org.dataone.portal

Class TokenGenerator

java.lang.Object

org.dataone.portal.TokenGenerator

public class TokenGenerator
extends Object

Class for generating JSON web tokens for authenticated users. Targeting this for use with AnnotateIt.org.

Author:

leinfelder

See Also:

"http://docs.annotatorjs.org"

Field Summary

Fields

Modifier and Type	Field and Description
static org.apache.commons.logging.Log	log
protected static List<RSAPublicKey>	publicKeys

Method Summary

Modifier and Type	Method and Description
Certificate	fetchServerCertificate() fetches the server certificates from the remote CN using the configured CN baseurl from d1_libclient_java.
static TokenGenerator	getInstance()
String	getJWT(String userId, String fullName)
org.dataone.service.types.v1.Session	getSession(String token) Uses configured public keys to verify provided token.
static void	main(String[] args) For generating custom tokens outside the portal workflow.
protected void	setPublicKeys()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

log

public static org.apache.commons.logging.Log log

publicKeys

protected static List<RSAPublicKey> publicKeys

Method Detail

getInstance

public static TokenGenerator getInstance()
                                  throws IOException

Throws:

IOException

fetchServerCertificate

public Certificate fetchServerCertificate()

fetches the server certificates from the remote CN using the configured CN baseurl from d1_libclient_java. Returns the first server certificate.

Returns:

either the Certificate or null (if problem)

getJWT

public String getJWT(String userId,
                     String fullName)
              throws com.nimbusds.jose.JOSEException,
                     ParseException,
                     IOException

Throws:

com.nimbusds.jose.JOSEException

ParseException

IOException

setPublicKeys

protected void setPublicKeys()
                      throws IOException

Throws:

IOException

getSession

public org.dataone.service.types.v1.Session getSession(String token)

Uses configured public keys to verify provided token. Then extracts the subject from the token string, and attempts to get the SubjectInfo from the CN. If unsuccessful, builds a SubjectInfo entry from the token subject.

Parameters:

token - the given JWT token string

Returns:

a Session or null if Exceptions raised (they are logged as Warnings)

main

public static void main(String[] args)

For generating custom tokens outside the portal workflow. These properties should be set in portal.properties: token.ttl=31536000 cn.server.privatekey.filename=/Users/leinfelder/Downloads/dataone_org.key cn.server.publiccert.filename=/Users/leinfelder/Downloads/_.dataone.org.crt The main class should be called with and parameters. The token will be printed to System.out

Parameters:

args - command-line arguments: (required) and (optional)