;
12 |     private final String token;
13 | 
14 |     public BearerTokenAuthentication(Object principal, Object credentials, String token) {
15 |         super(principal, credentials);
16 |         this.token = token;
17 |     }
18 | 
19 |     public BearerTokenAuthentication(Object principal, Object credentials, Collection<? extends GrantedAuthority> authorities, String token) {
20 |         super(principal, credentials, authorities);
21 |         this.token = token;
22 |     }
23 | 
24 |     // security issue if you export the token
25 |     @JsonIgnore
26 |     public String getToken() {
27 |         return token;
28 |     }
29 | }
30 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/authentication/EnableTokenAuthentication.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.authentication;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         TokenAuthenticationConfiguration.class
14 | })
15 | public @interface EnableTokenAuthentication {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/authentication/LoggingAuthServer.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.authentication;
 2 | 
 3 | import com.nimbusds.jose.jwk.JWK;
 4 | import de.adorsys.sts.tokenauth.AuthServer;
 5 | import lombok.extern.slf4j.Slf4j;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | @Slf4j
10 | public class LoggingAuthServer extends AuthServer {
11 | 
12 |     public LoggingAuthServer(String name, String issUrl, String jwksUrl, int refreshIntervalSeconds, String keyCloakUrl) {
13 |         super(name, issUrl, jwksUrl, refreshIntervalSeconds, keyCloakUrl);
14 |     }
15 | 
16 |     @Override
17 |     protected void onJsonWebKeySetRetrieved(List<JWK> jwks) {
18 |         super.onJsonWebKeySetRetrieved(jwks);
19 | 
20 |         if(log.isDebugEnabled()) {
21 |             log.debug("Retrieved remote JWKS: {}", jwks);
22 |         }
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/authentication/TokenAuthenticationConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.authentication;
 2 | 
 3 | import de.adorsys.sts.tokenauth.AuthServersProvider;
 4 | import de.adorsys.sts.tokenauth.BearerTokenValidator;
 5 | import org.springframework.context.annotation.Bean;
 6 | import org.springframework.context.annotation.ComponentScan;
 7 | import org.springframework.context.annotation.Configuration;
 8 | import org.springframework.context.annotation.FilterType;
 9 | 
10 | import java.time.Clock;
11 | 
12 | @Configuration
13 | @ComponentScan(
14 |         basePackages = {"de.adorsys.sts.token.authentication"},
15 |         excludeFilters = @ComponentScan.Filter(
16 |                 pattern = "de.adorsys.sts.token.authentication.securitycontext.*",
17 |                 type = FilterType.REGEX
18 |         )
19 | )
20 | public class TokenAuthenticationConfiguration {
21 | 
22 |     @Bean
23 |     BearerTokenValidator bearerTokenValidator(AuthServersProvider authServersProvider, Clock clock) {
24 |         return new LoggingBearerTokenValidator(authServersProvider, clock);
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/authentication/securitycontext/EnableSecurityContextSecretProviding.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.authentication.securitycontext;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         SecurityContextSecretProvidingConfiguration.class
14 | })
15 | public @interface EnableSecurityContextSecretProviding {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/authentication/securitycontext/SecurityContextSecretProvidingConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.authentication.securitycontext;
 2 | 
 3 | import org.springframework.context.annotation.ComponentScan;
 4 | import org.springframework.context.annotation.Configuration;
 5 | 
 6 | @Configuration
 7 | @ComponentScan(
 8 |         basePackages = {"de.adorsys.sts.token.authentication.securitycontext"}
 9 | )
10 | public class SecurityContextSecretProvidingConfiguration {
11 | 
12 | 
13 | }
14 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/passwordgrant/EnablePasswordGrant.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.passwordgrant;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         PasswordGrantConfiguration.class
14 | })
15 | public @interface EnablePasswordGrant {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/tokenexchange/client/EnableTokenExchangeClient.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange.client;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         TokenExchangeClientConfiguration.class
14 | })
15 | public @interface EnableTokenExchangeClient {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/tokenexchange/client/TokenExchangeClientConfiguration.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange.client;
 2 | 
 3 | import de.adorsys.sts.token.tokenexchange.TokenExchangeClient;
 4 | import org.springframework.context.annotation.Bean;
 5 | import org.springframework.context.annotation.Configuration;
 6 | import org.springframework.web.client.RestTemplate;
 7 | 
 8 | @Configuration
 9 | public class TokenExchangeClientConfiguration {
10 | 
11 |     @Bean
12 |     public TokenExchangeClient tokenExchangeClient(
13 |             RestTemplate restTemplate
14 |     ) {
15 |         TokenExchangeClient tokenExchangeClient = new RestTokenExchangeClient(restTemplate);
16 |         return new LoggingTokenExchangeClient(tokenExchangeClient);
17 |     }
18 | 
19 | }
20 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/tokenexchange/server/EnableTokenExchangeServer.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange.server;
 2 | 
 3 | import org.springframework.context.annotation.Import;
 4 | 
 5 | import java.lang.annotation.Documented;
 6 | import java.lang.annotation.Retention;
 7 | import java.lang.annotation.Target;
 8 | 
 9 | @Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
10 | @Target(value = {java.lang.annotation.ElementType.TYPE})
11 | @Documented
12 | @Import({
13 |         TokenExchangeServerConfiguration.class
14 | })
15 | public @interface EnableTokenExchangeServer {
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-spring/src/main/java/de/adorsys/sts/token/tokenexchange/server/TokenExchangeRestController.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange.server;
 2 | 
 3 | import de.adorsys.sts.common.config.TokenResource;
 4 | import de.adorsys.sts.token.tokenexchange.TokenExchangeService;
 5 | import io.swagger.v3.oas.annotations.tags.Tag;
 6 | import org.springframework.web.bind.annotation.RequestMapping;
 7 | import org.springframework.web.bind.annotation.RestController;
 8 | 
 9 | @RestController
10 | @Tag(name = "Token Exchange", description = "Token exchange, token degradation endpoint")
11 | @TokenResource
12 | @RequestMapping(path = "/token/token-exchange")
13 | public class TokenExchangeRestController extends TokenExchangeController {
14 | 
15 |     public TokenExchangeRestController(TokenExchangeService tokenExchangeService) {
16 |         super(tokenExchangeService);
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/sts-token-auth/src/main/java/de/adorsys/sts/tokenauth/AuthServersProvider.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tokenauth;
 2 | 
 3 | import java.util.Map;
 4 | 
 5 | public interface AuthServersProvider {
 6 |     Map<String, AuthServer> getAll();
 7 | 
 8 |     AuthServer get(String issuer);
 9 | }
10 | 


--------------------------------------------------------------------------------
/sts-token-auth/src/main/java/de/adorsys/sts/tokenauth/BearerToken.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tokenauth;
 2 | 
 3 | import com.nimbusds.jwt.JWTClaimsSet;
 4 | import lombok.Builder;
 5 | import lombok.Getter;
 6 | 
 7 | import java.util.List;
 8 | 
 9 | @Builder
10 | @Getter
11 | public class BearerToken {
12 |     private final String token;
13 |     private final JWTClaimsSet claims;
14 |     private final List<String> roles;
15 |     private final boolean isValid;
16 | }
17 | 


--------------------------------------------------------------------------------
/sts-token-auth/src/main/java/de/adorsys/sts/tokenauth/MultiAuthJWSKeySelector.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tokenauth;
 2 | 
 3 | import com.nimbusds.jose.JWSHeader;
 4 | import com.nimbusds.jose.KeySourceException;
 5 | import com.nimbusds.jose.proc.JWSKeySelector;
 6 | import com.nimbusds.jose.proc.SecurityContext;
 7 | import org.apache.commons.lang3.StringUtils;
 8 | 
 9 | import java.security.Key;
10 | import java.util.Collections;
11 | import java.util.List;
12 | 
13 | public class MultiAuthJWSKeySelector<C extends SecurityContext> implements JWSKeySelector<C> {
14 |     private AuthServer authServer;
15 | 
16 |     @Override
17 |     public List<? extends Key> selectJWSKeys(JWSHeader header, C context) throws KeySourceException {
18 |         // Check signature
19 |         String keyID = header.getKeyID();
20 |         if (StringUtils.isBlank(keyID)) return Collections.emptyList();
21 | 
22 |         Key key = authServer.getJWK(keyID);
23 | 
24 |         return Collections.singletonList(key);
25 |     }
26 | 
27 |     public MultiAuthJWSKeySelector(AuthServer authServer) {
28 |         this.authServer = authServer;
29 |     }
30 | }
31 | 


--------------------------------------------------------------------------------
/sts-token-auth/src/main/java/de/adorsys/sts/tokenauth/RolesExtractor.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tokenauth;
 2 | 
 3 | import com.nimbusds.jwt.JWTClaimsSet;
 4 | 
 5 | import java.util.ArrayList;
 6 | import java.util.List;
 7 | 
 8 | public class RolesExtractor {
 9 |     private final KeycloakTokenRolesParser keycloakTokenRolesParser = new KeycloakTokenRolesParser();
10 |     private final StringListRolesParser stringListRolesParser = new StringListRolesParser();
11 | 
12 |     public List<String> extractRoles(JWTClaimsSet claimSet) {
13 |         List<String> results = new ArrayList<>();
14 | 
15 |         stringListRolesParser.extractRoles(claimSet, "scp", results);
16 |         stringListRolesParser.extractRoles(claimSet, "roles", results);
17 | 
18 |         keycloakTokenRolesParser.parseRoles(claimSet, results);
19 | 
20 |         return results;
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/sts-token-auth/src/main/java/de/adorsys/sts/tokenauth/StringListRolesParser.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.tokenauth;
 2 | 
 3 | import com.nimbusds.jwt.JWTClaimsSet;
 4 | 
 5 | import java.text.ParseException;
 6 | import java.util.List;
 7 | 
 8 | public class StringListRolesParser {
 9 | 
10 | 	public void extractRoles(JWTClaimsSet claimSet, String claimName, final List<String> results) {
11 | 		List<String> scpClaims = readClaim(claimSet, claimName);
12 | 		if(scpClaims!=null && !scpClaims.isEmpty()){
13 | 			for (String scp : scpClaims) {
14 | 				if(scp!=null && !results.contains(scp)){
15 | 					results.add(scp);
16 | 				}
17 | 			}
18 | 		}
19 | 	}
20 | 	
21 | 	private List<String> readClaim(JWTClaimsSet claimSet, String claimName){
22 | 		try {
23 | 			return claimSet.getStringListClaim(claimName);
24 | 		} catch (ParseException e) {
25 | 			// TODO log exception.
26 | 			return null;
27 | 		}
28 | 	}
29 | 	
30 | }
31 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/InvalidParameterException.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.token;
2 | 
3 | public class InvalidParameterException extends RuntimeException {
4 | 
5 |     public InvalidParameterException(String message) {
6 |         super(message);
7 |     }
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/MissingParameterException.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.token;
2 | 
3 | public class MissingParameterException extends RuntimeException {
4 | 
5 |     public MissingParameterException(String message) {
6 |         super(message);
7 |     }
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/LoggingTokenExchangeClaimsService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange;
 2 | 
 3 | import com.nimbusds.jwt.JWTClaimsSet;
 4 | import org.slf4j.Logger;
 5 | import org.slf4j.LoggerFactory;
 6 | 
 7 | public class LoggingTokenExchangeClaimsService implements TokenExchangeClaimsService {
 8 |     private static final Logger logger = LoggerFactory.getLogger(LoggingTokenExchangeClaimsService.class);
 9 | 
10 |     private final TokenExchangeClaimsService decoratedTokenExchangeClaimsService;
11 | 
12 |     public LoggingTokenExchangeClaimsService(TokenExchangeClaimsService tokenExchangeClaimsService) {
13 |         this.decoratedTokenExchangeClaimsService = tokenExchangeClaimsService;
14 |     }
15 | 
16 |     @Override
17 |     public void extendClaims(JWTClaimsSet.Builder claimsBuilder, String[] audiences, String[] resources, String subject) {
18 |         if(logger.isTraceEnabled()) logger.trace("extendClaims started...");
19 | 
20 |         decoratedTokenExchangeClaimsService.extendClaims(claimsBuilder, audiences, resources, subject);
21 | 
22 |         if(logger.isTraceEnabled()) logger.trace("extendClaims finished.");
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/LoggingTokenExchangeService.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange;
 2 | 
 3 | import com.nimbusds.jose.proc.BadJOSEException;
 4 | import de.adorsys.sts.token.api.TokenResponse;
 5 | import org.slf4j.Logger;
 6 | import org.slf4j.LoggerFactory;
 7 | 
 8 | public class LoggingTokenExchangeService implements TokenExchangeService {
 9 |     private static final Logger logger = LoggerFactory.getLogger(LoggingTokenExchangeService.class);
10 | 
11 |     private final TokenExchangeService decoratedTokenExchangeService;
12 | 
13 |     public LoggingTokenExchangeService(TokenExchangeService tokenExchangeService) {
14 |         this.decoratedTokenExchangeService = tokenExchangeService;
15 |     }
16 | 
17 |     @Override
18 |     public TokenResponse exchangeToken(TokenExchangeRequest tokenExchange) throws BadJOSEException {
19 |         if(logger.isTraceEnabled()) logger.trace("exchangeToken started...");
20 | 
21 |         TokenResponse tokenResponse = decoratedTokenExchangeService.exchangeToken(tokenExchange);
22 | 
23 |         if(logger.isTraceEnabled()) logger.trace("exchangeToken finished.");
24 | 
25 |         return tokenResponse;
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/TokenExchangeClaimsService.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.token.tokenexchange;
2 | 
3 | import com.nimbusds.jwt.JWTClaimsSet;
4 | 
5 | public interface TokenExchangeClaimsService {
6 |     void extendClaims(JWTClaimsSet.Builder claimsBuilder, String[] audiences, String[] resources, String subject);
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/TokenExchangeClient.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange;
 2 | 
 3 | import de.adorsys.sts.token.api.TokenResponse;
 4 | 
 5 | import java.util.List;
 6 | import java.util.Map;
 7 | 
 8 | public interface TokenExchangeClient {
 9 | 
10 |     TokenResponse exchangeToken(String uri, List<String> audiences, String accessToken, Map<String, String> customHeaders);
11 | 
12 |     TokenResponse exchangeToken(String uri, String audiences, String accessToken, Map<String, String> customHeaders);
13 | 
14 |     TokenResponse exchangeToken(String uri, List<String> audiences, String accessToken);
15 | 
16 |     TokenResponse exchangeToken(String uri, String audience, String accessToken);
17 | }
18 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/TokenExchangeConstants.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.token.tokenexchange;
2 | 
3 | public interface TokenExchangeConstants {
4 |     String SECRETS_CLAIM_KEY = "secret";
5 |     String JWT_OAUTH_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:jwt";
6 |     String TOKEN_EXCHANGE_OAUTH_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:token-exchange";
7 | }
8 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/TokenExchangeRequest.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange;
 2 | 
 3 | import lombok.Builder;
 4 | import lombok.Getter;
 5 | 
 6 | @Builder
 7 | @Getter
 8 | public class TokenExchangeRequest {
 9 | 
10 |     private final String grantType;
11 |     private final String[] resources;
12 |     private final String subjectToken;
13 |     private final String subjectTokenType;
14 |     private final String actorToken;
15 |     private final String actorTokenType;
16 |     private final String issuer;
17 |     private final String scope;
18 |     private final String requestedTokenType;
19 |     private final String[] audiences;
20 | }
21 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/TokenExchangeService.java:
--------------------------------------------------------------------------------
1 | package de.adorsys.sts.token.tokenexchange;
2 | 
3 | import com.nimbusds.jose.proc.BadJOSEException;
4 | import de.adorsys.sts.token.api.TokenResponse;
5 | 
6 | public interface TokenExchangeService {
7 |     TokenResponse exchangeToken(TokenExchangeRequest tokenExchange) throws BadJOSEException;
8 | }
9 | 


--------------------------------------------------------------------------------
/sts-token/src/main/java/de/adorsys/sts/token/tokenexchange/TokenValidationException.java:
--------------------------------------------------------------------------------
 1 | package de.adorsys.sts.token.tokenexchange;
 2 | 
 3 | public class TokenValidationException extends RuntimeException {
 4 | 	private static final long serialVersionUID = -2576469717846924984L;
 5 | 	private final Object errorData;
 6 | 
 7 | 	public TokenValidationException(Object errorData) {
 8 | 		this.errorData = errorData;
 9 | 	}
10 | 
11 | 	public Object getErrorData() {
12 | 		return errorData;
13 | 	}
14 | }
15 | 


--------------------------------------------------------------------------------