Bartek Andrzejczak bandrzejczak

bandrzejczak / AuthorizedDirective.scala

Created February 9, 2018 22:18

	def authorized: Directive1[OAuth2Token] = {
	bearerToken.flatMap {
	case Some(token) =>
	onComplete(tokenVerifier.verifyToken(token)).flatMap {
	_.map(username => provide(OAuth2Token(token, username)))
	.recover {
	case ex =>
	logger.error(ex, "Couldn't log in using provided authorization token")
	reject(AuthorizationFailedRejection).toDirective[Tuple1[OAuth2Token]]
	}

bandrzejczak / BearerTokenDirective.scala

Created February 9, 2018 22:17

	private def bearerToken: Directive1[Option[String]] =
	for {
	authBearerHeader <- optionalHeaderValueByType(classOf[Authorization]).map(extractBearerToken)
	xAuthCookie <- optionalCookie("X-Authorization-Token").map(_.map(_.value))
	} yield authBearerHeader.orElse(xAuthCookie)

	private def extractBearerToken(authHeader: Option[Authorization]): Option[String] =
	authHeader.collect {
	case Authorization(OAuth2BearerToken(token)) => token
	}

bandrzejczak / KeycloakTokenVerifier.scala

Created February 9, 2018 22:17

	class KeycloakTokenVerifier(keycloakDeployment: KeycloakDeployment) extends TokenVerifier {
	implicit val executionContext = ExecutionContext.fromExecutor(new ForkJoinPool(2))

	def verifyToken(token: String): Future[String] = {
	Future {
	RSATokenVerifier.verifyToken(
	token,
	keycloakDeployment.getRealmKey,
	keycloakDeployment.getRealmInfoUrl
	).getPreferredUsername

bandrzejczak / TokenVerifier.scala

Created February 9, 2018 22:16

	trait TokenVerifier {
	def verifyToken(token: String): Future[String]
	}

bandrzejczak / build.sbt

Created February 9, 2018 22:16

bandrzejczak / keycloak.html

Created February 9, 2018 22:14

bandrzejczak / bootstrapAngular.js

Created February 9, 2018 22:13

	function bootstrapAngular(keycloak, userInfo) {
	angular.module('KeycloakApp')
	.run(function ($rootScope) {
	// store the token in header's defaults or a cookie - we'll cover that with the backend in part 2

	$rootScope.currentUser = {
	username: userInfo.name \|\| userInfo.preferred_username,
	roles: keycloak.realmAccess.roles
	};

bandrzejczak / keycloakUserInfo.js

Created February 9, 2018 22:13

	keycloak.loadUserInfo().success(function (userInfo) {
	// Bootstrap Angular
	});

bandrzejczak / keycloakInit.js

Created February 9, 2018 22:12

	var keycloakConfig = {
	"url": "http://localhost:8080/auth",
	"realm": "master",
	"clientId": "frontend",
	"credentials": {
	"secret": "1a1b98b6-66c5-4384-a4b4-7361717e773e"
	}
	};
	var keycloak = Keycloak(keycloakConfig);
	keycloak.init({

bandrzejczak / metrics.csv

Created February 9, 2018 22:10