├── .github ├── dependabot.yml └── workflows │ └── maven.yml ├── .gitignore ├── .mvn └── wrapper │ ├── MavenWrapperDownloader.java │ ├── maven-wrapper.jar │ └── maven-wrapper.properties ├── README.md ├── SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL.postman_collection.json ├── img ├── login-mysql.png ├── login-psql.png ├── multi.png ├── products-mysql.png ├── products-psql.png └── sequence.png ├── mvnw ├── mvnw.cmd ├── pom.xml └── src ├── main ├── java │ └── com │ │ └── hendisantika │ │ └── dynamicmultitenancy │ │ ├── SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplication.java │ │ ├── constant │ │ ├── JWTConstants.java │ │ └── UserStatus.java │ │ ├── controller │ │ ├── AuthenticationController.java │ │ ├── LogoutController.java │ │ └── ProductController.java │ │ ├── dto │ │ ├── AuthResponse.java │ │ └── UserLoginDTO.java │ │ ├── mastertenant │ │ ├── config │ │ │ ├── DBContextHolder.java │ │ │ ├── MasterDatabaseConfig.java │ │ │ └── MasterDatabaseConfigProperties.java │ │ ├── entity │ │ │ └── MasterTenant.java │ │ ├── repository │ │ │ └── MasterTenantRepository.java │ │ └── service │ │ │ └── MasterTenantService.java │ │ ├── security │ │ ├── JwtAuthenticationEntryPoint.java │ │ ├── JwtAuthenticationFilter.java │ │ ├── JwtUserDetailsService.java │ │ ├── RequestAuthorization.java │ │ ├── RequestAuthorizationIntercept.java │ │ ├── UserTenantInformation.java │ │ └── WebSecurityConfig.java │ │ ├── tenant │ │ ├── config │ │ │ ├── CurrentTenantIdentifierResolverImpl.java │ │ │ ├── DataSourceBasedMultiTenantConnectionProviderImpl.java │ │ │ └── TenantDatabaseConfig.java │ │ ├── entity │ │ │ ├── Product.java │ │ │ └── User.java │ │ ├── repository │ │ │ ├── ProductRepository.java │ │ │ └── UserRepository.java │ │ └── service │ │ │ └── ProductService.java │ │ └── util │ │ ├── DataSourceUtil.java │ │ └── JwtTokenUtil.java └── resources │ ├── application.properties │ └── db scripts │ ├── master.sql │ ├── tenant-1.sql │ └── tenant-2.sql └── test └── java └── com └── hendisantika └── dynamicmultitenancy └── SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplicationTests.java /.github/dependabot.yml: -------------------------------------------------------------------------------- 1 | version: 2 2 | updates: 3 | - package-ecosystem: maven 4 | directory: "/" 5 | schedule: 6 | interval: daily 7 | time: '05:00' 8 | timezone: Asia/Jakarta 9 | open-pull-requests-limit: 10 10 | - package-ecosystem: "github-actions" 11 | directory: "/" 12 | schedule: 13 | interval: "daily" 14 | -------------------------------------------------------------------------------- /.github/workflows/maven.yml: -------------------------------------------------------------------------------- 1 | # This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time 2 | # For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven 3 | 4 | # This workflow uses actions that are not certified by GitHub. 5 | # They are provided by a third-party and are governed by 6 | # separate terms of service, privacy policy, and support 7 | # documentation. 8 | 9 | name: Java CI with Maven 10 | 11 | on: 12 | push: 13 | branches: [ "master" ] 14 | pull_request: 15 | branches: [ "master" ] 16 | 17 | jobs: 18 | build: 19 | 20 | runs-on: ubuntu-latest 21 | 22 | steps: 23 | - uses: actions/checkout@v4 24 | - name: Set up JDK 21 25 | uses: actions/setup-java@v4 26 | with: 27 | java-version: '21' 28 | distribution: 'temurin' 29 | cache: maven 30 | - name: Build with Maven 31 | run: mvn -B package --file pom.xml 32 | 33 | # Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive 34 | - name: Update dependency graph 35 | uses: advanced-security/maven-dependency-submission-action@aeab9f885293af501bae8bdfe88c589528ea5e25 36 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | HELP.md 2 | target/ 3 | !.mvn/wrapper/maven-wrapper.jar 4 | !**/src/main/** 5 | !**/src/test/** 6 | 7 | ### STS ### 8 | .apt_generated 9 | .classpath 10 | .factorypath 11 | .project 12 | .settings 13 | .springBeans 14 | .sts4-cache 15 | 16 | ### IntelliJ IDEA ### 17 | .idea 18 | *.iws 19 | *.iml 20 | *.ipr 21 | 22 | ### NetBeans ### 23 | /nbproject/private/ 24 | /nbbuild/ 25 | /dist/ 26 | /nbdist/ 27 | /.nb-gradle/ 28 | build/ 29 | 30 | ### VS Code ### 31 | .vscode/ 32 | -------------------------------------------------------------------------------- /.mvn/wrapper/MavenWrapperDownloader.java: -------------------------------------------------------------------------------- 1 | /* 2 | * Copyright 2007-present the original author or authors. 3 | * 4 | * Licensed under the Apache License, Version 2.0 (the "License"); 5 | * you may not use this file except in compliance with the License. 6 | * You may obtain a copy of the License at 7 | * 8 | * https://www.apache.org/licenses/LICENSE-2.0 9 | * 10 | * Unless required by applicable law or agreed to in writing, software 11 | * distributed under the License is distributed on an "AS IS" BASIS, 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 | * See the License for the specific language governing permissions and 14 | * limitations under the License. 15 | */ 16 | 17 | import java.net.*; 18 | import java.io.*; 19 | import java.nio.channels.*; 20 | import java.util.Properties; 21 | 22 | public class MavenWrapperDownloader { 23 | 24 | private static final String WRAPPER_VERSION = "0.5.6"; 25 | /** 26 | * Default URL to download the maven-wrapper.jar from, if no 'downloadUrl' is provided. 27 | */ 28 | private static final String DEFAULT_DOWNLOAD_URL = "https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/" 29 | + WRAPPER_VERSION + "/maven-wrapper-" + WRAPPER_VERSION + ".jar"; 30 | 31 | /** 32 | * Path to the maven-wrapper.properties file, which might contain a downloadUrl property to 33 | * use instead of the default one. 34 | */ 35 | private static final String MAVEN_WRAPPER_PROPERTIES_PATH = 36 | ".mvn/wrapper/maven-wrapper.properties"; 37 | 38 | /** 39 | * Path where the maven-wrapper.jar will be saved to. 40 | */ 41 | private static final String MAVEN_WRAPPER_JAR_PATH = 42 | ".mvn/wrapper/maven-wrapper.jar"; 43 | 44 | /** 45 | * Name of the property which should be used to override the default download url for the wrapper. 46 | */ 47 | private static final String PROPERTY_NAME_WRAPPER_URL = "wrapperUrl"; 48 | 49 | public static void main(String args[]) { 50 | System.out.println("- Downloader started"); 51 | File baseDirectory = new File(args[0]); 52 | System.out.println("- Using base directory: " + baseDirectory.getAbsolutePath()); 53 | 54 | // If the maven-wrapper.properties exists, read it and check if it contains a custom 55 | // wrapperUrl parameter. 56 | File mavenWrapperPropertyFile = new File(baseDirectory, MAVEN_WRAPPER_PROPERTIES_PATH); 57 | String url = DEFAULT_DOWNLOAD_URL; 58 | if (mavenWrapperPropertyFile.exists()) { 59 | FileInputStream mavenWrapperPropertyFileInputStream = null; 60 | try { 61 | mavenWrapperPropertyFileInputStream = new FileInputStream(mavenWrapperPropertyFile); 62 | Properties mavenWrapperProperties = new Properties(); 63 | mavenWrapperProperties.load(mavenWrapperPropertyFileInputStream); 64 | url = mavenWrapperProperties.getProperty(PROPERTY_NAME_WRAPPER_URL, url); 65 | } catch (IOException e) { 66 | System.out.println("- ERROR loading '" + MAVEN_WRAPPER_PROPERTIES_PATH + "'"); 67 | } finally { 68 | try { 69 | if (mavenWrapperPropertyFileInputStream != null) { 70 | mavenWrapperPropertyFileInputStream.close(); 71 | } 72 | } catch (IOException e) { 73 | // Ignore ... 74 | } 75 | } 76 | } 77 | System.out.println("- Downloading from: " + url); 78 | 79 | File outputFile = new File(baseDirectory.getAbsolutePath(), MAVEN_WRAPPER_JAR_PATH); 80 | if (!outputFile.getParentFile().exists()) { 81 | if (!outputFile.getParentFile().mkdirs()) { 82 | System.out.println( 83 | "- ERROR creating output directory '" + outputFile.getParentFile().getAbsolutePath() + "'"); 84 | } 85 | } 86 | System.out.println("- Downloading to: " + outputFile.getAbsolutePath()); 87 | try { 88 | downloadFileFromURL(url, outputFile); 89 | System.out.println("Done"); 90 | System.exit(0); 91 | } catch (Throwable e) { 92 | System.out.println("- Error downloading"); 93 | e.printStackTrace(); 94 | System.exit(1); 95 | } 96 | } 97 | 98 | private static void downloadFileFromURL(String urlString, File destination) throws Exception { 99 | if (System.getenv("MVNW_USERNAME") != null && System.getenv("MVNW_PASSWORD") != null) { 100 | String username = System.getenv("MVNW_USERNAME"); 101 | char[] password = System.getenv("MVNW_PASSWORD").toCharArray(); 102 | Authenticator.setDefault(new Authenticator() { 103 | @Override 104 | protected PasswordAuthentication getPasswordAuthentication() { 105 | return new PasswordAuthentication(username, password); 106 | } 107 | }); 108 | } 109 | URL website = new URL(urlString); 110 | ReadableByteChannel rbc; 111 | rbc = Channels.newChannel(website.openStream()); 112 | FileOutputStream fos = new FileOutputStream(destination); 113 | fos.getChannel().transferFrom(rbc, 0, Long.MAX_VALUE); 114 | fos.close(); 115 | rbc.close(); 116 | } 117 | 118 | } 119 | -------------------------------------------------------------------------------- /.mvn/wrapper/maven-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL/0f7f34c88b9ee966ec8f9ee1871a5f22ae826777/.mvn/wrapper/maven-wrapper.jar -------------------------------------------------------------------------------- /.mvn/wrapper/maven-wrapper.properties: -------------------------------------------------------------------------------- 1 | distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.6.3/apache-maven-3.6.3-bin.zip 2 | wrapperUrl=https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar 3 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | copied from 2 | https://github.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL.git 3 | 4 | modified and reolved issue 5 | ################################################################################################################################ 6 | # SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL 7 | ### Purpose 8 | 9 | I wanted a solution where multi-tenancy is achieved by having a database per-tenant and all user information (username, password, client Id, etc.) for authentication and authorization stored in a user table in the respective tenant databases. This means that not only did I need a multi-tenant application, but also a secure application like any other web application secured by Spring Security. 10 | 11 | I know how to use Spring Security to secure a web application and how to use Hibernate to connect to a database. The requirement further dictates that all users belonging to a tenant need to be stored in the tenant database and not a separate or central database. This would allow for complete data isolation for each tenant. 12 | 13 | ### Goal 14 | 15 | * Archive Application SaaS Model client wise different database. 16 | * Focus Spring Security and JWT 17 | * You can connect multiple schemas with a single database, like MySQL — testdb, testdb2. 18 | * You can connect multiple databases, like MySQL, PostgreSQL, or Oracle. 19 | 20 | ### What Is Multi-Tenancy? 21 | 22 | Multi-tenancy is an architecture in which a single instance of a software application serves multiple customers. Each client is called a tenant. Tenants may be given the ability to customize some parts of the application. 23 | 24 | A multi-tenant application is where a tenant (i.e. users in a company) feels that the application has been created and deployed for them. In reality, there are many such tenants, and they too are using the same application but get a feeling that it's built just for them. 25 | 26 | Dynamic Multi-Tenant High-Level Diagram: 27 | 28 | ![Dynamic Multi-Tenant High-Level Diagram](img/multi.png "Dynamic Multi-Tenant High-Level Diagram") 29 | 30 | Here, 31 | * Client requests to login to the system. 32 | * The system checks with the master database using client Id. 33 | * If it's successful, set the current database to context based on the driver class name. 34 | * If this fails, the user gets the message, "unauthorized". 35 | * After successful authentication, the user gets a JWT for the next execution. 36 | 37 | The whole process executes in the following workflow: 38 | 39 | ![The whole process executes in the following workflow](img/sequence.png "The whole process executes in the following workflow") 40 | 41 | Technology and Project Structure: 42 | * Java 11. 43 | * Spring Boot. 44 | * Spring Security. 45 | * Spring AOP. 46 | * Spring Data JPA. 47 | * Hibernate. 48 | * JWT. 49 | * MySQ & PostgreSQL. 50 | * IntelliJ IDEA Ultimate (2020.1). 51 | 52 | ### MySQL Database 53 | Now, Create a Master Database and a tenant database. 54 | 55 | Master Database: 56 | 57 | In the master database, we only have one table (tbl_tenant_master), where all tenant information is storeed in the table. 58 | MySQL 59 | 60 | ```sql 61 | DROP TABLE IF EXISTS `tbl_tenant_master`; 62 | CREATE TABLE `tbl_tenant_master` ( 63 | `tenant_client_id` int(10) unsigned NOT NULL, 64 | `db_name` varchar(50) NOT NULL, 65 | `url` varchar(250) NOT NULL, 66 | `user_name` varchar(50) NOT NULL, 67 | `password` varchar(100) NOT NULL, 68 | `driver_class` varchar(100) NOT NULL, 69 | `status` varchar(10) NOT NULL, 70 | PRIMARY KEY (`tenant_client_id`) USING BTREE 71 | ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4; 72 | 73 | INSERT INTO `tbl_tenant_master` (`tenant_client_id`, `db_name`, `url`, `user_name`, `password`, `driver_class`, `status`) VALUES 74 | ('100', 'tenant_db', 'jdbc:mysql://localhost:3306/tenant_db?useUnicode=true&useJDBCCompliantTimezoneShift=true&useLegacyDatetimeCode=false&serverTimezone=Asia/Jakarta&useSSL=false', 'root', 'root', 'com.mysql.cj.jdbc.Driver', 'ACTIVE'), 75 | ('200', 'tenant_db_pgs', 'jdbc:postgresql://localhost:5432/tenant_db_pgs', 'hendisantika', 'root', 'org.postgresql.Driver', 'ACTIVE'), 76 | ('300', 'tenant_db2', 'jdbc:mysql://localhost:3306/tenant_db?useUnicode=true&useJDBCCompliantTimezoneShift=true&useLegacyDatetimeCode=false&serverTimezone=Asia/Jakarta&useSSL=false', 'root', 'root', 'com.mysql.cj.jdbc.Driver', 'ACTIVE'); 77 | 78 | ``` 79 | Tenant Database (1) in MySQL: 80 | 81 | Create a table for client login authentication(tbl_user). 82 | 83 | Create another table (tbl_product) to retrieve data using a JWT (for Authorization checks). 84 | MySQL 85 | ```sql 86 | DROP TABLE IF EXISTS `tbl_product`; 87 | CREATE TABLE `tbl_product` ( 88 | `product_id` int(10) unsigned NOT NULL AUTO_INCREMENT, 89 | `product_name` varchar(50) NOT NULL, 90 | `quantity` int(10) unsigned NOT NULL DEFAULT 0, 91 | `size` varchar(3) NOT NULL, 92 | PRIMARY KEY (`product_id`) 93 | ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4; 94 | 95 | DROP TABLE IF EXISTS `tbl_user`; 96 | CREATE TABLE `tbl_user` ( 97 | `user_id` int(10) unsigned NOT NULL AUTO_INCREMENT, 98 | `full_name` varchar(100) NOT NULL, 99 | `gender` varchar(10) NOT NULL, 100 | `user_name` varchar(50) NOT NULL, 101 | `password` varchar(100) NOT NULL, 102 | `status` varchar(10) NOT NULL, 103 | PRIMARY KEY (`user_id`) 104 | ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4; 105 | 106 | INSERT INTO `tbl_product` (`product_id`, `product_name`, `quantity`, `size`) VALUES 107 | ('1', 'Apple MacOS', '5', 'M'); 108 | 109 | INSERT INTO `tbl_user` (`user_id`, `full_name`, `gender`, `user_name`, `password`, `status`) VALUES 110 | ('1', 'Uzumaki Naruto', 'Male', 'naruto', '$2y$12$/WhepH7JVYUCl4ujy6FFguiCi/x2q4dwXISD.WJTXYIN2QAhv6Zky', 'ACTIVE'); -- password=naruto 111 | ``` 112 | 113 | Tenant Database (2) in PostgreSQL: 114 | 115 | Create a table for client login authentication (tbl_user). 116 | 117 | Create another table (tbl_product) to retrieve data using a JWT (for authorization checks). 118 | PostgreSQL 119 | ```sql 120 | DROP TABLE IF EXISTS "public"."tbl_product"; 121 | -- This script only contains the table creation statements and does not fully represent the table in the database. It's still missing: indices, triggers. Do not use it as a backup. 122 | 123 | -- Table Definition 124 | CREATE TABLE "public"."tbl_product" ( 125 | "product_id" int4 NOT NULL, 126 | "product_name" varchar(50) NOT NULL, 127 | "quantity" int4 NOT NULL DEFAULT 0, 128 | "size" varchar(3) NOT NULL, 129 | PRIMARY KEY ("product_id") 130 | ); 131 | 132 | DROP TABLE IF EXISTS "public"."tbl_user"; 133 | -- This script only contains the table creation statements and does not fully represent the table in the database. It's still missing: indices, triggers. Do not use it as a backup. 134 | 135 | -- Table Definition 136 | CREATE TABLE "public"."tbl_user" ( 137 | "user_id" int4 NOT NULL, 138 | "full_name" varchar(100) NOT NULL, 139 | "gender" varchar(10) NOT NULL, 140 | "user_name" varchar(50) NOT NULL, 141 | "password" varchar(100) NOT NULL, 142 | "status" varchar(10) NOT NULL, 143 | PRIMARY KEY ("user_id") 144 | ); 145 | 146 | INSERT INTO "public"."tbl_product" ("product_id", "product_name", "quantity", "size") VALUES 147 | ('1', 'Apple MacOS', '5', 'M'); 148 | 149 | INSERT INTO "public"."tbl_user" ("user_id", "full_name", "gender", "user_name", "password", "status") VALUES 150 | ('1', 'Uzumaki Naruto', 'Male', 'naruto', '$2y$12$/WhepH7JVYUCl4ujy6FFguiCi/x2q4dwXISD.WJTXYIN2QAhv6Zky', 'ACTIVE'); 151 | ``` 152 | 153 | Database creation and table creation are done! 154 | 155 | ### Configure Tenant Database. 156 | 157 | In this section, we'll work to understand multitenancy in Hibernate. There are three approaches to multitenancy in Hibernate: 158 | * Separate Schema — one schema per tenant in the same physical database instance. 159 | * Separate Database — one separate physical database instance per tenant. 160 | * Partitioned (Discriminator) Data — the data for each tenant is partitioned by a discriminator value. 161 | 162 | ### Database Data checks: 163 | Master Database data: 164 | 165 | tbl_tenant_master 166 | 167 | ```sql 168 | MariaDB [master_db]> select * from tbl_tenant_master; 169 | +------------------+---------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------+----------+--------------------------+--------+ 170 | | tenant_client_id | db_name | url | user_name | password | driver_class | status | 171 | +------------------+---------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------+----------+--------------------------+--------+ 172 | | 100 | tenant_db | jdbc:mysql://localhost:3306/tenant_db?useUnicode=true&useJDBCCompliantTimezoneShift=true&useLegacyDatetimeCode=false&serverTimezone=Asia/Jakarta&useSSL=false | root | root | com.mysql.cj.jdbc.Driver | ACTIVE | 173 | | 200 | tenant_db_pgs | jdbc:postgresql://localhost:5432/tenant_db_pgs | hendisantika | root | org.Postgresql.Driver | ACTIVE | 174 | | 300 | tenant_db2 | jdbc:mysql://localhost:3306/tenant_db?useUnicode=true&useJDBCCompliantTimezoneShift=true&useLegacyDatetimeCode=false&serverTimezone=Asia/Jakarta&useSSL=false | root | root | com.mysql.cj.jdbc.Driver | ACTIVE | 175 | +------------------+---------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------+--------------+----------+--------------------------+--------+ 176 | 3 rows in set (0.010 sec) 177 | 178 | ``` 179 | 180 | Tenant Database (MySQL) Table Data: 181 | 182 | tbl_user 183 | tbl_product 184 | 185 | ```sql 186 | MariaDB [tenant_db]> select * from tbl_user; 187 | +---------+----------------+--------+-----------+--------------------------------------------------------------+--------+ 188 | | user_id | full_name | gender | user_name | password | status | 189 | +---------+----------------+--------+-----------+--------------------------------------------------------------+--------+ 190 | | 1 | Uzumaki Naruto | Male | naruto | $2y$12$/WhepH7JVYUCl4ujy6FFguiCi/x2q4dwXISD.WJTXYIN2QAhv6Zky | ACTIVE | 191 | +---------+----------------+--------+-----------+--------------------------------------------------------------+--------+ 192 | 1 row in set (0.002 sec) 193 | 194 | MariaDB [tenant_db]> select * from tbl_product; 195 | +------------+--------------+----------+------+ 196 | | product_id | product_name | quantity | size | 197 | +------------+--------------+----------+------+ 198 | | 1 | Apple MacOS | 5 | M | 199 | +------------+--------------+----------+------+ 200 | 1 row in set (0.000 sec) 201 | 202 | ``` 203 | 204 | ### Tenant Database (PostgreSQL) Tables Data: 205 | 206 | tbl_user 207 | tbl_product 208 | ```sql 209 | tenant_db_pgs=# select * from tbl_user; 210 | user_id | full_name | gender | user_name | password | status 211 | ---------+----------------+--------+-----------+--------------------------------------------------------------+-------- 212 | 1 | Uzumaki Naruto | Male | naruto | $2y$12$/WhepH7JVYUCl4ujy6FFguiCi/x2q4dwXISD.WJTXYIN2QAhv6Zky | ACTIVE 213 | (1 row) 214 | 215 | tenant_db_pgs=# select * from tbl_product; 216 | product_id | product_name | quantity | size 217 | ------------+--------------+----------+------ 218 | 1 | Apple MacOS | 5 | M 219 | (1 row) 220 | 221 | ``` 222 | 223 | Now, test that everything works as we expect using Postman: 224 | 225 | Target MySQL: 226 | 227 | User Login in MySQL 228 | 229 | ![User Login in MySQL](img/login-mysql.png "User Login in MySQL") 230 | 231 | Get Product List in MySQL 232 | 233 | ![Get Product List in MySQL](img/products-mysql.png "Get Product List in MySQL") 234 | 235 | Target PostgreSQL: 236 | 237 | User Login in PostgreSQL 238 | 239 | ![User Login in PostgreSQL](img/login-psql.png "User Login in PostgreSQL") 240 | 241 | Get Product List in PostgreSQL 242 | 243 | ![Get Product List in PostgreSQL](img/products-pSpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL.postman_collection.jsonsql.png "Get Product List in PostgreSQL") 244 | 245 | NOTE: 246 | BCrypt Online Generator: 247 | 1. https://bcrypt-generator.com/ 248 | 2. Lupa lagi. Nanti diupdate dech 249 | -------------------------------------------------------------------------------- /SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL.postman_collection.json: -------------------------------------------------------------------------------- 1 | { 2 | "info": { 3 | "_postman_id": "f16e2d65-9731-4f38-a019-514b7ef5944b", 4 | "name": "Spring-boot-multi-tenant", 5 | "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json" 6 | }, 7 | "item": [ 8 | { 9 | "name": "localhost:9090/api/auth/login", 10 | "request": { 11 | "method": "POST", 12 | "header": [], 13 | "body": { 14 | "mode": "raw", 15 | "raw": "{\r\n\r\n \"userName\":\"PrAvEEn\",\r\n \"password\":\"test\",\r\n \"tenantOrClientId\":100\r\n}", 16 | "options": { 17 | "raw": { 18 | "language": "json" 19 | } 20 | } 21 | }, 22 | "url": { 23 | "raw": "localhost:9090/api/auth/login", 24 | "host": [ 25 | "localhost" 26 | ], 27 | "port": "9090", 28 | "path": [ 29 | "api", 30 | "auth", 31 | "login" 32 | ] 33 | } 34 | }, 35 | "response": [] 36 | }, 37 | { 38 | "name": "localhost:9090/api/product/all", 39 | "request": { 40 | "auth": { 41 | "type": "bearer", 42 | "bearer": [ 43 | { 44 | "key": "token", 45 | "value": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJCaXJhZGFyIiwiYXVkIjoiMjAwIiwic2NvcGVzIjpbeyJhdXRob3JpdHkiOiJST0xFX0FETUlOIn1dLCJpc3MiOiJzeXN0ZW0iLCJpYXQiOjE2MDI1Nzk0NzAsImV4cCI6MTYwMjU5NzQ3MH0.EG7IWRCbZLv8QBYUJumGZDqmz-ZXTcZt-DyVwQlRL0Q", 46 | "type": "string" 47 | } 48 | ] 49 | }, 50 | "method": "GET", 51 | "header": [ 52 | { 53 | "key": "Authorization", 54 | "value": "Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJwcmF2ZWVuIiwiYXVkIjoiMTAwIiwic2NvcGVzIjpbeyJhdXRob3JpdHkiOiJST0xFX0FETUlOIn1dLCJpc3MiOiJzeXN0ZW0iLCJpYXQiOjE2MDIwNTMyOTAsImV4cCI6MTYwMjA3MTI5MH0.UjCvtwU_0PLhqrJ8TQ23lCNthtUaL2A-ZZBc9NZpMRI", 55 | "type": "text", 56 | "disabled": true 57 | } 58 | ], 59 | "url": { 60 | "raw": "localhost:9090/api/product/all", 61 | "host": [ 62 | "localhost" 63 | ], 64 | "port": "9090", 65 | "path": [ 66 | "api", 67 | "product", 68 | "all" 69 | ] 70 | } 71 | }, 72 | "response": [] 73 | }, 74 | { 75 | "name": "localhost:9090/api/product/logout/logout", 76 | "request": { 77 | "auth": { 78 | "type": "bearer", 79 | "bearer": [ 80 | { 81 | "key": "token", 82 | "value": "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJQcmF2ZWVuIiwiYXVkIjoiMTAwIiwic2NvcGVzIjpbeyJhdXRob3JpdHkiOiJST0xFX0FETUlOIn1dLCJpc3MiOiJzeXN0ZW0iLCJpYXQiOjE2MDI2NTQ2NzUsImV4cCI6MTYwMjY3MjY3NX0.ZpzEggbhYhlWcT5JLungYOGx9ijA-q8OA6io4B8JX7k", 83 | "type": "string" 84 | } 85 | ] 86 | }, 87 | "method": "GET", 88 | "header": [], 89 | "url": { 90 | "raw": "localhost:9090/api/product/logout/logout", 91 | "host": [ 92 | "localhost" 93 | ], 94 | "port": "9090", 95 | "path": [ 96 | "api", 97 | "product", 98 | "logout", 99 | "logout" 100 | ] 101 | } 102 | }, 103 | "response": [] 104 | } 105 | ], 106 | "protocolProfileBehavior": {} 107 | } -------------------------------------------------------------------------------- /img/login-mysql.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL/0f7f34c88b9ee966ec8f9ee1871a5f22ae826777/img/login-mysql.png -------------------------------------------------------------------------------- /img/login-psql.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL/0f7f34c88b9ee966ec8f9ee1871a5f22ae826777/img/login-psql.png -------------------------------------------------------------------------------- /img/multi.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL/0f7f34c88b9ee966ec8f9ee1871a5f22ae826777/img/multi.png -------------------------------------------------------------------------------- /img/products-mysql.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL/0f7f34c88b9ee966ec8f9ee1871a5f22ae826777/img/products-mysql.png -------------------------------------------------------------------------------- /img/products-psql.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL/0f7f34c88b9ee966ec8f9ee1871a5f22ae826777/img/products-psql.png -------------------------------------------------------------------------------- /img/sequence.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hendisantika/SpringBoot-Security-JWT-Rest-API-Dynamic-Multi-Tenancy-MySQL-PostgreSQL/0f7f34c88b9ee966ec8f9ee1871a5f22ae826777/img/sequence.png -------------------------------------------------------------------------------- /mvnw: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | # ---------------------------------------------------------------------------- 3 | # Licensed to the Apache Software Foundation (ASF) under one 4 | # or more contributor license agreements. See the NOTICE file 5 | # distributed with this work for additional information 6 | # regarding copyright ownership. The ASF licenses this file 7 | # to you under the Apache License, Version 2.0 (the 8 | # "License"); you may not use this file except in compliance 9 | # with the License. You may obtain a copy of the License at 10 | # 11 | # https://www.apache.org/licenses/LICENSE-2.0 12 | # 13 | # Unless required by applicable law or agreed to in writing, 14 | # software distributed under the License is distributed on an 15 | # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY 16 | # KIND, either express or implied. See the License for the 17 | # specific language governing permissions and limitations 18 | # under the License. 19 | # ---------------------------------------------------------------------------- 20 | 21 | # ---------------------------------------------------------------------------- 22 | # Maven Start Up Batch script 23 | # 24 | # Required ENV vars: 25 | # ------------------ 26 | # JAVA_HOME - location of a JDK home dir 27 | # 28 | # Optional ENV vars 29 | # ----------------- 30 | # M2_HOME - location of maven2's installed home dir 31 | # MAVEN_OPTS - parameters passed to the Java VM when running Maven 32 | # e.g. to debug Maven itself, use 33 | # set MAVEN_OPTS=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000 34 | # MAVEN_SKIP_RC - flag to disable loading of mavenrc files 35 | # ---------------------------------------------------------------------------- 36 | 37 | if [ -z "$MAVEN_SKIP_RC" ]; then 38 | 39 | if [ -f /etc/mavenrc ]; then 40 | . /etc/mavenrc 41 | fi 42 | 43 | if [ -f "$HOME/.mavenrc" ]; then 44 | . "$HOME/.mavenrc" 45 | fi 46 | 47 | fi 48 | 49 | # OS specific support. $var _must_ be set to either true or false. 50 | cygwin=false 51 | darwin=false 52 | mingw=false 53 | case "$(uname)" in 54 | CYGWIN*) cygwin=true ;; 55 | MINGW*) mingw=true ;; 56 | Darwin*) 57 | darwin=true 58 | # Use /usr/libexec/java_home if available, otherwise fall back to /Library/Java/Home 59 | # See https://developer.apple.com/library/mac/qa/qa1170/_index.html 60 | if [ -z "$JAVA_HOME" ]; then 61 | if [ -x "/usr/libexec/java_home" ]; then 62 | export JAVA_HOME="$(/usr/libexec/java_home)" 63 | else 64 | export JAVA_HOME="/Library/Java/Home" 65 | fi 66 | fi 67 | ;; 68 | esac 69 | 70 | if [ -z "$JAVA_HOME" ]; then 71 | if [ -r /etc/gentoo-release ]; then 72 | JAVA_HOME=$(java-config --jre-home) 73 | fi 74 | fi 75 | 76 | if [ -z "$M2_HOME" ]; then 77 | ## resolve links - $0 may be a link to maven's home 78 | PRG="$0" 79 | 80 | # need this for relative symlinks 81 | while [ -h "$PRG" ]; do 82 | ls=$(ls -ld "$PRG") 83 | link=$(expr "$ls" : '.*-> \(.*\)$') 84 | if expr "$link" : '/.*' >/dev/null; then 85 | PRG="$link" 86 | else 87 | PRG="$(dirname "$PRG")/$link" 88 | fi 89 | done 90 | 91 | saveddir=$(pwd) 92 | 93 | M2_HOME=$(dirname "$PRG")/.. 94 | 95 | # make it fully qualified 96 | M2_HOME=$(cd "$M2_HOME" && pwd) 97 | 98 | cd "$saveddir" 99 | # echo Using m2 at $M2_HOME 100 | fi 101 | 102 | # For Cygwin, ensure paths are in UNIX format before anything is touched 103 | if $cygwin; then 104 | [ -n "$M2_HOME" ] && 105 | M2_HOME=$(cygpath --unix "$M2_HOME") 106 | [ -n "$JAVA_HOME" ] && 107 | JAVA_HOME=$(cygpath --unix "$JAVA_HOME") 108 | [ -n "$CLASSPATH" ] && 109 | CLASSPATH=$(cygpath --path --unix "$CLASSPATH") 110 | fi 111 | 112 | # For Mingw, ensure paths are in UNIX format before anything is touched 113 | if $mingw; then 114 | [ -n "$M2_HOME" ] && 115 | M2_HOME="$( ( 116 | cd "$M2_HOME" 117 | pwd 118 | ))" 119 | [ -n "$JAVA_HOME" ] && 120 | JAVA_HOME="$( ( 121 | cd "$JAVA_HOME" 122 | pwd 123 | ))" 124 | fi 125 | 126 | if [ -z "$JAVA_HOME" ]; then 127 | javaExecutable="$(which javac)" 128 | if [ -n "$javaExecutable" ] && ! [ "$(expr \"$javaExecutable\" : '\([^ ]*\)')" = "no" ]; then 129 | # readlink(1) is not available as standard on Solaris 10. 130 | readLink=$(which readlink) 131 | if [ ! $(expr "$readLink" : '\([^ ]*\)') = "no" ]; then 132 | if $darwin; then 133 | javaHome="$(dirname \"$javaExecutable\")" 134 | javaExecutable="$(cd \"$javaHome\" && pwd -P)/javac" 135 | else 136 | javaExecutable="$(readlink -f \"$javaExecutable\")" 137 | fi 138 | javaHome="$(dirname \"$javaExecutable\")" 139 | javaHome=$(expr "$javaHome" : '\(.*\)/bin') 140 | JAVA_HOME="$javaHome" 141 | export JAVA_HOME 142 | fi 143 | fi 144 | fi 145 | 146 | if [ -z "$JAVACMD" ]; then 147 | if [ -n "$JAVA_HOME" ]; then 148 | if [ -x "$JAVA_HOME/jre/sh/java" ]; then 149 | # IBM's JDK on AIX uses strange locations for the executables 150 | JAVACMD="$JAVA_HOME/jre/sh/java" 151 | else 152 | JAVACMD="$JAVA_HOME/bin/java" 153 | fi 154 | else 155 | JAVACMD="$(which java)" 156 | fi 157 | fi 158 | 159 | if [ ! -x "$JAVACMD" ]; then 160 | echo "Error: JAVA_HOME is not defined correctly." >&2 161 | echo " We cannot execute $JAVACMD" >&2 162 | exit 1 163 | fi 164 | 165 | if [ -z "$JAVA_HOME" ]; then 166 | echo "Warning: JAVA_HOME environment variable is not set." 167 | fi 168 | 169 | CLASSWORLDS_LAUNCHER=org.codehaus.plexus.classworlds.launcher.Launcher 170 | 171 | # traverses directory structure from process work directory to filesystem root 172 | # first directory with .mvn subdirectory is considered project base directory 173 | find_maven_basedir() { 174 | 175 | if [ -z "$1" ]; then 176 | echo "Path not specified to find_maven_basedir" 177 | return 1 178 | fi 179 | 180 | basedir="$1" 181 | wdir="$1" 182 | while [ "$wdir" != '/' ]; do 183 | if [ -d "$wdir"/.mvn ]; then 184 | basedir=$wdir 185 | break 186 | fi 187 | # workaround for JBEAP-8937 (on Solaris 10/Sparc) 188 | if [ -d "${wdir}" ]; then 189 | wdir=$( 190 | cd "$wdir/.." 191 | pwd 192 | ) 193 | fi 194 | # end of workaround 195 | done 196 | echo "${basedir}" 197 | } 198 | 199 | # concatenates all lines of a file 200 | concat_lines() { 201 | if [ -f "$1" ]; then 202 | echo "$(tr -s '\n' ' ' <"$1")" 203 | fi 204 | } 205 | 206 | BASE_DIR=$(find_maven_basedir "$(pwd)") 207 | if [ -z "$BASE_DIR" ]; then 208 | exit 1 209 | fi 210 | 211 | ########################################################################################## 212 | # Extension to allow automatically downloading the maven-wrapper.jar from Maven-central 213 | # This allows using the maven wrapper in projects that prohibit checking in binary data. 214 | ########################################################################################## 215 | if [ -r "$BASE_DIR/.mvn/wrapper/maven-wrapper.jar" ]; then 216 | if [ "$MVNW_VERBOSE" = true ]; then 217 | echo "Found .mvn/wrapper/maven-wrapper.jar" 218 | fi 219 | else 220 | if [ "$MVNW_VERBOSE" = true ]; then 221 | echo "Couldn't find .mvn/wrapper/maven-wrapper.jar, downloading it ..." 222 | fi 223 | if [ -n "$MVNW_REPOURL" ]; then 224 | jarUrl="$MVNW_REPOURL/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar" 225 | else 226 | jarUrl="https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar" 227 | fi 228 | while IFS="=" read key value; do 229 | case "$key" in wrapperUrl) 230 | jarUrl="$value" 231 | break 232 | ;; 233 | esac 234 | done <"$BASE_DIR/.mvn/wrapper/maven-wrapper.properties" 235 | if [ "$MVNW_VERBOSE" = true ]; then 236 | echo "Downloading from: $jarUrl" 237 | fi 238 | wrapperJarPath="$BASE_DIR/.mvn/wrapper/maven-wrapper.jar" 239 | if $cygwin; then 240 | wrapperJarPath=$(cygpath --path --windows "$wrapperJarPath") 241 | fi 242 | 243 | if command -v wget >/dev/null; then 244 | if [ "$MVNW_VERBOSE" = true ]; then 245 | echo "Found wget ... using wget" 246 | fi 247 | if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then 248 | wget "$jarUrl" -O "$wrapperJarPath" 249 | else 250 | wget --http-user=$MVNW_USERNAME --http-password=$MVNW_PASSWORD "$jarUrl" -O "$wrapperJarPath" 251 | fi 252 | elif command -v curl >/dev/null; then 253 | if [ "$MVNW_VERBOSE" = true ]; then 254 | echo "Found curl ... using curl" 255 | fi 256 | if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then 257 | curl -o "$wrapperJarPath" "$jarUrl" -f 258 | else 259 | curl --user $MVNW_USERNAME:$MVNW_PASSWORD -o "$wrapperJarPath" "$jarUrl" -f 260 | fi 261 | 262 | else 263 | if [ "$MVNW_VERBOSE" = true ]; then 264 | echo "Falling back to using Java to download" 265 | fi 266 | javaClass="$BASE_DIR/.mvn/wrapper/MavenWrapperDownloader.java" 267 | # For Cygwin, switch paths to Windows format before running javac 268 | if $cygwin; then 269 | javaClass=$(cygpath --path --windows "$javaClass") 270 | fi 271 | if [ -e "$javaClass" ]; then 272 | if [ ! -e "$BASE_DIR/.mvn/wrapper/MavenWrapperDownloader.class" ]; then 273 | if [ "$MVNW_VERBOSE" = true ]; then 274 | echo " - Compiling MavenWrapperDownloader.java ..." 275 | fi 276 | # Compiling the Java class 277 | ("$JAVA_HOME/bin/javac" "$javaClass") 278 | fi 279 | if [ -e "$BASE_DIR/.mvn/wrapper/MavenWrapperDownloader.class" ]; then 280 | # Running the downloader 281 | if [ "$MVNW_VERBOSE" = true ]; then 282 | echo " - Running MavenWrapperDownloader.java ..." 283 | fi 284 | ("$JAVA_HOME/bin/java" -cp .mvn/wrapper MavenWrapperDownloader "$MAVEN_PROJECTBASEDIR") 285 | fi 286 | fi 287 | fi 288 | fi 289 | ########################################################################################## 290 | # End of extension 291 | ########################################################################################## 292 | 293 | export MAVEN_PROJECTBASEDIR=${MAVEN_BASEDIR:-"$BASE_DIR"} 294 | if [ "$MVNW_VERBOSE" = true ]; then 295 | echo $MAVEN_PROJECTBASEDIR 296 | fi 297 | MAVEN_OPTS="$(concat_lines "$MAVEN_PROJECTBASEDIR/.mvn/jvm.config") $MAVEN_OPTS" 298 | 299 | # For Cygwin, switch paths to Windows format before running java 300 | if $cygwin; then 301 | [ -n "$M2_HOME" ] && 302 | M2_HOME=$(cygpath --path --windows "$M2_HOME") 303 | [ -n "$JAVA_HOME" ] && 304 | JAVA_HOME=$(cygpath --path --windows "$JAVA_HOME") 305 | [ -n "$CLASSPATH" ] && 306 | CLASSPATH=$(cygpath --path --windows "$CLASSPATH") 307 | [ -n "$MAVEN_PROJECTBASEDIR" ] && 308 | MAVEN_PROJECTBASEDIR=$(cygpath --path --windows "$MAVEN_PROJECTBASEDIR") 309 | fi 310 | 311 | # Provide a "standardized" way to retrieve the CLI args that will 312 | # work with both Windows and non-Windows executions. 313 | MAVEN_CMD_LINE_ARGS="$MAVEN_CONFIG $@" 314 | export MAVEN_CMD_LINE_ARGS 315 | 316 | WRAPPER_LAUNCHER=org.apache.maven.wrapper.MavenWrapperMain 317 | 318 | exec "$JAVACMD" \ 319 | $MAVEN_OPTS \ 320 | -classpath "$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.jar" \ 321 | "-Dmaven.home=${M2_HOME}" "-Dmaven.multiModuleProjectDirectory=${MAVEN_PROJECTBASEDIR}" \ 322 | ${WRAPPER_LAUNCHER} $MAVEN_CONFIG "$@" 323 | -------------------------------------------------------------------------------- /mvnw.cmd: -------------------------------------------------------------------------------- 1 | @REM ---------------------------------------------------------------------------- 2 | @REM Licensed to the Apache Software Foundation (ASF) under one 3 | @REM or more contributor license agreements. See the NOTICE file 4 | @REM distributed with this work for additional information 5 | @REM regarding copyright ownership. The ASF licenses this file 6 | @REM to you under the Apache License, Version 2.0 (the 7 | @REM "License"); you may not use this file except in compliance 8 | @REM with the License. You may obtain a copy of the License at 9 | @REM 10 | @REM https://www.apache.org/licenses/LICENSE-2.0 11 | @REM 12 | @REM Unless required by applicable law or agreed to in writing, 13 | @REM software distributed under the License is distributed on an 14 | @REM "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY 15 | @REM KIND, either express or implied. See the License for the 16 | @REM specific language governing permissions and limitations 17 | @REM under the License. 18 | @REM ---------------------------------------------------------------------------- 19 | 20 | @REM ---------------------------------------------------------------------------- 21 | @REM Maven Start Up Batch script 22 | @REM 23 | @REM Required ENV vars: 24 | @REM JAVA_HOME - location of a JDK home dir 25 | @REM 26 | @REM Optional ENV vars 27 | @REM M2_HOME - location of maven2's installed home dir 28 | @REM MAVEN_BATCH_ECHO - set to 'on' to enable the echoing of the batch commands 29 | @REM MAVEN_BATCH_PAUSE - set to 'on' to wait for a keystroke before ending 30 | @REM MAVEN_OPTS - parameters passed to the Java VM when running Maven 31 | @REM e.g. to debug Maven itself, use 32 | @REM set MAVEN_OPTS=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000 33 | @REM MAVEN_SKIP_RC - flag to disable loading of mavenrc files 34 | @REM ---------------------------------------------------------------------------- 35 | 36 | @REM Begin all REM lines with '@' in case MAVEN_BATCH_ECHO is 'on' 37 | @echo off 38 | @REM set title of command window 39 | title %0 40 | @REM enable echoing by setting MAVEN_BATCH_ECHO to 'on' 41 | @if "%MAVEN_BATCH_ECHO%" == "on" echo %MAVEN_BATCH_ECHO% 42 | 43 | @REM set %HOME% to equivalent of $HOME 44 | if "%HOME%" == "" (set "HOME=%HOMEDRIVE%%HOMEPATH%") 45 | 46 | @REM Execute a user defined script before this one 47 | if not "%MAVEN_SKIP_RC%" == "" goto skipRcPre 48 | @REM check for pre script, once with legacy .bat ending and once with .cmd ending 49 | if exist "%HOME%\mavenrc_pre.bat" call "%HOME%\mavenrc_pre.bat" 50 | if exist "%HOME%\mavenrc_pre.cmd" call "%HOME%\mavenrc_pre.cmd" 51 | :skipRcPre 52 | 53 | @setlocal 54 | 55 | set ERROR_CODE=0 56 | 57 | @REM To isolate internal variables from possible post scripts, we use another setlocal 58 | @setlocal 59 | 60 | @REM ==== START VALIDATION ==== 61 | if not "%JAVA_HOME%" == "" goto OkJHome 62 | 63 | echo. 64 | echo Error: JAVA_HOME not found in your environment. >&2 65 | echo Please set the JAVA_HOME variable in your environment to match the >&2 66 | echo location of your Java installation. >&2 67 | echo. 68 | goto error 69 | 70 | :OkJHome 71 | if exist "%JAVA_HOME%\bin\java.exe" goto init 72 | 73 | echo. 74 | echo Error: JAVA_HOME is set to an invalid directory. >&2 75 | echo JAVA_HOME = "%JAVA_HOME%" >&2 76 | echo Please set the JAVA_HOME variable in your environment to match the >&2 77 | echo location of your Java installation. >&2 78 | echo. 79 | goto error 80 | 81 | @REM ==== END VALIDATION ==== 82 | 83 | :init 84 | 85 | @REM Find the project base dir, i.e. the directory that contains the folder ".mvn". 86 | @REM Fallback to current working directory if not found. 87 | 88 | set MAVEN_PROJECTBASEDIR=%MAVEN_BASEDIR% 89 | IF NOT "%MAVEN_PROJECTBASEDIR%"=="" goto endDetectBaseDir 90 | 91 | set EXEC_DIR=%CD% 92 | set WDIR=%EXEC_DIR% 93 | :findBaseDir 94 | IF EXIST "%WDIR%"\.mvn goto baseDirFound 95 | cd .. 96 | IF "%WDIR%"=="%CD%" goto baseDirNotFound 97 | set WDIR=%CD% 98 | goto findBaseDir 99 | 100 | :baseDirFound 101 | set MAVEN_PROJECTBASEDIR=%WDIR% 102 | cd "%EXEC_DIR%" 103 | goto endDetectBaseDir 104 | 105 | :baseDirNotFound 106 | set MAVEN_PROJECTBASEDIR=%EXEC_DIR% 107 | cd "%EXEC_DIR%" 108 | 109 | :endDetectBaseDir 110 | 111 | IF NOT EXIST "%MAVEN_PROJECTBASEDIR%\.mvn\jvm.config" goto endReadAdditionalConfig 112 | 113 | @setlocal EnableExtensions EnableDelayedExpansion 114 | for /F "usebackq delims=" %%a in ("%MAVEN_PROJECTBASEDIR%\.mvn\jvm.config") do set JVM_CONFIG_MAVEN_PROPS=!JVM_CONFIG_MAVEN_PROPS! %%a 115 | @endlocal & set JVM_CONFIG_MAVEN_PROPS=%JVM_CONFIG_MAVEN_PROPS% 116 | 117 | :endReadAdditionalConfig 118 | 119 | SET MAVEN_JAVA_EXE="%JAVA_HOME%\bin\java.exe" 120 | set WRAPPER_JAR="%MAVEN_PROJECTBASEDIR%\.mvn\wrapper\maven-wrapper.jar" 121 | set WRAPPER_LAUNCHER=org.apache.maven.wrapper.MavenWrapperMain 122 | 123 | set DOWNLOAD_URL="https://repo.maven.apache.org/maven2/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar" 124 | 125 | FOR /F "tokens=1,2 delims==" %%A IN ("%MAVEN_PROJECTBASEDIR%\.mvn\wrapper\maven-wrapper.properties") DO ( 126 | IF "%%A"=="wrapperUrl" SET DOWNLOAD_URL=%%B 127 | ) 128 | 129 | @REM Extension to allow automatically downloading the maven-wrapper.jar from Maven-central 130 | @REM This allows using the maven wrapper in projects that prohibit checking in binary data. 131 | if exist %WRAPPER_JAR% ( 132 | if "%MVNW_VERBOSE%" == "true" ( 133 | echo Found %WRAPPER_JAR% 134 | ) 135 | ) else ( 136 | if not "%MVNW_REPOURL%" == "" ( 137 | SET DOWNLOAD_URL="%MVNW_REPOURL%/io/takari/maven-wrapper/0.5.6/maven-wrapper-0.5.6.jar" 138 | ) 139 | if "%MVNW_VERBOSE%" == "true" ( 140 | echo Couldn't find %WRAPPER_JAR%, downloading it ... 141 | echo Downloading from: %DOWNLOAD_URL% 142 | ) 143 | 144 | powershell -Command "&{"^ 145 | "$webclient = new-object System.Net.WebClient;"^ 146 | "if (-not ([string]::IsNullOrEmpty('%MVNW_USERNAME%') -and [string]::IsNullOrEmpty('%MVNW_PASSWORD%'))) {"^ 147 | "$webclient.Credentials = new-object System.Net.NetworkCredential('%MVNW_USERNAME%', '%MVNW_PASSWORD%');"^ 148 | "}"^ 149 | "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; $webclient.DownloadFile('%DOWNLOAD_URL%', '%WRAPPER_JAR%')"^ 150 | "}" 151 | if "%MVNW_VERBOSE%" == "true" ( 152 | echo Finished downloading %WRAPPER_JAR% 153 | ) 154 | ) 155 | @REM End of extension 156 | 157 | @REM Provide a "standardized" way to retrieve the CLI args that will 158 | @REM work with both Windows and non-Windows executions. 159 | set MAVEN_CMD_LINE_ARGS=%* 160 | 161 | %MAVEN_JAVA_EXE% %JVM_CONFIG_MAVEN_PROPS% %MAVEN_OPTS% %MAVEN_DEBUG_OPTS% -classpath %WRAPPER_JAR% "-Dmaven.multiModuleProjectDirectory=%MAVEN_PROJECTBASEDIR%" %WRAPPER_LAUNCHER% %MAVEN_CONFIG% %* 162 | if ERRORLEVEL 1 goto error 163 | goto end 164 | 165 | :error 166 | set ERROR_CODE=1 167 | 168 | :end 169 | @endlocal & set ERROR_CODE=%ERROR_CODE% 170 | 171 | if not "%MAVEN_SKIP_RC%" == "" goto skipRcPost 172 | @REM check for post script, once with legacy .bat ending and once with .cmd ending 173 | if exist "%HOME%\mavenrc_post.bat" call "%HOME%\mavenrc_post.bat" 174 | if exist "%HOME%\mavenrc_post.cmd" call "%HOME%\mavenrc_post.cmd" 175 | :skipRcPost 176 | 177 | @REM pause the script if MAVEN_BATCH_PAUSE is set to 'on' 178 | if "%MAVEN_BATCH_PAUSE%" == "on" pause 179 | 180 | if "%MAVEN_TERMINATE_CMD%" == "on" exit %ERROR_CODE% 181 | 182 | exit /B %ERROR_CODE% 183 | -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 4.0.0 5 | 6 | org.springframework.boot 7 | spring-boot-starter-parent 8 | 3.4.5 9 | 10 | 11 | com.hendisantika 12 | springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 13 | 0.0.1-SNAPSHOT 14 | springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 15 | Dynamic Multi Tenant project for Spring Boot 16 | 17 | 18 | 21 19 | 20 | 21 | 22 | 23 | org.springframework.boot 24 | spring-boot-starter 25 | 26 | 27 | org.springframework.boot 28 | spring-boot-starter-data-jpa 29 | 30 | 31 | org.springframework.boot 32 | spring-boot-starter-security 33 | 34 | 35 | io.jsonwebtoken 36 | jjwt 37 | 0.12.6 38 | 39 | 40 | org.springframework.boot 41 | spring-boot-starter-web 42 | 43 | 44 | org.springframework.boot 45 | spring-boot-devtools 46 | runtime 47 | true 48 | 49 | 50 | org.projectlombok 51 | lombok 52 | 53 | 54 | com.mysql 55 | mysql-connector-j 56 | runtime 57 | 58 | 59 | org.postgresql 60 | postgresql 61 | runtime 62 | 63 | 64 | joda-time 65 | joda-time 66 | 2.14.0 67 | 68 | 69 | org.apache.commons 70 | commons-lang3 71 | 72 | 73 | org.springframework.boot 74 | spring-boot-starter-tomcat 75 | provided 76 | 77 | 78 | org.springframework.boot 79 | spring-boot-starter-test 80 | test 81 | 82 | 83 | org.junit.vintage 84 | junit-vintage-engine 85 | 86 | 87 | 88 | 89 | org.springframework.security 90 | spring-security-test 91 | test 92 | 93 | 94 | org.springframework.boot 95 | spring-boot-configuration-processor 96 | true 97 | 98 | 99 | 100 | 101 | 102 | 103 | org.springframework.boot 104 | spring-boot-maven-plugin 105 | 106 | 107 | 108 | 109 | 110 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplication.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy; 2 | 3 | import org.springframework.boot.SpringApplication; 4 | import org.springframework.boot.autoconfigure.SpringBootApplication; 5 | import org.springframework.boot.builder.SpringApplicationBuilder; 6 | import org.springframework.boot.web.servlet.support.SpringBootServletInitializer; 7 | 8 | @SpringBootApplication 9 | public class SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplication extends SpringBootServletInitializer { 10 | 11 | @Override 12 | protected SpringApplicationBuilder configure(SpringApplicationBuilder application) { 13 | return application.sources(SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplication.class); 14 | } 15 | 16 | public static void main(String[] args) { 17 | SpringApplication.run(SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplication.class, args); 18 | } 19 | 20 | } 21 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/constant/JWTConstants.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.constant; 2 | 3 | /** 4 | * Created by IntelliJ IDEA. 5 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 6 | * User: hendisantika 7 | * Email: hendisantika@gmail.com 8 | * Telegram : @hendisantika34 9 | * Date: 08/05/20 10 | * Time: 05.36 11 | */ 12 | public class JWTConstants { 13 | public static final long ACCESS_TOKEN_VALIDITY_SECONDS = 5 * 60 * 60; 14 | public static final String SIGNING_KEY = "naruto"; 15 | public static final String TOKEN_PREFIX = "Bearer "; 16 | public static final String HEADER_STRING = "Authorization"; 17 | } 18 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/constant/UserStatus.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.constant; 2 | 3 | /** 4 | * Created by IntelliJ IDEA. 5 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 6 | * User: hendisantika 7 | * Email: hendisantika@gmail.com 8 | * Telegram : @hendisantika34 9 | * Date: 08/05/20 10 | * Time: 05.37 11 | */ 12 | public enum UserStatus { 13 | ACTIVE, INACTIVE 14 | } -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/controller/AuthenticationController.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.controller; 2 | 3 | import com.hendisantika.dynamicmultitenancy.constant.UserStatus; 4 | import com.hendisantika.dynamicmultitenancy.dto.AuthResponse; 5 | import com.hendisantika.dynamicmultitenancy.dto.UserLoginDTO; 6 | import com.hendisantika.dynamicmultitenancy.mastertenant.config.DBContextHolder; 7 | import com.hendisantika.dynamicmultitenancy.mastertenant.entity.MasterTenant; 8 | import com.hendisantika.dynamicmultitenancy.mastertenant.service.MasterTenantService; 9 | import com.hendisantika.dynamicmultitenancy.security.UserTenantInformation; 10 | import com.hendisantika.dynamicmultitenancy.util.JwtTokenUtil; 11 | import org.slf4j.Logger; 12 | import org.slf4j.LoggerFactory; 13 | import org.springframework.beans.factory.annotation.Autowired; 14 | import org.springframework.context.annotation.Bean; 15 | import org.springframework.http.HttpStatus; 16 | import org.springframework.http.ResponseEntity; 17 | import org.springframework.security.authentication.AuthenticationManager; 18 | import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; 19 | import org.springframework.security.core.Authentication; 20 | import org.springframework.security.core.AuthenticationException; 21 | import org.springframework.security.core.context.SecurityContextHolder; 22 | import org.springframework.security.core.userdetails.UserDetails; 23 | import org.springframework.web.bind.annotation.PostMapping; 24 | import org.springframework.web.bind.annotation.RequestBody; 25 | import org.springframework.web.bind.annotation.RequestMapping; 26 | import org.springframework.web.bind.annotation.RestController; 27 | import org.springframework.web.context.annotation.ApplicationScope; 28 | 29 | import javax.validation.constraints.NotNull; 30 | import java.io.Serializable; 31 | import java.util.HashMap; 32 | import java.util.Map; 33 | 34 | /** 35 | * Created by IntelliJ IDEA. 36 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 37 | * User: hendisantika 38 | * Email: hendisantika@gmail.com 39 | * Telegram : @hendisantika34 40 | * Date: 08/05/20 41 | * Time: 06.17 42 | */ 43 | @RestController 44 | @RequestMapping("/api/auth") 45 | public class AuthenticationController implements Serializable { 46 | 47 | private static final long serialVersionUID = 1L; 48 | 49 | private static final Logger LOGGER = LoggerFactory.getLogger(AuthenticationController.class); 50 | 51 | private Map mapValue = new HashMap<>(); 52 | private final Map userDbMap = new HashMap<>(); 53 | 54 | 55 | @Autowired 56 | private AuthenticationManager authenticationManager; 57 | 58 | @Autowired 59 | private JwtTokenUtil jwtTokenUtil; 60 | 61 | @Autowired 62 | private MasterTenantService masterTenantService; 63 | 64 | @SuppressWarnings("unlikely-arg-type") 65 | @PostMapping(value = "/login") 66 | public ResponseEntity userLogin(@RequestBody @NotNull UserLoginDTO userLoginDTO) throws AuthenticationException { 67 | LOGGER.info("userLogin() method call..."); 68 | if (null == userLoginDTO.getUserName() || userLoginDTO.getUserName().isEmpty()) { 69 | return new ResponseEntity<>("User name is required", HttpStatus.BAD_REQUEST); 70 | } 71 | //set database parameter 72 | MasterTenant masterTenant = masterTenantService.findByClientId(userLoginDTO.getTenantOrClientId()); 73 | if (null == masterTenant || masterTenant.getStatus().toUpperCase().equals(UserStatus.INACTIVE)) { 74 | throw new RuntimeException("Please contact service provider."); 75 | } 76 | //Set Client DB 77 | DBContextHolder.setCurrentDb(masterTenant.getDbName()); 78 | //Entry Client Wise value dbName store into bean. 79 | //loadCurrentDatabaseInstance(masterTenant.getDbName(), userLoginDTO.getUserName()); 80 | final Authentication authentication = 81 | authenticationManager.authenticate(new UsernamePasswordAuthenticationToken(userLoginDTO.getUserName() 82 | , userLoginDTO.getPassword())); 83 | SecurityContextHolder.getContext().setAuthentication(authentication); 84 | UserDetails userDetails = (UserDetails) authentication.getPrincipal(); 85 | final String token = jwtTokenUtil.generateToken(userDetails.getUsername(), 86 | String.valueOf(userLoginDTO.getTenantOrClientId())); 87 | //Entry Client Wise value dbName store into bean. 88 | mapValue.put(userDetails.getUsername(), masterTenant.getDbName()); 89 | //Map the value into applicationScope bean 90 | setMetaDataAfterLogin(); 91 | return ResponseEntity.ok(new AuthResponse(userDetails.getUsername(), token)); 92 | } 93 | 94 | // private void loadCurrentDatabaseInstance(String databaseName, String userName) { 95 | // DBContextHolder.setCurrentDb(databaseName); 96 | // mapValue.put(userName, databaseName); 97 | // } 98 | 99 | @Bean(name = "userTenantInfo") 100 | @ApplicationScope 101 | public UserTenantInformation setMetaDataAfterLogin() { 102 | UserTenantInformation tenantInformation = new UserTenantInformation(); 103 | if (mapValue.size() > 0) { 104 | for (String key : mapValue.keySet()) { 105 | if (null == userDbMap.get(key)) { 106 | //Here Assign putAll due to all time one come. 107 | userDbMap.putAll(mapValue); 108 | } else { 109 | userDbMap.put(key, mapValue.get(key)); 110 | } 111 | } 112 | mapValue = new HashMap<>(); 113 | } 114 | tenantInformation.setMap(userDbMap); 115 | return tenantInformation; 116 | } 117 | } 118 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/controller/LogoutController.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.controller; 2 | 3 | import com.hendisantika.dynamicmultitenancy.security.UserTenantInformation; 4 | import org.slf4j.Logger; 5 | import org.slf4j.LoggerFactory; 6 | import org.springframework.beans.factory.annotation.Autowired; 7 | import org.springframework.context.ApplicationContext; 8 | import org.springframework.http.HttpStatus; 9 | import org.springframework.http.ResponseEntity; 10 | import org.springframework.web.bind.annotation.GetMapping; 11 | import org.springframework.web.bind.annotation.RequestMapping; 12 | import org.springframework.web.bind.annotation.RestController; 13 | 14 | import java.io.Serializable; 15 | import java.security.Principal; 16 | import java.util.Map; 17 | 18 | /** 19 | * Created by IntelliJ IDEA. 20 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 21 | * User: hendisantika 22 | * Email: hendisantika@gmail.com 23 | * Telegram : @hendisantika34 24 | * Date: 08/05/20 25 | * Time: 06.22 26 | */ 27 | @RestController 28 | @RequestMapping("/api/product/logout") 29 | public class LogoutController implements Serializable { 30 | 31 | private static final long serialVersionUID = 1L; 32 | 33 | private static final Logger LOGGER = LoggerFactory.getLogger(LogoutController.class); 34 | 35 | @Autowired 36 | private ApplicationContext applicationContext; 37 | 38 | @GetMapping(value = "/logout") 39 | public ResponseEntity logoutFromApp(Principal principal) { 40 | LOGGER.info("AuthenticationController::logoutFromApp() method call.."); 41 | UserTenantInformation userCharityInfo = applicationContext.getBean(UserTenantInformation.class); 42 | Map map = userCharityInfo.getMap(); 43 | map.remove(principal.getName()); 44 | userCharityInfo.setMap(map); 45 | return ResponseEntity.ok(HttpStatus.OK); 46 | } 47 | } 48 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/controller/ProductController.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.controller; 2 | 3 | import com.hendisantika.dynamicmultitenancy.security.RequestAuthorization; 4 | import com.hendisantika.dynamicmultitenancy.tenant.service.ProductService; 5 | import org.slf4j.Logger; 6 | import org.slf4j.LoggerFactory; 7 | import org.springframework.beans.factory.annotation.Autowired; 8 | import org.springframework.http.HttpStatus; 9 | import org.springframework.http.ResponseEntity; 10 | import org.springframework.web.bind.annotation.GetMapping; 11 | import org.springframework.web.bind.annotation.RequestMapping; 12 | import org.springframework.web.bind.annotation.RestController; 13 | 14 | import java.io.Serializable; 15 | 16 | /** 17 | * Created by IntelliJ IDEA. 18 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 19 | * User: hendisantika 20 | * Email: hendisantika@gmail.com 21 | * Telegram : @hendisantika34 22 | * Date: 08/05/20 23 | * Time: 06.23 24 | */ 25 | @RestController 26 | @RequestMapping("/api/product") 27 | public class ProductController implements Serializable { 28 | 29 | private static final long serialVersionUID = 1L; 30 | 31 | private static final Logger LOGGER = LoggerFactory.getLogger(AuthenticationController.class); 32 | 33 | @Autowired 34 | private ProductService productService; 35 | 36 | @RequestAuthorization 37 | @GetMapping(value = "/all") 38 | public ResponseEntity getAllProduct() { 39 | LOGGER.info("getAllProduct() method call..."); 40 | return new ResponseEntity<>(productService.getAllProduct(), HttpStatus.OK); 41 | } 42 | } 43 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/dto/AuthResponse.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.dto; 2 | 3 | import lombok.AllArgsConstructor; 4 | import lombok.Data; 5 | import lombok.NoArgsConstructor; 6 | 7 | import java.io.Serializable; 8 | 9 | /** 10 | * Created by IntelliJ IDEA. 11 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 12 | * User: hendisantika 13 | * Email: hendisantika@gmail.com 14 | * Telegram : @hendisantika34 15 | * Date: 08/05/20 16 | * Time: 05.38 17 | */ 18 | @Data 19 | @AllArgsConstructor 20 | @NoArgsConstructor 21 | public class AuthResponse implements Serializable { 22 | 23 | private static final long serialVersionUID = 1L; 24 | 25 | private String userName; 26 | private String token; 27 | } 28 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/dto/UserLoginDTO.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.dto; 2 | 3 | import lombok.AllArgsConstructor; 4 | import lombok.Data; 5 | import lombok.NoArgsConstructor; 6 | 7 | import java.io.Serializable; 8 | 9 | /** 10 | * Created by IntelliJ IDEA. 11 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 12 | * User: hendisantika 13 | * Email: hendisantika@gmail.com 14 | * Telegram : @hendisantika34 15 | * Date: 08/05/20 16 | * Time: 05.38 17 | */ 18 | @Data 19 | @AllArgsConstructor 20 | @NoArgsConstructor 21 | public class UserLoginDTO implements Serializable { 22 | 23 | private static final long serialVersionUID = 1L; 24 | 25 | private String userName; 26 | private String password; 27 | private Integer tenantOrClientId; 28 | } 29 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/mastertenant/config/DBContextHolder.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.mastertenant.config; 2 | 3 | /** 4 | * Created by IntelliJ IDEA. 5 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 6 | * User: hendisantika 7 | * Email: hendisantika@gmail.com 8 | * Telegram : @hendisantika34 9 | * Date: 08/05/20 10 | * Time: 05.44 11 | */ 12 | public class DBContextHolder { 13 | private static final ThreadLocal contextHolder = new ThreadLocal<>(); 14 | 15 | public static String getCurrentDb() { 16 | return contextHolder.get(); 17 | } 18 | 19 | public static void setCurrentDb(String dbType) { 20 | contextHolder.set(dbType); 21 | } 22 | 23 | public static void clear() { 24 | contextHolder.remove(); 25 | } 26 | } 27 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/mastertenant/config/MasterDatabaseConfig.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.mastertenant.config; 2 | 3 | import com.hendisantika.dynamicmultitenancy.mastertenant.entity.MasterTenant; 4 | import com.hendisantika.dynamicmultitenancy.mastertenant.repository.MasterTenantRepository; 5 | import com.zaxxer.hikari.HikariDataSource; 6 | import org.slf4j.Logger; 7 | import org.slf4j.LoggerFactory; 8 | import org.springframework.beans.factory.annotation.Autowired; 9 | import org.springframework.beans.factory.annotation.Qualifier; 10 | import org.springframework.context.annotation.Bean; 11 | import org.springframework.context.annotation.Configuration; 12 | import org.springframework.context.annotation.Primary; 13 | import org.springframework.dao.annotation.PersistenceExceptionTranslationPostProcessor; 14 | import org.springframework.data.jpa.repository.config.EnableJpaRepositories; 15 | import org.springframework.orm.jpa.JpaTransactionManager; 16 | import org.springframework.orm.jpa.JpaVendorAdapter; 17 | import org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean; 18 | import org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter; 19 | import org.springframework.transaction.annotation.EnableTransactionManagement; 20 | 21 | import javax.persistence.EntityManagerFactory; 22 | import javax.sql.DataSource; 23 | import java.util.Properties; 24 | 25 | /** 26 | * Created by IntelliJ IDEA. 27 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 28 | * User: hendisantika 29 | * Email: hendisantika@gmail.com 30 | * Telegram : @hendisantika34 31 | * Date: 08/05/20 32 | * Time: 05.44 33 | */ 34 | @Configuration 35 | @EnableTransactionManagement 36 | @EnableJpaRepositories(basePackages = {"com.hendisantika.dynamicmultitenancy.mastertenant.entity", "com.hendisantika" + 37 | ".dynamicmultitenancy.mastertenant.repository"}, 38 | entityManagerFactoryRef = "masterEntityManagerFactory", 39 | transactionManagerRef = "masterTransactionManager") 40 | public class MasterDatabaseConfig { 41 | 42 | private static final Logger LOG = LoggerFactory.getLogger(MasterDatabaseConfig.class); 43 | 44 | @Autowired 45 | private MasterDatabaseConfigProperties masterDbProperties; 46 | 47 | //Create Master Data Source using master properties and also configure HikariCP 48 | @Bean(name = "masterDataSource") 49 | public DataSource masterDataSource() { 50 | HikariDataSource hikariDataSource = new HikariDataSource(); 51 | hikariDataSource.setUsername(masterDbProperties.getUsername()); 52 | hikariDataSource.setPassword(masterDbProperties.getPassword()); 53 | hikariDataSource.setJdbcUrl(masterDbProperties.getUrl()); 54 | hikariDataSource.setDriverClassName(masterDbProperties.getDriverClassName()); 55 | hikariDataSource.setPoolName(masterDbProperties.getPoolName()); 56 | // HikariCP settings 57 | hikariDataSource.setMaximumPoolSize(masterDbProperties.getMaxPoolSize()); 58 | hikariDataSource.setMinimumIdle(masterDbProperties.getMinIdle()); 59 | hikariDataSource.setConnectionTimeout(masterDbProperties.getConnectionTimeout()); 60 | hikariDataSource.setIdleTimeout(masterDbProperties.getIdleTimeout()); 61 | LOG.info("Setup of masterDataSource succeeded."); 62 | return hikariDataSource; 63 | } 64 | 65 | @Primary 66 | @Bean(name = "masterEntityManagerFactory") 67 | public LocalContainerEntityManagerFactoryBean masterEntityManagerFactory() { 68 | LocalContainerEntityManagerFactoryBean em = new LocalContainerEntityManagerFactoryBean(); 69 | // Set the master data source 70 | em.setDataSource(masterDataSource()); 71 | // The master tenant entity and repository need to be scanned 72 | em.setPackagesToScan(MasterTenant.class.getPackage().getName(), 73 | MasterTenantRepository.class.getPackage().getName()); 74 | // Setting a name for the persistence unit as Spring sets it as 75 | // 'default' if not defined 76 | em.setPersistenceUnitName("masterdb-persistence-unit"); 77 | // Setting Hibernate as the JPA provider 78 | JpaVendorAdapter vendorAdapter = new HibernateJpaVendorAdapter(); 79 | em.setJpaVendorAdapter(vendorAdapter); 80 | // Set the hibernate properties 81 | em.setJpaProperties(hibernateProperties()); 82 | LOG.info("Setup of masterEntityManagerFactory succeeded."); 83 | return em; 84 | } 85 | 86 | @Bean(name = "masterTransactionManager") 87 | public JpaTransactionManager masterTransactionManager(@Qualifier("masterEntityManagerFactory") EntityManagerFactory emf) { 88 | JpaTransactionManager transactionManager = new JpaTransactionManager(); 89 | transactionManager.setEntityManagerFactory(emf); 90 | return transactionManager; 91 | } 92 | 93 | @Bean 94 | public PersistenceExceptionTranslationPostProcessor exceptionTranslation() { 95 | return new PersistenceExceptionTranslationPostProcessor(); 96 | } 97 | 98 | //Hibernate configuration properties 99 | private Properties hibernateProperties() { 100 | Properties properties = new Properties(); 101 | properties.put(org.hibernate.cfg.Environment.DIALECT, "org.hibernate.dialect.MySQL8Dialect"); 102 | properties.put(org.hibernate.cfg.Environment.SHOW_SQL, true); 103 | properties.put(org.hibernate.cfg.Environment.FORMAT_SQL, true); 104 | properties.put(org.hibernate.cfg.Environment.HBM2DDL_AUTO, "none"); 105 | return properties; 106 | } 107 | } 108 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/mastertenant/config/MasterDatabaseConfigProperties.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.mastertenant.config; 2 | 3 | import lombok.AllArgsConstructor; 4 | import lombok.Data; 5 | import lombok.NoArgsConstructor; 6 | import org.springframework.boot.context.properties.ConfigurationProperties; 7 | import org.springframework.context.annotation.Configuration; 8 | 9 | /** 10 | * Created by IntelliJ IDEA. 11 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 12 | * User: hendisantika 13 | * Email: hendisantika@gmail.com 14 | * Telegram : @hendisantika34 15 | * Date: 08/05/20 16 | * Time: 05.45 17 | */ 18 | @Configuration 19 | @ConfigurationProperties("multitenancy.mtapp.master.datasource") 20 | @Data 21 | @AllArgsConstructor 22 | @NoArgsConstructor 23 | public class MasterDatabaseConfigProperties { 24 | 25 | private String url; 26 | private String username; 27 | private String password; 28 | private String driverClassName; 29 | private long connectionTimeout; 30 | private int maxPoolSize; 31 | private long idleTimeout; 32 | private int minIdle; 33 | private String poolName; 34 | 35 | //Initialization of HikariCP. 36 | @Override 37 | public String toString() { 38 | StringBuilder builder = new StringBuilder(); 39 | builder.append("MasterDatabaseConfigProperties [url="); 40 | builder.append(url); 41 | builder.append(", username="); 42 | builder.append(username); 43 | builder.append(", password="); 44 | builder.append(password); 45 | builder.append(", driverClassName="); 46 | builder.append(driverClassName); 47 | builder.append(", connectionTimeout="); 48 | builder.append(connectionTimeout); 49 | builder.append(", maxPoolSize="); 50 | builder.append(maxPoolSize); 51 | builder.append(", idleTimeout="); 52 | builder.append(idleTimeout); 53 | builder.append(", minIdle="); 54 | builder.append(minIdle); 55 | builder.append(", poolName="); 56 | builder.append(poolName); 57 | builder.append("]"); 58 | return builder.toString(); 59 | } 60 | 61 | } 62 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/mastertenant/entity/MasterTenant.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.mastertenant.entity; 2 | 3 | import lombok.AllArgsConstructor; 4 | import lombok.Data; 5 | import lombok.NoArgsConstructor; 6 | 7 | import javax.persistence.Column; 8 | import javax.persistence.Entity; 9 | import javax.persistence.GeneratedValue; 10 | import javax.persistence.GenerationType; 11 | import javax.persistence.Id; 12 | import javax.persistence.Table; 13 | import javax.validation.constraints.Size; 14 | import java.io.Serializable; 15 | 16 | /** 17 | * Created by IntelliJ IDEA. 18 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 19 | * User: hendisantika 20 | * Email: hendisantika@gmail.com 21 | * Telegram : @hendisantika34 22 | * Date: 08/05/20 23 | * Time: 05.48 24 | */ 25 | @Entity 26 | @Table(name = "tbl_tenant_master") 27 | @Data 28 | @AllArgsConstructor 29 | @NoArgsConstructor 30 | public class MasterTenant implements Serializable { 31 | 32 | private static final long serialVersionUID = 1L; 33 | 34 | @Id 35 | @GeneratedValue(strategy = GenerationType.IDENTITY) 36 | @Column(name = "tenant_client_id") 37 | private Integer tenantClientId; 38 | 39 | @Size(max = 50) 40 | @Column(name = "db_name", nullable = false) 41 | private String dbName; 42 | 43 | @Size(max = 100) 44 | @Column(name = "url", nullable = false) 45 | private String url; 46 | 47 | @Size(max = 50) 48 | @Column(name = "user_name", nullable = false) 49 | private String userName; 50 | @Size(max = 100) 51 | @Column(name = "password", nullable = false) 52 | private String password; 53 | @Size(max = 100) 54 | @Column(name = "driver_class", nullable = false) 55 | private String driverClass; 56 | @Size(max = 10) 57 | @Column(name = "status", nullable = false) 58 | private String status; 59 | 60 | public MasterTenant(@Size(max = 50) String dbName, @Size(max = 100) String url, @Size(max = 50) String userName, 61 | @Size(max = 100) String password, @Size(max = 100) String driverClass, 62 | @Size(max = 10) String status) { 63 | this.dbName = dbName; 64 | this.url = url; 65 | this.userName = userName; 66 | this.password = password; 67 | this.driverClass = driverClass; 68 | this.status = status; 69 | } 70 | } 71 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/mastertenant/repository/MasterTenantRepository.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.mastertenant.repository; 2 | 3 | import com.hendisantika.dynamicmultitenancy.mastertenant.entity.MasterTenant; 4 | import org.springframework.data.jpa.repository.JpaRepository; 5 | 6 | /** 7 | * Created by IntelliJ IDEA. 8 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 9 | * User: hendisantika 10 | * Email: hendisantika@gmail.com 11 | * Telegram : @hendisantika34 12 | * Date: 08/05/20 13 | * Time: 05.49 14 | */ 15 | public interface MasterTenantRepository extends JpaRepository { 16 | MasterTenant findByTenantClientId(Integer clientId); 17 | } 18 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/mastertenant/service/MasterTenantService.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.mastertenant.service; 2 | 3 | import com.hendisantika.dynamicmultitenancy.mastertenant.entity.MasterTenant; 4 | import com.hendisantika.dynamicmultitenancy.mastertenant.repository.MasterTenantRepository; 5 | import org.slf4j.Logger; 6 | import org.slf4j.LoggerFactory; 7 | import org.springframework.beans.factory.annotation.Autowired; 8 | import org.springframework.stereotype.Service; 9 | 10 | /** 11 | * Created by IntelliJ IDEA. 12 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 13 | * User: hendisantika 14 | * Email: hendisantika@gmail.com 15 | * Telegram : @hendisantika34 16 | * Date: 08/05/20 17 | * Time: 05.50 18 | */ 19 | @Service 20 | public class MasterTenantService { 21 | private static final Logger LOG = LoggerFactory.getLogger(MasterTenantService.class); 22 | 23 | @Autowired 24 | MasterTenantRepository masterTenantRepository; 25 | 26 | public MasterTenant findByClientId(Integer clientId) { 27 | LOG.info("findByClientId() method call..."); 28 | return masterTenantRepository.findByTenantClientId(clientId); 29 | } 30 | } 31 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/security/JwtAuthenticationEntryPoint.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.security; 2 | 3 | import org.springframework.security.core.AuthenticationException; 4 | import org.springframework.security.web.AuthenticationEntryPoint; 5 | import org.springframework.stereotype.Component; 6 | 7 | import javax.servlet.ServletException; 8 | import javax.servlet.http.HttpServletRequest; 9 | import javax.servlet.http.HttpServletResponse; 10 | import java.io.IOException; 11 | import java.io.Serializable; 12 | 13 | /** 14 | * Created by IntelliJ IDEA. 15 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 16 | * User: hendisantika 17 | * Email: hendisantika@gmail.com 18 | * Telegram : @hendisantika34 19 | * Date: 08/05/20 20 | * Time: 05.51 21 | */ 22 | @Component 23 | public class JwtAuthenticationEntryPoint implements AuthenticationEntryPoint, Serializable { 24 | 25 | private static final long serialVersionUID = -7858869558953243875L; 26 | 27 | @Override 28 | public void commence(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, 29 | AuthenticationException e) throws IOException, ServletException { 30 | httpServletResponse.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized"); 31 | } 32 | } 33 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/security/JwtAuthenticationFilter.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.security; 2 | 3 | import com.hendisantika.dynamicmultitenancy.constant.JWTConstants; 4 | import com.hendisantika.dynamicmultitenancy.mastertenant.config.DBContextHolder; 5 | import com.hendisantika.dynamicmultitenancy.mastertenant.entity.MasterTenant; 6 | import com.hendisantika.dynamicmultitenancy.mastertenant.service.MasterTenantService; 7 | import com.hendisantika.dynamicmultitenancy.util.JwtTokenUtil; 8 | import io.jsonwebtoken.ExpiredJwtException; 9 | import io.jsonwebtoken.SignatureException; 10 | import org.springframework.beans.factory.annotation.Autowired; 11 | import org.springframework.security.authentication.BadCredentialsException; 12 | import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; 13 | import org.springframework.security.core.authority.SimpleGrantedAuthority; 14 | import org.springframework.security.core.context.SecurityContextHolder; 15 | import org.springframework.security.core.userdetails.UserDetails; 16 | import org.springframework.security.web.authentication.WebAuthenticationDetailsSource; 17 | import org.springframework.stereotype.Component; 18 | import org.springframework.web.filter.OncePerRequestFilter; 19 | 20 | import javax.servlet.FilterChain; 21 | import javax.servlet.ServletException; 22 | import javax.servlet.http.HttpServletRequest; 23 | import javax.servlet.http.HttpServletResponse; 24 | import java.io.IOException; 25 | import java.util.Arrays; 26 | 27 | /** 28 | * Created by IntelliJ IDEA. 29 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 30 | * User: hendisantika 31 | * Email: hendisantika@gmail.com 32 | * Telegram : @hendisantika34 33 | * Date: 08/05/20 34 | * Time: 06.08 35 | */ 36 | @Component 37 | public class JwtAuthenticationFilter extends OncePerRequestFilter { 38 | 39 | @Autowired 40 | MasterTenantService masterTenantService; 41 | 42 | @Autowired 43 | private JwtUserDetailsService jwtUserDetailsService; 44 | 45 | @Autowired 46 | private JwtTokenUtil jwtTokenUtil; 47 | 48 | @Override 49 | protected void doFilterInternal(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, 50 | FilterChain filterChain) throws ServletException, IOException { 51 | String header = httpServletRequest.getHeader(JWTConstants.HEADER_STRING); 52 | String username = null; 53 | String audience = null; //tenantOrClientId 54 | String authToken = null; 55 | if (header != null && header.startsWith(JWTConstants.TOKEN_PREFIX)) { 56 | authToken = header.replace(JWTConstants.TOKEN_PREFIX, ""); 57 | try { 58 | username = jwtTokenUtil.getUsernameFromToken(authToken); 59 | audience = jwtTokenUtil.getAudienceFromToken(authToken); 60 | MasterTenant masterTenant = masterTenantService.findByClientId(Integer.valueOf(audience)); 61 | if (null == masterTenant) { 62 | logger.error("An error during getting tenant name"); 63 | throw new BadCredentialsException("Invalid tenant and user."); 64 | } 65 | DBContextHolder.setCurrentDb(masterTenant.getDbName()); 66 | } catch (IllegalArgumentException ex) { 67 | logger.error("An error during getting username from token", ex); 68 | } catch (ExpiredJwtException ex) { 69 | logger.warn("The token is expired and not valid anymore", ex); 70 | } catch (SignatureException ex) { 71 | logger.error("Authentication Failed. Username or Password not valid.", ex); 72 | } 73 | } else { 74 | logger.warn("Couldn't find bearer string, will ignore the header"); 75 | } 76 | if (username != null && SecurityContextHolder.getContext().getAuthentication() == null) { 77 | UserDetails userDetails = jwtUserDetailsService.loadUserByUsername(username); 78 | if (jwtTokenUtil.validateToken(authToken, userDetails)) { 79 | UsernamePasswordAuthenticationToken authentication = 80 | new UsernamePasswordAuthenticationToken(userDetails, null, 81 | Arrays.asList(new SimpleGrantedAuthority("ROLE_ADMIN"))); 82 | authentication.setDetails(new WebAuthenticationDetailsSource().buildDetails(httpServletRequest)); 83 | logger.info("authenticated user " + username + ", setting security context"); 84 | SecurityContextHolder.getContext().setAuthentication(authentication); 85 | } 86 | } 87 | filterChain.doFilter(httpServletRequest, httpServletResponse); 88 | } 89 | } 90 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/security/JwtUserDetailsService.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.security; 2 | 3 | import com.hendisantika.dynamicmultitenancy.tenant.entity.User; 4 | import com.hendisantika.dynamicmultitenancy.tenant.repository.UserRepository; 5 | import org.springframework.beans.factory.annotation.Autowired; 6 | import org.springframework.security.core.authority.SimpleGrantedAuthority; 7 | import org.springframework.security.core.userdetails.UserDetails; 8 | import org.springframework.security.core.userdetails.UserDetailsService; 9 | import org.springframework.security.core.userdetails.UsernameNotFoundException; 10 | import org.springframework.stereotype.Service; 11 | 12 | import java.util.Arrays; 13 | import java.util.List; 14 | 15 | /** 16 | * Created by IntelliJ IDEA. 17 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 18 | * User: hendisantika 19 | * Email: hendisantika@gmail.com 20 | * Telegram : @hendisantika34 21 | * Date: 08/05/20 22 | * Time: 06.08 23 | */ 24 | @Service 25 | public class JwtUserDetailsService implements UserDetailsService { 26 | 27 | @Autowired 28 | private UserRepository userRepository; 29 | 30 | @Override 31 | public UserDetails loadUserByUsername(String userName) throws UsernameNotFoundException { 32 | User user = userRepository.findByUserName(userName); 33 | if (null == user) { 34 | throw new UsernameNotFoundException("Invalid user name or password."); 35 | } 36 | return new org.springframework.security.core.userdetails.User(user.getUserName(), user.getPassword(), 37 | getAuthority()); 38 | } 39 | 40 | private List getAuthority() { 41 | return Arrays.asList(new SimpleGrantedAuthority("ROLE_ADMIN")); 42 | } 43 | } 44 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/security/RequestAuthorization.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.security; 2 | 3 | import java.lang.annotation.Documented; 4 | import java.lang.annotation.ElementType; 5 | import java.lang.annotation.Inherited; 6 | import java.lang.annotation.Retention; 7 | import java.lang.annotation.RetentionPolicy; 8 | import java.lang.annotation.Target; 9 | 10 | /** 11 | * Created by IntelliJ IDEA. 12 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 13 | * User: hendisantika 14 | * Email: hendisantika@gmail.com 15 | * Telegram : @hendisantika34 16 | * Date: 08/05/20 17 | * Time: 06.11 18 | */ 19 | @Target(ElementType.METHOD) 20 | @Retention(RetentionPolicy.RUNTIME) 21 | @Inherited 22 | @Documented 23 | public @interface RequestAuthorization { 24 | } 25 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/security/RequestAuthorizationIntercept.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.security; 2 | 3 | import com.hendisantika.dynamicmultitenancy.mastertenant.config.DBContextHolder; 4 | import org.aspectj.lang.ProceedingJoinPoint; 5 | import org.aspectj.lang.annotation.Around; 6 | import org.aspectj.lang.annotation.Aspect; 7 | import org.springframework.beans.factory.annotation.Autowired; 8 | import org.springframework.context.ApplicationContext; 9 | import org.springframework.security.core.Authentication; 10 | import org.springframework.security.core.context.SecurityContextHolder; 11 | import org.springframework.security.core.userdetails.UserDetails; 12 | import org.springframework.stereotype.Component; 13 | 14 | import java.util.Map; 15 | 16 | /** 17 | * Created by IntelliJ IDEA. 18 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 19 | * User: hendisantika 20 | * Email: hendisantika@gmail.com 21 | * Telegram : @hendisantika34 22 | * Date: 08/05/20 23 | * Time: 06.12 24 | */ 25 | @Aspect 26 | @Component 27 | public class RequestAuthorizationIntercept { 28 | 29 | @Autowired 30 | private ApplicationContext applicationContext; 31 | 32 | @Around("@annotation(com.hendisantika.dynamicmultitenancy.security.RequestAuthorization)") 33 | public Object checkPermission(ProceedingJoinPoint pjp) throws Throwable { 34 | UserTenantInformation tenantInformation = applicationContext.getBean(UserTenantInformation.class); 35 | Authentication authentication = SecurityContextHolder.getContext().getAuthentication(); 36 | UserDetails userDetails = (UserDetails) authentication.getPrincipal(); 37 | if (null == userDetails) { 38 | throw new RuntimeException("Access is Denied. Please again login or contact service provider"); 39 | } 40 | Map map = tenantInformation.getMap(); 41 | String tenantName = map.get(userDetails.getUsername()); 42 | if (tenantName != null && tenantName.equals(DBContextHolder.getCurrentDb())) { 43 | return pjp.proceed(); 44 | } 45 | throw new RuntimeException("Access is Denied. Please again login or contact service provider"); 46 | } 47 | } 48 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/security/UserTenantInformation.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.security; 2 | 3 | import lombok.AllArgsConstructor; 4 | import lombok.Data; 5 | import lombok.NoArgsConstructor; 6 | 7 | import java.util.HashMap; 8 | import java.util.Map; 9 | 10 | /** 11 | * Created by IntelliJ IDEA. 12 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 13 | * User: hendisantika 14 | * Email: hendisantika@gmail.com 15 | * Telegram : @hendisantika34 16 | * Date: 08/05/20 17 | * Time: 06.13 18 | */ 19 | 20 | @Data 21 | @AllArgsConstructor 22 | @NoArgsConstructor 23 | public class UserTenantInformation { 24 | private Map map = new HashMap<>(); 25 | } 26 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/security/WebSecurityConfig.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.security; 2 | 3 | import org.springframework.beans.factory.annotation.Autowired; 4 | import org.springframework.boot.web.servlet.FilterRegistrationBean; 5 | import org.springframework.context.annotation.Bean; 6 | import org.springframework.context.annotation.Configuration; 7 | import org.springframework.security.authentication.AuthenticationManager; 8 | import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; 9 | import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; 10 | import org.springframework.security.config.annotation.web.builders.HttpSecurity; 11 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; 12 | import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; 13 | import org.springframework.security.config.http.SessionCreationPolicy; 14 | import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; 15 | import org.springframework.security.crypto.password.PasswordEncoder; 16 | import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; 17 | import org.springframework.web.cors.CorsConfiguration; 18 | import org.springframework.web.cors.UrlBasedCorsConfigurationSource; 19 | import org.springframework.web.filter.CorsFilter; 20 | 21 | /** 22 | * Created by IntelliJ IDEA. 23 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 24 | * User: hendisantika 25 | * Email: hendisantika@gmail.com 26 | * Telegram : @hendisantika34 27 | * Date: 08/05/20 28 | * Time: 06.14 29 | */ 30 | @Configuration 31 | @EnableWebSecurity 32 | @EnableGlobalMethodSecurity(prePostEnabled = true) 33 | public class WebSecurityConfig extends WebSecurityConfigurerAdapter { 34 | 35 | @Autowired 36 | private JwtUserDetailsService jwtUserDetailsService; 37 | 38 | @Autowired 39 | private JwtAuthenticationEntryPoint unauthorizedHandler; 40 | 41 | @Override 42 | @Bean 43 | public AuthenticationManager authenticationManagerBean() throws Exception { 44 | return super.authenticationManagerBean(); 45 | } 46 | 47 | @Autowired 48 | public void globalUserDetails(AuthenticationManagerBuilder auth) throws Exception { 49 | auth.userDetailsService(jwtUserDetailsService).passwordEncoder(passwordEncoder()); 50 | } 51 | 52 | @Bean 53 | public PasswordEncoder passwordEncoder() { 54 | return new BCryptPasswordEncoder(); 55 | } 56 | 57 | @Bean 58 | public JwtAuthenticationFilter authenticationTokenFilterBean() throws Exception { 59 | return new JwtAuthenticationFilter(); 60 | } 61 | 62 | @Override 63 | protected void configure(HttpSecurity http) throws Exception { 64 | http.cors().and().csrf().disable(). 65 | authorizeRequests() 66 | .antMatchers("/api/auth/**").permitAll() 67 | .antMatchers("/api/product/**").authenticated() 68 | .and() 69 | .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and() 70 | .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS); 71 | http.addFilterBefore(authenticationTokenFilterBean(), UsernamePasswordAuthenticationFilter.class); 72 | } 73 | 74 | @Bean 75 | public FilterRegistrationBean platformCorsFilter() { 76 | UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); 77 | 78 | CorsConfiguration configAutenticacao = new CorsConfiguration(); 79 | configAutenticacao.setAllowCredentials(true); 80 | configAutenticacao.addAllowedOrigin("*"); 81 | configAutenticacao.addAllowedHeader("Authorization"); 82 | configAutenticacao.addAllowedHeader("Content-Type"); 83 | configAutenticacao.addAllowedHeader("Accept"); 84 | configAutenticacao.addAllowedMethod("POST"); 85 | configAutenticacao.addAllowedMethod("GET"); 86 | configAutenticacao.addAllowedMethod("DELETE"); 87 | configAutenticacao.addAllowedMethod("PUT"); 88 | configAutenticacao.addAllowedMethod("OPTIONS"); 89 | configAutenticacao.setMaxAge(3600L); 90 | source.registerCorsConfiguration("/**", configAutenticacao); 91 | 92 | FilterRegistrationBean bean = new FilterRegistrationBean(new CorsFilter(source)); 93 | bean.setOrder(-110); 94 | return bean; 95 | } 96 | } 97 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/config/CurrentTenantIdentifierResolverImpl.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.config; 2 | 3 | import com.hendisantika.dynamicmultitenancy.mastertenant.config.DBContextHolder; 4 | import org.apache.commons.lang3.StringUtils; 5 | import org.hibernate.context.spi.CurrentTenantIdentifierResolver; 6 | 7 | /** 8 | * Created by IntelliJ IDEA. 9 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 10 | * User: hendisantika 11 | * Email: hendisantika@gmail.com 12 | * Telegram : @hendisantika34 13 | * Date: 08/05/20 14 | * Time: 05.53 15 | */ 16 | public class CurrentTenantIdentifierResolverImpl implements CurrentTenantIdentifierResolver { 17 | 18 | private static final String DEFAULT_TENANT_ID = "client_tenant_1"; 19 | 20 | @Override 21 | public String resolveCurrentTenantIdentifier() { 22 | String tenant = DBContextHolder.getCurrentDb(); 23 | return StringUtils.isNotBlank(tenant) ? tenant : DEFAULT_TENANT_ID; 24 | } 25 | 26 | @Override 27 | public boolean validateExistingCurrentSessions() { 28 | return true; 29 | } 30 | } 31 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/config/DataSourceBasedMultiTenantConnectionProviderImpl.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.config; 2 | 3 | import com.hendisantika.dynamicmultitenancy.mastertenant.config.DBContextHolder; 4 | import com.hendisantika.dynamicmultitenancy.mastertenant.entity.MasterTenant; 5 | import com.hendisantika.dynamicmultitenancy.mastertenant.repository.MasterTenantRepository; 6 | import com.hendisantika.dynamicmultitenancy.util.DataSourceUtil; 7 | import org.hibernate.engine.jdbc.connections.spi.AbstractDataSourceBasedMultiTenantConnectionProviderImpl; 8 | import org.slf4j.Logger; 9 | import org.slf4j.LoggerFactory; 10 | import org.springframework.beans.factory.annotation.Autowired; 11 | import org.springframework.context.ApplicationContext; 12 | import org.springframework.context.annotation.Configuration; 13 | import org.springframework.security.core.userdetails.UsernameNotFoundException; 14 | 15 | import javax.sql.DataSource; 16 | import java.util.List; 17 | import java.util.Map; 18 | import java.util.TreeMap; 19 | 20 | /** 21 | * Created by IntelliJ IDEA. 22 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 23 | * User: hendisantika 24 | * Email: hendisantika@gmail.com 25 | * Telegram : @hendisantika34 26 | * Date: 08/05/20 27 | * Time: 05.54 28 | */ 29 | @Configuration 30 | public class DataSourceBasedMultiTenantConnectionProviderImpl extends AbstractDataSourceBasedMultiTenantConnectionProviderImpl { 31 | 32 | private static final Logger LOG = LoggerFactory.getLogger(DataSourceBasedMultiTenantConnectionProviderImpl.class); 33 | 34 | private static final long serialVersionUID = 1L; 35 | 36 | private final Map dataSourcesMtApp = new TreeMap<>(); 37 | 38 | @Autowired 39 | ApplicationContext applicationContext; 40 | 41 | @Autowired 42 | private MasterTenantRepository masterTenantRepository; 43 | 44 | @Override 45 | protected DataSource selectAnyDataSource() { 46 | // This method is called more than once. So check if the data source map 47 | // is empty. If it is then rescan master_tenant table for all tenant 48 | if (dataSourcesMtApp.isEmpty()) { 49 | List masterTenants = masterTenantRepository.findAll(); 50 | LOG.info("selectAnyDataSource() method call...Total tenants:" + masterTenants.size()); 51 | for (MasterTenant masterTenant : masterTenants) { 52 | dataSourcesMtApp.put(masterTenant.getDbName(), 53 | DataSourceUtil.createAndConfigureDataSource(masterTenant)); 54 | } 55 | } 56 | return this.dataSourcesMtApp.values().iterator().next(); 57 | } 58 | 59 | @Override 60 | protected DataSource selectDataSource(String tenantIdentifier) { 61 | // If the requested tenant id is not present check for it in the master 62 | // database 'master_tenant' table 63 | tenantIdentifier = initializeTenantIfLost(tenantIdentifier); 64 | if (!this.dataSourcesMtApp.containsKey(tenantIdentifier)) { 65 | List masterTenants = masterTenantRepository.findAll(); 66 | LOG.info("selectDataSource() method call...Tenant:" + tenantIdentifier + " Total tenants:" + masterTenants.size()); 67 | for (MasterTenant masterTenant : masterTenants) { 68 | dataSourcesMtApp.put(masterTenant.getDbName(), 69 | DataSourceUtil.createAndConfigureDataSource(masterTenant)); 70 | } 71 | } 72 | //check again if tenant exist in map after rescan master_db, if not, throw UsernameNotFoundException 73 | if (!this.dataSourcesMtApp.containsKey(tenantIdentifier)) { 74 | LOG.warn("Trying to get tenant:" + tenantIdentifier + " which was not found in master db after rescan"); 75 | throw new UsernameNotFoundException(String.format("Tenant not found after rescan, " + " tenant=%s", 76 | tenantIdentifier)); 77 | } 78 | return this.dataSourcesMtApp.get(tenantIdentifier); 79 | } 80 | 81 | private String initializeTenantIfLost(String tenantIdentifier) { 82 | if (tenantIdentifier != DBContextHolder.getCurrentDb()) { 83 | tenantIdentifier = DBContextHolder.getCurrentDb(); 84 | } 85 | return tenantIdentifier; 86 | } 87 | } 88 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/config/TenantDatabaseConfig.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.config; 2 | 3 | import org.hibernate.MultiTenancyStrategy; 4 | import org.hibernate.cfg.Environment; 5 | import org.hibernate.context.spi.CurrentTenantIdentifierResolver; 6 | import org.hibernate.engine.jdbc.connections.spi.MultiTenantConnectionProvider; 7 | import org.springframework.beans.factory.annotation.Qualifier; 8 | import org.springframework.boot.autoconfigure.condition.ConditionalOnBean; 9 | import org.springframework.context.annotation.Bean; 10 | import org.springframework.context.annotation.ComponentScan; 11 | import org.springframework.context.annotation.Configuration; 12 | import org.springframework.data.jpa.repository.config.EnableJpaRepositories; 13 | import org.springframework.orm.jpa.JpaTransactionManager; 14 | import org.springframework.orm.jpa.JpaVendorAdapter; 15 | import org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean; 16 | import org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter; 17 | import org.springframework.transaction.annotation.EnableTransactionManagement; 18 | 19 | import javax.persistence.EntityManagerFactory; 20 | import java.util.HashMap; 21 | import java.util.Map; 22 | 23 | /** 24 | * Created by IntelliJ IDEA. 25 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 26 | * User: hendisantika 27 | * Email: hendisantika@gmail.com 28 | * Telegram : @hendisantika34 29 | * Date: 08/05/20 30 | * Time: 06.03 31 | */ 32 | @Configuration 33 | @EnableTransactionManagement 34 | @ComponentScan(basePackages = {"com.hendisantika.dynamicmultitenancy.tenant.repository", "com.hendisantika" + 35 | ".dynamicmultitenancy.tenant.entity"}) 36 | @EnableJpaRepositories(basePackages = {"com.hendisantika.dynamicmultitenancy.tenant.repository", "com.hendisantika" + 37 | ".dynamicmultitenancy.tenant.service"}, 38 | entityManagerFactoryRef = "tenantEntityManagerFactory", 39 | transactionManagerRef = "tenantTransactionManager") 40 | public class TenantDatabaseConfig { 41 | @Bean(name = "tenantJpaVendorAdapter") 42 | public JpaVendorAdapter jpaVendorAdapter() { 43 | return new HibernateJpaVendorAdapter(); 44 | } 45 | 46 | @Bean(name = "tenantTransactionManager") 47 | public JpaTransactionManager transactionManager(@Qualifier("tenantEntityManagerFactory") EntityManagerFactory tenantEntityManager) { 48 | JpaTransactionManager transactionManager = new JpaTransactionManager(); 49 | transactionManager.setEntityManagerFactory(tenantEntityManager); 50 | return transactionManager; 51 | } 52 | 53 | /** 54 | * The multi tenant connection provider 55 | * 56 | * @return 57 | */ 58 | @Bean(name = "datasourceBasedMultitenantConnectionProvider") 59 | @ConditionalOnBean(name = "masterEntityManagerFactory") 60 | public MultiTenantConnectionProvider multiTenantConnectionProvider() { 61 | // Autowires the multi connection provider 62 | return new DataSourceBasedMultiTenantConnectionProviderImpl(); 63 | } 64 | 65 | /** 66 | * The current tenant identifier resolver 67 | * 68 | * @return 69 | */ 70 | @Bean(name = "currentTenantIdentifierResolver") 71 | public CurrentTenantIdentifierResolver currentTenantIdentifierResolver() { 72 | return new CurrentTenantIdentifierResolverImpl(); 73 | } 74 | 75 | /** 76 | * Creates the entity manager factory bean which is required to access the 77 | * JPA functionalities provided by the JPA persistence provider, i.e. 78 | * Hibernate in this case. 79 | * 80 | * @param connectionProvider 81 | * @param tenantResolver 82 | * @return 83 | */ 84 | @Bean(name = "tenantEntityManagerFactory") 85 | @ConditionalOnBean(name = "datasourceBasedMultitenantConnectionProvider") 86 | public LocalContainerEntityManagerFactoryBean entityManagerFactory( 87 | @Qualifier("datasourceBasedMultitenantConnectionProvider") 88 | MultiTenantConnectionProvider connectionProvider, 89 | @Qualifier("currentTenantIdentifierResolver") 90 | CurrentTenantIdentifierResolver tenantResolver) { 91 | LocalContainerEntityManagerFactoryBean emfBean = new LocalContainerEntityManagerFactoryBean(); 92 | //All tenant related entities, repositories and service classes must be scanned 93 | emfBean.setPackagesToScan("com.hendisantika.dynamicmultitenancy"); 94 | emfBean.setJpaVendorAdapter(jpaVendorAdapter()); 95 | emfBean.setPersistenceUnitName("tenantdb-persistence-unit"); 96 | Map properties = new HashMap<>(); 97 | properties.put(Environment.MULTI_TENANT, MultiTenancyStrategy.DATABASE); 98 | properties.put(Environment.MULTI_TENANT_CONNECTION_PROVIDER, connectionProvider); 99 | properties.put(Environment.MULTI_TENANT_IDENTIFIER_RESOLVER, tenantResolver); 100 | properties.put(Environment.DIALECT, "org.hibernate.dialect.MySQL8Dialect"); 101 | properties.put(Environment.SHOW_SQL, true); 102 | properties.put(Environment.FORMAT_SQL, true); 103 | properties.put(Environment.HBM2DDL_AUTO, "none"); 104 | emfBean.setJpaPropertyMap(properties); 105 | return emfBean; 106 | } 107 | } 108 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/entity/Product.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.entity; 2 | 3 | import lombok.AllArgsConstructor; 4 | import lombok.Data; 5 | import lombok.NoArgsConstructor; 6 | 7 | import javax.persistence.Column; 8 | import javax.persistence.Entity; 9 | import javax.persistence.GeneratedValue; 10 | import javax.persistence.GenerationType; 11 | import javax.persistence.Id; 12 | import javax.persistence.Table; 13 | import javax.validation.constraints.Size; 14 | import java.io.Serializable; 15 | 16 | /** 17 | * Created by IntelliJ IDEA. 18 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 19 | * User: hendisantika 20 | * Email: hendisantika@gmail.com 21 | * Telegram : @hendisantika34 22 | * Date: 08/05/20 23 | * Time: 05.58 24 | */ 25 | @Entity 26 | @Table(name = "tbl_product") 27 | @Data 28 | @AllArgsConstructor 29 | @NoArgsConstructor 30 | public class Product implements Serializable { 31 | 32 | private static final long serialVersionUID = 1L; 33 | 34 | @Id 35 | @GeneratedValue(strategy = GenerationType.IDENTITY) 36 | @Column(name = "product_id") 37 | private Integer productId; 38 | 39 | @Size(max = 50) 40 | @Column(name = "product_name", nullable = false) 41 | private String productName; 42 | 43 | @Size(max = 10) 44 | @Column(name = "quantity", nullable = false) 45 | private String quantity; 46 | 47 | @Size(max = 3) 48 | @Column(name = "size", nullable = false, unique = true) 49 | private String size; 50 | 51 | public Product(@Size(max = 50) String productName, @Size(max = 10) String quantity, @Size(max = 3) String size) { 52 | this.productName = productName; 53 | this.quantity = quantity; 54 | this.size = size; 55 | } 56 | } 57 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/entity/User.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.entity; 2 | 3 | import lombok.AllArgsConstructor; 4 | import lombok.Data; 5 | import lombok.NoArgsConstructor; 6 | 7 | import javax.persistence.Column; 8 | import javax.persistence.Entity; 9 | import javax.persistence.GeneratedValue; 10 | import javax.persistence.GenerationType; 11 | import javax.persistence.Id; 12 | import javax.persistence.Table; 13 | import javax.validation.constraints.Size; 14 | import java.io.Serializable; 15 | 16 | /** 17 | * Created by IntelliJ IDEA. 18 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 19 | * User: hendisantika 20 | * Email: hendisantika@gmail.com 21 | * Telegram : @hendisantika34 22 | * Date: 08/05/20 23 | * Time: 05.59 24 | */ 25 | @Entity 26 | @Table(name = "tbl_user") 27 | @Data 28 | @AllArgsConstructor 29 | @NoArgsConstructor 30 | public class User implements Serializable { 31 | 32 | private static final long serialVersionUID = 1L; 33 | 34 | @Id 35 | @GeneratedValue(strategy = GenerationType.IDENTITY) 36 | @Column(name = "user_id") 37 | private Integer userId; 38 | 39 | @Size(max = 100) 40 | @Column(name = "full_name", nullable = false) 41 | private String fullName; 42 | 43 | @Size(max = 10) 44 | @Column(name = "gender", nullable = false) 45 | private String gender; 46 | 47 | @Size(max = 50) 48 | @Column(name = "user_name", nullable = false, unique = true) 49 | private String userName; 50 | @Size(max = 100) 51 | @Column(name = "password", nullable = false) 52 | private String password; 53 | @Size(max = 10) 54 | @Column(name = "status", nullable = false) 55 | private String status; 56 | 57 | public User(@Size(max = 100) String fullName, @Size(max = 10) String gender, @Size(max = 50) String userName, 58 | @Size(max = 100) String password, @Size(max = 10) String status) { 59 | this.fullName = fullName; 60 | this.gender = gender; 61 | this.userName = userName; 62 | this.password = password; 63 | this.status = status; 64 | } 65 | } 66 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/repository/ProductRepository.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.repository; 2 | 3 | import com.hendisantika.dynamicmultitenancy.tenant.entity.Product; 4 | import org.springframework.data.jpa.repository.JpaRepository; 5 | 6 | /** 7 | * Created by IntelliJ IDEA. 8 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 9 | * User: hendisantika 10 | * Email: hendisantika@gmail.com 11 | * Telegram : @hendisantika34 12 | * Date: 08/05/20 13 | * Time: 06.00 14 | */ 15 | public interface ProductRepository extends JpaRepository { 16 | } 17 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/repository/UserRepository.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.repository; 2 | 3 | import com.hendisantika.dynamicmultitenancy.tenant.entity.User; 4 | import org.springframework.data.jpa.repository.JpaRepository; 5 | 6 | /** 7 | * Created by IntelliJ IDEA. 8 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 9 | * User: hendisantika 10 | * Email: hendisantika@gmail.com 11 | * Telegram : @hendisantika34 12 | * Date: 08/05/20 13 | * Time: 06.01 14 | */ 15 | public interface UserRepository extends JpaRepository { 16 | 17 | User findByUserName(String userName); 18 | } 19 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/tenant/service/ProductService.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.tenant.service; 2 | 3 | import com.hendisantika.dynamicmultitenancy.tenant.entity.Product; 4 | import com.hendisantika.dynamicmultitenancy.tenant.repository.ProductRepository; 5 | import org.springframework.beans.factory.annotation.Autowired; 6 | import org.springframework.stereotype.Service; 7 | 8 | import java.util.List; 9 | 10 | /** 11 | * Created by IntelliJ IDEA. 12 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 13 | * User: hendisantika 14 | * Email: hendisantika@gmail.com 15 | * Telegram : @hendisantika34 16 | * Date: 08/05/20 17 | * Time: 06.02 18 | */ 19 | @Service 20 | public class ProductService { 21 | @Autowired 22 | private ProductRepository productRepository; 23 | 24 | public List getAllProduct() { 25 | return productRepository.findAll(); 26 | } 27 | } 28 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/util/DataSourceUtil.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.util; 2 | 3 | import com.hendisantika.dynamicmultitenancy.mastertenant.entity.MasterTenant; 4 | import com.zaxxer.hikari.HikariDataSource; 5 | import org.slf4j.Logger; 6 | import org.slf4j.LoggerFactory; 7 | 8 | import javax.sql.DataSource; 9 | 10 | /** 11 | * Created by IntelliJ IDEA. 12 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 13 | * User: hendisantika 14 | * Email: hendisantika@gmail.com 15 | * Telegram : @hendisantika34 16 | * Date: 08/05/20 17 | * Time: 05.55 18 | */ 19 | public final class DataSourceUtil { 20 | 21 | private static final Logger LOG = LoggerFactory.getLogger(DataSourceUtil.class); 22 | 23 | public static DataSource createAndConfigureDataSource(MasterTenant masterTenant) { 24 | HikariDataSource ds = new HikariDataSource(); 25 | ds.setUsername(masterTenant.getUserName()); 26 | ds.setPassword(masterTenant.getPassword()); 27 | ds.setJdbcUrl(masterTenant.getUrl()); 28 | ds.setDriverClassName(masterTenant.getDriverClass()); 29 | // HikariCP settings - could come from the master_tenant table but 30 | // hardcoded here for brevity 31 | // Maximum waiting time for a connection from the pool 32 | ds.setConnectionTimeout(20000); 33 | // Minimum number of idle connections in the pool 34 | ds.setMinimumIdle(3); 35 | // Maximum number of actual connection in the pool 36 | ds.setMaximumPoolSize(500); 37 | // Maximum time that a connection is allowed to sit idle in the pool 38 | ds.setIdleTimeout(300000); 39 | ds.setConnectionTimeout(20000); 40 | // Setting up a pool name for each tenant datasource 41 | String tenantConnectionPoolName = masterTenant.getDbName() + "-connection-pool"; 42 | ds.setPoolName(tenantConnectionPoolName); 43 | LOG.info("Configured datasource:" + masterTenant.getDbName() + ". Connection pool name:" + tenantConnectionPoolName); 44 | return ds; 45 | } 46 | } 47 | -------------------------------------------------------------------------------- /src/main/java/com/hendisantika/dynamicmultitenancy/util/JwtTokenUtil.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy.util; 2 | 3 | import com.hendisantika.dynamicmultitenancy.constant.JWTConstants; 4 | import io.jsonwebtoken.Claims; 5 | import io.jsonwebtoken.Jwts; 6 | import io.jsonwebtoken.SignatureAlgorithm; 7 | import org.springframework.security.core.authority.SimpleGrantedAuthority; 8 | import org.springframework.security.core.userdetails.UserDetails; 9 | import org.springframework.stereotype.Component; 10 | 11 | import java.io.Serializable; 12 | import java.util.Arrays; 13 | import java.util.Date; 14 | import java.util.function.Function; 15 | 16 | /** 17 | * Created by IntelliJ IDEA. 18 | * Project : springboot-security-jwt-rest-api-dynamic-multi-tenancy-mysql-postgresql 19 | * User: hendisantika 20 | * Email: hendisantika@gmail.com 21 | * Telegram : @hendisantika34 22 | * Date: 08/05/20 23 | * Time: 05.40 24 | */ 25 | @Component 26 | public class JwtTokenUtil implements Serializable { 27 | 28 | private static final long serialVersionUID = -2550185165626007488L; 29 | 30 | public String getUsernameFromToken(String token) { 31 | return getClaimFromToken(token, Claims::getSubject); 32 | } 33 | 34 | public String getAudienceFromToken(String token) { 35 | return getClaimFromToken(token, Claims::getAudience); 36 | } 37 | 38 | public Date getExpirationDateFromToken(String token) { 39 | return getClaimFromToken(token, Claims::getExpiration); 40 | } 41 | 42 | public T getClaimFromToken(String token, Function claimsResolver) { 43 | final Claims claims = getAllClaimsFromToken(token); 44 | return claimsResolver.apply(claims); 45 | } 46 | 47 | private Claims getAllClaimsFromToken(String token) { 48 | return Jwts.parser() 49 | .setSigningKey(JWTConstants.SIGNING_KEY) 50 | .parseClaimsJws(token) 51 | .getBody(); 52 | } 53 | 54 | private Boolean isTokenExpired(String token) { 55 | final Date expiration = getExpirationDateFromToken(token); 56 | return expiration.before(new Date()); 57 | } 58 | 59 | public String generateToken(String userName, String tenantOrClientId) { 60 | return doGenerateToken(userName, tenantOrClientId); 61 | } 62 | 63 | private String doGenerateToken(String subject, String tenantOrClientId) { 64 | 65 | Claims claims = Jwts.claims().setSubject(subject).setAudience(tenantOrClientId); 66 | claims.put("scopes", Arrays.asList(new SimpleGrantedAuthority("ROLE_ADMIN"))); 67 | 68 | return Jwts.builder() 69 | .setClaims(claims) 70 | .setIssuer("system") 71 | .setIssuedAt(new Date(System.currentTimeMillis())) 72 | .setExpiration(new Date(System.currentTimeMillis() + JWTConstants.ACCESS_TOKEN_VALIDITY_SECONDS * 1000)) 73 | .signWith(SignatureAlgorithm.HS256, JWTConstants.SIGNING_KEY) 74 | .compact(); 75 | } 76 | 77 | public Boolean validateToken(String token, UserDetails userDetails) { 78 | final String username = getUsernameFromToken(token); 79 | return (username.equals(userDetails.getUsername()) && !isTokenExpired(token)); 80 | } 81 | } 82 | -------------------------------------------------------------------------------- /src/main/resources/application.properties: -------------------------------------------------------------------------------- 1 | server.port=9090 2 | 3 | logging.pattern.console=%d{yyyy-MM-dd HH:mm:ss} %-5level %logger{36} - %msg%n 4 | logging.level.org.hibernate.SQL=error 5 | logging.level.=error 6 | server.error.include-stacktrace=never 7 | 8 | 9 | multitenancy.mtapp.master.datasource.url= jdbc:mysql://localhost:3306/multiTenantDemo_master_db?allowPublicKeyRetrieval=true&useSSL=false 10 | multitenancy.mtapp.master.datasource.username= root 11 | multitenancy.mtapp.master.datasource.password= root1234 12 | multitenancy.mtapp.master.datasource.driverClassName= com.mysql.cj.jdbc.Driver 13 | multitenancy.mtapp.master.datasource.connectionTimeout= 20000 14 | multitenancy.mtapp.master.datasource.maxPoolSize= 250 15 | multitenancy.mtapp.master.datasource.idleTimeout= 300000 16 | multitenancy.mtapp.master.datasource.minIdle= 5 17 | multitenancy.mtapp.master.datasource.poolName= masterdb-connection-pool -------------------------------------------------------------------------------- /src/main/resources/db scripts/master.sql: -------------------------------------------------------------------------------- 1 | -- MySQL dump 10.13 Distrib 8.0.19, for Win64 (x86_64) 2 | -- 3 | -- Host: 127.0.0.1 Database: multitenantdemo_master_db 4 | -- ------------------------------------------------------ 5 | -- Server version 8.0.19 6 | 7 | /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */; 8 | /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */; 9 | /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */; 10 | /*!50503 SET NAMES utf8 */; 11 | /*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */; 12 | /*!40103 SET TIME_ZONE='+00:00' */; 13 | /*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */; 14 | /*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */; 15 | /*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */; 16 | /*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */; 17 | 18 | CREATE DATABASE IF NOT EXISTS multiTenantDemo_master_db; 19 | use multiTenantDemo_master_db; 20 | 21 | -- 22 | -- Table structure for table `tbl_tenant_master` 23 | -- 24 | 25 | DROP TABLE IF EXISTS `tbl_tenant_master`; 26 | /*!40101 SET @saved_cs_client = @@character_set_client */; 27 | /*!50503 SET character_set_client = utf8mb4 */; 28 | CREATE TABLE `tbl_tenant_master` ( 29 | `tenant_client_id` int unsigned NOT NULL, 30 | `db_name` varchar(50) NOT NULL, 31 | `url` varchar(100) NOT NULL, 32 | `user_name` varchar(50) NOT NULL, 33 | `password` varchar(100) NOT NULL, 34 | `driver_class` varchar(100) NOT NULL, 35 | `status` varchar(10) NOT NULL, 36 | PRIMARY KEY (`tenant_client_id`) USING BTREE 37 | ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci; 38 | /*!40101 SET character_set_client = @saved_cs_client */; 39 | 40 | -- 41 | -- Dumping data for table `tbl_tenant_master` 42 | -- 43 | 44 | LOCK TABLES `tbl_tenant_master` WRITE; 45 | /*!40000 ALTER TABLE `tbl_tenant_master` DISABLE KEYS */; 46 | INSERT INTO `tbl_tenant_master` VALUES (100,'multiTenantDemo_tenant1','jdbc:mysql://localhost:3306/multiTenantDemo_tenant1?allowPublicKeyRetrieval=true&useSSL=false','root','root1234','com.mysql.cj.jdbc.Driver','Active'),(200,'multiTenantDemo_tenant2','jdbc:mysql://localhost:3306/multiTenantDemo_tenant2?allowPublicKeyRetrieval=true&useSSL=false','root','root1234','com.mysql.cj.jdbc.Driver','Active'); 47 | /*!40000 ALTER TABLE `tbl_tenant_master` ENABLE KEYS */; 48 | UNLOCK TABLES; 49 | /*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */; 50 | 51 | /*!40101 SET SQL_MODE=@OLD_SQL_MODE */; 52 | /*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */; 53 | /*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */; 54 | /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */; 55 | /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */; 56 | /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */; 57 | /*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */; 58 | 59 | -- Dump completed on 2020-10-09 12:31:33 60 | -------------------------------------------------------------------------------- /src/main/resources/db scripts/tenant-1.sql: -------------------------------------------------------------------------------- 1 | -- MySQL dump 10.13 Distrib 8.0.19, for Win64 (x86_64) 2 | -- 3 | -- Host: 127.0.0.1 Database: multitenantdemo_tenant1 4 | -- ------------------------------------------------------ 5 | -- Server version 8.0.19 6 | 7 | /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */; 8 | /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */; 9 | /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */; 10 | /*!50503 SET NAMES utf8 */; 11 | /*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */; 12 | /*!40103 SET TIME_ZONE='+00:00' */; 13 | /*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */; 14 | /*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */; 15 | /*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */; 16 | /*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */; 17 | 18 | 19 | create database IF NOT EXISTS multiTenantDemo_tenant1; 20 | USE multiTenantDemo_tenant1; 21 | 22 | -- 23 | -- Table structure for table `tbl_product` 24 | -- 25 | 26 | DROP TABLE IF EXISTS `tbl_product`; 27 | /*!40101 SET @saved_cs_client = @@character_set_client */; 28 | /*!50503 SET character_set_client = utf8mb4 */; 29 | CREATE TABLE `tbl_product` ( 30 | `product_id` int unsigned NOT NULL AUTO_INCREMENT, 31 | `product_name` varchar(50) NOT NULL, 32 | `quantity` int unsigned NOT NULL DEFAULT '0', 33 | `size` varchar(3) NOT NULL, 34 | PRIMARY KEY (`product_id`) 35 | ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci; 36 | /*!40101 SET character_set_client = @saved_cs_client */; 37 | 38 | -- 39 | -- Dumping data for table `tbl_product` 40 | -- 41 | 42 | LOCK TABLES `tbl_product` WRITE; 43 | /*!40000 ALTER TABLE `tbl_product` DISABLE KEYS */; 44 | INSERT INTO `tbl_product` VALUES (1,'Apple',20,'5'); 45 | /*!40000 ALTER TABLE `tbl_product` ENABLE KEYS */; 46 | UNLOCK TABLES; 47 | 48 | -- 49 | -- Table structure for table `tbl_user` 50 | -- 51 | 52 | DROP TABLE IF EXISTS `tbl_user`; 53 | /*!40101 SET @saved_cs_client = @@character_set_client */; 54 | /*!50503 SET character_set_client = utf8mb4 */; 55 | CREATE TABLE `tbl_user` ( 56 | `user_id` int unsigned NOT NULL AUTO_INCREMENT, 57 | `full_name` varchar(100) NOT NULL, 58 | `gender` varchar(10) NOT NULL, 59 | `user_name` varchar(50) NOT NULL, 60 | `password` varchar(100) NOT NULL, 61 | `status` varchar(10) NOT NULL, 62 | PRIMARY KEY (`user_id`) 63 | ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci; 64 | /*!40101 SET character_set_client = @saved_cs_client */; 65 | 66 | -- 67 | -- Dumping data for table `tbl_user` 68 | -- 69 | 70 | LOCK TABLES `tbl_user` WRITE; 71 | /*!40000 ALTER TABLE `tbl_user` DISABLE KEYS */; 72 | INSERT INTO `tbl_user` VALUES (1,'Praveen S Biradar','male','praveen','$2a$10$8ACM6EKYd6Yq/5FsCq0Mn.fdy4UpMN711j3eZj/hxo5pDFoO8NQTy','Active'); 73 | /*!40000 ALTER TABLE `tbl_user` ENABLE KEYS */; 74 | UNLOCK TABLES; 75 | /*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */; 76 | 77 | /*!40101 SET SQL_MODE=@OLD_SQL_MODE */; 78 | /*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */; 79 | /*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */; 80 | /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */; 81 | /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */; 82 | /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */; 83 | /*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */; 84 | 85 | -- Dump completed on 2020-10-09 12:32:48 86 | -------------------------------------------------------------------------------- /src/main/resources/db scripts/tenant-2.sql: -------------------------------------------------------------------------------- 1 | -- MySQL dump 10.13 Distrib 8.0.19, for Win64 (x86_64) 2 | -- 3 | -- Host: 127.0.0.1 Database: multitenantdemo_tenant2 4 | -- ------------------------------------------------------ 5 | -- Server version 8.0.19 6 | 7 | /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */; 8 | /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */; 9 | /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */; 10 | /*!50503 SET NAMES utf8 */; 11 | /*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */; 12 | /*!40103 SET TIME_ZONE='+00:00' */; 13 | /*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */; 14 | /*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */; 15 | /*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */; 16 | /*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */; 17 | 18 | create database IF NOT EXISTS multiTenantDemo_tenant2; 19 | USE multiTenantDemo_tenant2; 20 | 21 | -- 22 | -- Table structure for table `tbl_product` 23 | -- 24 | 25 | DROP TABLE IF EXISTS `tbl_product`; 26 | /*!40101 SET @saved_cs_client = @@character_set_client */; 27 | /*!50503 SET character_set_client = utf8mb4 */; 28 | CREATE TABLE `tbl_product` ( 29 | `product_id` int unsigned NOT NULL AUTO_INCREMENT, 30 | `product_name` varchar(50) NOT NULL, 31 | `quantity` int unsigned NOT NULL DEFAULT '0', 32 | `size` varchar(3) NOT NULL, 33 | PRIMARY KEY (`product_id`) 34 | ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci; 35 | /*!40101 SET character_set_client = @saved_cs_client */; 36 | 37 | -- 38 | -- Dumping data for table `tbl_product` 39 | -- 40 | 41 | LOCK TABLES `tbl_product` WRITE; 42 | /*!40000 ALTER TABLE `tbl_product` DISABLE KEYS */; 43 | INSERT INTO `tbl_product` VALUES (1,'Banana',22,'23'); 44 | /*!40000 ALTER TABLE `tbl_product` ENABLE KEYS */; 45 | UNLOCK TABLES; 46 | 47 | -- 48 | -- Table structure for table `tbl_user` 49 | -- 50 | 51 | DROP TABLE IF EXISTS `tbl_user`; 52 | /*!40101 SET @saved_cs_client = @@character_set_client */; 53 | /*!50503 SET character_set_client = utf8mb4 */; 54 | CREATE TABLE `tbl_user` ( 55 | `user_id` int unsigned NOT NULL AUTO_INCREMENT, 56 | `full_name` varchar(100) NOT NULL, 57 | `gender` varchar(10) NOT NULL, 58 | `user_name` varchar(50) NOT NULL, 59 | `password` varchar(100) NOT NULL, 60 | `status` varchar(10) NOT NULL, 61 | PRIMARY KEY (`user_id`) 62 | ) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_0900_ai_ci; 63 | /*!40101 SET character_set_client = @saved_cs_client */; 64 | 65 | -- 66 | -- Dumping data for table `tbl_user` 67 | -- 68 | 69 | LOCK TABLES `tbl_user` WRITE; 70 | /*!40000 ALTER TABLE `tbl_user` DISABLE KEYS */; 71 | INSERT INTO `tbl_user` VALUES (1,'Praveen Biradar','male','Biradar','$2a$10$8ACM6EKYd6Yq/5FsCq0Mn.fdy4UpMN711j3eZj/hxo5pDFoO8NQTy','Active'); 72 | /*!40000 ALTER TABLE `tbl_user` ENABLE KEYS */; 73 | UNLOCK TABLES; 74 | /*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */; 75 | 76 | /*!40101 SET SQL_MODE=@OLD_SQL_MODE */; 77 | /*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */; 78 | /*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */; 79 | /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */; 80 | /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */; 81 | /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */; 82 | /*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */; 83 | 84 | -- Dump completed on 2020-10-09 12:34:13 85 | -------------------------------------------------------------------------------- /src/test/java/com/hendisantika/dynamicmultitenancy/SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplicationTests.java: -------------------------------------------------------------------------------- 1 | package com.hendisantika.dynamicmultitenancy; 2 | 3 | import org.junit.jupiter.api.Test; 4 | import org.springframework.boot.test.context.SpringBootTest; 5 | 6 | @SpringBootTest 7 | class SpringbootSecurityJwtRestApiDynamicMultiTenancyMysqlPostgresqlApplicationTests { 8 | 9 | @Test 10 | void contextLoads() { 11 | } 12 | 13 | } 14 | --------------------------------------------------------------------------------