import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
/**
 * 
 * @param stub
 * @return receives a non prepared stub and set up it
 */
private OAuth2TokenValidationServiceStub setupValidationService(OAuth2TokenValidationServiceStub stub) {
    AuthProperties props = AuthProperties.inst();

    ServiceClient client = stub._getServiceClient();
    Options options = client.getOptions();

    CarbonUtils.setBasicAccessSecurityHeaders(props.getWso2User(), props.getWso2Password(), true, client);

    options.setTimeOutInMilliSeconds(TIMEOUT_IN_MILLIS);
    options.setProperty(HTTPConstants.SO_TIMEOUT, TIMEOUT_IN_MILLIS);
    options.setProperty(HTTPConstants.CONNECTION_TIMEOUT, TIMEOUT_IN_MILLIS);
    options.setCallTransportCleanup(true);
    options.setManageSession(true);

    return stub;
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
public Oauth2TokenValidator(String identityURL, String userName, String password)
        throws MalformedURLException, AxisFault {

    this.identityURL = identityURL;
    String adminUserName = userName;
    String adminPassword = password;

    //create service client with given url
    String targetEndpointUrl = identityURL + "/services/OAuth2TokenValidationService.OAuth2TokenValidationServiceHttpsSoap12Endpoint/";
    OAuth2TokenValidationServiceStub stub = new OAuth2TokenValidationServiceStub(targetEndpointUrl);
    oAuth2TokenValidationService = stub;

    ServiceClient client = stub._getServiceClient();
    HttpTransportProperties.Authenticator authenticator = new HttpTransportProperties.Authenticator();
    authenticator.setUsername(adminUserName);
    authenticator.setPassword(adminPassword);
    authenticator.setPreemptiveAuthentication(true);
    Options options = client.getOptions();
    options.setProperty(HTTPConstants.AUTHENTICATE, authenticator);

    client.setOptions(options);
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
@Override
public void passivateObject(Object o) throws Exception {
    if (o instanceof OAuth2TokenValidationServiceStub) {
        OAuth2TokenValidationServiceStub stub = (OAuth2TokenValidationServiceStub) o;
        stub._getServiceClient().cleanupTransport();
    }
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
/**
 * This method gets a string accessToken and validates it and generate the OAuth2ClientApplicationDTO
 * containing the validity and user details if valid.
 *
 * @param token which need to be validated.
 * @return OAuthValidationResponse with the validated results.
 */
public OAuthValidationResponse validateToken(String token) throws RemoteException {
    OAuth2TokenValidationRequestDTO validationRequest = new OAuth2TokenValidationRequestDTO();
    OAuth2TokenValidationRequestDTO_OAuth2AccessToken accessToken =
            new OAuth2TokenValidationRequestDTO_OAuth2AccessToken();
    accessToken.setTokenType(OauthAuthenticatorConstants.BEARER_TOKEN_TYPE);
    accessToken.setIdentifier(token);
    validationRequest.setAccessToken(accessToken);
    OAuth2TokenValidationServiceStub tokenValidationService =
            new OAuth2TokenValidationServiceStub(hostURL);
    ServiceClient client = tokenValidationService._getServiceClient();
    Options options = client.getOptions();
    List<Header> headerList = new ArrayList<>();
    Header header = new Header();
    header.setName(HTTPConstants.HEADER_AUTHORIZATION);
    header.setValue(OauthAuthenticatorConstants.AUTHORIZATION_HEADER_PREFIX_BASIC + " " + getBasicAuthCredentials());
    headerList.add(header);
    options.setProperty(org.apache.axis2.transport.http.HTTPConstants.HTTP_HEADERS, headerList);
    client.setOptions(options);
    OAuth2TokenValidationResponseDTO tokenValidationResponse = tokenValidationService.
            findOAuthConsumerIfTokenIsValid(validationRequest).getAccessTokenValidationResponse();
    boolean isValid = tokenValidationResponse.getValid();
    String userName = null;
    String tenantDomain = null;
    if (isValid) {
        userName = MultitenantUtils.getTenantAwareUsername(
                tokenValidationResponse.getAuthorizedUser());
        tenantDomain = MultitenantUtils.
                getTenantDomain(tokenValidationResponse.getAuthorizedUser());
    }
    return new OAuthValidationResponse(userName,tenantDomain,isValid);
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
/**
 * OAuth2TokenValidationService Admin Service Client
 *
 * @param backendServerURL
 * @param username
 * @param password
 * @param configCtx
 * @throws Exception
 */
public OAuthServiceClient(String backendServerURL, String username, String password,
                          ConfigurationContext configCtx) throws Exception {
    String serviceURL = backendServerURL + "OAuth2TokenValidationService";
    try {
        stub = new OAuth2TokenValidationServiceStub(configCtx, serviceURL);
        CarbonUtils.setBasicAccessSecurityHeaders(username, password, true, stub._getServiceClient());
    } catch (AxisFault e) {
        log.error("Error initializing OAuth2 Client");
        throw new Exception("Error initializing OAuth Client", e);
    }
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
public ValidationServiceClient(String backendServerURL, String username, String password) throws Exception {
    String serviceURL = backendServerURL + "OAuth2TokenValidationService";
    try {
        stub = new OAuth2TokenValidationServiceStub(serviceURL);
        CarbonUtils.setBasicAccessSecurityHeaders(username, password, true, stub._getServiceClient());
    } catch (AxisFault e) {
        log.error("Error initializing OAuth2 Client");
        throw new Exception("Error initializing OAuth Client", e);
    }
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
/**
 * This is used to clean up the OAuth validation stub and releases to the object pool.
 * @param o object that needs to be released.
 * @throws Exception throws when failed to release to the pool
 */
@Override
public void passivateObject(Object o) throws Exception {
	if (o instanceof OAuth2TokenValidationServiceStub) {
		OAuth2TokenValidationServiceStub stub = (OAuth2TokenValidationServiceStub) o;
		stub._getServiceClient().cleanupTransport();
	}
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
/**
 * OAuth2TokenValidationService Admin Service Client
 *
 * @param auhorizationServerURL
 * @param username
 * @param password
 * @param configCtx
 * @throws Exception
 */
public DefaultOAuthClient(String auhorizationServerURL, String username, String password,
                          ConfigurationContext configCtx) throws AiravataSecurityException {
    try {
        String serviceURL = auhorizationServerURL + "OAuth2TokenValidationService";
        stub = new OAuth2TokenValidationServiceStub(configCtx, serviceURL);
        CarbonUtils.setBasicAccessSecurityHeaders(username, password, true, stub._getServiceClient());
    } catch (AxisFault e) {
        logger.error(e.getMessage(), e);
        throw new AiravataSecurityException("Error initializing OAuth client.");
    }
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
/**
 * 
 * @return validation service ready for use
 * @throws AxisFault
 */
private OAuth2TokenValidationServiceStub getValidationService() throws AxisFault {
    String serviceURL = AuthProperties.inst().getTokenValidationEndpoint();
    OAuth2TokenValidationServiceStub stub = new OAuth2TokenValidationServiceStub(null, serviceURL);
    return setupValidationService(stub);
}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
@Test(description = "This method tests the authenticate under different parameters",
        dependsOnMethods = {"testInit"})
public void testAuthenticate() throws Exception {
    Request request = createOauthRequest(BEARER_HEADER);
    Assert.assertEquals(oAuthAuthenticator.authenticate(request, null).getStatus(),
            WebappAuthenticator.Status.CONTINUE, "Authentication status mismatched");
    request = createOauthRequest(BEARER_HEADER + "abc");
    org.apache.coyote.Request coyoteRequest = request.getCoyoteRequest();
    Field uriMB = org.apache.coyote.Request.class.getDeclaredField("uriMB");
    uriMB.setAccessible(true);
    MessageBytes bytes = MessageBytes.newInstance();
    bytes.setString("test");
    uriMB.set(coyoteRequest, bytes);
    request.setCoyoteRequest(coyoteRequest);
    Field tokenValidator = OAuthAuthenticator.class.getDeclaredField("tokenValidator");
    tokenValidator.setAccessible(true);

    GenericObjectPool genericObjectPool = Mockito.mock(GenericObjectPool.class, Mockito.CALLS_REAL_METHODS);
    RemoteOAuthValidator remoteOAuthValidator = Mockito
            .mock(RemoteOAuthValidator.class, Mockito.CALLS_REAL_METHODS);
    tokenValidator.set(oAuthAuthenticator, remoteOAuthValidator);
    Field stubs = RemoteOAuthValidator.class.getDeclaredField("stubs");
    stubs.setAccessible(true);
    stubs.set(remoteOAuthValidator, genericObjectPool);
    OAuth2TokenValidationResponseDTO oAuth2TokenValidationResponseDTO = new OAuth2TokenValidationResponseDTO();
    oAuth2TokenValidationResponseDTO.setValid(true);
    oAuth2TokenValidationResponseDTO.setAuthorizedUser("[email protected]");
    OAuth2ClientApplicationDTO oAuth2ClientApplicationDTO = Mockito
            .mock(OAuth2ClientApplicationDTO.class, Mockito.CALLS_REAL_METHODS);
    Mockito.doReturn(oAuth2TokenValidationResponseDTO).when(oAuth2ClientApplicationDTO)
            .getAccessTokenValidationResponse();
    OAuth2TokenValidationServiceStub oAuth2TokenValidationServiceStub = Mockito
            .mock(OAuth2TokenValidationServiceStub.class, Mockito.CALLS_REAL_METHODS);
    Mockito.doReturn(oAuth2ClientApplicationDTO).when(oAuth2TokenValidationServiceStub)
            .findOAuthConsumerIfTokenIsValid(Mockito.any());
    Mockito.doReturn(oAuth2TokenValidationServiceStub).when(genericObjectPool).borrowObject();
    oAuthAuthenticator.canHandle(request);
    AuthenticationInfo authenticationInfo = oAuthAuthenticator.authenticate(request, null);
    Assert.assertEquals(authenticationInfo.getUsername(), "admin");

}
 

import org.wso2.carbon.identity.oauth2.stub.OAuth2TokenValidationServiceStub; //导入依赖的package包/类
/**
 * This creates an AuthenticationInfo object that is used for authorization. This method will validate the token and
 * sets the required parameters to the object.
 *
 * @param token                      that needs to be validated.
 * @param tokenValidationServiceStub stub that is used to call the external service.
 * @return AuthenticationInfo This contains the information related to authenticated client.
 * @throws RemoteException that triggers when failing to call the external service..
 */
private AuthenticationInfo getAuthenticationInfo(String token,
	OAuth2TokenValidationServiceStub tokenValidationServiceStub) throws RemoteException {
	AuthenticationInfo authenticationInfo = new AuthenticationInfo();
	OAuth2TokenValidationRequestDTO validationRequest = new OAuth2TokenValidationRequestDTO();
	OAuth2TokenValidationRequestDTO_OAuth2AccessToken accessToken =
			new OAuth2TokenValidationRequestDTO_OAuth2AccessToken();
	accessToken.setTokenType(TOKEN_TYPE);
	accessToken.setIdentifier(token);
	validationRequest.setAccessToken(accessToken);
	boolean authenticated;
	OAuth2TokenValidationResponseDTO tokenValidationResponse;
	tokenValidationResponse = tokenValidationServiceStub.validate(validationRequest);
	if (tokenValidationResponse == null) {
		authenticationInfo.setAuthenticated(false);
		return authenticationInfo;
	}
	authenticated = tokenValidationResponse.getValid();
	if (authenticated) {
		String authorizedUser = tokenValidationResponse.getAuthorizedUser();
		String username = MultitenantUtils.getTenantAwareUsername(authorizedUser);
		String tenantDomain = MultitenantUtils.getTenantDomain(authorizedUser);
		authenticationInfo.setUsername(username);
		authenticationInfo.setTenantDomain(tenantDomain);
		authenticationInfo.setProperty(TOKEN_EXPIRY_TIME_IDENTIFIER, tokenValidationResponse.getExpiryTime());
		String validateResponseScope[] = tokenValidationResponse.getScope();
		if (validateResponseScope != null && validateResponseScope.length > 0) {
			List<String> responseScopes = Arrays.asList(validateResponseScope);
			authenticationInfo.setProperty(SCOPE_IDENTIFIER, responseScopes);
		}
	} else {
		if (log.isDebugEnabled()) {
			log.debug("Token validation failed for token: " + token);
		}
	}
	ServiceContext serviceContext = tokenValidationServiceStub._getServiceClient()
			.getLastOperationContext().getServiceContext();
	cookie = (String) serviceContext.getProperty(HTTPConstants.COOKIE_STRING);
	authenticationInfo.setAuthenticated(authenticated);
	return authenticationInfo;
}