SkeletonKeyToken.java

package org.keycloak.representations;

import org.codehaus.jackson.annotate.JsonIgnore;
import org.codehaus.jackson.annotate.JsonProperty;
import org.jboss.resteasy.jwt.JsonWebToken;

import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

/**
 * @author <a href="mailto:bill@burkecentral.com">Bill Burke</a>
 * @version $Revision: 1 $
 */
public class SkeletonKeyToken extends JsonWebToken {
    public static class Access {
        @JsonProperty("roles")
        protected Set<String> roles;
        @JsonProperty("verify_caller")
        protected Boolean verifyCaller;

        public Set<String> getRoles() {
            return roles;
        }

        public Access roles(Set<String> roles) {
            this.roles = roles;
            return this;
        }

        @JsonIgnore
        public boolean isUserInRole(String role) {
            if (roles == null) return false;
            return roles.contains(role);
        }

        public Access addRole(String role) {
            if (roles == null) roles = new HashSet<String>();
            roles.add(role);
            return this;
        }

        public Boolean getVerifyCaller() {
            return verifyCaller;
        }

        public Access verifyCaller(Boolean required) {
            this.verifyCaller = required;
            return this;
        }
    }

    @JsonProperty("issuedFor")
    public String issuedFor;

    @JsonProperty("trusted-certs")
    protected Set<String> trustedCertificates;


    @JsonProperty("realm_access")
    protected Access realmAccess;

    @JsonProperty("resource_access")
    protected Map<String, Access> resourceAccess = new HashMap<String, Access>();

    public Map<String, Access> getResourceAccess() {
        return resourceAccess;
    }

    /**
     * Does the realm require verifying the caller?
     *
     * @return
     */
    @JsonIgnore
    public boolean isVerifyCaller() {
        if (getRealmAccess() != null && getRealmAccess().getVerifyCaller() != null)
            return getRealmAccess().getVerifyCaller().booleanValue();
        return false;
    }

    /**
     * Does the resource override the requirement of verifying the caller?
     *
     * @param resource
     * @return
     */
    @JsonIgnore
    public boolean isVerifyCaller(String resource) {
        Access access = getResourceAccess(resource);
        if (access != null && access.getVerifyCaller() != null) return access.getVerifyCaller().booleanValue();
        return false;
    }

    @JsonIgnore
    public Access getResourceAccess(String resource) {
        return resourceAccess.get(resource);
    }

    public Access addAccess(String service) {
        Access token = new Access();
        resourceAccess.put(service, token);
        return token;
    }

    @Override
    public SkeletonKeyToken id(String id) {
        return (SkeletonKeyToken) super.id(id);
    }

    @Override
    public SkeletonKeyToken expiration(long expiration) {
        return (SkeletonKeyToken) super.expiration(expiration);
    }

    @Override
    public SkeletonKeyToken notBefore(long notBefore) {
        return (SkeletonKeyToken) super.notBefore(notBefore);
    }

    @Override
    public SkeletonKeyToken issuedAt(long issuedAt) {
        return (SkeletonKeyToken) super.issuedAt(issuedAt);
    }

    @Override
    public SkeletonKeyToken issuer(String issuer) {
        return (SkeletonKeyToken) super.issuer(issuer);
    }

    @Override
    public SkeletonKeyToken audience(String audience) {
        return (SkeletonKeyToken) super.audience(audience);
    }

    @Override
    public SkeletonKeyToken principal(String principal) {
        return (SkeletonKeyToken) super.principal(principal);
    }

    @Override
    public SkeletonKeyToken type(String type) {
        return (SkeletonKeyToken) super.type(type);
    }

    public Access getRealmAccess() {
        return realmAccess;
    }

    public void setRealmAccess(Access realmAccess) {
        this.realmAccess = realmAccess;
    }

    public Set<String> getTrustedCertificates() {
        return trustedCertificates;
    }

    public void setTrustedCertificates(Set<String> trustedCertificates) {
        this.trustedCertificates = trustedCertificates;
    }

    /**
     * OAuth client the token was issued for.
     *
     * @return
     */
    public String getIssuedFor() {
        return issuedFor;
    }

    public SkeletonKeyToken issuedFor(String issuedFor) {
        this.issuedFor = issuedFor;
        return this;
    }
}