Application: gvSIG desktop

package org.gvsig.downloader.swing.scribejava.keycloak;

import com.github.scribejava.apis.openid.OpenIdJsonTokenExtractor;

import com.github.scribejava.core.builder.api.DefaultApi20;

import com.github.scribejava.core.extractors.TokenExtractor;

import com.github.scribejava.core.model.OAuth2AccessToken;

import java.util.concurrent.ConcurrentHashMap;

import java.util.concurrent.ConcurrentMap;

import org.apache.commons.lang3.StringUtils;

/*

 * Based on portions of code from ScribeJava (https://github.com/scribejava/scribejava)

 * in module scribejava-apis.

 * https://github.com/scribejava/scribejava/blob/master/scribejava-apis/src/main/java/com/github/scribejava/apis/KeycloakApi.java

 */

public class KeycloakApi2 extends DefaultApi20 {

    private static final ConcurrentMap<String, KeycloakApi2> INSTANCES = new ConcurrentHashMap<>();

    private final String baseUrlWithRealm;

    protected KeycloakApi2(String baseUrlWithRealm) {

        this.baseUrlWithRealm = baseUrlWithRealm;

    }

    public static KeycloakApi2 instance() {

        return instance("http://localhost:8080/", "master");

    }

    public static KeycloakApi2 instance(String baseUrl, String realm) {

        final String defaultBaseUrlWithRealm = composeBaseUrlWithRealm(baseUrl, realm);

        //java8: switch to ConcurrentMap::computeIfAbsent

        KeycloakApi2 api = INSTANCES.get(defaultBaseUrlWithRealm);

        if (api == null) {

            api = new KeycloakApi2(defaultBaseUrlWithRealm);

            final KeycloakApi2 alreadyCreatedApi = INSTANCES.putIfAbsent(defaultBaseUrlWithRealm, api);

            if (alreadyCreatedApi != null) {

                return alreadyCreatedApi;

            }

        }

        return api;

    }

    protected static String composeBaseUrlWithRealm(String baseUrl, String realm) {

        if( !StringUtils.endsWith(baseUrl, "/") ) {

            baseUrl += "/";

        }

        if( StringUtils.endsWith(baseUrl, "/realms/") ) {

            baseUrl += realm;

        } else {

            baseUrl += "auth/realms/" + realm;

        }

//        return baseUrl + (baseUrl.endsWith("/") ? "" : "/") + "auth/realms/" + realm;

        return baseUrl;

    }

    @Override

    public String getAccessTokenEndpoint() {

        return baseUrlWithRealm + "/protocol/openid-connect/token";

    }

    @Override

    protected String getAuthorizationBaseUrl() {

        return baseUrlWithRealm + "/protocol/openid-connect/auth";

    }

    @Override

    public TokenExtractor<OAuth2AccessToken> getAccessTokenExtractor() {

        return OpenIdJsonTokenExtractor.instance();

    }

    @Override

    public String getRevokeTokenEndpoint() {

        throw new RuntimeException("Not implemented yet");

    }

    public String getUserInfoEndpoint() {

        return baseUrlWithRealm + "/protocol/openid-connect/userinfo";

    }

    public String getLogoutEndpoint(String clientid, String redirect_uri) {

//        String redirect_uri_name = "redirect_uri";

        String redirect_uri_name = "post_logout_redirect_uri";

        String logoutUrl = String.format(

                "%s/protocol/openid-connect/logout?%s=%s&client_id=%s",

                this.baseUrlWithRealm,

                redirect_uri_name,

                redirect_uri,

                clientid

        );    

        return logoutUrl;

    }

}