55 lines
2.0 KiB
Java
55 lines
2.0 KiB
Java
/*
|
|
* mxisd - Matrix Identity Server Daemon
|
|
* Copyright (C) 2018 Kamax Sarl
|
|
*
|
|
* https://www.kamax.io/
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as
|
|
* published by the Free Software Foundation, either version 3 of the
|
|
* License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
package io.kamax.mxisd.controller;
|
|
|
|
import io.kamax.mxisd.exception.AccessTokenNotFoundException;
|
|
import io.kamax.mxisd.util.OptionalUtil;
|
|
import org.thymeleaf.util.StringUtils;
|
|
|
|
import javax.servlet.http.HttpServletRequest;
|
|
import java.util.Optional;
|
|
|
|
public class ProxyController {
|
|
|
|
private final static String headerName = "Authorization";
|
|
private final static String headerValuePrefix = "Bearer ";
|
|
private final static String parameterName = "access_token";
|
|
|
|
Optional<String> findAccessTokenInHeaders(HttpServletRequest request) {
|
|
return Optional.ofNullable(request.getHeader(headerName))
|
|
.filter(header -> StringUtils.startsWith(header, headerValuePrefix))
|
|
.map(header -> header.substring(headerValuePrefix.length()));
|
|
}
|
|
|
|
Optional<String> findAccessTokenInQuery(HttpServletRequest request) {
|
|
return Optional.ofNullable(request.getParameter(parameterName));
|
|
}
|
|
|
|
public Optional<String> findAccessToken(HttpServletRequest request) {
|
|
return OptionalUtil.findFirst(() -> findAccessTokenInHeaders(request), () -> findAccessTokenInQuery(request));
|
|
}
|
|
|
|
public String getAccessToken(HttpServletRequest request) {
|
|
return findAccessToken(request).orElseThrow(AccessTokenNotFoundException::new);
|
|
}
|
|
|
|
}
|