github
/
OpenID-Connect-Java-Spring-Server
mirror of https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Updated UMA's ExternalAuthoritiesMapper to new OIDCAuthoritiesMapper class, closes #850

pull/820/merge
Justin Richer 2015-06-23 20:49:03 -04:00
parent 445099fc74
commit fdf8c4d620
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
uma-server/src/main/java/org/mitre/uma/util/ExternalLoginAuthoritiesMapper.java
View File

@ -18,27 +18,29 @@
package org.mitre.uma.util; package org.mitre.uma.util;
import java.util.Collection; import java.util.Collection;
import java.util.Set;
import org.mitre.openid.connect.client.OIDCAuthoritiesMapper;
import org.mitre.openid.connect.model.UserInfo;
import org.springframework.security.core.GrantedAuthority; import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority; import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.authority.mapping.GrantedAuthoritiesMapper;
import com.google.common.collect.Sets; import com.google.common.collect.Sets;
import com.nimbusds.jwt.JWT;
/** /**
* Utility class to map all external logins to the ROLE_EXTERNAL_USER authority
* to prevent them from accessing other parts of the server.
*
* @author jricher * @author jricher
* *
*/ */
public class ExternalLoginAuthoritiesMapper implements GrantedAuthoritiesMapper { public class ExternalLoginAuthoritiesMapper implements OIDCAuthoritiesMapper {
private static final GrantedAuthority ROLE_EXTERNAL_USER = new SimpleGrantedAuthority("ROLE_EXTERNAL_USER"); private static final GrantedAuthority ROLE_EXTERNAL_USER = new SimpleGrantedAuthority("ROLE_EXTERNAL_USER");
@Override @Override
public Collection<? extends GrantedAuthority> mapAuthorities(Collection<? extends GrantedAuthority> authorities) { public Collection<? extends GrantedAuthority> mapAuthorities(JWT idToken, UserInfo userInfo) {
Set<GrantedAuthority> out = Sets.newHashSet(authorities); return Sets.newHashSet(ROLE_EXTERNAL_USER);
out.add(ROLE_EXTERNAL_USER);
return out;
} }
} }