84 lines
2.7 KiB
Java
84 lines
2.7 KiB
Java
package com.cloudhandson.vpdbackoffice.web;
|
|
|
|
import com.cloudhandson.vpdbackoffice.domain.token.TokenIssueCommand;
|
|
import com.cloudhandson.vpdbackoffice.mapper.UserMapper;
|
|
import com.cloudhandson.vpdbackoffice.service.BearerTokenService;
|
|
import java.time.Clock;
|
|
import java.time.LocalDateTime;
|
|
import java.time.OffsetDateTime;
|
|
import java.time.ZoneId;
|
|
import java.time.temporal.ChronoUnit;
|
|
import java.time.format.DateTimeFormatter;
|
|
import org.springframework.stereotype.Controller;
|
|
import org.springframework.ui.Model;
|
|
import org.springframework.web.bind.annotation.GetMapping;
|
|
import org.springframework.web.bind.annotation.PostMapping;
|
|
import org.springframework.web.bind.annotation.RequestParam;
|
|
import org.springframework.web.servlet.mvc.support.RedirectAttributes;
|
|
|
|
@Controller
|
|
public class TokenController {
|
|
|
|
private final BearerTokenService tokenService;
|
|
private final UserMapper userMapper;
|
|
private final Clock clock;
|
|
|
|
public TokenController(BearerTokenService tokenService, UserMapper userMapper, Clock clock) {
|
|
this.tokenService = tokenService;
|
|
this.userMapper = userMapper;
|
|
this.clock = clock;
|
|
}
|
|
|
|
@GetMapping("/tokens")
|
|
public String tokens(
|
|
@RequestParam(defaultValue = "false") boolean includeInactive,
|
|
Model model
|
|
) {
|
|
model.addAttribute("tokens", tokenService.findAll(includeInactive));
|
|
model.addAttribute("includeInactive", includeInactive);
|
|
model.addAttribute("users", userMapper.findAll());
|
|
model.addAttribute("defaultExpiresAt", defaultExpiresAt());
|
|
return "tokens";
|
|
}
|
|
|
|
@PostMapping("/tokens")
|
|
public String issue(
|
|
@RequestParam long userId,
|
|
@RequestParam String expiresAt,
|
|
@RequestParam(required = false) String description,
|
|
RedirectAttributes redirectAttributes
|
|
) {
|
|
var issued = tokenService.issueToken(new TokenIssueCommand(
|
|
userId,
|
|
parseBrowserDateTime(expiresAt),
|
|
description
|
|
));
|
|
redirectAttributes.addFlashAttribute("issued", issued);
|
|
return "redirect:/tokens";
|
|
}
|
|
|
|
@PostMapping("/tokens/revoke")
|
|
public String revoke(
|
|
@RequestParam long keyId,
|
|
@RequestParam(required = false) String reason,
|
|
RedirectAttributes redirectAttributes
|
|
) {
|
|
tokenService.revokeToken(keyId, reason);
|
|
redirectAttributes.addFlashAttribute("message", "토큰을 회수했습니다.");
|
|
return "redirect:/tokens";
|
|
}
|
|
|
|
private String defaultExpiresAt() {
|
|
return LocalDateTime.now(clock.withZone(ZoneId.systemDefault()))
|
|
.plusMonths(1)
|
|
.truncatedTo(ChronoUnit.MINUTES)
|
|
.format(DateTimeFormatter.ISO_LOCAL_DATE_TIME);
|
|
}
|
|
|
|
private OffsetDateTime parseBrowserDateTime(String expiresAt) {
|
|
return LocalDateTime.parse(expiresAt)
|
|
.atZone(ZoneId.systemDefault())
|
|
.toOffsetDateTime();
|
|
}
|
|
}
|