single sign on

giaunv · giaunv · commit 0f7c5ae7edc4 · 2019-05-06T19:30:30.000+08:00
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/.gitignore b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/.gitignore
@@ -0,0 +1,8 @@
+target
+out
+.settings
+.classpath
+.project
+.idea
+*.iml
+*.DS_Store
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/pom.xml b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/pom.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <artifactId>hello-sso-jwt-auth</artifactId>
+    <name>hello-sso-jwt-auth</name>
+    <description>hello-sso-jwt-auth</description>
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>2.1.4.RELEASE</version>
+    </parent>
+
+    <properties>
+        <java.version>1.7</java.version>
+    </properties>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-web</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-freemarker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt</artifactId>
+            <version>0.9.1</version>
+        </dependency>
+    </dependencies>
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+            </plugin>
+        </plugins>
+    </build>
+</project>
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/CookieUtil.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/CookieUtil.java
@@ -0,0 +1,32 @@
+package com.hellokoding.sso.auth;
+
+import org.springframework.web.util.WebUtils;
+
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+public class CookieUtil {
+    public static void create(HttpServletResponse httpServletResponse, String name, String value, Boolean secure, Integer maxAge, String domain) {
+        Cookie cookie = new Cookie(name, value);
+        cookie.setSecure(secure);
+        cookie.setHttpOnly(true);
+        cookie.setMaxAge(maxAge);
+        cookie.setDomain(domain);
+        cookie.setPath("/");
+        httpServletResponse.addCookie(cookie);
+    }
+
+    public static void clear(HttpServletResponse httpServletResponse, String name) {
+        Cookie cookie = new Cookie(name, null);
+        cookie.setPath("/");
+        cookie.setHttpOnly(true);
+        cookie.setMaxAge(0);
+        httpServletResponse.addCookie(cookie);
+    }
+
+    public static String getValue(HttpServletRequest httpServletRequest, String name) {
+        Cookie cookie = WebUtils.getCookie(httpServletRequest, name);
+        return cookie != null ? cookie.getValue() : null;
+    }
+}
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/JwtUtil.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/JwtUtil.java
@@ -0,0 +1,28 @@
+package com.hellokoding.sso.auth;
+
+import io.jsonwebtoken.JwtBuilder;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.SignatureAlgorithm;
+
+import javax.servlet.http.HttpServletRequest;
+import java.util.Date;
+
+public class JwtUtil {
+    public static String generateToken(String signingKey, String subject) {
+        long nowMillis = System.currentTimeMillis();
+        Date now = new Date(nowMillis);
+
+        JwtBuilder builder = Jwts.builder()
+                .setSubject(subject)
+                .setIssuedAt(now)
+                .signWith(SignatureAlgorithm.HS256, signingKey);
+
+        return builder.compact();
+    }
+
+    public static String getSubject(HttpServletRequest httpServletRequest, String jwtTokenCookieName, String signingKey){
+        String token = CookieUtil.getValue(httpServletRequest, jwtTokenCookieName);
+        if(token == null) return null;
+        return Jwts.parser().setSigningKey(signingKey).parseClaimsJws(token).getBody().getSubject();
+    }
+}
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/LoginController.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/LoginController.java
@@ -0,0 +1,45 @@
+package com.hellokoding.sso.auth;
+
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestMethod;
+
+import javax.servlet.http.HttpServletResponse;
+import java.util.HashMap;
+import java.util.Map;
+
+@Controller
+public class LoginController {
+    private static final String jwtTokenCookieName = "JWT-TOKEN";
+    private static final String signingKey = "signingKey";
+    private static final Map<String, String> credentials = new HashMap<>();
+
+    public LoginController() {
+        credentials.put("hellokoding", "hellokoding");
+        credentials.put("hellosso", "hellosso");
+    }
+
+    @RequestMapping("/")
+    public String home(){
+        return "redirect:/login";
+    }
+
+    @RequestMapping("/login")
+    public String login(){
+        return "login";
+    }
+
+    @RequestMapping(value = "login", method = RequestMethod.POST)
+    public String login(HttpServletResponse httpServletResponse, String username, String password, String redirect, Model model){
+        if (username == null || !credentials.containsKey(username) || !credentials.get(username).equals(password)){
+            model.addAttribute("error", "Invalid username or password!");
+            return "login";
+        }
+
+        String token = JwtUtil.generateToken(signingKey, username);
+        CookieUtil.create(httpServletResponse, jwtTokenCookieName, token, false, -1, "localhost");
+
+        return "redirect:" + redirect;
+    }
+}
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/WebApplication.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/java/com/hellokoding/sso/auth/WebApplication.java
@@ -0,0 +1,12 @@
+package com.hellokoding.sso.auth;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class WebApplication{
+    public static void main(String[] args) throws Exception {
+        SpringApplication.run(WebApplication.class, args);
+    }
+}
+
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/resources/templates/login.ftl b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-auth/src/main/resources/templates/login.ftl
@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <title>Authentication Service</title>
+</head>
+<body>
+<form method="POST" action="/login?redirect=${RequestParameters.redirect!}">
+    <h2>Log in</h2>
+    <input name="username" type="text" placeholder="Username"
+           autofocus="true"/>
+    <input name="password" type="password" placeholder="Password"/>
+    <div>(try username=hellokoding and password=hellokoding)</div>
+    <div style="color: red">${error!}</div>
+    <br/>
+    <button type="submit">Log In</button>
+</form>
+</body>
+</html>
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/.gitignore b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/.gitignore
@@ -0,0 +1,8 @@
+target
+out
+.settings
+.classpath
+.project
+.idea
+*.iml
+*.DS_Store
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/pom.xml b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/pom.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <artifactId>hello-sso-jwt-resource</artifactId>
+    <name>hello-sso-jwt-resource</name>
+    <description>hello-sso-jwt-resource</description>
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>2.1.4.RELEASE</version>
+    </parent>
+
+    <properties>
+        <java.version>1.7</java.version>
+    </properties>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-web</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-freemarker</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>io.jsonwebtoken</groupId>
+            <artifactId>jjwt</artifactId>
+            <version>0.9.1</version>
+        </dependency>
+    </dependencies>
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+            </plugin>
+        </plugins>
+    </build>
+</project>
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/CookieUtil.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/CookieUtil.java
@@ -0,0 +1,33 @@
+package com.hellokoding.sso.resource;
+
+import org.springframework.web.util.WebUtils;
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+public class CookieUtil {
+    public static void create(HttpServletResponse httpServletResponse, String name, String value, Boolean secure, Integer maxAge, String domain) {
+        Cookie cookie = new Cookie(name, value);
+        cookie.setSecure(secure);
+        cookie.setHttpOnly(true);
+        cookie.setMaxAge(maxAge);
+        cookie.setDomain(domain);
+        cookie.setPath("/");
+        httpServletResponse.addCookie(cookie);
+    }
+
+    public static void clear(HttpServletResponse httpServletResponse, String name) {
+        Cookie cookie = new Cookie(name, null);
+        cookie.setPath("/");
+        cookie.setHttpOnly(true);
+        cookie.setMaxAge(0);
+        cookie.setDomain("localhost");
+        httpServletResponse.addCookie(cookie);
+    }
+
+    public static String getValue(HttpServletRequest httpServletRequest, String name) {
+        Cookie cookie = WebUtils.getCookie(httpServletRequest, name);
+        return cookie != null ? cookie.getValue() : null;
+    }
+}
+
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/JwtFilter.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/JwtFilter.java
@@ -0,0 +1,26 @@
+package com.hellokoding.sso.resource;
+
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import javax.servlet.FilterChain;
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+public class JwtFilter extends OncePerRequestFilter {
+    private static final String jwtTokenCookieName = "JWT-TOKEN";
+    private static final String signingKey = "signingKey";
+
+    @Override
+    protected void doFilterInternal(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, FilterChain filterChain) throws ServletException, IOException {
+        String username = JwtUtil.getSubject(httpServletRequest, jwtTokenCookieName, signingKey);
+        if(username == null){
+            String authService = this.getFilterConfig().getInitParameter("services.auth");
+            httpServletResponse.sendRedirect(authService + "?redirect=" + httpServletRequest.getRequestURL());
+        } else{
+            httpServletRequest.setAttribute("username", username);
+            filterChain.doFilter(httpServletRequest, httpServletResponse);
+        }
+    }
+}
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/JwtUtil.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/JwtUtil.java
@@ -0,0 +1,29 @@
+package com.hellokoding.sso.resource;
+
+import io.jsonwebtoken.JwtBuilder;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.SignatureAlgorithm;
+
+import javax.servlet.http.HttpServletRequest;
+import java.util.Date;
+
+public class JwtUtil {
+    public static String generateToken(String signingKey, String subject) {
+        long nowMillis = System.currentTimeMillis();
+        Date now = new Date(nowMillis);
+
+        JwtBuilder builder = Jwts.builder()
+                .setSubject(subject)
+                .setIssuedAt(now)
+                .signWith(SignatureAlgorithm.HS256, signingKey);
+
+        return builder.compact();
+    }
+
+    public static String getSubject(HttpServletRequest httpServletRequest, String jwtTokenCookieName, String signingKey){
+        String token = CookieUtil.getValue(httpServletRequest, jwtTokenCookieName);
+        if(token == null) return null;
+        return Jwts.parser().setSigningKey(signingKey).parseClaimsJws(token).getBody().getSubject();
+    }
+}
+
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/ResourceController.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/ResourceController.java
@@ -0,0 +1,27 @@
+package com.hellokoding.sso.resource;
+
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+import javax.servlet.http.HttpServletResponse;
+
+@Controller
+public class ResourceController {
+    private static final String jwtTokenCookieName = "JWT-TOKEN";
+
+    @RequestMapping("/")
+    public String home() {
+        return "redirect:/protected-resource";
+    }
+
+    @RequestMapping("/protected-resource")
+    public String protectedResource() {
+        return "protected-resource";
+    }
+
+    @RequestMapping("/logout")
+    public String logout(HttpServletResponse httpServletResponse) {
+        CookieUtil.clear(httpServletResponse, jwtTokenCookieName);
+        return "redirect:/";
+    }
+}
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/WebApplication.java b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/java/com/hellokoding/sso/resource/WebApplication.java
@@ -0,0 +1,30 @@
+package com.hellokoding.sso.resource;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.web.servlet.FilterRegistrationBean;
+import org.springframework.context.annotation.Bean;
+
+import java.util.Collections;
+
+@SpringBootApplication
+public class WebApplication {
+    @Value("${services.auth}")
+    private String authService;
+
+    @Bean
+    public FilterRegistrationBean jwtFilter() {
+        final FilterRegistrationBean registrationBean = new FilterRegistrationBean();
+        registrationBean.setFilter(new JwtFilter());
+        registrationBean.setInitParameters(Collections.singletonMap("services.auth", authService));
+        registrationBean.addUrlPatterns("/protected-resource");
+
+        return registrationBean;
+    }
+
+    public static void main(String[] args) throws Exception {
+        SpringApplication.run(WebApplication.class, args);
+    }
+}
+
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/resources/application.properties b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/resources/application.properties
@@ -0,0 +1 @@
+services.auth=http://localhost:8080/login
diff --git a/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/resources/templates/protected-resource.ftl b/springboot-examples/springboot-single-sign-on-jwt/hello-sso-jwt-resource/src/main/resources/templates/protected-resource.ftl
