-
Notifications
You must be signed in to change notification settings - Fork 10
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Replace LocalIdentityAuthentication by SelfManagedAuthentication
- Loading branch information
Showing
4 changed files
with
106 additions
and
5 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
96 changes: 96 additions & 0 deletions
96
src/main/java/io/camunda/operate/auth/SelfManagedAuthentication.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,96 @@ | ||
package io.camunda.operate.auth; | ||
|
||
import java.io.BufferedReader; | ||
import java.io.IOException; | ||
import java.io.InputStreamReader; | ||
import java.io.UnsupportedEncodingException; | ||
import java.net.HttpURLConnection; | ||
import java.net.URL; | ||
import java.net.URLEncoder; | ||
import java.nio.charset.StandardCharsets; | ||
|
||
import com.fasterxml.jackson.databind.JsonNode; | ||
|
||
import io.camunda.operate.CamundaOperateClient; | ||
import io.camunda.operate.exception.OperateException; | ||
import io.camunda.operate.util.JsonUtils; | ||
|
||
/** | ||
* This Class is used to authenticate against a Self-Managed Camunda 8 Operate. | ||
*/ | ||
public class SelfManagedAuthentication extends JwtAuthentication { | ||
|
||
private String clientId; | ||
private String clientSecret; | ||
private String keycloakUrl = "http://localhost:18080"; | ||
private String keycloakRealm = "camunda-platform"; | ||
|
||
public SelfManagedAuthentication() { | ||
} | ||
|
||
public SelfManagedAuthentication(String clientId, String clientSecret) { | ||
this.clientId = clientId; | ||
this.clientSecret = clientSecret; | ||
} | ||
|
||
public SelfManagedAuthentication clientId(String clientId) { | ||
this.clientId = clientId; | ||
return this; | ||
} | ||
public SelfManagedAuthentication clientSecret(String clientSecret) { | ||
this.clientSecret = clientSecret; | ||
return this; | ||
} | ||
public SelfManagedAuthentication keycloakUrl(String url) { | ||
this.keycloakUrl = url; | ||
return this; | ||
} | ||
public SelfManagedAuthentication keycloakRealm(String keycloakRealm) { | ||
this.keycloakRealm = keycloakRealm; | ||
return this; | ||
} | ||
|
||
private String encode(String value) throws UnsupportedEncodingException { | ||
return URLEncoder.encode(value, StandardCharsets.UTF_8.toString()); | ||
} | ||
|
||
private String getConnectionString() throws UnsupportedEncodingException{ | ||
return "grant_type=client_credentials&client_id="+encode(clientId)+"&client_secret="+encode(clientSecret); | ||
} | ||
|
||
@Override | ||
public void authenticate(CamundaOperateClient client) throws OperateException { | ||
try { | ||
URL url = new URL(this.keycloakUrl+"/auth/realms/"+keycloakRealm+"/protocol/openid-connect/token"); | ||
HttpURLConnection conn = (HttpURLConnection) url.openConnection(); | ||
conn.setUseCaches(false); | ||
conn.setConnectTimeout(1000 * 5); | ||
conn.setDoOutput(true); | ||
conn.setDoInput(true); | ||
conn.setRequestMethod("POST"); | ||
conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded"); | ||
|
||
String data = getConnectionString(); | ||
|
||
conn.getOutputStream().write(data.getBytes(StandardCharsets.UTF_8)); | ||
conn.connect(); | ||
|
||
if (conn.getResponseCode() == HttpURLConnection.HTTP_OK) { | ||
try (BufferedReader br = new BufferedReader(new InputStreamReader(conn.getInputStream(), "utf-8"))) { | ||
StringBuilder response = new StringBuilder(); | ||
String responseLine = null; | ||
while ((responseLine = br.readLine()) != null) { | ||
response.append(responseLine.trim()); | ||
} | ||
JsonNode responseBody = JsonUtils.toJsonNode(response.toString()); | ||
String token = responseBody.get("access_token").asText(); | ||
setToken(client, token); | ||
} | ||
} else { | ||
throw new OperateException("Error "+conn.getResponseCode()+" obtaining access token : "+conn.getResponseMessage()); | ||
} | ||
} catch (IOException e) { | ||
throw new OperateException(e); | ||
} | ||
} | ||
} |