Skip to content
This repository was archived by the owner on Jan 23, 2025. It is now read-only.

Commit 52e00a7

Browse files
ajeftsajefts
authored
Merge pull request #310 from deedee/refresh_token_logic
add refresh token logic - direct challange service
2 parents 178765c + 8beb1e2 commit 52e00a7

File tree

12 files changed

+341
-42
lines changed

12 files changed

+341
-42
lines changed

‎conf/web/WEB-INF/applicationContext.xml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1555,12 +1555,16 @@
15551555
<bean id="myCreatedChallengesAction"
15561556
class="com.topcoder.direct.services.view.action.my.MyCreatedChallengesAction" scope="prototype">
15571557
<property name="serviceURL" value="@directChallengeServicesApiUrl@"/>
1558+
<property name="ssoLoginUrl" value="@ssoLoginUrl@"/>
1559+
<property name="authorizationURL" value="@authorizationUrl@"/>
15581560
<property name="userService" ref="userService"/>
15591561
</bean>
15601562

15611563
<bean id="myChallengesAction"
15621564
class="com.topcoder.direct.services.view.action.my.MyChallengesAction" scope="prototype">
15631565
<property name="serviceURL" value="@directChallengeServicesApiUrl@"/>
1566+
<property name="ssoLoginUrl" value="@ssoLoginUrl@"/>
1567+
<property name="authorizationURL" value="@authorizationUrl@"/>
15641568
</bean>
15651569

15661570
<bean id="xmlPhaseTemplatePersistence"

‎conf/web/WEB-INF/struts.xml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1613,14 +1613,16 @@
16131613

16141614
<package name="my" namespace="/my" extends="base">
16151615
<action name="createdChallenges" class="myCreatedChallengesAction">
1616-
<result>/WEB-INF/my/myCreatedChallenges.jsp</result>
1616+
<result name="success">/WEB-INF/my/myCreatedChallenges.jsp</result>
1617+
<result name="forward" type="redirect">${ssoLoginUrl}</result>
16171618
</action>
16181619
<action name="getCreatedChallenges" method="getMyCreatedChallenges" class="myCreatedChallengesAction">
16191620
<result name="success" type="json"/>
16201621
<result name="error" type="json"/>
16211622
</action>
16221623
<action name="challenges" class="myChallengesAction">
1623-
<result>/WEB-INF/my/myChallenges.jsp</result>
1624+
<result name="success">/WEB-INF/my/myChallenges.jsp</result>
1625+
<result name="forward" type="redirect">${ssoLoginUrl}</result>
16241626
</action>
16251627
<action name="getMyChallenges" method="getMyChallenges" class="myChallengesAction">
16261628
<result name="success" type="json"/>

‎src/java/main/com/topcoder/direct/services/view/action/ServiceBackendDataTablesAction.java‎

Lines changed: 172 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,20 +1,26 @@
11
/*
2-
* Copyright (C) 2014 TopCoder Inc., All Rights Reserved.
2+
* Copyright (C) 2014 - 2017 TopCoder Inc., All Rights Reserved.
33
*/
44
package com.topcoder.direct.services.view.action;
55

66
import com.topcoder.direct.services.configs.ServerConfiguration;
77
import com.topcoder.direct.services.view.dto.contest.ContestStatus;
8+
import com.topcoder.direct.services.view.dto.my.SingleRestResult;
9+
import com.topcoder.direct.services.view.dto.my.Token;
810
import com.topcoder.direct.services.view.dto.project.ProjectBriefDTO;
11+
import com.topcoder.direct.services.view.exception.JwtAuthenticationException;
912
import com.topcoder.direct.services.view.util.DataProvider;
1013
import com.topcoder.direct.services.view.util.DirectUtils;
1114
import com.topcoder.security.TCSubject;
15+
import org.apache.commons.codec.binary.Base64;
1216
import org.apache.http.HttpEntity;
1317
import org.apache.http.HttpHeaders;
1418
import org.apache.http.HttpResponse;
1519
import org.apache.http.HttpStatus;
1620
import org.apache.http.client.methods.HttpGet;
21+
import org.apache.http.client.methods.HttpPost;
1722
import org.apache.http.client.utils.URIBuilder;
23+
import org.apache.http.entity.StringEntity;
1824
import org.apache.http.impl.client.DefaultHttpClient;
1925
import org.apache.log4j.Logger;
2026
import org.apache.struts2.ServletActionContext;
@@ -27,11 +33,9 @@
2733
import java.net.URI;
2834
import java.net.URISyntaxException;
2935
import java.net.URLEncoder;
36+
import java.nio.charset.StandardCharsets;
3037
import java.text.SimpleDateFormat;
31-
import java.util.ArrayList;
32-
import java.util.LinkedHashMap;
33-
import java.util.List;
34-
import java.util.Map;
38+
import java.util.*;
3539

3640
/**
3741
* <p>
@@ -104,6 +108,11 @@ public abstract class ServiceBackendDataTablesAction extends AbstractAction {
104108
*/
105109
private String serviceURL;
106110

111+
/**
112+
* authorization Url
113+
*/
114+
private String authorizationURL;
115+
107116
/**
108117
* The challenge types options in filter panel
109118
*
@@ -120,7 +129,6 @@ public abstract class ServiceBackendDataTablesAction extends AbstractAction {
120129

121130
/**
122131
* The customer options in filter panel.
123-
*
124132
* @since 1.1
125133
*/
126134
private Map<Long, String> customers;
@@ -188,6 +196,11 @@ public abstract class ServiceBackendDataTablesAction extends AbstractAction {
188196
*/
189197
private String endDateTo;
190198

199+
/**
200+
* ssoLogin Url
201+
*/
202+
private String ssoLoginUrl;
203+
191204
/**
192205
* The max pagination size.
193206
*/
@@ -213,6 +226,11 @@ public abstract class ServiceBackendDataTablesAction extends AbstractAction {
213226
*/
214227
protected static final String ERROR_MESSAGE_FORMAT = "Service URL:%s, HTTP Status Code:%d, Error Message:%s";
215228

229+
/**
230+
* URI params for refresh token
231+
*/
232+
private final String AUTHORIZATION_PARAMS = "{\"param\": {\"externalToken\": \"%s\"}}";
233+
216234
/**
217235
* The jackson object mapping which is used to deserialize json return from API to domain model.
218236
*/
@@ -321,23 +339,26 @@ protected JsonNode getJsonResultFromAPI(URI apiEndPoint) throws Exception {
321339
// specify the get request
322340
HttpGet getRequest = new HttpGet(apiEndPoint);
323341

324-
Cookie jwtCookie = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
342+
Cookie jwtCookieV3 = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
325343
ServerConfiguration.JWT_V3_COOKIE_KEY);
344+
Cookie jwtCookieV2 = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
345+
ServerConfiguration.JWT_COOOKIE_KEY);
326346

327-
if (jwtCookie == null) {
328-
throw new Exception("The jwt cookie for the authorized user could not be loaded");
347+
if (jwtCookieV2 == null) {
348+
throw new JwtAuthenticationException("Please re-login");
329349
}
330350

351+
validateCookieV2V3(jwtCookieV2,jwtCookieV3);
352+
331353
getRequest.setHeader(HttpHeaders.AUTHORIZATION,
332-
"Bearer " + jwtCookie.getValue());
354+
"Bearer " + jwtCookieV3.getValue());
333355

334356
getRequest.addHeader(HttpHeaders.ACCEPT, "application/json");
335357

336358
HttpResponse httpResponse = httpClient.execute(getRequest);
337359
HttpEntity entity = httpResponse.getEntity();
338360

339361
if (httpResponse.getStatusLine().getStatusCode() != HttpStatus.SC_OK) {
340-
341362
throw new Exception(String.format(ERROR_MESSAGE_FORMAT,
342363
getRequest.getURI(),
343364
httpResponse.getStatusLine().getStatusCode(),
@@ -706,4 +727,144 @@ public String getEndDateTo() {
706727
public void setEndDateTo(String endDateTo) {
707728
this.endDateTo = endDateTo;
708729
}
730+
731+
/**
732+
* Getter for {@link #authorizationURL}
733+
* @return authorizationURL
734+
*/
735+
public String getAuthorizationURL() {
736+
return authorizationURL;
737+
}
738+
739+
/**
740+
* Setter for {@link #authorizationURL}
741+
* @param authorizationURL
742+
*/
743+
public void setAuthorizationURL(String authorizationURL) {
744+
this.authorizationURL = authorizationURL;
745+
}
746+
747+
/**
748+
* Get Full SSO login url
749+
* @return
750+
*/
751+
public String getSsoLoginUrl() {
752+
try {
753+
URIBuilder builder = new URIBuilder(ssoLoginUrl);
754+
builder.addParameter("next", ServletActionContext.getRequest().getRequestURL().toString());
755+
return builder.build().toString();
756+
} catch (Exception e) {
757+
return ssoLoginUrl;
758+
}
759+
}
760+
761+
/**
762+
* Setter {@link #ssoLoginUrl}
763+
*
764+
* @param ssoLoginUrl
765+
*/
766+
public void setSsoLoginUrl(String ssoLoginUrl) {
767+
this.ssoLoginUrl = ssoLoginUrl;
768+
}
769+
770+
/**
771+
* Refresh token from API endpoint
772+
*
773+
* @param oldToken
774+
* @return
775+
* @throws Exception
776+
*/
777+
private Token getRefreshTokenFromApi(String oldToken) throws Exception{
778+
DefaultHttpClient httpClient = new DefaultHttpClient();
779+
SingleRestResult<Token> resultToken = null;
780+
try {
781+
URI authorizationUri = new URI(getAuthorizationURL());
782+
HttpPost httpPost = new HttpPost(authorizationUri);
783+
httpPost.addHeader(HttpHeaders.CONTENT_TYPE, "application/json");
784+
785+
StringEntity body = new StringEntity(String.format(AUTHORIZATION_PARAMS, oldToken));
786+
httpPost.setEntity(body);
787+
HttpResponse response = httpClient.execute(httpPost);
788+
HttpEntity entity = response.getEntity();
789+
if (response.getStatusLine().getStatusCode() != HttpStatus.SC_OK) {
790+
throw new JwtAuthenticationException(String.format(ERROR_MESSAGE_FORMAT, authorizationUri,
791+
response.getStatusLine().getStatusCode(),
792+
getErrorMessage(response.getStatusLine().getStatusCode())));
793+
}
794+
795+
JsonNode result = objectMapper.readTree(entity.getContent());
796+
resultToken = objectMapper.readValue(result.get("result"),
797+
objectMapper.getTypeFactory().constructParametricType(SingleRestResult.class, Token.class));
798+
} finally {
799+
httpClient.getConnectionManager().shutdown();
800+
}
801+
return resultToken.getContent();
802+
}
803+
804+
/**
805+
* Verify token.If token expired: refresh it
806+
*
807+
* @param tokenV3
808+
* @param tokenV2
809+
* @return
810+
* @throws JwtAuthenticationException
811+
*/
812+
private String getValidJwtToken(String tokenV3, String tokenV2) throws JwtAuthenticationException {
813+
String[] tokenSplit = tokenV3.split("\\.");
814+
boolean valid = true;
815+
if (tokenSplit.length < 2) valid = false;
816+
817+
JsonNode jsonNode = null;
818+
819+
try {
820+
if (valid) {
821+
StringBuffer payloadStr = new StringBuffer(tokenSplit[1]);
822+
while (payloadStr.length() % 4 != 0) payloadStr.append('=');
823+
String payload = new String(Base64.decodeBase64(payloadStr.toString().getBytes(StandardCharsets.UTF_8)));
824+
825+
jsonNode = objectMapper.readValue(payload.toString(), JsonNode.class);
826+
827+
long exp = jsonNode.get("exp").getLongValue();
828+
Date expDate = new Date(exp * 1000);
829+
logger.info("token expire: " + expDate);
830+
if (expDate.before(new Date())) valid = false;
831+
}
832+
833+
if (!valid) {
834+
logger.info("refresh new token for : " + tokenV2);
835+
Token newToken = getRefreshTokenFromApi(tokenV2);
836+
if (newToken == null || newToken.getToken().isEmpty()) {
837+
throw new JwtAuthenticationException("Invalid refresh token");
838+
}
839+
840+
return newToken.getToken();
841+
}
842+
} catch (Exception e) {
843+
throw new JwtAuthenticationException("Failed to refresh toke through api, Please go to sso login page : " +
844+
getSsoLoginUrl());
845+
}
846+
return tokenV3;
847+
}
848+
849+
/**
850+
* Validate cookie v2 and v3
851+
*
852+
* @param v2 cookie v2
853+
* @param v3 cookie v3
854+
* @throws Exception
855+
*/
856+
protected void validateCookieV2V3(Cookie v2, Cookie v3) throws Exception{
857+
String validToken = null;
858+
String v3Token = null;
859+
if (v3 == null) {
860+
validToken = getRefreshTokenFromApi(v2.getValue()).getToken();
861+
} else {
862+
validToken = getValidJwtToken(v3.getValue(), v2.getValue());
863+
v3Token = v3.getValue();
864+
}
865+
866+
if (!validToken.equals(v3Token)) {
867+
DirectUtils.addDirectCookie(ServletActionContext.getResponse(), ServerConfiguration.JWT_V3_COOKIE_KEY, validToken, -1);
868+
}
869+
}
709870
}

‎src/java/main/com/topcoder/direct/services/view/action/my/MyChallengesAction.java‎

Lines changed: 13 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@
77
import com.topcoder.direct.services.view.action.ServiceBackendDataTablesAction;
88
import com.topcoder.direct.services.view.dto.my.Challenge;
99
import com.topcoder.direct.services.view.dto.my.RestResult;
10+
import com.topcoder.direct.services.view.exception.JwtAuthenticationException;
1011
import com.topcoder.direct.services.view.util.DirectUtils;
1112
import org.apache.struts2.ServletActionContext;
1213
import org.codehaus.jackson.JsonNode;
@@ -54,12 +55,22 @@ public class MyChallengesAction extends ServiceBackendDataTablesAction {
5455
*/
5556
@Override
5657
public String execute() throws Exception {
57-
Cookie jwtCookie = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
58+
Cookie jwtCookieV3 = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
59+
ServerConfiguration.JWT_V3_COOKIE_KEY);
60+
61+
Cookie jwtCookieV2 = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
5862
ServerConfiguration.JWT_COOOKIE_KEY);
5963

60-
if (jwtCookie == null) {
64+
if (jwtCookieV2 == null) {
6165
return ANONYMOUS;
6266
}
67+
68+
try {
69+
validateCookieV2V3(jwtCookieV2,jwtCookieV3);
70+
} catch (JwtAuthenticationException e) {
71+
return "forward";
72+
}
73+
6374
// populate filter data
6475
this.setupFilterPanel();
6576

‎src/java/main/com/topcoder/direct/services/view/action/my/MyCreatedChallengesAction.java‎

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -7,13 +7,13 @@
77
import com.topcoder.direct.services.view.action.ServiceBackendDataTablesAction;
88
import com.topcoder.direct.services.view.dto.my.Challenge;
99
import com.topcoder.direct.services.view.dto.my.RestResult;
10+
import com.topcoder.direct.services.view.exception.JwtAuthenticationException;
1011
import com.topcoder.direct.services.view.util.DirectUtils;
1112
import com.topcoder.service.user.UserService;
1213
import org.apache.struts2.ServletActionContext;
1314
import org.codehaus.jackson.JsonNode;
1415

1516
import javax.servlet.http.Cookie;
16-
import java.net.URLEncoder;
1717
import java.text.DateFormat;
1818
import java.text.NumberFormat;
1919
import java.text.SimpleDateFormat;
@@ -62,13 +62,22 @@ public class MyCreatedChallengesAction extends ServiceBackendDataTablesAction {
6262
*/
6363
@Override
6464
public String execute() throws Exception {
65-
Cookie jwtCookie = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
65+
Cookie jwtCookieV3 = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
66+
ServerConfiguration.JWT_V3_COOKIE_KEY);
67+
68+
Cookie jwtCookieV2 = DirectUtils.getCookieFromRequest(ServletActionContext.getRequest(),
6669
ServerConfiguration.JWT_COOOKIE_KEY);
6770

68-
if (jwtCookie == null) {
71+
if (jwtCookieV2 == null) {
6972
return ANONYMOUS;
7073
}
7174

75+
try {
76+
validateCookieV2V3(jwtCookieV2,jwtCookieV3);
77+
} catch (JwtAuthenticationException e) {
78+
return "forward";
79+
}
80+
7281
// populate filter data
7382
this.setupFilterPanel();
7483

0 commit comments

Comments
 (0)