package org.acme.security.openid.connect.web.authentication;
import jakarta.inject.Inject;
import jakarta.ws.rs.GET;
import jakarta.ws.rs.Path;
import jakarta.ws.rs.Produces;
import org.eclipse.microprofile.jwt.Claims;
import org.eclipse.microprofile.jwt.JsonWebToken;
import io.quarkus.oidc.IdToken;
import io.quarkus.oidc.RefreshToken;
import java.util.Base64;
import java.nio.charset.StandardCharsets;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.fasterxml.jackson.databind.SerializationFeature;
import org.eclipse.microprofile.jwt.JsonWebToken;
import com.fasterxml.jackson.core.JsonProcessingException;
import java.util.List;
@Path("/tokens")
public class TokenResource {
/**
* Injection point for the ID Token issued by the OpenID Connect Provider
*/
@Inject
@IdToken
JsonWebToken idToken;
/**
* Injection point for the Access Token issued by the OpenID Connect Provider
*/
@Inject
JsonWebToken accessToken;
/**
* Injection point for the Refresh Token issued by the OpenID Connect Provider
*/
@Inject
RefreshToken refreshToken;
private ObjectMapper objectMapper;
public TokenResource() {
this.objectMapper = new ObjectMapper();
this.objectMapper.enable(SerializationFeature.INDENT_OUTPUT); // für schön formatiertes JSON
}
// Methode zum Dekodieren und Formatieren eines Tokens
public String decodeAndFormatToken(JsonWebToken token) {
if (token != null) {
String[] tokenParts = token.getRawToken().split("\\.");
if (tokenParts.length == 3) {
try {
String header = new String(Base64.getUrlDecoder().decode(tokenParts[0]), StandardCharsets.UTF_8);
String payload = new String(Base64.getUrlDecoder().decode(tokenParts[1]), StandardCharsets.UTF_8);
// JSON schön formatieren
String formattedHeader = objectMapper.readTree(header).toPrettyString();
String formattedPayload = objectMapper.readTree(payload).toPrettyString();
// Formatierte Ausgabe zurückgeben
return "Decoded Header:
" + formattedHeader + "
"
+ "Decoded Payload:
" + formattedPayload + "
";
} catch (JsonProcessingException e) {
return "Error processing JSON: " + e.getMessage();
} catch (IllegalArgumentException e) {
return "Error decoding Base64: " + e.getMessage();
}
} else {
return "Invalid JWT token format.";
}
} else {
return "Token is null.";
}
}
// Methode zur Überprüfung der "user-role01"-Rolle im ID-Token
public boolean hasUserRole(JsonWebToken idToken, String claim, String roleName) {
if (idToken != null) {
String[] tokenParts = idToken.getRawToken().split("\\.");
if (tokenParts.length == 3) {
try {
String payload = new String(Base64.getUrlDecoder().decode(tokenParts[1]), StandardCharsets.UTF_8);
// JSON in eine Map umwandeln
var jsonNode = objectMapper.readTree(payload);
if (jsonNode.has(claim)) {
List roles = objectMapper.convertValue(jsonNode.get(claim), List.class);
return roles.contains(roleName);
}
} catch (JsonProcessingException e) {
System.out.println("Error processing JSON: " + e.getMessage());
}
}
}
return false;
}
@GET
@Produces("text/html")
public String getTokens() {
StringBuilder response = new StringBuilder().append("")
.append("")
.append("Test-App")
.append("")
.append("")
.append("");
// Logo oben rechts einblenden
response.append("![\"Logo\"](\"/logo.png\")
");
// Begrüßung und Beschreibung
response.append("Willkommen zur Testapp!
");
response.append("Dies ist eine Test-Anwendung, die das Authentifizierungs-Token (ID-Token) des angemeldeten Nutzers ausgibt.
");
/*
// Rollen prüfen
if (hasUserRole(idToken, "realm-roles", "user-role01")) {
response.append("user-access: true
");
} else {
response.append("user-access: false
");
}
if (hasUserRole(idToken, "realm-roles", "admin-role01")) {
response.append("admin-access: true
");
} else {
response.append("admin-access: false
");
}
*/
// ID Token anzeigen (klein formatiert)
response.append("ID Token:
");
response.append("").append(decodeAndFormatToken(idToken)).append("
");
// Access Token anzeigen (ebenfalls klein)
response.append("Access Token:
");
response.append("").append(decodeAndFormatToken(accessToken)).append("
");
response.append("").append("");
return response.toString();
}
}