OAuth(3)Sample Provider Implementation in JAVA

1、oauth(3)sample provider implementation in javaoauth(3)sample prover implementation in javathe servelts for request_token, access_token, authorize and resources:accesstokenhttprequesthandler.java:package com.silly.easyoauthprovider.servlets;import java.io.ioexception;import java.io.outputseam;import

2、javax.servlet.servletexception;import javax.servlet.http.httpservletrequest;import javax.servlet.http.httpservletresponse;import net.oauth.oauth;import net.oauth.oauthaccessor;import net.oauth.oauthmessage;import net.oauth.oauthproblemexception;import net.oauth.oauthvalidator;import net.oauth.server

3、.oauthservlet;import org.springframework.web.httprequesthandler;import com.sillycat.easyoauthprovider.plugins.oauth.oauthprovider;public class accesstokenhttprequesthandler implements httprequesthandler private oauthprovider oauthprovider; private oauthvalidator oauthvalidator; public void oauthprov

4、ider(oauthprovider oauthprovider) this.oauthprovider = oauthprovider; public void setoauthvalidator(oauthvalidator oauthvalidator) this.oauthvalidator = oauthvalidator; public void handlerequest(httpservletrequest request, httpservletresponse response) throws servletexception, ioexception processreq

5、uest(request, response); public void processrequest(httpservletrequest request, httpservletresponse response) throws ioexception, servletexception try oauthmessage requestmessage = oauthservlet .getmessage(request, null); oauthaccessor accessor = oauthprovider.getaccessor(requestmessage); oauthvalid

6、ator.valimessage(requestmessage, accessor); / make re token is authoriz if (!boolean.true.equa(accessor.getproperty(authorized) oauthproblemexception problem = new oauthproblemexception( peission_denied); throw problem; / generate access token and secret oauthprovider.generateaccesstoken(accessor);

7、response.setcontenttype(tt/plain); outputstream out = response.getoutputstream(); oauth.formeode(oauth.newlist(oauth_token, accessor.accesstoken, oauth_token_secret, accessor.tokensecret), out); out.close(); catch (exception e) e.printstacktrace(); authorizationhttprequesthandler.java:package com.si

8、llycat.easyoauthprovider.servlets;import java.io.ioexception;import java.io.printwriter;import javax.servlet.servletexception;import javax.servlet.http.httpservletrequest;import javax.servlet.http.httpservletresponse;import net.oauth.oauth;import net.oauth.oauthaccessor;import net.oauth.oauthmessage

9、;import net.oauth.server.oauthservlet;import org.springframework.web.httprequesthandler;import com.sillycat.easyoauthprovider.model.user;import com.sillycat.easyoauthprovider.plugins.oauth.oauthprovider;public class authorizationhttprequesthandler implements httprequesthandler private oauthprovider

10、oauthprovider; public void setoauthprovider(oauthprovider oauthprovider) this.oauthprovider = oauthprovider; public void handlerequest(httpservletrequest request, httpservletresponse response) throws servletexception, ioexception if (get.equals(request.getmethod() try oauthmessage requestmessage = o

11、authservlet.getmessage(request,null); oauthaccessor accessor = oauthprovider.getaccessor(requestmessage); if (boolean.true.equals(accessor.getproperty(authorized) / already authorized send the user back returntoconsumer(request, response, accessor); else sendtoauthorizepage(request, response, access

12、or); catch (exception e) e.printstacktrace(); else if (post.equals(request.getmethod() try oauthmessage requestmessage = oauthservlet.getmessage(request,null); oauthaccessor accessor = oauthprovider.getaccessor(requestmessage); string userid = request.getparameter(userid); string userpwd = request.g

13、etparameter(userpwd); if (userid = null | userpwd = null) sendtoauthorizepage(request, response, accessor); /if the userid is not equal to password if(!userid.equalsignorecase(userpwd) sendtoauthorizepage(request, response, accessor); user user = new user(); user.setusername(userid); user.setuserpas

14、sword(userpwd); user.setemailaress(userid + ); / set userid in accessor and mark it as authorized oauthprovider.markasauthorized(accessor, user); returntoconsumer(request, response, accessor); catch (exception e) e.printstacktrace(); private void sendtoauthorizepage(httpservletrequest request, https

15、ervletresponse response, oauthaccessor accessor) throws ioexception, servletexception string callback = request.getparameter(oauth_callback); if (callback = null | callback.length() = 0) callback = none; string consumer_description = (string) accessor.consumer.getproperty(description); request.setat

16、tribute(cons_desc, consumer_description); request.setattribute(callback, callback); request.setattribute(token, accessor.requesttoken); request.getrequestdiser / (/authorize.jsp).forward(request, response); private void returntoconsumer(httpservletrequest request, httpservletresponse response, oauth

17、accessor accessor) throws ioexception, servletexception / send the user back to sites callbackurl string callback = request.getparameter(oauth_callback); if (none.equals(callback) accessor.consumer.callbackurl != null accessor.consumer.callbackurl.length() 0) / first check if we have something in ou

18、r properties callback = accessor.consumer.callbackurl; if (none.equals(callback) / no call back it must be a client response.setcontenttype(text/plain); printwriter out = response.getwriter(); out.print(you have successfully authorized + accessor.consumer.getproperty(description) + . please close th

19、is browser window and click continue + in the client.); out.close(); else / if callback is not pas in, use the callback from config if (callback = null | callback.length() = 0) callback = accessor.consumer.callbackurl; string token = accessor.requesttoken; if (token != null) callback = oauth.addpara

20、meters(callback, oauth_token, token, oauth.oauth_verifier, true); response.setstatus(httpservletresponse.sc_moved_temporarily); response.setheader(location, callback); requesttokenhttprequesthandler.java:package com.sillycat.easyoauthprovider.servlets;import java.io.ioexception;import java.io.output

21、stream;import javax.servlet.servletexception;import javax.servlet.http.httpservletrequest;import javax.servlet.http.httpservletresponse;import net.oauth.oauth;import net.oauth.oauthaccessor;import net.oauth.oauthconsumer;import net.oauth.oauthmessage;import net.oauth.oauthvalidator;import net.oauth.

22、server.oauthservlet;import org.springframework.web.httprequesthandler;import com.sillycat.easyoauthprovider.plugins.oauth.oauthprovider;public class requesttokenhttprequesthandler implements httprequesthandler private oauthprovider oauthprovider; private oauthvalidator oauthvalidator; public void se

23、toauthprovider(oauthprovider oauthprovider) this.oauthprovider = oauthprovider; public void setoauthvalidator(oauthvalidator oauthvalidator) this.oauthvalidator = oauthvalidator; public void handlerequest(httpservletrequest request, httpservletresponse response) throws servletexception, ioexception

24、processrequest(request, response); public void processrequest(httpservletrequest request, httpservletresponse response) throws ioexception, servletexception try oauthmessage requestmessage = oauthservlet.getmessage(request, null); oauthconsumer consumer = oauthprovider.getconsumer(requestmessage); o

25、authaccessor accessor = new oauthaccessor(consumer); oauthvalidator.validatemessage(requestmessage, accessor); / support the variable accessor secret extension / described in string secret = requestmessage.getparameter(oauth_accessor_secret); if (secret != null) accessor.setproperty(oauthconsumer.ac

26、cessor_secret, secret); / generate request_token and secret oauthprovider.generaterequesttoken(accessor); response.setcontenttype(text/plain); outputstream out = response.getoutputstream();oauth.formencode(oauth.newlist(oauth_token,accessor.requesttoken, oauth_token_secret,accessor.tokensecret), out

27、); out.close(); catch (exception e) e.printstacktrace(); userhttprequesthandler.java:package com.sillycat.easyoauthprovider.servlets;import java.io.ioexception;import java.io.printwriter;import javax.servlet.servletexception;import javax.servlet.http.httpservletrequest;import javax.servlet.http.http

28、servletresponse;import net.oauth.oauthaccessor;import net.oauth.oauthmessage;import net.oauth.oauthvalidator;import net.oauth.server.oauthservlet;import org.springframework.web.httprequesthandler;import com.sillycat.easyoauthprovider.model.user;import com.sillycat.easyoauthprovider.plugins.oauth.oauthprovider;public class userhttpr