├── README.md
├── client
    ├── pom.xml
    └── src
    │   └── main
    │       ├── java
    │           └── client
    │           │   ├── ConferenceException.java
    │           │   ├── Session.java
    │           │   ├── Speaker.java
    │           │   ├── config
    │           │       ├── ServletInitializer.java
    │           │       └── WebMvcConfig.java
    │           │   ├── converter
    │           │       └── AccessTokenRequestConverter.java
    │           │   └── mvc
    │           │       └── ConferenceController.java
    │       ├── resources
    │           ├── client.properties
    │           ├── commons-logging.properties
    │           └── simplelog.properties
    │       └── webapp
    │           ├── WEB-INF
    │               └── jsp
    │               │   ├── message.jsp
    │               │   ├── sessions.jsp
    │               │   └── speakers.jsp
    │           ├── index.jsp
    │           ├── js
    │               └── libs
    │               │   └── jso.js
    │           └── oauth_error.jsp
├── conference
    ├── pom.xml
    └── src
    │   └── main
    │       ├── java
    │           └── conference
    │           │   ├── Session.java
    │           │   ├── Speaker.java
    │           │   ├── config
    │           │       ├── AuthorizationServerConfig.java
    │           │       ├── MethodSecurityConfig.java
    │           │       ├── OAuth2ServerConfig.java
    │           │       ├── ResourceServerConfig.java
    │           │       ├── SecurityConfiguration.java
    │           │       ├── ServletInitializer.java
    │           │       └── WebMvcConfig.java
    │           │   ├── oauth
    │           │       ├── AccessConfirmationController.java
    │           │       ├── AdminController.java
    │           │       └── UserApprovalHandler.java
    │           │   └── rest
    │           │       ├── Application.java
    │           │       ├── ConferenceService.java
    │           │       └── JerseyResource.java
    │       ├── resources
    │           ├── applicationContext.xml
    │           ├── commons-logging.properties
    │           ├── sample-oauth.xml
    │           └── simplelog.properties
    │       └── webapp
    │           ├── WEB-INF
    │               └── jsp
    │               │   ├── access_confirmation.jsp
    │               │   └── oauth_error.jsp
    │           ├── index.jsp
    │           └── login.jsp
└── pom.xml


/README.md:
--------------------------------------------------------------------------------
1 | rest-oauth2-sample
2 | ==================
3 | 
4 | ### Presentation Slides
5 | http://www.slideshare.net/rcandidosilva/javaone-2014-securing-restful-resources-with-oauth2
6 | 


--------------------------------------------------------------------------------
/client/pom.xml:
--------------------------------------------------------------------------------
  1 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
  2 | 
  3 |     <modelVersion>4.0.0</modelVersion>
  4 | 
  5 |     <parent>
  6 |         <groupId>demo</groupId>
  7 |         <artifactId>oauth2</artifactId>
  8 |         <version>1.0.0</version>
  9 |     </parent>
 10 | 
 11 |     <artifactId>client</artifactId>
 12 |     <packaging>war</packaging>
 13 |     <name>Client</name>
 14 | 
 15 |     <dependencies>
 16 | 
 17 |         <dependency>
 18 |             <groupId>org.springframework.security.oauth</groupId>
 19 |             <artifactId>spring-security-oauth2</artifactId>
 20 |             <version>2.0.4.RELEASE</version>
 21 |         </dependency>
 22 | 
 23 |         <dependency>
 24 |             <groupId>org.springframework.security</groupId>
 25 |             <artifactId>spring-security-taglibs</artifactId>
 26 |             <version>${spring.security.version}</version>
 27 |         </dependency>
 28 | 
 29 |         <dependency>
 30 |             <groupId>org.springframework</groupId>
 31 |             <artifactId>spring-webmvc</artifactId>
 32 |             <version>${spring.version}</version>
 33 |         </dependency>
 34 | 
 35 |         <dependency>
 36 |             <groupId>org.springframework</groupId>
 37 |             <artifactId>spring-web</artifactId>
 38 |             <version>${spring.version}</version>
 39 |         </dependency>
 40 | 
 41 |         <dependency>
 42 |             <groupId>org.springframework</groupId>
 43 |             <artifactId>spring-jdbc</artifactId>
 44 |             <version>${spring.version}</version>
 45 |         </dependency>
 46 | 
 47 |         <dependency>
 48 |             <groupId>org.springframework</groupId>
 49 |             <artifactId>spring-context</artifactId>
 50 |             <version>${spring.version}</version>
 51 |         </dependency>
 52 | 
 53 |         <dependency>
 54 |             <groupId>org.springframework</groupId>
 55 |             <artifactId>spring-aop</artifactId>
 56 |             <version>${spring.version}</version>
 57 |         </dependency>
 58 | 
 59 |         <dependency>
 60 |             <groupId>org.springframework</groupId>
 61 |             <artifactId>spring-expression</artifactId>
 62 |             <version>${spring.version}</version>
 63 |         </dependency>
 64 | 
 65 |         <dependency>
 66 |             <groupId>org.springframework</groupId>
 67 |             <artifactId>spring-tx</artifactId>
 68 |             <version>${spring.version}</version>
 69 |         </dependency>
 70 | 
 71 |         <dependency>
 72 |             <groupId>org.springframework</groupId>
 73 |             <artifactId>spring-test</artifactId>
 74 |             <version>${spring.version}</version>
 75 |             <scope>test</scope>
 76 |         </dependency>
 77 | 
 78 |         <dependency>
 79 |             <groupId>com.fasterxml.jackson.core</groupId>
 80 |             <artifactId>jackson-databind</artifactId>
 81 |             <version>2.3.2</version>
 82 |         </dependency>
 83 | 
 84 |         <dependency>
 85 |             <groupId>javax.servlet</groupId>
 86 |             <artifactId>javax.servlet-api</artifactId>
 87 |             <version>3.0.1</version>
 88 |             <scope>provided</scope>
 89 |         </dependency>
 90 | 
 91 |         <dependency>
 92 |             <groupId>javax.servlet</groupId>
 93 |             <artifactId>jstl</artifactId>
 94 |             <version>1.2</version>
 95 |         </dependency>
 96 | 
 97 |         <dependency>
 98 |             <groupId>org.webjars</groupId>
 99 |             <artifactId>bootstrap</artifactId>
100 |             <version>3.0.3</version>
101 |         </dependency>
102 | 
103 |         <dependency>
104 |             <groupId>junit</groupId>
105 |             <artifactId>junit</artifactId>
106 |             <version>4.11</version>
107 |             <scope>test</scope>
108 |         </dependency>
109 | 
110 |     </dependencies>
111 | 
112 | </project>
113 | 


--------------------------------------------------------------------------------
/client/src/main/java/client/ConferenceException.java:
--------------------------------------------------------------------------------
 1 | package client;
 2 | 
 3 | public class ConferenceException extends Exception {
 4 | 
 5 |   public ConferenceException(String message) {
 6 |     super(message);
 7 |   }
 8 | 
 9 | }
10 | 


--------------------------------------------------------------------------------
/client/src/main/java/client/Session.java:
--------------------------------------------------------------------------------
 1 | package client;
 2 | 
 3 | import javax.xml.bind.annotation.XmlAttribute;
 4 | import javax.xml.bind.annotation.XmlRootElement;
 5 | 
 6 | public class Session {
 7 | 
 8 |     private String id;
 9 |     private String title;
10 |     private String description;
11 | 
12 |     public Session() {
13 |         super();
14 |     }
15 | 
16 |     public Session(String id, String title, String description) {
17 |         this.id = id;
18 |         this.title = title;
19 |         this.description = description;
20 |     }
21 | 
22 |     public String getId() {
23 |         return id;
24 |     }
25 | 
26 |     public void setId(String id) {
27 |         this.id = id;
28 |     }
29 | 
30 |     public String getTitle() {
31 |         return title;
32 |     }
33 | 
34 |     public void setTitle(String title) {
35 |         this.title = title;
36 |     }
37 | 
38 |     public String getDescription() {
39 |         return description;
40 |     }
41 | 
42 |     public void setDescription(String description) {
43 |         this.description = description;
44 |     }
45 | }
46 | 


--------------------------------------------------------------------------------
/client/src/main/java/client/Speaker.java:
--------------------------------------------------------------------------------
 1 | package client;
 2 | 
 3 | import javax.xml.bind.annotation.XmlAttribute;
 4 | import javax.xml.bind.annotation.XmlRootElement;
 5 | import java.io.Serializable;
 6 | 
 7 | public class Speaker implements Serializable {
 8 | 
 9 |     private Long id;
10 |     private String name;
11 |     private String title;
12 |     private String photoUri;
13 |     private String twitter;
14 |     private String bio;
15 |     private String company;
16 | 
17 |     public Speaker() {
18 |         super();
19 |     }
20 | 
21 |     public Speaker(Long id, String name, String title, String photoUri, String twitter, String bio, String company) {
22 |         this.id = id;
23 |         this.name = name;
24 |         this.title = title;
25 |         this.photoUri = photoUri;
26 |         this.twitter = twitter;
27 |         this.bio = bio;
28 |         this.company = company;
29 |     }
30 | 
31 |     public Long getId() {
32 |         return id;
33 |     }
34 | 
35 |     public void setId(Long id) {
36 |         this.id = id;
37 |     }
38 | 
39 |     public String getName() {
40 |         return name;
41 |     }
42 | 
43 |     public void setName(String name) {
44 |         this.name = name;
45 |     }
46 | 
47 |     public String getTitle() {
48 |         return title;
49 |     }
50 | 
51 |     public void setTitle(String title) {
52 |         this.title = title;
53 |     }
54 | 
55 |     public String getPhotoUri() {
56 |         return photoUri;
57 |     }
58 | 
59 |     public void setPhotoUri(String photoUri) {
60 |         this.photoUri = photoUri;
61 |     }
62 | 
63 |     public String getTwitter() {
64 |         return twitter;
65 |     }
66 | 
67 |     public void setTwitter(String twitter) {
68 |         this.twitter = twitter;
69 |     }
70 | 
71 |     public String getBio() {
72 |         return bio;
73 |     }
74 | 
75 |     public void setBio(String bio) {
76 |         this.bio = bio;
77 |     }
78 | 
79 |     public String getCompany() {
80 |         return company;
81 |     }
82 | 
83 |     public void setCompany(String company) {
84 |         this.company = company;
85 |     }
86 | }
87 | 


--------------------------------------------------------------------------------
/client/src/main/java/client/config/ServletInitializer.java:
--------------------------------------------------------------------------------
 1 | package client.config;
 2 | 
 3 | import javax.servlet.ServletContext;
 4 | import javax.servlet.ServletException;
 5 | 
 6 | import org.springframework.web.context.WebApplicationContext;
 7 | import org.springframework.web.context.support.AnnotationConfigWebApplicationContext;
 8 | import org.springframework.web.filter.DelegatingFilterProxy;
 9 | import org.springframework.web.servlet.support.AbstractDispatcherServletInitializer;
10 | 
11 | public class ServletInitializer extends AbstractDispatcherServletInitializer {
12 | 
13 | 	@Override
14 | 	protected WebApplicationContext createServletApplicationContext() {
15 | 		AnnotationConfigWebApplicationContext context = new AnnotationConfigWebApplicationContext();
16 | 		context.register(WebMvcConfig.class);
17 | 		return context;
18 | 	}
19 | 
20 | 	@Override
21 | 	protected String[] getServletMappings() {
22 | 		return new String[] { "/" };
23 | 	}
24 | 
25 | 	@Override
26 | 	protected WebApplicationContext createRootApplicationContext() {
27 | 		return null;
28 | 	}
29 | 
30 | 	@Override
31 | 	public void onStartup(ServletContext servletContext) throws ServletException {
32 | 		super.onStartup(servletContext);
33 | 		registerProxyFilter(servletContext, "oauth2ClientContextFilter");
34 | 	}
35 | 
36 | 	private void registerProxyFilter(ServletContext servletContext, String name) {
37 | 		DelegatingFilterProxy filter = new DelegatingFilterProxy(name);
38 | 		filter.setContextAttribute("org.springframework.web.servlet.FrameworkServlet.CONTEXT.dispatcher");
39 | 		servletContext.addFilter(name, filter).addMappingForUrlPatterns(null, false, "/*");
40 | 	}
41 | 
42 | }
43 | 


--------------------------------------------------------------------------------
/client/src/main/java/client/config/WebMvcConfig.java:
--------------------------------------------------------------------------------
  1 | package client.config;
  2 | 
  3 | import java.util.Arrays;
  4 | import java.util.Collections;
  5 | import java.util.List;
  6 | 
  7 | import javax.annotation.Resource;
  8 | 
  9 | import client.mvc.ConferenceController;
 10 | import org.springframework.beans.factory.annotation.Qualifier;
 11 | import org.springframework.beans.factory.annotation.Value;
 12 | import org.springframework.context.annotation.Bean;
 13 | import org.springframework.context.annotation.Configuration;
 14 | import org.springframework.context.annotation.PropertySource;
 15 | import org.springframework.context.annotation.Scope;
 16 | import org.springframework.context.annotation.ScopedProxyMode;
 17 | import org.springframework.context.support.ConversionServiceFactoryBean;
 18 | import org.springframework.context.support.PropertySourcesPlaceholderConfigurer;
 19 | import org.springframework.http.MediaType;
 20 | import org.springframework.http.converter.BufferedImageHttpMessageConverter;
 21 | import org.springframework.http.converter.HttpMessageConverter;
 22 | import client.converter.AccessTokenRequestConverter;
 23 | import org.springframework.security.oauth2.client.DefaultOAuth2ClientContext;
 24 | import org.springframework.security.oauth2.client.OAuth2RestTemplate;
 25 | import org.springframework.security.oauth2.client.resource.OAuth2ProtectedResourceDetails;
 26 | import org.springframework.security.oauth2.client.token.AccessTokenRequest;
 27 | import org.springframework.security.oauth2.client.token.grant.client.ClientCredentialsResourceDetails;
 28 | import org.springframework.security.oauth2.client.token.grant.code.AuthorizationCodeResourceDetails;
 29 | import org.springframework.security.oauth2.config.annotation.web.configuration.EnableOAuth2Client;
 30 | import org.springframework.web.accept.ContentNegotiationManagerFactoryBean;
 31 | import org.springframework.web.client.RestOperations;
 32 | import org.springframework.web.client.RestTemplate;
 33 | import org.springframework.web.servlet.View;
 34 | import org.springframework.web.servlet.ViewResolver;
 35 | import org.springframework.web.servlet.config.annotation.DefaultServletHandlerConfigurer;
 36 | import org.springframework.web.servlet.config.annotation.EnableWebMvc;
 37 | import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
 38 | import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
 39 | import org.springframework.web.servlet.view.ContentNegotiatingViewResolver;
 40 | import org.springframework.web.servlet.view.InternalResourceViewResolver;
 41 | import org.springframework.web.servlet.view.json.MappingJacksonJsonView;
 42 | 
 43 | @Configuration
 44 | @EnableWebMvc
 45 | @PropertySource("classpath:client.properties")
 46 | public class WebMvcConfig extends WebMvcConfigurerAdapter {
 47 | 
 48 | 	@Bean
 49 | 	public static PropertySourcesPlaceholderConfigurer propertySourcesPlaceholderConfigurer() {
 50 | 		return new PropertySourcesPlaceholderConfigurer();
 51 | 	}
 52 | 
 53 | 	@Bean
 54 | 	public ContentNegotiatingViewResolver contentViewResolver() throws Exception {
 55 | 		ContentNegotiatingViewResolver contentViewResolver = new ContentNegotiatingViewResolver();
 56 | 		ContentNegotiationManagerFactoryBean contentNegotiationManager = new ContentNegotiationManagerFactoryBean();
 57 | 		contentNegotiationManager.addMediaType("json", MediaType.APPLICATION_JSON);
 58 | 		contentViewResolver.setContentNegotiationManager(contentNegotiationManager.getObject());
 59 | 		contentViewResolver.setDefaultViews(Arrays.<View> asList(new MappingJacksonJsonView()));
 60 | 		return contentViewResolver;
 61 | 	}
 62 | 
 63 | 	@Bean
 64 | 	public ViewResolver viewResolver() {
 65 | 		InternalResourceViewResolver viewResolver = new InternalResourceViewResolver();
 66 | 		viewResolver.setPrefix("/WEB-INF/jsp/");
 67 | 		viewResolver.setSuffix(".jsp");
 68 | 		return viewResolver;
 69 | 	}
 70 | 
 71 | 	@Override
 72 | 	public void configureDefaultServletHandling(DefaultServletHandlerConfigurer configurer) {
 73 | 		configurer.enable();
 74 | 	}
 75 | 
 76 |     @Bean
 77 |     public ConferenceController conferenceController(@Qualifier("conferenceRestTemplate")
 78 |                                                          RestOperations restTemplate,
 79 |                                                      @Qualifier("trustedClientRestTemplate")
 80 |                                                          RestOperations trustedClientRestTemplate,
 81 |                                                      @Qualifier("unprotectedRestTemplate")
 82 |                                                          RestOperations unprotectedRestTemplate) {
 83 |         ConferenceController controller = new ConferenceController();
 84 |         controller.setRestTemplate(restTemplate);
 85 |         controller.setTrustedClientRestTemplate(trustedClientRestTemplate);
 86 |         controller.setUnprotectedRestTemplate(unprotectedRestTemplate);
 87 |         return controller;
 88 |     }
 89 | 
 90 | 	@Bean
 91 | 	public ConversionServiceFactoryBean conversionService() {
 92 | 		ConversionServiceFactoryBean conversionService = new ConversionServiceFactoryBean();
 93 | 		conversionService.setConverters(Collections.singleton(new AccessTokenRequestConverter()));
 94 | 		return conversionService;
 95 | 	}
 96 | 
 97 | 	public void addResourceHandlers(ResourceHandlerRegistry registry) {
 98 | 		registry.addResourceHandler("/resources/**").addResourceLocations("/resources/");
 99 | 	}
100 | 
101 | 	@Override
102 | 	public void configureMessageConverters(List<HttpMessageConverter<?>> converters) {
103 | 		converters.add(new BufferedImageHttpMessageConverter());
104 | 	}
105 | 
106 |     @Bean
107 |     public RestTemplate unprotectedRestTemplate() {
108 |         return new RestTemplate();
109 |     }
110 | 
111 | 	@Configuration
112 | 	@EnableOAuth2Client
113 | 	protected static class ResourceConfiguration {
114 | 
115 | 		@Value("${accessTokenUri}")
116 | 		private String accessTokenUri;
117 | 
118 | 		@Value("${userAuthorizationUri}")
119 | 		private String userAuthorizationUri;
120 | 
121 | 		@Resource
122 | 		@Qualifier("accessTokenRequest")
123 | 		private AccessTokenRequest accessTokenRequest;
124 | 
125 | 		@Bean
126 | 		public OAuth2ProtectedResourceDetails conference() {
127 | 			AuthorizationCodeResourceDetails details = new AuthorizationCodeResourceDetails();
128 | 			details.setId("conference/client");
129 | 			details.setClientId("client");
130 | 			details.setClientSecret("secret");
131 | 			details.setAccessTokenUri(accessTokenUri);
132 | 			details.setUserAuthorizationUri(userAuthorizationUri);
133 | 			details.setScope(Arrays.asList("read", "write"));
134 | 			return details;
135 | 		}
136 | 
137 |         @Bean
138 |         @Scope(value = "session", proxyMode = ScopedProxyMode.INTERFACES)
139 |         public OAuth2RestTemplate conferenceRestTemplate() {
140 |             return new OAuth2RestTemplate(conference(), new DefaultOAuth2ClientContext(accessTokenRequest));
141 |         }
142 | 
143 | 
144 | 		@Bean
145 | 		public OAuth2ProtectedResourceDetails conferenceRedirect() {
146 | 			AuthorizationCodeResourceDetails details = new AuthorizationCodeResourceDetails();
147 | 			details.setId("conference/client-redirect");
148 | 			details.setClientId("client-with-redirect");
149 | 			details.setClientSecret("secret");
150 | 			details.setAccessTokenUri(accessTokenUri);
151 | 			details.setUserAuthorizationUri(userAuthorizationUri);
152 | 			details.setScope(Arrays.asList("read", "write"));
153 | 			details.setUseCurrentUri(false);
154 | 			return details;
155 | 		}
156 | 
157 |         @Bean
158 |         @Scope(value = "session", proxyMode = ScopedProxyMode.INTERFACES)
159 |         public OAuth2RestTemplate conferenceRedirectRestTemplate() {
160 |             return new OAuth2RestTemplate(conferenceRedirect(), new DefaultOAuth2ClientContext(accessTokenRequest));
161 |         }
162 | 
163 | 		@Bean
164 | 		public OAuth2ProtectedResourceDetails trusted() {
165 | 			ClientCredentialsResourceDetails details = new ClientCredentialsResourceDetails();
166 | 			details.setId("conference/trusted");
167 | 			details.setClientId("my-client-with-registered-redirect");
168 | 			details.setAccessTokenUri(accessTokenUri);
169 | 			details.setScope(Arrays.asList("trust"));
170 | 			return details;
171 | 		}
172 | 
173 | 		@Bean
174 | 		public OAuth2RestTemplate trustedClientRestTemplate() {
175 | 			return new OAuth2RestTemplate(trusted(), new DefaultOAuth2ClientContext());
176 | 		}
177 | 
178 | 	}
179 | 
180 | }
181 | 


--------------------------------------------------------------------------------
/client/src/main/java/client/converter/AccessTokenRequestConverter.java:
--------------------------------------------------------------------------------
 1 | package client.converter;
 2 | 
 3 | import java.util.Arrays;
 4 | import java.util.HashSet;
 5 | import java.util.Set;
 6 | 
 7 | import org.springframework.core.convert.TypeDescriptor;
 8 | import org.springframework.core.convert.converter.GenericConverter;
 9 | import org.springframework.security.oauth2.client.token.AccessTokenRequest;
10 | 
11 | public class AccessTokenRequestConverter implements GenericConverter {
12 | 
13 | 	private Set<ConvertiblePair> convertibleTypes = new HashSet<ConvertiblePair>(
14 | 			Arrays.asList(new ConvertiblePair(AccessTokenRequest.class, AccessTokenRequest.class)));
15 | 
16 | 	public Set<ConvertiblePair> getConvertibleTypes() {
17 | 		return convertibleTypes;
18 | 	}
19 | 
20 | 	public Object convert(Object source, TypeDescriptor sourceType, TypeDescriptor targetType) {
21 | 		return source;
22 | 	}
23 | 
24 | }
25 | 


--------------------------------------------------------------------------------
/client/src/main/java/client/mvc/ConferenceController.java:
--------------------------------------------------------------------------------
  1 | package client.mvc;
  2 | 
  3 | import client.Session;
  4 | import client.Speaker;
  5 | import org.springframework.http.HttpHeaders;
  6 | import org.springframework.http.HttpStatus;
  7 | import org.springframework.http.MediaType;
  8 | import org.springframework.http.ResponseEntity;
  9 | import org.springframework.http.converter.HttpMessageNotReadableException;
 10 | import org.springframework.stereotype.Controller;
 11 | import org.springframework.ui.Model;
 12 | import org.springframework.web.bind.annotation.PathVariable;
 13 | import org.springframework.web.bind.annotation.RequestMapping;
 14 | import org.springframework.web.client.RestOperations;
 15 | import org.xml.sax.Attributes;
 16 | import org.xml.sax.SAXException;
 17 | import org.xml.sax.helpers.DefaultHandler;
 18 | 
 19 | import javax.imageio.ImageIO;
 20 | import javax.imageio.ImageReadParam;
 21 | import javax.imageio.ImageReader;
 22 | import javax.imageio.stream.MemoryCacheImageInputStream;
 23 | import javax.servlet.UnavailableException;
 24 | import javax.xml.parsers.ParserConfigurationException;
 25 | import javax.xml.parsers.SAXParser;
 26 | import javax.xml.parsers.SAXParserFactory;
 27 | import java.awt.image.BufferedImage;
 28 | import java.io.ByteArrayInputStream;
 29 | import java.io.IOException;
 30 | import java.io.InputStream;
 31 | import java.net.URI;
 32 | import java.util.ArrayList;
 33 | import java.util.Iterator;
 34 | import java.util.List;
 35 | 
 36 | @Controller
 37 | public class ConferenceController {
 38 | 
 39 |     private String speakersListURL = "http://localhost:8080/conference/rest/speakers";
 40 |     private String sessionsListURL = "http://localhost:8080/conference/rest/sessions";
 41 |     private String trustedMessageURL = "http://localhost:8080/conference/rest/trusted/message";
 42 |     private String testMessageURL = "http://localhost:8080/conference/rest/test";
 43 | 
 44 |     private RestOperations restTemplate;
 45 |     private RestOperations trustedClientRestTemplate;
 46 |     private RestOperations unprotectedRestTemplate;
 47 | 
 48 |     @RequestMapping("/conference/speakers")
 49 |     public String getSpeakers(Model model) throws Exception {
 50 |         try {
 51 |             InputStream photosXML = new ByteArrayInputStream(restTemplate.getForObject(
 52 |                     URI.create(speakersListURL), byte[].class));
 53 | 
 54 |             List<Speaker> speakers = new ArrayList<Speaker>();
 55 |             SAXParserFactory parserFactory = SAXParserFactory.newInstance();
 56 |             SAXParser parser = parserFactory.newSAXParser();
 57 |             parser.parse(photosXML, parserSpeaker(speakers));
 58 | 
 59 |             model.addAttribute("speakers", speakers);
 60 | 
 61 |             return "speakers";
 62 |         } catch (Exception e) {
 63 |             throw new IllegalStateException(e);
 64 |         }
 65 |     }
 66 | 
 67 |     @RequestMapping("/conference/sessions")
 68 |     public String getSessions(Model model) throws Exception {
 69 |         try {
 70 |             InputStream photosXML = new ByteArrayInputStream(unprotectedRestTemplate.getForObject(
 71 |                     URI.create(sessionsListURL), byte[].class));
 72 | 
 73 |             List<Session> sessions = new ArrayList<Session>();
 74 |             SAXParserFactory parserFactory = SAXParserFactory.newInstance();
 75 |             SAXParser parser = parserFactory.newSAXParser();
 76 |             parser.parse(photosXML, parserSessions(sessions));
 77 | 
 78 |             model.addAttribute("sessions", sessions);
 79 | 
 80 |             return "sessions";
 81 |         } catch (Exception e) {
 82 |             throw new IllegalStateException(e);
 83 |         }
 84 |     }
 85 | 
 86 | 
 87 | 	@RequestMapping("/conference/trusted/message")
 88 | 	public String trusted(Model model) throws Exception {
 89 |         String message = trustedClientRestTemplate.getForObject(URI.create(trustedMessageURL), String.class);
 90 | 		model.addAttribute("message", message);
 91 | 		return "message";
 92 | 	}
 93 | 
 94 |     @RequestMapping("/conference/test")
 95 |     public String test(Model model) throws Exception {
 96 |         String message = restTemplate.getForObject(URI.create(testMessageURL), String.class);
 97 |         model.addAttribute("message", message);
 98 |         return "message";
 99 |     }
100 | 
101 |     public void setRestTemplate(RestOperations restTemplate) {
102 |         this.restTemplate = restTemplate;
103 |     }
104 | 
105 |     public void setTrustedClientRestTemplate(RestOperations trustedClientRestTemplate) {
106 |         this.trustedClientRestTemplate = trustedClientRestTemplate;
107 |     }
108 | 
109 |     public void setUnprotectedRestTemplate(RestOperations unprotectedRestTemplate) {
110 |         this.unprotectedRestTemplate = unprotectedRestTemplate;
111 |     }
112 | 
113 |     private DefaultHandler parserSpeaker(final List<Speaker> speakers) throws Exception {
114 |         return new DefaultHandler() {
115 |             @Override
116 |             public void startElement(String uri, String localName, String qName, Attributes attributes)
117 |                     throws SAXException {
118 |                 if ("speaker".equals(qName)) {
119 |                     Speaker speaker = new Speaker();
120 |                     speaker.setId(new Long(attributes.getValue("id")));
121 |                     speaker.setName(attributes.getValue("name"));
122 |                     speaker.setCompany(attributes.getValue("company"));
123 |                     speaker.setPhotoUri(attributes.getValue("photoUri"));
124 |                     speaker.setTitle(attributes.getValue("title"));
125 |                     speaker.setTwitter(attributes.getValue("twitter"));
126 |                     speaker.setBio(attributes.getValue("bio"));
127 |                     speakers.add(speaker);
128 |                 }
129 |             }
130 |         };
131 |     }
132 | 
133 |     private DefaultHandler parserSessions(final List<Session> sessions) throws Exception {
134 |         return new DefaultHandler() {
135 |             @Override
136 |             public void startElement(String uri, String localName, String qName, Attributes attributes)
137 |                     throws SAXException {
138 |                 if ("session".equals(qName)) {
139 |                     Session session = new Session();
140 |                     session.setId(attributes.getValue("id"));
141 |                     session.setTitle(attributes.getValue("title"));
142 |                     session.setDescription(attributes.getValue("description"));
143 |                     sessions.add(session);
144 |                 }
145 |             }
146 |         };
147 |     }
148 | 
149 | }
150 | 


--------------------------------------------------------------------------------
/client/src/main/resources/client.properties:
--------------------------------------------------------------------------------
1 | speakersListURL=http://localhost:8080/conference/rest/speakers
2 | sessionListURL=http://localhost:8080/conference/rest/sessions
3 | photoListURL=http://localhost:8080/conference/photos?format=xml
4 | photoURLPattern=http://localhost:8080/conference/photos/%s
5 | trustedMessageURL=http://localhost:8080/conference/photos/trusted/message
6 | accessTokenUri=http://localhost:8080/conference/oauth/token
7 | userAuthorizationUri=http://localhost:8080/conference/oauth/authorize
8 | 


--------------------------------------------------------------------------------
/client/src/main/resources/commons-logging.properties:
--------------------------------------------------------------------------------
1 | org.apache.commons.logging.LogFactory=org.apache.commons.logging.impl.LogFactoryImpl
2 | org.apache.commons.logging.Log=org.apache.commons.logging.impl.SimpleLog


--------------------------------------------------------------------------------
/client/src/main/resources/simplelog.properties:
--------------------------------------------------------------------------------
1 | org.apache.commons.logging.simplelog.defaultlog=info
2 | org.apache.commons.logging.simplelog.showdatetime=true
3 | org.apache.commons.logging.simplelog.dateTimeFormat='tonr2' HH:mm:ss.SSS
4 | org.apache.commons.logging.simplelog.log.org.springframework.security=debug
5 | #org.apache.commons.logging.simplelog.log.org.springframework.security.oauth=info
6 | org.apache.commons.logging.simplelog.log.org.springframework.web=debug
7 | 


--------------------------------------------------------------------------------
/client/src/main/webapp/WEB-INF/jsp/message.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
 2 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 3 | <html xmlns="http://www.w3.org/1999/xhtml">
 4 | <head>
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
 6 |     <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 7 |     <c:url value="/" var="base"/>
 8 |     <link type="text/css" rel="stylesheet"
 9 |           href="${base}webjars/bootstrap/3.0.3/css/bootstrap.min.css"/>
10 |     <script type="text/javascript"
11 |             src="${base}webjars/jquery/1.9.0/jquery.min.js"></script>
12 |     <script type="text/javascript"
13 |             src="${base}webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
14 |     <title>Conference Client</title>
15 | </head>
16 | <body>
17 | <div class="container">
18 |     <h1>Conference Client</h1>
19 | 
20 |     <h2>${message}</h2>
21 | </div>
22 | </body>
23 | </html>


--------------------------------------------------------------------------------
/client/src/main/webapp/WEB-INF/jsp/sessions.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="authz"
 2 |            uri="http://www.springframework.org/security/tags" %>
 3 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
 4 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 5 | <html xmlns="http://www.w3.org/1999/xhtml">
 6 | <head>
 7 |     <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
 8 |     <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 9 |     <c:url value="/" var="base"/>
10 |     <link type="text/css" rel="stylesheet"
11 |           href="${base}webjars/bootstrap/3.0.3/css/bootstrap.min.css"/>
12 |     <script type="text/javascript"
13 |             src="${base}webjars/jquery/1.9.0/jquery.min.js"></script>
14 |     <script type="text/javascript"
15 |             src="${base}webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
16 |     <title>Sessions</title>
17 | </head>
18 | <body>
19 | <div class="container">
20 |     <h1>Sessions</h1>
21 | 
22 |     <div class="panel panel-default">
23 |         <!-- Table -->
24 |         <table class="table">
25 |             <tr>
26 |                 <th>ID</th>
27 |                 <th>Title</th>
28 |             </tr>
29 |             <c:forEach var="session" items="${sessions}">
30 |                 <tr>
31 |                     <td>${session.id}</td>
32 |                     <td>${session.title}</td>
33 |                 </tr>
34 |             </c:forEach>
35 |         </table>
36 |     </div>
37 | </div>
38 | </body>
39 | </html>


--------------------------------------------------------------------------------
/client/src/main/webapp/WEB-INF/jsp/speakers.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="authz"
 2 | 	uri="http://www.springframework.org/security/tags"%>
 3 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
 4 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 5 | <html xmlns="http://www.w3.org/1999/xhtml">
 6 | <head>
 7 | <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 8 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 9 | <c:url value="/" var="base" />
10 | <link type="text/css" rel="stylesheet"
11 | 	href="${base}webjars/bootstrap/3.0.3/css/bootstrap.min.css" />
12 | <script type="text/javascript"
13 | 	src="${base}webjars/jquery/1.9.0/jquery.min.js"></script>
14 | <script type="text/javascript"
15 | 	src="${base}webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
16 | <title>Speakers</title>
17 | </head>
18 | <body>
19 | 	<div class="container">
20 | 		<h1>Speakers</h1>
21 | 
22 |         <div class="panel panel-default">
23 |             <!-- Table -->
24 |             <table class="table">
25 |                 <tr>
26 |                     <th>Photo</th>
27 |                     <th>Name</th>
28 |                     <th>Title</th>
29 |                     <th>Company</th>
30 |                     <th>Twitter</th>
31 |                 </tr>
32 |                 <c:forEach var="speaker" items="${speakers}">
33 |                     <tr>
34 |                         <td><img src="${speaker.photoUri}" height="100" width="100"/></td>
35 |                         <td>${speaker.name}</td>
36 |                         <td>${speaker.title}</td>
37 |                         <td>${speaker.company}</td>
38 |                         <td><a href="${speaker.twitter}">Twitter</a></td>
39 |                     </tr>
40 |                 </c:forEach>
41 |             </table>
42 |         </div>
43 | 	</div>
44 | </body>
45 | </html>


--------------------------------------------------------------------------------
/client/src/main/webapp/index.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
 2 | <!DOCTYPE html>
 3 | <html lang="en">
 4 | <head>
 5 |     <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
 6 |     <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 7 |     <c:url value="/" var="base"/>
 8 |     <link type="text/css" rel="stylesheet"
 9 |           href="${base}webjars/bootstrap/3.0.3/css/bootstrap.min.css"/>
10 |     <script type="text/javascript"
11 |             src="${base}webjars/jquery/1.9.0/jquery.min.js"></script>
12 |     <script type="text/javascript"
13 |             src="${base}webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
14 |     <title>Conference Web Site</title>
15 | </head>
16 | <body>
17 | <div class="container">
18 |     <h1>Conference Web Site</h1>
19 | 
20 |     <p>
21 |         <a href="<c:url value="/conference/speakers"/>">View speakers</a><br/>
22 |         <a href="<c:url value="/conference/sessions"/>">View sessions</a>
23 |     </p>
24 | </div>
25 | 
26 | ${message}
27 | 
28 | </body>
29 | </html>


--------------------------------------------------------------------------------
/client/src/main/webapp/js/libs/jso.js:
--------------------------------------------------------------------------------
  1 | (function(exp, $) {
  2 | 
  3 | 	var 
  4 | 		config = {},
  5 | 		default_lifetime = 3600;
  6 | 
  7 | 
  8 | 	/*
  9 | 	 * ------ SECTION: Utilities
 10 | 	 */
 11 | 
 12 | 	/*
 13 | 	 * Returns a random string used for state
 14 | 	 */
 15 | 	var uuid = function() {
 16 | 		return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {
 17 |     		var r = Math.random()*16|0, v = c == 'x' ? r : (r&0x3|0x8);
 18 | 		    return v.toString(16);
 19 | 		});
 20 | 	}
 21 | 
 22 | 	/* 
 23 | 	 * Takes an URL as input and a params object.
 24 | 	 * Each property in the params is added to the url as query string parameters
 25 | 	 */
 26 | 	var encodeURL= function(url, params) {
 27 | 		var res = url;
 28 | 		var k, i = 0;
 29 | 		for(k in params) {
 30 | 			res += (i++ === 0 ? '?' : '&') + encodeURIComponent(k) + '=' + encodeURIComponent(params[k]);
 31 | 		}
 32 | 		return res;
 33 | 	}
 34 | 
 35 | 	/*
 36 | 	 * Returns epoch, seconds since 1970.
 37 | 	 * Used for calculation of expire times.
 38 | 	 */
 39 | 	var epoch = function() {
 40 | 		return Math.round(new Date().getTime()/1000.0);
 41 | 	}
 42 | 
 43 | 	/* 
 44 | 	 * Redirects the user to a specific URL
 45 | 	 */
 46 | 	var redirect = function(url) {
 47 | 		window.location = url;
 48 | 		// $("body").append('<p><a href="' + url + '">Go here...</a></p>');
 49 | 	}
 50 | 
 51 | 	var parseQueryString = function (qs) {
 52 | 		var e,
 53 | 			a = /\+/g,  // Regex for replacing addition symbol with a space
 54 | 			r = /([^&;=]+)=?([^&;]*)/g,
 55 | 			d = function (s) { return decodeURIComponent(s.replace(a, " ")); },
 56 | 			q = qs,
 57 | 			urlParams = {};
 58 | 
 59 | 		while (e = r.exec(q))
 60 | 		   urlParams[d(e[1])] = d(e[2]);
 61 | 
 62 | 		return urlParams;
 63 | 	}
 64 | 	/*
 65 | 	 * ------ / SECTION: Utilities
 66 | 	 */
 67 | 
 68 | 
 69 | 
 70 | 
 71 | 	/*
 72 | 	 * ------ SECTION: Storage for Tokens and state
 73 | 	 */
 74 | 
 75 | 	/*
 76 | 		saveState stores an object with an Identifier.
 77 | 	TODO: Ensure that both localstorage and JSON encoding has fallbacks for ancient browsers.
 78 | 	In the state object, we put the request object, plus these parameters:
 79 | 		  * restoreHash
 80 | 		  * providerID
 81 | 		  * scopes
 82 | 
 83 | 	 */
 84 | 	var saveState = function(state, obj) {
 85 | 		// console.log("SaveState (" + state+ ")");
 86 | 		localStorage.setItem("state-" + state, JSON.stringify(obj));
 87 | 	};
 88 | 
 89 | 	/*
 90 | 	 * getState returns the state object, but also removes it.
 91 | 	 */
 92 | 	var getState = function(state) {
 93 | 		// console.log("getState (" + state+ ")");
 94 | 		var obj = JSON.parse(localStorage.getItem("state-" + state));
 95 | 		localStorage.removeItem("state-" + state)
 96 | 		return obj;
 97 | 	};
 98 | 
 99 | 
100 | 
101 | 	/*
102 | 	 * Checks if a token, has includes a specific scope.
103 | 	 * If token has no scope at all, false is returned.
104 | 	 */
105 | 	var hasScope = function(token, scope) {
106 | 		var i;
107 | 		if (!token.scopes) return false;
108 | 		for(i = 0; i < token.scopes.length; i++) {
109 | 			if (token.scopes[i] === scope) return true;
110 | 		}
111 | 		return false;
112 | 	};
113 | 
114 | 	/*
115 | 	 * Takes an array of tokens, and removes the ones that
116 | 	 * are expired, and the ones that do not meet a scopes requirement.
117 | 	 */
118 | 	var filterTokens = function(tokens, scopes) {
119 | 		var i, j, 
120 | 			result = [],
121 | 			now = epoch(),
122 | 			usethis;
123 | 
124 | 		if (!scopes) scopes = [];
125 | 
126 | 		for(i = 0; i < tokens.length; i++) {
127 | 			usethis = true;
128 | 
129 | 			// Filter out expired tokens. Tokens that is expired in 1 second from now.
130 | 			if (tokens[i].expires && tokens[i].expires < (now+1)) usethis = false;
131 | 
132 | 			// Filter out this token if not all scope requirements are met
133 | 			for(j = 0; j < scopes.length; j++) {
134 | 				if (!hasScope(tokens[i], scopes[j])) usethis = false;
135 | 			}
136 | 
137 | 			if (usethis) result.push(tokens[i]);
138 | 		}
139 | 		return result;
140 | 	};
141 | 
142 | 	/*
143 | 	 * saveTokens() stores a list of tokens for a provider.
144 | 
145 | 		Usually the tokens stored are a plain Access token plus:
146 | 		  * expires : time that the token expires
147 | 		  * providerID: the provider of the access token?
148 | 		  * scopes: an array with the scopes (not string)
149 | 	 */
150 | 	var saveTokens = function(provider, tokens) {
151 | 		// console.log("Save Tokens (" + provider+ ")");
152 | 		localStorage.setItem("tokens-" + provider, JSON.stringify(tokens));
153 | 	};
154 | 
155 | 	var getTokens = function(provider) {
156 | 		// console.log("Get Tokens (" + provider+ ")");
157 | 		var tokens = JSON.parse(localStorage.getItem("tokens-" + provider));
158 | 		if (!tokens) tokens = [];
159 | 
160 | 		// console.log(tokens)
161 | 		return tokens;
162 | 	};
163 | 	var wipeTokens = function(provider) {
164 | 		localStorage.removeItem("tokens-" + provider);
165 | 	};
166 | 	/*
167 | 	 * Save a single token for a provider.
168 | 	 * This also cleans up expired tokens for the same provider.
169 | 	 */
170 | 	var saveToken = function(provider, token) {
171 | 		var tokens = getTokens(provider);
172 | 		tokens = filterTokens(tokens);
173 | 		tokens.push(token);
174 | 		saveTokens(provider, tokens);
175 | 	};
176 | 
177 | 	/*
178 | 	 * Get a token if exists for a provider with a set of scopes.
179 | 	 * The scopes parameter is OPTIONAL.
180 | 	 */
181 | 	var getToken = function(provider, scopes) {
182 | 		var tokens = getTokens(provider);
183 | 		tokens = filterTokens(tokens, scopes);
184 | 		if (tokens.length < 1) return null;
185 | 		return tokens[0];
186 | 	};
187 | 	/*
188 | 	 * ------ /SECTION: Storage for Tokens and state
189 | 	 */
190 | 
191 | 
192 | 
193 | 
194 | 
195 | 
196 | 	/**
197 | 	 * Check if the hash contains an access token. 
198 | 	 * And if it do, extract the state, compare with
199 | 	 * config, and store the access token for later use.
200 | 	 */
201 | 	var jso_checkfortoken = function() {
202 | 		var 
203 | 			atoken,
204 | 			h = window.location.hash,
205 | 			now = epoch(),
206 | 			state,
207 | 			co;
208 | 
209 | 		/*
210 | 		 * Start with checking if there is a token in the hash
211 | 		 */
212 | 		if (h.length < 2) return;
213 | 		if (h.indexOf("access_token") === -1) return;
214 | 		h = h.substring(1);
215 | 		var atoken = parseQueryString(h);
216 | 
217 | 		if (!atoken.state) return;
218 | 
219 | 		state = getState(atoken.state);
220 | 		if (!state) throw "Could not retrieve state";
221 | 		if (!state.providerID) throw "Could not get providerid from state";
222 | 		if (!config[state.providerID]) throw "Could not retrieve config for this provider.";
223 | 		co = config[state.providerID];
224 | 
225 | 		/*
226 | 		 * Decide when this token should expire.
227 | 		 * Priority fallback:
228 | 		 * 1. Access token expires_in
229 | 		 * 2. Life time in config (may be false = permanent...)
230 | 		 * 3. Specific permanent scope.
231 | 		 * 4. Default library lifetime:
232 | 		 */
233 | 		if (atoken["expires_in"]) {
234 | 			atoken["expires"] = now + atoken["expires_in"];
235 | 		} else if (co["default_lifetime"] === false) {
236 | 			// Token is permanent.
237 | 		} else if (co["default_lifetime"]) {
238 | 			atoken["expires"] = now + co["default_lifetime"];
239 | 		} else if (co["permanent_scope"]) {
240 | 			if (!hasScope(atoken, co["permanent_scope"])) {
241 | 				atoken["expires"] = now + default_lifetime;
242 | 			}
243 | 		} else {
244 | 			atoken["expires"] = now + default_lifetime;
245 | 		}
246 | 
247 | 		/*
248 | 		 * Handle scopes for this token
249 | 		 */
250 | 		if (atoken["scope"]) {
251 | 			atoken["scopes"] = atoken["scope"].split(" ");
252 | 		} else if (state["scopes"]) {
253 | 			atoken["scopes"] = state["scopes"];
254 | 		}
255 | 
256 | 
257 | 		saveToken(state.providerID, atoken);
258 | 
259 | 		if (state.restoreHash) {
260 | 			window.location.hash = state.restoreHash;
261 | 		} else {
262 | 			window.location.hash = '';
263 | 		}
264 | 
265 | 		// console.log(atoken);
266 | 	}
267 | 
268 | 	/*
269 | 	 * A config object contains:
270 | 	 */
271 | 	var jso_authrequest = function(providerid, scopes) {
272 | 
273 | 		var 
274 | 			state,
275 | 			request,
276 | 			authurl,
277 | 			co;
278 | 
279 | 		if (!config[providerid]) throw "Could not find configuration for provider " + providerid;
280 | 		co = config[providerid];
281 | 
282 | 		// console.log("About to send an authorization request to [" + providerid + "]. Config:")
283 | 		// console.log(co);
284 | 
285 | 		state = uuid();
286 | 		request = {
287 | 			"response_type": "token"
288 | 		};
289 | 		request.state = state;
290 | 
291 | 
292 | 		if (co["redirect_uri"]) {
293 | 			request["redirect_uri"] = co["redirect_uri"];
294 | 		}
295 | 		if (co["client_id"]) {
296 | 			request["client_id"] = co["client_id"];
297 | 		}
298 | 		if (scopes) {
299 | 			request["scope"] = scopes.join(" ");
300 | 		}
301 | 
302 | 		authurl = encodeURL(co.authorization, request);
303 | 
304 | 		// We'd like to cache the hash for not loosing Application state. 
305 | 		// With the implciit grant flow, the hash will be replaced with the access
306 | 		// token when we return after authorization.
307 | 		if (window.location.hash) {
308 | 			request["restoreHash"] = window.location.hash;
309 | 		}
310 | 		request["providerID"] = providerid;
311 | 		if (scopes) {
312 | 			request["scopes"] = scopes;
313 | 		}
314 | 
315 | 		// console.log("Saving state [" + state+ "]");
316 | 		// console.log(JSON.parse(JSON.stringify(request)));
317 | 		saveState(state, request);
318 | 		redirect(authurl);
319 | 
320 | 	};
321 | 
322 | 	exp.jso_ensureTokens = function (ensure) {
323 | 		var providerid, scopes, token;
324 | 		for(providerid in ensure) {
325 | 			scopes = undefined;
326 | 			if (ensure[providerid]) scopes = ensure[providerid];
327 | 			token = getToken(providerid, scopes);
328 | 
329 | 			// console.log("Ensure token for provider [" + providerid + "] ");
330 | 			// console.log(token);
331 | 
332 | 			if (token === null) {
333 | 				jso_authrequest(providerid, scopes);
334 | 			}
335 | 		}
336 | 		return true;
337 | 	}
338 | 
339 | 
340 | 	exp.jso_configure = function(c) {
341 | 		config = c;
342 | 		try {
343 | 			jso_checkfortoken();	
344 | 		} catch(e) {
345 | 			console.log("Error when retrieving token from hash: " + e);
346 | 			window.location.hash = "";
347 | 		}
348 | 		
349 | 	}
350 | 
351 | 	exp.jso_dump = function() {
352 | 		var key;
353 | 		for(key in config) {
354 | 			console.log("=====> Processing provider [" + key + "]");
355 | 			console.log("=] Config");
356 | 			console.log(config[key]);
357 | 			console.log("=] Tokens")
358 | 			console.log(getTokens(key));
359 | 		}
360 | 	}
361 | 
362 | 	exp.jso_wipe = function() {
363 | 		var key;
364 | 		for(key in config) {
365 | 			wipeTokens(key);
366 | 		}
367 | 	}
368 | 
369 | 	exp.jso_getToken = function(providerid, scopes) {
370 | 		var token = getToken(providerid, scopes);
371 | 		if (!token) return null;
372 | 		if (!token["access_token"]) return null;
373 | 		return token["access_token"];
374 | 	}
375 | 
376 | 	$.oajax = function(settings) {
377 | 		var 
378 | 			allowia,
379 | 			scopes,
380 | 			token,
381 | 			providerid,
382 | 			co;
383 | 		
384 | 		providerid = settings.jso_provider;
385 | 		allowia = settings.jso_allowia || false;
386 | 		scopes = settings.jso_scopes;
387 | 		token = getToken(providerid, scopes);
388 | 		co = config[providerid];
389 | 
390 | 		if (!token) {
391 | 			if (allowia) {
392 | 				jso_authrequest(providerid, scopes);
393 | 				return;
394 | 			} else {
395 | 				throw "Could not perform AJAX call because no valid tokens was found.";	
396 | 			}
397 | 		}
398 | 
399 | 		if (co["presenttoken"] && co["presenttoken"] === "qs") {
400 | 			// settings.url += ((h.indexOf("?") === -1) ? '?' : '&') + "access_token=" + encodeURIComponent(token["access_token"]);
401 | 			if (!settings.data) settings.data = {};
402 | 			settings.data["access_token"] = token["access_token"];
403 | 		} else {
404 | 			if (!settings.headers) settings.headers = {};
405 | 			settings.headers["Authorization"] = "Bearer " + token["access_token"];
406 | 		}
407 | 
408 | 		$.ajax(settings);
409 | 
410 | 	};
411 | 
412 | 
413 | })(window, jQuery);


--------------------------------------------------------------------------------
/client/src/main/webapp/oauth_error.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="c" uri="http://java.sun.com/jstl/core"%>
 2 | 
 3 | <!DOCTYPE html>
 4 | <html lang="en">
 5 | <head>
 6 | <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 7 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 8 | <c:url value="/" var="base" />
 9 | <link type="text/css" rel="stylesheet"
10 | 	href="${base}webjars/bootstrap/3.0.3/css/bootstrap.min.css" />
11 | <script type="text/javascript"
12 | 	src="${base}webjars/jquery/1.9.0/jquery.min.js"></script>
13 | <script type="text/javascript"
14 | 	src="${base}webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
15 | </head>
16 | <body>
17 | 	<div class="container"></div>
18 | </body>
19 | </html>


--------------------------------------------------------------------------------
/conference/pom.xml:
--------------------------------------------------------------------------------
  1 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
  2 | 
  3 | 	<modelVersion>4.0.0</modelVersion>
  4 | 
  5 | 	<parent>
  6 | 		<groupId>demo</groupId>
  7 | 		<artifactId>oauth2</artifactId>
  8 | 		<version>1.0.0</version>
  9 | 	</parent>
 10 | 
 11 | 	<artifactId>conference</artifactId>
 12 | 	<packaging>war</packaging>
 13 | 	<name>Conference</name>
 14 | 
 15 | 	<dependencies>
 16 | 
 17 | 		<!-- OAuth 2.0 dependencies -->
 18 | 		<dependency>
 19 | 			<groupId>org.springframework.security.oauth</groupId>
 20 | 			<artifactId>spring-security-oauth2</artifactId>
 21 | 			<version>2.0.4.RELEASE</version>
 22 | 		</dependency>
 23 | 
 24 |         <!-- Jersey -->
 25 |         <dependency>
 26 |             <groupId>org.glassfish.jersey.ext</groupId>
 27 |             <artifactId>jersey-spring3</artifactId>
 28 |             <version>2.12</version>
 29 |         </dependency>
 30 | 
 31 |         <dependency>
 32 |             <groupId>org.glassfish.jersey.ext</groupId>
 33 |             <artifactId>jersey-bean-validation</artifactId>
 34 |             <version>2.12</version>
 35 |         </dependency>
 36 | 
 37 | 		<!-- Spring security -->
 38 | 		<dependency>
 39 | 			<groupId>org.springframework.security</groupId>
 40 | 			<artifactId>spring-security-taglibs</artifactId>
 41 | 			<version>${spring.security.version}</version>
 42 |             <exclusions>
 43 |                 <exclusion>
 44 |                     <groupId>org.springframework</groupId>
 45 |                     <artifactId>spring-aop</artifactId>
 46 |                 </exclusion>
 47 |             </exclusions>
 48 | 		</dependency>
 49 | 
 50 |         <dependency>
 51 |             <groupId>org.springframework.security</groupId>
 52 |             <artifactId>spring-security-core</artifactId>
 53 |             <version>${spring.security.version}</version>
 54 |         </dependency>
 55 | 
 56 |         <dependency>
 57 |             <groupId>org.springframework.security</groupId>
 58 |             <artifactId>spring-security-web</artifactId>
 59 |             <version>${spring.security.version}</version>
 60 |         </dependency>
 61 | 
 62 |         <dependency>
 63 |             <groupId>org.springframework.security</groupId>
 64 |             <artifactId>spring-security-config</artifactId>
 65 |             <version>${spring.security.version}</version>
 66 |         </dependency>
 67 | 
 68 | 		<!-- Spring -->
 69 | 		<dependency>
 70 | 			<groupId>org.springframework</groupId>
 71 | 			<artifactId>spring-web</artifactId>
 72 | 			<version>${spring.version}</version>
 73 | 		</dependency>
 74 | 
 75 |         <dependency>
 76 |             <groupId>org.springframework</groupId>
 77 |             <artifactId>spring-aop</artifactId>
 78 |             <version>${spring.version}</version>
 79 |         </dependency>
 80 | 
 81 | 		<dependency>
 82 | 			<groupId>org.springframework</groupId>
 83 | 			<artifactId>spring-jdbc</artifactId>
 84 | 			<version>${spring.version}</version>
 85 | 		</dependency>
 86 | 
 87 | 		<dependency>
 88 | 			<groupId>org.springframework</groupId>
 89 | 			<artifactId>spring-webmvc</artifactId>
 90 | 			<version>${spring.version}</version>
 91 | 		</dependency>
 92 | 
 93 | 		<dependency>
 94 | 			<groupId>org.springframework</groupId>
 95 | 			<artifactId>spring-test</artifactId>
 96 | 			<version>${spring.version}</version>
 97 | 			<scope>test</scope>
 98 | 		</dependency>
 99 | 
100 | 		<dependency>
101 | 			<groupId>org.springframework</groupId>
102 | 			<artifactId>spring-tx</artifactId>
103 | 			<version>${spring.version}</version>
104 | 		</dependency>
105 | 
106 | 		<dependency>
107 | 			<groupId>org.springframework.security</groupId>
108 | 			<artifactId>spring-security-taglibs</artifactId>
109 | 			<version>${spring.security.version}</version>
110 | 		</dependency>
111 | 
112 | 		<dependency>
113 | 			<groupId>com.fasterxml.jackson.core</groupId>
114 | 			<artifactId>jackson-databind</artifactId>
115 | 			<version>2.3.1</version>
116 | 		</dependency>
117 | 
118 | 		<dependency>
119 | 			<groupId>javax.servlet</groupId>
120 | 			<artifactId>javax.servlet-api</artifactId>
121 | 			<version>3.0.1</version>
122 | 			<scope>provided</scope>
123 | 		</dependency>
124 | 
125 | 		<dependency>
126 | 			<groupId>javax.servlet</groupId>
127 | 			<artifactId>jstl</artifactId>
128 | 			<version>1.2</version>
129 | 		</dependency>
130 | 
131 | 		<dependency>
132 | 			<groupId>org.webjars</groupId>
133 | 			<artifactId>bootstrap</artifactId>
134 | 			<version>3.0.3</version>
135 | 		</dependency>
136 | 
137 | 		<dependency>
138 | 			<groupId>junit</groupId>
139 | 			<artifactId>junit</artifactId>
140 | 			<version>4.11</version>
141 | 			<scope>test</scope>
142 | 		</dependency>
143 | 
144 | 		<dependency>
145 | 			<groupId>org.apache.httpcomponents</groupId>
146 | 			<artifactId>httpclient</artifactId>
147 | 			<version>4.3.3</version>
148 | 			<scope>test</scope>
149 | 		</dependency>
150 | 
151 | 	</dependencies>
152 | 
153 | </project>
154 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/Session.java:
--------------------------------------------------------------------------------
 1 | package conference;
 2 | 
 3 | import javax.xml.bind.annotation.XmlAttribute;
 4 | import javax.xml.bind.annotation.XmlRootElement;
 5 | 
 6 | @XmlRootElement
 7 | public class Session {
 8 | 
 9 |     private String id;
10 |     private String title;
11 |     private String description;
12 | 
13 |     public Session() {
14 |         super();
15 |     }
16 | 
17 |     public Session(String id, String title,
18 |                    String description) {
19 |         this.id = id;
20 |         this.title = title;
21 |         this.description = description;
22 |     }
23 | 
24 |     @XmlAttribute
25 |     public String getId() {
26 |         return id;
27 |     }
28 | 
29 |     public void setId(String id) {
30 |         this.id = id;
31 |     }
32 | 
33 |     @XmlAttribute
34 |     public String getTitle() {
35 |         return title;
36 |     }
37 | 
38 |     public void setTitle(String title) {
39 |         this.title = title;
40 |     }
41 | 
42 |     @XmlAttribute
43 |     public String getDescription() {
44 |         return description;
45 |     }
46 | 
47 |     public void setDescription(String description) {
48 |         this.description = description;
49 |     }
50 | }
51 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/Speaker.java:
--------------------------------------------------------------------------------
 1 | package conference;
 2 | 
 3 | import javax.xml.bind.annotation.XmlAttribute;
 4 | import javax.xml.bind.annotation.XmlRootElement;
 5 | import java.io.Serializable;
 6 | 
 7 | @XmlRootElement
 8 | public class Speaker implements Serializable {
 9 | 
10 |     private Long id;
11 |     private String name;
12 |     private String title;
13 |     private String photoUri;
14 |     private String twitter;
15 |     private String bio;
16 |     private String company;
17 | 
18 |     public Speaker() {
19 |         super();
20 |     }
21 | 
22 |     public Speaker(Long id, String name, String title,
23 |                    String photoUri, String twitter,
24 |                    String bio, String company) {
25 |         this.id = id;
26 |         this.name = name;
27 |         this.title = title;
28 |         this.photoUri = photoUri;
29 |         this.twitter = twitter;
30 |         this.bio = bio;
31 |         this.company = company;
32 |     }
33 | 
34 |     @XmlAttribute
35 |     public Long getId() {
36 |         return id;
37 |     }
38 | 
39 |     public void setId(Long id) {
40 |         this.id = id;
41 |     }
42 | 
43 |     @XmlAttribute
44 |     public String getName() {
45 |         return name;
46 |     }
47 | 
48 |     public void setName(String name) {
49 |         this.name = name;
50 |     }
51 | 
52 |     @XmlAttribute
53 |     public String getTitle() {
54 |         return title;
55 |     }
56 | 
57 |     public void setTitle(String title) {
58 |         this.title = title;
59 |     }
60 | 
61 |     @XmlAttribute
62 |     public String getPhotoUri() {
63 |         return photoUri;
64 |     }
65 | 
66 |     public void setPhotoUri(String photoUri) {
67 |         this.photoUri = photoUri;
68 |     }
69 | 
70 |     @XmlAttribute
71 |     public String getTwitter() {
72 |         return twitter;
73 |     }
74 | 
75 |     public void setTwitter(String twitter) {
76 |         this.twitter = twitter;
77 |     }
78 | 
79 |     @XmlAttribute
80 |     public String getBio() {
81 |         return bio;
82 |     }
83 | 
84 |     public void setBio(String bio) {
85 |         this.bio = bio;
86 |     }
87 | 
88 |     @XmlAttribute
89 |     public String getCompany() {
90 |         return company;
91 |     }
92 | 
93 |     public void setCompany(String company) {
94 |         this.company = company;
95 |     }
96 | }
97 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/config/AuthorizationServerConfig.java:
--------------------------------------------------------------------------------
 1 | package conference.config;
 2 | 
 3 | import org.springframework.beans.factory.annotation.Autowired;
 4 | import org.springframework.beans.factory.annotation.Qualifier;
 5 | import org.springframework.beans.factory.annotation.Value;
 6 | import org.springframework.context.annotation.Bean;
 7 | import org.springframework.context.annotation.Configuration;
 8 | import org.springframework.security.authentication.AuthenticationManager;
 9 | import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
10 | import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
11 | import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;
12 | import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer;
13 | import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer;
14 | import org.springframework.security.oauth2.provider.approval.UserApprovalHandler;
15 | import org.springframework.security.oauth2.provider.token.TokenStore;
16 | import org.springframework.security.oauth2.provider.token.store.InMemoryTokenStore;
17 | 
18 | @Configuration
19 | @EnableAuthorizationServer
20 | public class AuthorizationServerConfig extends AuthorizationServerConfigurerAdapter {
21 | 
22 |     private static final String RESOURCE_ID = "conference";
23 | 
24 |     @Autowired
25 |     private TokenStore tokenStore;
26 | 
27 |     @Autowired
28 |     private UserApprovalHandler userApprovalHandler;
29 | 
30 |     @Autowired
31 |     @Qualifier("authenticationManagerBean")
32 |     private AuthenticationManager authenticationManager;
33 | 
34 |     @Value("${redirect:http://localhost:8080/client/conference/redirect}")
35 |     private String redirectUri;
36 | 
37 |     @Override
38 |     public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
39 |         clients.inMemory().withClient("client")
40 |             .resourceIds(RESOURCE_ID)
41 |             .authorizedGrantTypes("authorization_code", "implicit")
42 |             .authorities("ROLE_CLIENT")
43 |             .scopes("read", "write")
44 |             .secret("secret")
45 |         .and()
46 |             .withClient("client-with-redirect")
47 |             .resourceIds(RESOURCE_ID)
48 |             .authorizedGrantTypes("authorization_code", "implicit")
49 |             .authorities("ROLE_CLIENT")
50 |             .scopes("read", "write")
51 |             .secret("secret")
52 |             .redirectUris(redirectUri)
53 |         .and()
54 |             .withClient("my-client-with-registered-redirect")
55 |             .resourceIds(RESOURCE_ID)
56 |             .authorizedGrantTypes("authorization_code", "client_credentials")
57 |             .authorities("ROLE_CLIENT")
58 |             .scopes("read", "trust")
59 |             .redirectUris("http://anywhere?key=value");
60 |     }
61 | 
62 |     @Bean
63 |     public TokenStore tokenStore() {
64 |         return new InMemoryTokenStore();
65 |     }
66 | 
67 |     @Override
68 |     public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
69 |         endpoints.tokenStore(tokenStore).userApprovalHandler(userApprovalHandler)
70 |                 .authenticationManager(authenticationManager);
71 |     }
72 | 
73 |     @Override
74 |     public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception {
75 |         oauthServer.realm("conference/client");
76 |     }
77 | }
78 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/config/MethodSecurityConfig.java:
--------------------------------------------------------------------------------
 1 | package conference.config;
 2 | 
 3 | import org.springframework.beans.factory.annotation.Autowired;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.security.access.expression.method.MethodSecurityExpressionHandler;
 6 | import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
 7 | import org.springframework.security.config.annotation.method.configuration.GlobalMethodSecurityConfiguration;
 8 | import org.springframework.security.oauth2.provider.expression.OAuth2MethodSecurityExpressionHandler;
 9 | 
10 | @Configuration
11 | @EnableGlobalMethodSecurity(prePostEnabled = true, proxyTargetClass = true)
12 | public class MethodSecurityConfig extends GlobalMethodSecurityConfiguration {
13 | 
14 |     @Autowired
15 |     private SecurityConfiguration securityConfig;
16 | 
17 |     @Override
18 |     protected MethodSecurityExpressionHandler createExpressionHandler() {
19 |         return new OAuth2MethodSecurityExpressionHandler();
20 |     }
21 | }
22 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/config/OAuth2ServerConfig.java:
--------------------------------------------------------------------------------
 1 | package conference.config;
 2 | 
 3 | import conference.oauth.UserApprovalHandler;
 4 | import org.springframework.beans.factory.annotation.Autowired;
 5 | import org.springframework.context.annotation.*;
 6 | import org.springframework.core.annotation.Order;
 7 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 8 | import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 9 | import org.springframework.security.oauth2.provider.ClientDetailsService;
10 | import org.springframework.security.oauth2.provider.approval.ApprovalStore;
11 | import org.springframework.security.oauth2.provider.approval.TokenApprovalStore;
12 | import org.springframework.security.oauth2.provider.request.DefaultOAuth2RequestFactory;
13 | import org.springframework.security.oauth2.provider.token.TokenStore;
14 | 
15 | @Configuration
16 | public class OAuth2ServerConfig {
17 | 
18 |     @Autowired
19 |     private ClientDetailsService clientDetailsService;
20 | 
21 |     @Autowired
22 |     private TokenStore tokenStore;
23 | 
24 | 
25 |     @Configuration
26 |     @Order(10)
27 |     protected static class UiResourceConfiguration
28 |             extends WebSecurityConfigurerAdapter {
29 |         @Override
30 |         protected void configure(HttpSecurity http) throws Exception {
31 |             http.requestMatchers().antMatchers("/rest/**")
32 |             .and().authorizeRequests()
33 |                 .antMatchers("/rest/speakers").access("hasRole('ROLE_USER')")
34 |                 .antMatchers("/rest/test").access("hasRole('ROLE_USER')")
35 |                 .antMatchers("/rest/trusted/**").access("hasRole('ROLE_USER')");
36 |         }
37 |     }
38 | 
39 | 
40 |     @Bean
41 |     public ApprovalStore approvalStore() throws Exception {
42 |         TokenApprovalStore store = new TokenApprovalStore();
43 |         store.setTokenStore(tokenStore);
44 |         return store;
45 |     }
46 | 
47 |     @Bean
48 |     @Lazy
49 |     @Scope(proxyMode = ScopedProxyMode.TARGET_CLASS)
50 |     public UserApprovalHandler userApprovalHandler() throws Exception {
51 |         UserApprovalHandler handler = new UserApprovalHandler();
52 |         handler.setApprovalStore(approvalStore());
53 |         handler.setRequestFactory(
54 |                 new DefaultOAuth2RequestFactory(clientDetailsService));
55 |         handler.setClientDetailsService(clientDetailsService);
56 |         handler.setUseApprovalStore(true);
57 |         return handler;
58 |     }
59 | 
60 | }
61 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/config/ResourceServerConfig.java:
--------------------------------------------------------------------------------
 1 | package conference.config;
 2 | 
 3 | import org.springframework.context.annotation.Configuration;
 4 | import org.springframework.http.HttpMethod;
 5 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 6 | import org.springframework.security.oauth2.config.annotation.web.configuration.EnableResourceServer;
 7 | import org.springframework.security.oauth2.config.annotation.web.configuration.ResourceServerConfigurerAdapter;
 8 | import org.springframework.security.oauth2.config.annotation.web.configurers.ResourceServerSecurityConfigurer;
 9 | 
10 | @Configuration
11 | @EnableResourceServer
12 | public class ResourceServerConfig extends ResourceServerConfigurerAdapter {
13 | 
14 |     private static final String RESOURCE_ID = "conference";
15 | 
16 |     @Override
17 |     public void configure(ResourceServerSecurityConfigurer resources) {
18 |         resources.resourceId(RESOURCE_ID);
19 |     }
20 | 
21 |     @Override
22 |     public void configure(HttpSecurity http) throws Exception {
23 |         http.requestMatchers().antMatchers("/rest/**", "/oauth/users/**",
24 |                 "/oauth/clients/**")
25 |         .and().authorizeRequests()
26 |             .antMatchers("/rest/speakers").access("#oauth2.hasScope('read')")
27 |             .antMatchers("/rest/test").access("#oauth2.hasScope('read')")
28 |             .antMatchers("/rest/trusted/**").access("#oauth2.hasScope('trust')")
29 |                 .regexMatchers(HttpMethod.DELETE, "/oauth/users/([^/].*?)/tokens/.*")
30 |                 .access("#oauth2.clientHasRole('ROLE_CLIENT') " +
31 |                         "and (hasRole('ROLE_USER') " +
32 |                         "or #oauth2.isClient()) and #oauth2.hasScope('write')")
33 |             .regexMatchers(HttpMethod.GET, "/oauth/clients/.*")
34 |                 .access("#oauth2.clientHasRole('ROLE_CLIENT') " +
35 |                         "and #oauth2.isClient() " +
36 |                         "and #oauth2.hasScope('read')");
37 |     }
38 | }
39 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/config/SecurityConfiguration.java:
--------------------------------------------------------------------------------
 1 | package conference.config;
 2 | 
 3 | import org.springframework.context.annotation.Bean;
 4 | import org.springframework.context.annotation.Configuration;
 5 | import org.springframework.security.authentication.AuthenticationManager;
 6 | import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
 7 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 8 | import org.springframework.security.config.annotation.web.builders.WebSecurity;
 9 | import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
10 | import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
11 | import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
12 | 
13 | @Configuration
14 | @EnableWebSecurity
15 | public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
16 | 
17 |     @Override
18 |     protected void configure(AuthenticationManagerBuilder auth) throws Exception {
19 |         auth
20 |             .inMemoryAuthentication()
21 |                 .withUser("duke").password("java").roles("USER")
22 |             .and()
23 |                 .withUser("rodrigo").password("123456").roles("USER");
24 |     }
25 | 
26 |     @Override
27 |     public void configure(WebSecurity web) throws Exception {
28 |         web.ignoring().antMatchers("/webjars/**", "/images/**",
29 |                 "/oauth/uncache_approvals", "/oauth/cache_approvals");
30 |     }
31 | 
32 |     @Override
33 |     @Bean
34 |     public AuthenticationManager authenticationManagerBean() throws Exception {
35 |         return super.authenticationManagerBean();
36 |     }
37 | 
38 |     @Override
39 |     protected void configure(HttpSecurity http) throws Exception {
40 |         http.authorizeRequests().antMatchers("/login.jsp").permitAll().and()
41 |             .authorizeRequests()
42 |                 .anyRequest().hasRole("USER")
43 |                 .and()
44 |             .exceptionHandling()
45 |                 .accessDeniedPage("/login.jsp?authorization_error=true")
46 |                 .and()
47 |             .csrf()
48 |                 .requireCsrfProtectionMatcher(
49 |                         new AntPathRequestMatcher("/oauth/authorize")).disable()
50 |             .logout()
51 |                 .logoutSuccessUrl("/index.jsp")
52 |                 .logoutUrl("/logout.do")
53 |                 .and()
54 |             .formLogin()
55 |                 .usernameParameter("j_username")
56 |                 .passwordParameter("j_password")
57 |                 .failureUrl("/login.jsp?authentication_error=true")
58 |                 .loginPage("/login.jsp")
59 |                 .loginProcessingUrl("/login.do");
60 |     }
61 | }
62 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/config/ServletInitializer.java:
--------------------------------------------------------------------------------
 1 | package conference.config;
 2 | 
 3 | import conference.rest.Application;
 4 | import org.glassfish.jersey.servlet.ServletContainer;
 5 | import org.springframework.util.ClassUtils;
 6 | import org.springframework.web.context.WebApplicationContext;
 7 | import org.springframework.web.context.support.AnnotationConfigWebApplicationContext;
 8 | import org.springframework.web.filter.DelegatingFilterProxy;
 9 | import org.springframework.web.servlet.support.AbstractDispatcherServletInitializer;
10 | 
11 | import javax.servlet.ServletContext;
12 | import javax.servlet.ServletException;
13 | import javax.servlet.ServletRegistration;
14 | 
15 | public class ServletInitializer extends AbstractDispatcherServletInitializer {
16 | 
17 |     @Override
18 |     protected WebApplicationContext createServletApplicationContext() {
19 |         AnnotationConfigWebApplicationContext context = new AnnotationConfigWebApplicationContext();
20 |         context.scan(ClassUtils.getPackageName(getClass()));
21 |         return context;
22 |     }
23 | 
24 |     @Override
25 |     protected String[] getServletMappings() {
26 |         return new String[]{"/"};
27 |     }
28 | 
29 |     @Override
30 |     protected WebApplicationContext createRootApplicationContext() {
31 |         return null;
32 |     }
33 | 
34 |     @Override
35 |     public void onStartup(ServletContext servletContext) throws ServletException {
36 |         super.onStartup(servletContext);
37 | 
38 |         // Register Jersey 2.0 servlet
39 |         ServletRegistration.Dynamic servletRegistration = servletContext.addServlet("Jersey", ServletContainer.class.getName());
40 |         servletRegistration.addMapping("/rest/*");
41 |         servletRegistration.setLoadOnStartup(1);
42 |         servletRegistration.setInitParameter("javax.ws.rs.Application", Application.class.getName());
43 | 
44 |         DelegatingFilterProxy filter = new DelegatingFilterProxy("springSecurityFilterChain");
45 |         filter.setContextAttribute("org.springframework.web.servlet.FrameworkServlet.CONTEXT.dispatcher");
46 |         servletContext.addFilter("springSecurityFilterChain", filter).addMappingForUrlPatterns(null, false, "/*");
47 |     }
48 | 
49 | }
50 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/config/WebMvcConfig.java:
--------------------------------------------------------------------------------
 1 | package conference.config;
 2 | 
 3 | import conference.oauth.AccessConfirmationController;
 4 | import conference.oauth.AdminController;
 5 | import conference.oauth.UserApprovalHandler;
 6 | import org.springframework.context.annotation.Bean;
 7 | import org.springframework.context.annotation.Configuration;
 8 | import org.springframework.context.support.PropertySourcesPlaceholderConfigurer;
 9 | import org.springframework.http.MediaType;
10 | import org.springframework.security.oauth2.provider.ClientDetailsService;
11 | import org.springframework.security.oauth2.provider.approval.ApprovalStore;
12 | import org.springframework.security.oauth2.provider.token.ConsumerTokenServices;
13 | import org.springframework.security.oauth2.provider.token.TokenStore;
14 | import org.springframework.web.accept.ContentNegotiationManagerFactoryBean;
15 | import org.springframework.web.servlet.View;
16 | import org.springframework.web.servlet.ViewResolver;
17 | import org.springframework.web.servlet.config.annotation.DefaultServletHandlerConfigurer;
18 | import org.springframework.web.servlet.config.annotation.EnableWebMvc;
19 | import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
20 | import org.springframework.web.servlet.view.ContentNegotiatingViewResolver;
21 | import org.springframework.web.servlet.view.InternalResourceViewResolver;
22 | import org.springframework.web.servlet.view.json.MappingJackson2JsonView;
23 | 
24 | import java.util.Arrays;
25 | 
26 | @Configuration
27 | @EnableWebMvc
28 | public class WebMvcConfig extends WebMvcConfigurerAdapter {
29 | 
30 |     @Bean
31 |     public static PropertySourcesPlaceholderConfigurer propertySourcesPlaceholderConfigurer() {
32 |         return new PropertySourcesPlaceholderConfigurer();
33 |     }
34 | 
35 |     @Bean
36 |     public ContentNegotiatingViewResolver contentViewResolver() throws Exception {
37 |         ContentNegotiationManagerFactoryBean contentNegotiationManager = new ContentNegotiationManagerFactoryBean();
38 |         contentNegotiationManager.addMediaType("json", MediaType.APPLICATION_JSON);
39 | 
40 |         InternalResourceViewResolver viewResolver = new InternalResourceViewResolver();
41 |         viewResolver.setPrefix("/WEB-INF/jsp/");
42 |         viewResolver.setSuffix(".jsp");
43 | 
44 |         MappingJackson2JsonView defaultView = new MappingJackson2JsonView();
45 |         defaultView.setExtractValueFromSingleKeyModel(true);
46 | 
47 |         ContentNegotiatingViewResolver contentViewResolver = new ContentNegotiatingViewResolver();
48 |         contentViewResolver.setContentNegotiationManager(contentNegotiationManager.getObject());
49 |         contentViewResolver.setViewResolvers(Arrays.<ViewResolver>asList(viewResolver));
50 |         contentViewResolver.setDefaultViews(Arrays.<View>asList(defaultView));
51 |         return contentViewResolver;
52 |     }
53 | 
54 |     @Bean
55 |     public AccessConfirmationController accessConfirmationController(ClientDetailsService clientDetailsService, ApprovalStore approvalStore) {
56 |         AccessConfirmationController accessConfirmationController = new AccessConfirmationController();
57 |         accessConfirmationController.setClientDetailsService(clientDetailsService);
58 |         accessConfirmationController.setApprovalStore(approvalStore);
59 |         return accessConfirmationController;
60 |     }
61 | 
62 | 
63 |     @Bean
64 |     public AdminController adminController(TokenStore tokenStore, ConsumerTokenServices consumerTokenServices,
65 |                                            UserApprovalHandler userApprovalHandler) {
66 |         AdminController adminController = new AdminController();
67 |         adminController.setTokenStore(tokenStore);
68 |         adminController.setTokenServices(consumerTokenServices);
69 |         adminController.setUserApprovalHandler(userApprovalHandler);
70 |         return adminController;
71 |     }
72 | 
73 |     @Override
74 |     public void configureDefaultServletHandling(
75 |             DefaultServletHandlerConfigurer configurer) {
76 |         configurer.enable();
77 |     }
78 | }
79 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/oauth/AccessConfirmationController.java:
--------------------------------------------------------------------------------
 1 | package conference.oauth;
 2 | 
 3 | import java.security.Principal;
 4 | import java.util.LinkedHashMap;
 5 | import java.util.Map;
 6 | 
 7 | import org.springframework.security.oauth2.common.util.OAuth2Utils;
 8 | import org.springframework.security.oauth2.provider.AuthorizationRequest;
 9 | import org.springframework.security.oauth2.provider.ClientDetails;
10 | import org.springframework.security.oauth2.provider.ClientDetailsService;
11 | import org.springframework.security.oauth2.provider.approval.Approval;
12 | import org.springframework.security.oauth2.provider.approval.Approval.ApprovalStatus;
13 | import org.springframework.security.oauth2.provider.approval.ApprovalStore;
14 | import org.springframework.stereotype.Controller;
15 | import org.springframework.web.bind.annotation.RequestMapping;
16 | import org.springframework.web.bind.annotation.SessionAttributes;
17 | import org.springframework.web.servlet.ModelAndView;
18 | 
19 | @Controller
20 | @SessionAttributes("authorizationRequest")
21 | public class AccessConfirmationController {
22 | 
23 | 	private ClientDetailsService clientDetailsService;
24 | 
25 | 	private ApprovalStore approvalStore;
26 | 
27 | 	@RequestMapping("/oauth/confirm_access")
28 | 	public ModelAndView getAccessConfirmation(Map<String, Object> model, Principal principal) throws Exception {
29 | 		AuthorizationRequest clientAuth = (AuthorizationRequest) model.remove("authorizationRequest");
30 | 		ClientDetails client = clientDetailsService.loadClientByClientId(clientAuth.getClientId());
31 | 		model.put("auth_request", clientAuth);
32 | 		model.put("client", client);
33 | 		Map<String, String> scopes = new LinkedHashMap<String, String>();
34 | 		for (String scope : clientAuth.getScope()) {
35 | 			scopes.put(OAuth2Utils.SCOPE_PREFIX + scope, "false");
36 | 		}
37 | 		for (Approval approval : approvalStore.getApprovals(principal.getName(), client.getClientId())) {
38 | 			if (clientAuth.getScope().contains(approval.getScope())) {
39 | 				scopes.put(OAuth2Utils.SCOPE_PREFIX + approval.getScope(),
40 | 						approval.getStatus() == ApprovalStatus.APPROVED ? "true" : "false");
41 | 			}
42 | 		}
43 | 		model.put("scopes", scopes);
44 | 		return new ModelAndView("access_confirmation", model);
45 | 	}
46 | 
47 | 	@RequestMapping("/oauth/error")
48 | 	public String handleError(Map<String, Object> model) throws Exception {
49 | 		// We can add more stuff to the model here for JSP rendering. If the client was a machine then
50 | 		// the JSON will already have been rendered.
51 | 		model.put("message", "There was a problem with the OAuth2 protocol");
52 | 		return "oauth_error";
53 | 	}
54 | 
55 | 	public void setClientDetailsService(ClientDetailsService clientDetailsService) {
56 | 		this.clientDetailsService = clientDetailsService;
57 | 	}
58 | 
59 | 	public void setApprovalStore(ApprovalStore approvalStore) {
60 | 		this.approvalStore = approvalStore;
61 | 	}
62 | 
63 | }
64 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/oauth/AdminController.java:
--------------------------------------------------------------------------------
  1 | package conference.oauth;
  2 | 
  3 | import java.security.Principal;
  4 | import java.util.ArrayList;
  5 | import java.util.Collection;
  6 | import java.util.HashMap;
  7 | import java.util.Map;
  8 | 
  9 | import conference.oauth.UserApprovalHandler;
 10 | import org.springframework.http.HttpStatus;
 11 | import org.springframework.http.ResponseEntity;
 12 | import org.springframework.security.access.AccessDeniedException;
 13 | import org.springframework.security.oauth2.common.DefaultOAuth2AccessToken;
 14 | import org.springframework.security.oauth2.common.OAuth2AccessToken;
 15 | import org.springframework.security.oauth2.provider.OAuth2Authentication;
 16 | import org.springframework.security.oauth2.provider.token.ConsumerTokenServices;
 17 | import org.springframework.security.oauth2.provider.token.TokenStore;
 18 | import org.springframework.stereotype.Controller;
 19 | import org.springframework.web.bind.annotation.PathVariable;
 20 | import org.springframework.web.bind.annotation.RequestMapping;
 21 | import org.springframework.web.bind.annotation.RequestMethod;
 22 | import org.springframework.web.bind.annotation.ResponseBody;
 23 | import org.springframework.web.bind.annotation.ResponseStatus;
 24 | 
 25 | @Controller
 26 | public class AdminController {
 27 | 
 28 | 	private ConsumerTokenServices tokenServices;
 29 | 
 30 | 	private TokenStore tokenStore;
 31 | 
 32 | 	private UserApprovalHandler userApprovalHandler;
 33 | 
 34 | 	@RequestMapping("/oauth/cache_approvals")
 35 | 	@ResponseStatus(HttpStatus.NO_CONTENT)
 36 | 	public void startCaching() throws Exception {
 37 | 		userApprovalHandler.setUseApprovalStore(true);
 38 | 	}
 39 | 
 40 | 	@RequestMapping("/oauth/uncache_approvals")
 41 | 	@ResponseStatus(HttpStatus.NO_CONTENT)
 42 | 	public void stopCaching() throws Exception {
 43 | 		userApprovalHandler.setUseApprovalStore(false);
 44 | 	}
 45 | 
 46 | 	@RequestMapping("/oauth/clients/{client}/users/{user}/tokens")
 47 | 	@ResponseBody
 48 | 	public Collection<OAuth2AccessToken> listTokensForUser(@PathVariable String client, @PathVariable String user,
 49 | 			Principal principal) throws Exception {
 50 | 		checkResourceOwner(user, principal);
 51 | 		return enhance(tokenStore.findTokensByClientIdAndUserName(client, user));
 52 | 	}
 53 | 
 54 | 	@RequestMapping(value = "/oauth/users/{user}/tokens/{token}", method = RequestMethod.DELETE)
 55 | 	public ResponseEntity<Void> revokeToken(@PathVariable String user, @PathVariable String token, Principal principal)
 56 | 			throws Exception {
 57 | 		checkResourceOwner(user, principal);
 58 | 		if (tokenServices.revokeToken(token)) {
 59 | 			return new ResponseEntity<Void>(HttpStatus.NO_CONTENT);
 60 | 		}
 61 | 		else {
 62 | 			return new ResponseEntity<Void>(HttpStatus.NOT_FOUND);
 63 | 		}
 64 | 	}
 65 | 
 66 | 	@RequestMapping("/oauth/clients/{client}/tokens")
 67 | 	@ResponseBody
 68 | 	public Collection<OAuth2AccessToken> listTokensForClient(@PathVariable String client) throws Exception {
 69 | 		return enhance(tokenStore.findTokensByClientId(client));
 70 | 	}
 71 | 
 72 | 	private Collection<OAuth2AccessToken> enhance(Collection<OAuth2AccessToken> tokens) {
 73 | 		Collection<OAuth2AccessToken> result = new ArrayList<OAuth2AccessToken>();
 74 | 		for (OAuth2AccessToken prototype : tokens) {
 75 | 			DefaultOAuth2AccessToken token = new DefaultOAuth2AccessToken(prototype);
 76 | 			OAuth2Authentication authentication = tokenStore.readAuthentication(token);
 77 | 			if (authentication == null) {
 78 | 				continue;
 79 | 			}
 80 | 			String clientId = authentication.getOAuth2Request().getClientId();
 81 | 			if (clientId != null) {
 82 | 				Map<String, Object> map = new HashMap<String, Object>(token.getAdditionalInformation());
 83 | 				map.put("client_id", clientId);
 84 | 				token.setAdditionalInformation(map);
 85 | 				result.add(token);
 86 | 			}
 87 | 		}
 88 | 		return result;
 89 | 	}
 90 | 
 91 | 	private void checkResourceOwner(String user, Principal principal) {
 92 | 		if (principal instanceof OAuth2Authentication) {
 93 | 			OAuth2Authentication authentication = (OAuth2Authentication) principal;
 94 | 			if (!authentication.isClientOnly() && !user.equals(principal.getName())) {
 95 | 				throw new AccessDeniedException(String.format("User '%s' cannot obtain tokens for user '%s'",
 96 | 						principal.getName(), user));
 97 | 			}
 98 | 		}
 99 | 	}
100 | 
101 | 	/**
102 | 	 * @param userApprovalHandler the userApprovalHandler to set
103 | 	 */
104 | 	public void setUserApprovalHandler(UserApprovalHandler userApprovalHandler) {
105 | 		this.userApprovalHandler = userApprovalHandler;
106 | 	}
107 | 
108 | 	/**
109 | 	 * @param tokenServices the consumerTokenServices to set
110 | 	 */
111 | 	public void setTokenServices(ConsumerTokenServices tokenServices) {
112 | 		this.tokenServices = tokenServices;
113 | 	}
114 | 
115 | 	/**
116 | 	 * @param tokenStore the tokenStore to set
117 | 	 */
118 | 	public void setTokenStore(TokenStore tokenStore) {
119 | 		this.tokenStore = tokenStore;
120 | 	}
121 | 
122 | }
123 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/oauth/UserApprovalHandler.java:
--------------------------------------------------------------------------------
 1 | package conference.oauth;
 2 | 
 3 | import java.util.Collection;
 4 | 
 5 | import org.springframework.security.core.Authentication;
 6 | import org.springframework.security.oauth2.provider.AuthorizationRequest;
 7 | import org.springframework.security.oauth2.provider.ClientDetails;
 8 | import org.springframework.security.oauth2.provider.ClientDetailsService;
 9 | import org.springframework.security.oauth2.provider.ClientRegistrationException;
10 | import org.springframework.security.oauth2.provider.approval.ApprovalStoreUserApprovalHandler;
11 | 
12 | public class UserApprovalHandler extends ApprovalStoreUserApprovalHandler {
13 | 
14 | 	private boolean useApprovalStore = true;
15 | 
16 | 	private ClientDetailsService clientDetailsService;
17 | 
18 | 	/**
19 | 	 * Service to load client details (optional) for auto approval checks.
20 | 	 * 
21 | 	 * @param clientDetailsService a client details service
22 | 	 */
23 | 	public void setClientDetailsService(ClientDetailsService clientDetailsService) {
24 | 		this.clientDetailsService = clientDetailsService;
25 | 		super.setClientDetailsService(clientDetailsService);
26 | 	}
27 | 
28 | 	/**
29 | 	 * @param useApprovalStore the useTokenServices to set
30 | 	 */
31 | 	public void setUseApprovalStore(boolean useApprovalStore) {
32 | 		this.useApprovalStore = useApprovalStore;
33 | 	}
34 | 
35 | 	/**
36 | 	 * Allows automatic approval for a white list of clients in the implicit grant case.
37 | 	 * 
38 | 	 * @param authorizationRequest The authorization request.
39 | 	 * @param userAuthentication the current user authentication
40 | 	 * 
41 | 	 * @return An updated request if it has already been approved by the current user.
42 | 	 */
43 | 	@Override
44 | 	public AuthorizationRequest checkForPreApproval(AuthorizationRequest authorizationRequest,
45 | 			Authentication userAuthentication) {
46 | 
47 | 		boolean approved = false;
48 | 		// If we are allowed to check existing approvals this will short circuit the decision
49 | 		if (useApprovalStore) {
50 | 			authorizationRequest = super.checkForPreApproval(authorizationRequest, userAuthentication);
51 | 			approved = authorizationRequest.isApproved();
52 | 		}
53 | 		else {
54 | 			if (clientDetailsService != null) {
55 | 				Collection<String> requestedScopes = authorizationRequest.getScope();
56 | 				try {
57 | 					ClientDetails client = clientDetailsService
58 | 							.loadClientByClientId(authorizationRequest.getClientId());
59 | 					for (String scope : requestedScopes) {
60 | 						if (client.isAutoApprove(scope) || client.isAutoApprove("all")) {
61 | 							approved = true;
62 | 							break;
63 | 						}
64 | 					}
65 | 				}
66 | 				catch (ClientRegistrationException e) {
67 | 				}
68 | 			}
69 | 		}
70 | 		authorizationRequest.setApproved(approved);
71 | 
72 | 		return authorizationRequest;
73 | 
74 | 	}
75 | 
76 | }
77 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/rest/Application.java:
--------------------------------------------------------------------------------
 1 | package conference.rest;
 2 | 
 3 | import org.glassfish.jersey.server.ResourceConfig;
 4 | 
 5 | public class Application extends ResourceConfig {
 6 | 
 7 |     public Application() {
 8 |         register(JerseyResource.class);
 9 |         register(ConferenceService.class);
10 |     }
11 | }
12 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/rest/ConferenceService.java:
--------------------------------------------------------------------------------
  1 | package conference.rest;
  2 | 
  3 | import conference.Session;
  4 | import conference.Speaker;
  5 | import org.springframework.security.access.prepost.PreAuthorize;
  6 | import org.springframework.stereotype.Service;
  7 | 
  8 | import javax.annotation.PostConstruct;
  9 | import javax.ws.rs.GET;
 10 | import javax.ws.rs.Path;
 11 | import javax.ws.rs.PathParam;
 12 | import javax.ws.rs.Produces;
 13 | import javax.ws.rs.core.MediaType;
 14 | import java.util.ArrayList;
 15 | import java.util.List;
 16 | 
 17 | @Service
 18 | @Path("/")
 19 | public class ConferenceService {
 20 | 
 21 |     //list of conference speakers available
 22 |     private List<Speaker> speakers;
 23 |     //list of conference sessions available
 24 |     private List<Session> sessions;
 25 | 
 26 |     @GET
 27 |     @Path("/test")
 28 |     @Produces(MediaType.TEXT_PLAIN)
 29 |     public String test() {
 30 |         return "test";
 31 |     }
 32 | 
 33 |     @GET
 34 |     @Path("/speakers")
 35 |     @Produces(MediaType.APPLICATION_XML)
 36 |     public List<Speaker> getSpeakers() {
 37 |         return speakers;
 38 |     }
 39 | 
 40 |     @GET
 41 |     @Path("/speakers/{id}")
 42 |     @Produces(MediaType.APPLICATION_JSON)
 43 |     public Speaker getSpeaker(@PathParam("id") Long id) {
 44 |         for (Speaker s : speakers) {
 45 |             if (s.getId().equals(id)) {
 46 |                 return s;
 47 |             }
 48 |         }
 49 |         return null;
 50 |     }
 51 | 
 52 |     @GET
 53 |     @Path("/sessions")
 54 |     @Produces({MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML})
 55 |     public List<Session> getSessions() {
 56 |         return sessions;
 57 |     }
 58 | 
 59 |     @GET
 60 |     @Path("/sessions/{id}")
 61 |     @Produces({MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML})
 62 |     public Session getSession(String id) {
 63 |         for (Session s : sessions) {
 64 |             if (s.getId().equals(id)) {
 65 |                 return s;
 66 |             }
 67 |         }
 68 |         return null;
 69 |     }
 70 | 
 71 |     @GET
 72 |     @Path("/trusted/message")
 73 |     @Produces(MediaType.TEXT_PLAIN)
 74 |     @PreAuthorize("#oauth2.clientHasRole('ROLE_CLIENT')")
 75 |     public String getTrustedClientMessage() {
 76 |         return "Hello, Trusted Client";
 77 |     }
 78 | 
 79 |     @PostConstruct
 80 |     public void init() {
 81 |         loadSpeakers();
 82 |         loadSessions();
 83 |     }
 84 | 
 85 |     public void loadSpeakers() {
 86 |         if (speakers == null) {
 87 |             //mock all the conference speakers data
 88 |             speakers = new ArrayList<Speaker>();
 89 |             speakers.add(new Speaker(1l, "Reza Rahman", "Java Evangelist",
 90 |                     "http://confoo.ca/images/speakers/2015/reza-rahman.jpg",
 91 |                     "http://twitter.com/reza_rahman", null, "Oracle"));
 92 |             speakers.add(new Speaker(2l, "Hanneli Tavante", "Senior Software Developer",
 93 |                     "http://confoo.ca/images/speakers/2015/hanneli-tavante.jpg",
 94 |                     "http://twitter.com/hannelita", null, "CodeMiner 42"));
 95 |             speakers.add(new Speaker(3l, "Rodrigo Cândido da Silva", "Software Architect",
 96 |                     "http://confoo.ca/images/speakers/2015/rodrigo-candido-da-silva.jpg",
 97 |                     "http://twitter.com/rcandidosilva", null, "Integritas"));
 98 |             speakers.add(new Speaker(4l, "Eduardo Shiota", "Senior Front-end Developer",
 99 |                     "http://confoo.ca/images/speakers/2015/eduardo-shiota-yasuda.jpg",
100 |                     "http://twitter.com/shiota", null, "Booking.com"));
101 |         }
102 |     }
103 | 
104 |     public void loadSessions() {
105 |         if (sessions == null) {
106 |             //mock all the conference sessions data
107 |             sessions = new ArrayList<Session>();
108 |             sessions.add(new Session("CONFOO01", "JMS.Next(): JMS 2 and Beyond", null));
109 |             sessions.add(new Session("CONFOO02", "Java EE 8 - Future, Wishes and Predictions", null));
110 |             sessions.add(new Session("CONFOO03", "Supporting Multi-Tenancy Applications with Java EE", null));
111 |             sessions.add(new Session("CONFOO04", "Modular JavaScript Heaven with AMD and Events", null));
112 | 
113 |         }
114 |     }
115 | 
116 | }
117 | 


--------------------------------------------------------------------------------
/conference/src/main/java/conference/rest/JerseyResource.java:
--------------------------------------------------------------------------------
 1 | package conference.rest;
 2 | 
 3 | import javax.ws.rs.GET;
 4 | import javax.ws.rs.Path;
 5 | import javax.ws.rs.Produces;
 6 | import javax.ws.rs.core.MediaType;
 7 | 
 8 | @Path("hello")
 9 | public class JerseyResource {
10 | 
11 |     @GET
12 |     @Produces(MediaType.TEXT_PLAIN)
13 |     public String getHello() {
14 |         return "hello Jersey";
15 |     }
16 | 
17 | }


--------------------------------------------------------------------------------
/conference/src/main/resources/applicationContext.xml:
--------------------------------------------------------------------------------
1 | <beans xmlns="http://www.springframework.org/schema/beans"
2 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
3 |        xsi:schemaLocation="http://www.springframework.org/schema/beans
4 | 	    http://www.springframework.org/schema/beans/spring-beans.xsd">
5 |     <!-- Empty -->
6 | </beans>
7 | 


--------------------------------------------------------------------------------
/conference/src/main/resources/commons-logging.properties:
--------------------------------------------------------------------------------
1 | org.apache.commons.logging.LogFactory=org.apache.commons.logging.impl.LogFactoryImpl
2 | org.apache.commons.logging.Log=org.apache.commons.logging.impl.SimpleLog


--------------------------------------------------------------------------------
/conference/src/main/resources/sample-oauth.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <beans xmlns="http://www.springframework.org/schema/beans"
  3 |        xmlns:sec="http://www.springframework.org/schema/security"
  4 |        xmlns:oauth="http://www.springframework.org/schema/security/oauth2"
  5 |        xmlns:mvc="http://www.springframework.org/schema/mvc"
  6 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  7 |        xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd
  8 |             http://www.springframework.org/schema/security/oauth2 http://www.springframework.org/schema/security/spring-security-oauth2.xsd
  9 |             http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
 10 |             http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc.xsd">
 11 | 
 12 |     <sec:http pattern="/res/**" create-session="never"
 13 |               access-decision-manager-ref="accessDecisionManager"
 14 |               entry-point-ref="oauthAuthenticationEntryPoint"
 15 |               use-expressions="true" auto-config="true">
 16 |         <sec:anonymous enabled="false"/>
 17 |         <sec:intercept-url pattern="/res/condutor" access="#oauth2.hasScope('read')"/>
 18 |         <sec:intercept-url pattern="/res/logradouro" access="hasRole('ROLE_ADMIN')"/>
 19 |         <sec:intercept-url pattern="/res/veiculo" access="hasRole('ROLE_ADMIN')"/>
 20 |         <sec:intercept-url pattern="/res/infracao" access="hasRole('ROLE_USER')"/>
 21 |         <sec:custom-filter ref="resourceServerFilter" before="PRE_AUTH_FILTER"/>
 22 |         <sec:access-denied-handler ref="oauthAccessDeniedHandler"/>
 23 |         <sec:expression-handler ref="oauthWebExpressionHandler"/>
 24 |     </sec:http>
 25 | 
 26 |     <!-- OAuth2 Authentication Entry Point -->
 27 |     <bean id="oauthAuthenticationEntryPoint"
 28 |           class="org.springframework.security.oauth2.provider.error.OAuth2AuthenticationEntryPoint">
 29 |         <property name="realmName" value="sampleng"/>
 30 |     </bean>
 31 | 
 32 |     <bean id="oauthAccessDeniedHandler"
 33 |           class="org.springframework.security.oauth2.provider.error.OAuth2AccessDeniedHandler"/>
 34 | 
 35 |     <bean id="accessDecisionManager" class="org.springframework.security.access.vote.UnanimousBased">
 36 |         <constructor-arg>
 37 |             <list>
 38 |                 <bean class="org.springframework.security.oauth2.provider.vote.ScopeVoter"/>
 39 |                 <bean class="org.springframework.security.access.vote.AuthenticatedVoter"/>
 40 |                 <bean class="org.springframework.security.web.access.expression.WebExpressionVoter">
 41 |                     <property name="expressionHandler" ref="oauthWebExpressionHandler" />
 42 |                 </bean>
 43 |             </list>
 44 |         </constructor-arg>
 45 |     </bean>
 46 | 
 47 |     <oauth:web-expression-handler id="oauthWebExpressionHandler"/>
 48 | 
 49 | 
 50 |     <!-- OAuth2 Token Generation Services -->
 51 |     <sec:http pattern="/oauth/token" create-session="stateless"
 52 |               authentication-manager-ref="clientAuthenticationManager">
 53 |         <sec:intercept-url pattern="/oauth/token" access="IS_AUTHENTICATED_FULLY"/>
 54 |         <sec:anonymous enabled="false"/>
 55 |         <sec:http-basic entry-point-ref="clientAuthenticationEntryPoint"/>
 56 |         <sec:custom-filter ref="clientCredentialsTokenEndpointFilter" before="BASIC_AUTH_FILTER"/>
 57 |         <sec:access-denied-handler ref="oauthAccessDeniedHandler"/>
 58 |     </sec:http>
 59 | 
 60 |     <bean id="tokenServices" class="org.springframework.security.oauth2.provider.token.DefaultTokenServices">
 61 |         <property name="tokenStore" ref="tokenStore"/>
 62 |         <property name="supportRefreshToken" value="true"/>
 63 |         <property name="accessTokenValiditySeconds" value="300000"/>
 64 |         <property name="clientDetailsService" ref="clientDetails"/>
 65 |     </bean>
 66 | 
 67 |     <bean id="tokenStore" class="org.springframework.security.oauth2.provider.token.store.InMemoryTokenStore"/>
 68 | 
 69 |     <bean id="approvalStore" class="org.springframework.security.oauth2.provider.approval.TokenApprovalStore">
 70 |         <property name="tokenStore" ref="tokenStore"/>
 71 |     </bean>
 72 | 
 73 |     <bean id="userApprovalHandler" class="org.springframework.security.oauth2.provider.approval.ApprovalStoreUserApprovalHandler">
 74 |         <property name="approvalStore" ref="approvalStore"/>
 75 |         <property name="clientDetailsService" ref="clientDetails"/>
 76 |         <property name="requestFactory">
 77 |             <bean class="org.springframework.security.oauth2.provider.request.DefaultOAuth2RequestFactory">
 78 |                 <constructor-arg index="0" ref="clientDetails"/>
 79 |             </bean>
 80 |         </property>
 81 |     </bean>
 82 | 
 83 |     <!-- OAuth2 Authorization Server -->
 84 |     <oauth:authorization-server client-details-service-ref="clientDetails"
 85 |                                 token-services-ref="tokenServices"
 86 |                                 user-approval-handler-ref="userApprovalHandler">
 87 |         <oauth:authorization-code/>
 88 |         <oauth:implicit/>
 89 |         <oauth:refresh-token/>
 90 |         <oauth:client-credentials/>
 91 |         <oauth:password/>
 92 |     </oauth:authorization-server>
 93 | 
 94 |     <!-- OAuth2 Protected Resources Server -->
 95 |     <oauth:resource-server id="resourceServerFilter"
 96 |                            resource-id="sampleng"
 97 |                            token-services-ref="tokenServices"/>
 98 | 
 99 |     <!-- OAuth2 Client Configuration -->
100 |     <bean id="clientCredentialsTokenEndpointFilter"
101 |           class="org.springframework.security.oauth2.provider.client.ClientCredentialsTokenEndpointFilter">
102 |         <property name="authenticationManager" ref="clientAuthenticationManager"/>
103 |     </bean>
104 | 
105 |     <bean id="clientAuthenticationEntryPoint"
106 |           class="org.springframework.security.oauth2.provider.error.OAuth2AuthenticationEntryPoint">
107 |         <property name="realmName" value="sampleng/client"/>
108 |         <property name="typeName" value="Basic"/>
109 |     </bean>
110 | 
111 |     <bean id="clientDetailsUserService"
112 |           class="org.springframework.security.oauth2.provider.client.ClientDetailsUserDetailsService">
113 |         <constructor-arg ref="clientDetails"/>
114 |     </bean>
115 | 
116 |     <!-- OAuth2 Client's Authentication Manager -->
117 |     <sec:authentication-manager id="clientAuthenticationManager">
118 |         <sec:authentication-provider user-service-ref="clientDetailsUserService"/>
119 |     </sec:authentication-manager>
120 | 
121 |     <!-- File based client details access -->
122 |     <oauth:client-details-service id="clientDetails">
123 |         <!-- Web Application clients -->
124 |         <oauth:client client-id="client"
125 |                       secret="secret"
126 |                       authorities="ROLE_APP"
127 |                       authorized-grant-types="authorization_code,implicit"
128 |                       resource-ids="sampleng"
129 |                       scope="read,write,trust"/>
130 | 
131 |         <oauth:client client-id="frontend"
132 |                       secret="secret"
133 |                       authorities="ROLE_APP"
134 |                       authorized-grant-types="password,authorization_code,client_credentials"
135 |                       scope="read,write,trust"/>
136 |     </oauth:client-details-service>
137 | 
138 |     <sec:global-method-security pre-post-annotations="enabled" proxy-target-class="true">
139 |         <sec:expression-handler ref="oauthExpressionHandler"/>
140 |     </sec:global-method-security>
141 | 
142 |     <oauth:expression-handler id="oauthExpressionHandler"/>
143 | 
144 |     <!--
145 |       - Spring MVC Annotation Driven
146 |       - (NOTE: needed to work OAuth2 Token services)
147 |       -->
148 |     <mvc:annotation-driven/>
149 | 
150 |     <mvc:default-servlet-handler/>
151 | 
152 |     <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver">
153 |         <property name="prefix" value="/WEB-INF/jsp/" />
154 |         <property name="suffix" value=".jsp" />
155 |     </bean>
156 | 
157 | </beans>


--------------------------------------------------------------------------------
/conference/src/main/resources/simplelog.properties:
--------------------------------------------------------------------------------
1 | org.apache.commons.logging.simplelog.defaultlog=info
2 | org.apache.commons.logging.simplelog.showdatetime=true
3 | org.apache.commons.logging.simplelog.dateTimeFormat='conference' HH:mm:ss.SSS
4 | #org.apache.commons.logging.simplelog.log.org.springframework.web=debug
5 | org.apache.commons.logging.simplelog.log.org.springframework.security=debug
6 | org.apache.commons.logging.simplelog.log.org.springframework.security.access.method.DelegatingMethodSecurityMetadataSource=info
7 | 


--------------------------------------------------------------------------------
/conference/src/main/webapp/WEB-INF/jsp/access_confirmation.jsp:
--------------------------------------------------------------------------------
 1 | <%@ page import="org.springframework.security.core.AuthenticationException" %>
 2 | <%@ page import="org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter" %>
 3 | <%@ page import="org.springframework.security.oauth2.common.exceptions.UnapprovedClientAuthenticationException" %>
 4 | <%@ taglib prefix="authz" uri="http://www.springframework.org/security/tags" %>
 5 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
 6 | 
 7 | <!DOCTYPE html>
 8 | <html lang="en">
 9 | <head>
10 |     <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
11 |     <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
12 |     <title>Conference Server</title>
13 |     <link type="text/css" rel="stylesheet"
14 |           href="../webjars/bootstrap/3.0.3/css/bootstrap.min.css"/>
15 |     <script type="text/javascript"
16 |             src="../webjars/jquery/1.9.0/jquery.min.js"></script>
17 |     <script type="text/javascript"
18 |             src="../webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
19 | </head>
20 | 
21 | <body>
22 | 
23 | <div class="container">
24 |     <h1>Conference Server</h1>
25 |     <%
26 |         if (session.getAttribute(AbstractAuthenticationProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY) != null
27 |                 && !(session
28 |                 .getAttribute(AbstractAuthenticationProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY) instanceof UnapprovedClientAuthenticationException)) {
29 |     %>
30 |     <div class="error">
31 |         <h2>Woops!</h2>
32 | 
33 |         <p>
34 |             Access could not be granted. (<%=((AuthenticationException) session
35 |                 .getAttribute(AbstractAuthenticationProcessingFilter.SPRING_SECURITY_LAST_EXCEPTION_KEY))
36 |                 .getMessage()%>)
37 |         </p>
38 |     </div>
39 |     <%
40 |         }
41 |     %>
42 |     <c:remove scope="session" var="SPRING_SECURITY_LAST_EXCEPTION"/>
43 | 
44 |     <authz:authorize ifAllGranted="ROLE_USER">
45 |         <p>
46 |             You hereby authorize "<c:out value="${client.clientId}"/>" to access your protected resources.
47 |         </p>
48 | 
49 |         <form id="confirmationForm" name="confirmationForm"
50 |               action="<%=request.getContextPath()%>/oauth/authorize" method="post">
51 |             <input name="user_oauth_approval" value="true" type="hidden"/>
52 |             <ul class="list-unstyled">
53 |                 <c:forEach items="${scopes}" var="scope">
54 |                     <c:set var="approved">
55 |                         <c:if test="${scope.value}"> checked</c:if>
56 |                     </c:set>
57 |                     <c:set var="denied">
58 |                         <c:if test="${!scope.value}"> checked</c:if>
59 |                     </c:set>
60 |                     <li>
61 |                         <div class="form-group">
62 |                                 ${scope.key}: <input type="radio" name="${scope.key}"
63 |                                                      value="true" ${approved}>Approve</input> <input type="radio"
64 |                                                                                                      name="${scope.key}"
65 |                                                                                                      value="false" ${denied}>Deny</input>
66 |                         </div>
67 |                     </li>
68 |                 </c:forEach>
69 |             </ul>
70 |             <button class="btn btn-primary" type="submit">Submit</button>
71 |         </form>
72 |     </authz:authorize>
73 | 
74 | </div>
75 | 
76 | </body>
77 | </html>
78 | 


--------------------------------------------------------------------------------
/conference/src/main/webapp/WEB-INF/jsp/oauth_error.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
 2 | <!DOCTYPE html>
 3 | <html lang="en">
 4 | <head>
 5 | <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 6 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 7 | <title>Conference Server</title>
 8 | <link type="text/css" rel="stylesheet"
 9 | 	href="../webjars/bootstrap/3.0.3/css/bootstrap.min.css" />
10 | <script type="text/javascript" src="../webjars/jquery/1.9.0/jquery.min.js"></script>
11 | <script type="text/javascript"
12 | 	src="../webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
13 | </head>
14 | 
15 | <body>
16 | 
17 | 	<div class="container">
18 | 
19 | 		<h1>Conference Server OAuth2 Error</h1>
20 | 
21 | 		<p>
22 | 			<c:out value="${message}" />
23 | 			(
24 | 			<c:out value="${error.summary}" />
25 | 			)
26 | 		</p>
27 | 		<p>Please go back to your client application and try again, or
28 | 			contact the owner and ask for support</p>
29 | 
30 | 	</div>
31 | 
32 | </body>
33 | </html>
34 | 


--------------------------------------------------------------------------------
/conference/src/main/webapp/index.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="authz"
 2 | 	uri="http://www.springframework.org/security/tags"%>
 3 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
 4 | 
 5 | <!DOCTYPE html>
 6 | <html lang="en">
 7 | <head>
 8 | <meta name="viewport" content="width=device-width, initial-scale=1.0" />
 9 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
10 | <title>Conference</title>
11 | <link type="text/css" rel="stylesheet"
12 | 	href="webjars/bootstrap/3.0.3/css/bootstrap.min.css" />
13 | <script type="text/javascript" src="webjars/jquery/1.9.0/jquery.min.js"></script>
14 | <script type="text/javascript"
15 | 	src="webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
16 | 
17 | <authz:authorize ifAllGranted="ROLE_USER">
18 | 	<script type='text/javascript'>
19 | 		function pictureDisplay(json) {
20 | 			for (var i = 0; i < json.photos.length; i++) {
21 | 				var photo = json.photos[i];
22 | 				document
23 | 						.write('<img src="photos/' + photo.id + '" alt="' + photo.name + '">');
24 | 			}
25 | 		}
26 | 	</script>
27 | </authz:authorize>
28 | </head>
29 | <body>
30 | 
31 | 	<div class="container">
32 | 
33 | 		<h1>Conference Server</h1>
34 | 
35 | 		<authz:authorize ifAllGranted="ROLE_USER">
36 | 			<div class="form-horizontal">
37 | 				<form action="<c:url value="/logout.do"/>" role="form">
38 | 					<button class="btn btn-primary" type="submit">Logout</button>
39 | 				</form>
40 | 			</div>
41 | 		</authz:authorize>
42 | 
43 | 	</div>
44 | 
45 | </body>
46 | </html>
47 | 


--------------------------------------------------------------------------------
/conference/src/main/webapp/login.jsp:
--------------------------------------------------------------------------------
 1 | <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
 2 | 
 3 | <!DOCTYPE html>
 4 | <html lang="en">
 5 | <head>
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
 7 |     <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
 8 |     <title>Conference</title>
 9 |     <link type="text/css" rel="stylesheet"
10 |           href="webjars/bootstrap/3.0.3/css/bootstrap.min.css"/>
11 |     <script type="text/javascript" src="webjars/jquery/1.9.0/jquery.min.js"></script>
12 |     <script type="text/javascript"
13 |             src="webjars/bootstrap/3.0.3/js/bootstrap.min.js"></script>
14 | </head>
15 | 
16 | <body>
17 | 
18 | <div class="container">
19 | 
20 |     <h1>Conference Server</h1>
21 | 
22 |     <c:if test="${not empty param.authentication_error}">
23 |         <h1>Woops!</h1>
24 | 
25 |         <p class="error">Your login attempt was not successful.</p>
26 |     </c:if>
27 |     <c:if test="${not empty param.authorization_error}">
28 |         <h1>Woops!</h1>
29 | 
30 |         <p class="error">You are not permitted to access that resource.</p>
31 |     </c:if>
32 | 
33 |     <div class="form-horizontal">
34 |         <div class="row">
35 |             <div class="col-sm-6 col-md-4">
36 | 
37 |                 <form action="<c:url value="/login.do"/>" method="post" role="form">
38 |                     <div class="form-group">
39 |                         <label for="username">Username:</label> <input id="username"
40 |                                                                        class="form-control" type='text'
41 |                                                                        name='j_username'
42 |                                                                        value="duke"/>
43 |                     </div>
44 |                     <div class="form-group">
45 |                         <label for="password">Password:</label> <input id="password"
46 |                                                                        class="form-control" type='text'
47 |                                                                        name='j_password' value="java"/>
48 |                     </div>
49 |                     <button class="btn btn-primary" type="submit">Login</button>
50 |                     <input type="hidden" name="${_csrf.parameterName}"
51 |                            value="${_csrf.token}"/>
52 |                 </form>
53 |             </div>
54 |         </div>
55 |     </div>
56 | 
57 | </div>
58 | 
59 | 
60 | </body>
61 | </html>
62 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
 1 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
 2 |     <modelVersion>4.0.0</modelVersion>
 3 | 
 4 |     <parent>
 5 |         <groupId>org.springframework.security.oauth</groupId>
 6 |         <artifactId>spring-security-oauth-parent</artifactId>
 7 |         <version>2.0.4.RELEASE</version>
 8 |     </parent>
 9 | 
10 |     <groupId>demo</groupId>
11 |     <artifactId>oauth2</artifactId>
12 |     <name>OAuth2 Demo</name>
13 |     <version>1.0.0</version>
14 |     <packaging>pom</packaging>
15 | 
16 |     <modules>
17 |         <module>conference</module>
18 |         <module>client</module>
19 |     </modules>
20 | 
21 |     <url>http://static.springframework.org/spring-security/oauth/samples</url>
22 | 
23 |     <build>
24 |         <plugins>
25 |             <plugin>
26 |                 <!--skip deploy (this is just a test module) -->
27 |                 <artifactId>maven-deploy-plugin</artifactId>
28 |                 <version>2.6</version>
29 |                 <configuration>
30 |                     <skip>true</skip>
31 |                 </configuration>
32 |             </plugin>
33 |             <plugin>
34 |                 <groupId>org.apache.maven.plugins</groupId>
35 |                 <artifactId>maven-war-plugin</artifactId>
36 |                 <configuration>
37 |                     <failOnMissingWebXml>false</failOnMissingWebXml>
38 |                 </configuration>
39 |             </plugin>
40 |         </plugins>
41 |     </build>
42 | 
43 | 
44 | </project>
45 | 


--------------------------------------------------------------------------------