mirror of https://github.com/jacekkow/keycloak-protocol-cas
| commit | author | age | ||
| 7f7e0c | 1 | package org.keycloak.protocol.cas.endpoints; |
| MP | 2 | |
| 3 | import org.jboss.logging.Logger; | |
| 4 | import org.keycloak.events.Details; | |
| 5 | import org.keycloak.events.Errors; | |
| 6 | import org.keycloak.events.EventBuilder; | |
| 7 | import org.keycloak.events.EventType; | |
| 8 | import org.keycloak.models.ClientModel; | |
| 9 | import org.keycloak.models.RealmModel; | |
| 10 | import org.keycloak.protocol.AuthorizationEndpointBase; | |
| 11 | import org.keycloak.protocol.cas.CASLoginProtocol; | |
| 12 | import org.keycloak.protocol.oidc.utils.RedirectUtils; | |
| 13 | import org.keycloak.services.ErrorPageException; | |
| 14 | import org.keycloak.services.messages.Messages; | |
| 15 | import org.keycloak.services.util.CacheControlUtil; | |
| f75caf | 16 | import org.keycloak.sessions.AuthenticationSessionModel; |
| 7f7e0c | 17 | |
| MP | 18 | import javax.ws.rs.GET; |
| 19 | import javax.ws.rs.core.MultivaluedMap; | |
| 20 | import javax.ws.rs.core.Response; | |
| 21 | ||
| 22 | public class AuthorizationEndpoint extends AuthorizationEndpointBase { | |
| 23 | private static final Logger logger = Logger.getLogger(AuthorizationEndpoint.class); | |
| 24 | ||
| 25 | private ClientModel client; | |
| f75caf | 26 | private AuthenticationSessionModel authenticationSession; |
| 7f7e0c | 27 | private String redirectUri; |
| MP | 28 | |
| 29 | public AuthorizationEndpoint(RealmModel realm, EventBuilder event) { | |
| 30 | super(realm, event); | |
| 31 | event.event(EventType.LOGIN); | |
| 32 | } | |
| 33 | ||
| 34 | @GET | |
| 35 | public Response build() { | |
| dee145 | 36 | MultivaluedMap<String, String> params = session.getContext().getUri().getQueryParameters(); |
| 7f7e0c | 37 | String service = params.getFirst(CASLoginProtocol.SERVICE_PARAM); |
| 7124d2 | 38 | boolean renew = params.containsKey(CASLoginProtocol.RENEW_PARAM); |
| MP | 39 | boolean gateway = params.containsKey(CASLoginProtocol.GATEWAY_PARAM); |
| 7f7e0c | 40 | |
| MP | 41 | checkSsl(); |
| 42 | checkRealm(); | |
| 43 | checkClient(service); | |
| 44 | ||
| 6638b8 | 45 | authenticationSession = createAuthenticationSession(client, null); |
| f75caf | 46 | updateAuthenticationSession(); |
| MP | 47 | |
| 7f7e0c | 48 | // So back button doesn't work |
| MP | 49 | CacheControlUtil.noBackButtonCacheControlHeader(); |
| 50 | ||
| 7124d2 | 51 | if (renew) { |
| f75caf | 52 | authenticationSession.setClientNote(CASLoginProtocol.RENEW_PARAM, "true"); |
| 7124d2 | 53 | } |
| MP | 54 | |
| 7f7e0c | 55 | this.event.event(EventType.LOGIN); |
| dee145 | 56 | return handleBrowserAuthenticationRequest(authenticationSession, new CASLoginProtocol(session, realm, session.getContext().getUri(), headers, event), gateway, false); |
| 7f7e0c | 57 | } |
| MP | 58 | |
| 59 | private void checkClient(String service) { | |
| 60 | if (service == null) { | |
| 61 | event.error(Errors.INVALID_REQUEST); | |
| 6638b8 | 62 | throw new ErrorPageException(session, Response.Status.BAD_REQUEST, Messages.MISSING_PARAMETER, CASLoginProtocol.SERVICE_PARAM); |
| 7f7e0c | 63 | } |
| MP | 64 | |
| 65 | client = realm.getClients().stream() | |
| 66 | .filter(c -> CASLoginProtocol.LOGIN_PROTOCOL.equals(c.getProtocol())) | |
| 019db5 | 67 | .filter(c -> RedirectUtils.verifyRedirectUri(session, service, c) != null) |
| 7f7e0c | 68 | .findFirst().orElse(null); |
| MP | 69 | if (client == null) { |
| 70 | event.error(Errors.CLIENT_NOT_FOUND); | |
| 6638b8 | 71 | throw new ErrorPageException(session, Response.Status.BAD_REQUEST, Messages.CLIENT_NOT_FOUND); |
| 7f7e0c | 72 | } |
| MP | 73 | |
| 74 | if (!client.isEnabled()) { | |
| 75 | event.error(Errors.CLIENT_DISABLED); | |
| 6638b8 | 76 | throw new ErrorPageException(session, Response.Status.BAD_REQUEST, Messages.CLIENT_DISABLED); |
| 7f7e0c | 77 | } |
| MP | 78 | |
| 019db5 | 79 | redirectUri = RedirectUtils.verifyRedirectUri(session, service, client); |
| 7f7e0c | 80 | |
| MP | 81 | event.client(client.getClientId()); |
| 82 | event.detail(Details.REDIRECT_URI, redirectUri); | |
| 83 | ||
| 84 | session.getContext().setClient(client); | |
| 85 | } | |
| 86 | ||
| f75caf | 87 | private void updateAuthenticationSession() { |
| MP | 88 | authenticationSession.setProtocol(CASLoginProtocol.LOGIN_PROTOCOL); |
| 89 | authenticationSession.setRedirectUri(redirectUri); | |
| 90 | authenticationSession.setAction(AuthenticationSessionModel.Action.AUTHENTICATE.name()); | |
| 7f7e0c | 91 | } |
| MP | 92 | } |
