org.broadleafcommerce.authapi.service

Class JWTAuthenticationTokenServiceImpl

java.lang.Object

org.broadleafcommerce.authapi.service.JWTAuthenticationTokenServiceImpl

All Implemented Interfaces:

AuthenticationTokenService

@Service(value="blJWTTokenService")
 @ConditionalOnProperty(name="blc.auth.jwt.enabled")
public class JWTAuthenticationTokenServiceImpl
extends Object
implements AuthenticationTokenService

Author:

Nick Crum ncrum

Field Summary

Fields

Modifier and Type	Field and Description
protected org.springframework.core.env.Environment	environment

Constructor Summary

Constructors

Constructor and Description
JWTAuthenticationTokenServiceImpl(org.springframework.core.env.Environment environment)

Method Summary

Modifier and Type	Method and Description
javax.servlet.http.Cookie	buildRefreshTokenCookie(String refreshToken)
String	generateAuthenticationToken(Long userId, String username, boolean isCrossAppAuth, String commaSeparatedAuthorities) This method is responsible for taking the token subject and generating the correct JWT authentication token.
String	generateCustomerToken(Long customerId)
String	generateRefreshToken(Long userId, String username, boolean isCrossAppAuth, String commaSeparatedAuthorities)
protected String	getAuthenticationSecret()
protected Long	getAuthenticationTokenExpirationTime()
protected String	getCustomerSecret()
protected Long	getCustomerTokenExpirationTime()
protected String	getRefreshSecret()
protected int	getRefreshTokenCookieMaxAge()
protected String	getRefreshTokenCookieName()
protected Long	getRefreshTokenExpirationTime()
protected boolean	isRefreshTokenSecure()
ApiUserDTO	parseAccessToken(String token)
Long	parseCustomerToken(String customerToken)
ApiUserDTO	parseRefreshToken(String token)
protected ApiUserDTO	parseTokenUsingSecret(String token, String secret)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

environment

protected final org.springframework.core.env.Environment environment

Constructor Detail

JWTAuthenticationTokenServiceImpl

@Autowired
public JWTAuthenticationTokenServiceImpl(org.springframework.core.env.Environment environment)

Method Detail

parseAccessToken

public ApiUserDTO parseAccessToken(String token)
                            throws io.jsonwebtoken.ExpiredJwtException

Specified by:

parseAccessToken in interface AuthenticationTokenService

Throws:

io.jsonwebtoken.ExpiredJwtException

parseRefreshToken

public ApiUserDTO parseRefreshToken(String token)
                             throws io.jsonwebtoken.ExpiredJwtException

Specified by:

parseRefreshToken in interface AuthenticationTokenService

Throws:

io.jsonwebtoken.ExpiredJwtException

parseTokenUsingSecret

protected ApiUserDTO parseTokenUsingSecret(String token,
                                           String secret)

generateAuthenticationToken

public String generateAuthenticationToken(Long userId,
                                          String username,
                                          boolean isCrossAppAuth,
                                          String commaSeparatedAuthorities)

This method is responsible for taking the token subject and generating the correct JWT authentication token.

Specified by:

generateAuthenticationToken in interface AuthenticationTokenService

Returns:

the JWT token

generateRefreshToken

public String generateRefreshToken(Long userId,
                                   String username,
                                   boolean isCrossAppAuth,
                                   String commaSeparatedAuthorities)

Specified by:

generateRefreshToken in interface AuthenticationTokenService

parseCustomerToken

public Long parseCustomerToken(String customerToken)

Specified by:

parseCustomerToken in interface AuthenticationTokenService

generateCustomerToken

public String generateCustomerToken(Long customerId)

Specified by:

generateCustomerToken in interface AuthenticationTokenService

buildRefreshTokenCookie

public javax.servlet.http.Cookie buildRefreshTokenCookie(String refreshToken)

Specified by:

buildRefreshTokenCookie in interface AuthenticationTokenService

getAuthenticationSecret

protected String getAuthenticationSecret()

getRefreshTokenExpirationTime

protected Long getRefreshTokenExpirationTime()

getRefreshSecret

protected String getRefreshSecret()

getRefreshTokenCookieName

protected String getRefreshTokenCookieName()

getRefreshTokenCookieMaxAge

protected int getRefreshTokenCookieMaxAge()

isRefreshTokenSecure

protected boolean isRefreshTokenSecure()

getAuthenticationTokenExpirationTime

protected Long getAuthenticationTokenExpirationTime()

getCustomerTokenExpirationTime

protected Long getCustomerTokenExpirationTime()

getCustomerSecret

protected String getCustomerSecret()