com.microsoft.azure.spring.autoconfigure.aad

Class AzureADGraphClient

java.lang.Object

com.microsoft.azure.spring.autoconfigure.aad.AzureADGraphClient

public class AzureADGraphClient
extends Object

Field Summary

Fields

Modifier and Type	Field and Description
private static String	AAD_GRAPH_API_SCOPE
private AADAuthenticationProperties	aadAuthenticationProperties
private boolean	aadMicrosoftGraphApiBool
private String	clientId
private String	clientSecret
private static org.springframework.security.core.authority.SimpleGrantedAuthority	DEFAULT_AUTHORITY
private static String	DEFAULT_ROLE_PREFIX
private static String	MICROSOFT_GRAPH_SCOPE
private ServiceEndpoints	serviceEndpoints
private static String	V2_VERSION_ENV_FLAG

Constructor Summary

Constructors

Constructor and Description
AzureADGraphClient(String clientId, String clientSecret, AADAuthenticationProperties aadAuthProps, ServiceEndpointsProperties serviceEndpointsProps)

Method Summary

Modifier and Type	Method and Description
com.microsoft.aad.msal4j.IAuthenticationResult	acquireTokenForGraphApi(String idToken, String tenantId)
Set<org.springframework.security.core.GrantedAuthority>	convertGroupsToGrantedAuthorities(List<UserGroup> groups) Converts UserGroup list to Set of GrantedAuthorities
Set<org.springframework.security.core.GrantedAuthority>	getGrantedAuthorities(String graphApiToken)
List<UserGroup>	getGroups(String graphApiToken)
private static String	getResponseStringFromConn(HttpURLConnection conn)
private String	getUserMembershipsV1(String accessToken)
private void	initAADMicrosoftGraphApiBool(String endpointEnv)
private boolean	isMatchingUserGroupKey(com.fasterxml.jackson.databind.JsonNode node) Checks that the JSON Node is a valid User Group to extract User Groups from
private boolean	isValidUserGroupToGrantAuthority(UserGroup group) Determines if this is a valid UserGroup to build to a GrantedAuthority.
private List<UserGroup>	loadUserGroups(String graphApiToken)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_AUTHORITY

private static final org.springframework.security.core.authority.SimpleGrantedAuthority DEFAULT_AUTHORITY

DEFAULT_ROLE_PREFIX

private static final String DEFAULT_ROLE_PREFIX

See Also:

Constant Field Values

MICROSOFT_GRAPH_SCOPE

private static final String MICROSOFT_GRAPH_SCOPE

See Also:

Constant Field Values

AAD_GRAPH_API_SCOPE

private static final String AAD_GRAPH_API_SCOPE

See Also:

Constant Field Values

clientId

private final String clientId

clientSecret

private final String clientSecret

serviceEndpoints

private final ServiceEndpoints serviceEndpoints

aadAuthenticationProperties

private final AADAuthenticationProperties aadAuthenticationProperties

V2_VERSION_ENV_FLAG

private static final String V2_VERSION_ENV_FLAG

See Also:

Constant Field Values

aadMicrosoftGraphApiBool

private boolean aadMicrosoftGraphApiBool

Constructor Detail

AzureADGraphClient

public AzureADGraphClient(String clientId,
                          String clientSecret,
                          AADAuthenticationProperties aadAuthProps,
                          ServiceEndpointsProperties serviceEndpointsProps)

Method Detail

initAADMicrosoftGraphApiBool

private void initAADMicrosoftGraphApiBool(String endpointEnv)

getUserMembershipsV1

private String getUserMembershipsV1(String accessToken)
                             throws IOException

Throws:

IOException

getResponseStringFromConn

private static String getResponseStringFromConn(HttpURLConnection conn)
                                         throws IOException

Throws:

IOException

getGroups

public List<UserGroup> getGroups(String graphApiToken)
                          throws IOException

Throws:

IOException

loadUserGroups

private List<UserGroup> loadUserGroups(String graphApiToken)
                                throws IOException

Throws:

IOException

isMatchingUserGroupKey

private boolean isMatchingUserGroupKey(com.fasterxml.jackson.databind.JsonNode node)

Checks that the JSON Node is a valid User Group to extract User Groups from

Parameters:

node - - json node to look for a key/value to equate against the AADAuthenticationProperties.UserGroupProperties

Returns:

true if the json node contains the correct key, and expected value to identify a user group.

getGrantedAuthorities

public Set<org.springframework.security.core.GrantedAuthority> getGrantedAuthorities(String graphApiToken)
                                                                              throws IOException

Throws:

IOException

convertGroupsToGrantedAuthorities

public Set<org.springframework.security.core.GrantedAuthority> convertGroupsToGrantedAuthorities(List<UserGroup> groups)

Converts UserGroup list to Set of GrantedAuthorities

Parameters:

groups -

Returns:

isValidUserGroupToGrantAuthority

private boolean isValidUserGroupToGrantAuthority(UserGroup group)

Determines if this is a valid UserGroup to build to a GrantedAuthority.

If the AADAuthenticationProperties.UserGroupProperties#getAllowedGroups() or the AADAuthenticationProperties.getActiveDirectoryGroups() contains the UserGroup.getDisplayName() return true.

Parameters:

group - - User Group to check if valid to grant an authority to.

Returns:

true if either of the allowed-groups or active-directory-groups contains the UserGroup display name

acquireTokenForGraphApi

public com.microsoft.aad.msal4j.IAuthenticationResult acquireTokenForGraphApi(String idToken,
                                                                              String tenantId)
                                                                       throws ServiceUnavailableException

Throws:

ServiceUnavailableException