JWTAuthWebFilter

Pragya Keshap answered on February 22, 2023 Popularity 2/10 Helpfulness 1/10

answer JWTAuthWebFilter

JWTAuthWebFilter

Comment

public class JWTAuthWebFilter implements WebFilter {

  private Function<ServerWebExchange, Mono<Authentication>> jwtAuthConverter = new JWTAuthConverter();
  private final ReactiveAuthenticationManager reactiveAuthManager = new JWTReactiveAuthManager();
  private ServerAuthenticationSuccessHandler authSuccessHandler = new WebFilterChainServerAuthenticationSuccessHandler();
  private ServerSecurityContextRepository securityContextRepository = NoOpServerSecurityContextRepository.getInstance();

  @Override
  public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {
    return this.getAuthMatcher().matches(exchange)
      .filter(matchResult -> matchResult.isMatch())
      .flatMap(matchResult -> this.jwtAuthConverter.apply(exchange))
      .switchIfEmpty(chain.filter(exchange).then(Mono.empty()))
      .flatMap(token -> authenticate(exchange, chain, token));
  }

  private ServerWebExchangeMatcher getAuthMatcher(){
    List<ServerWebExchangeMatcher> matchers = new ArrayList<>(2);
    matchers.add(new PathPatternParserServerWebExchangeMatcher("/api/movie/**",HttpMethod.GET));
    matchers.add(new PathPatternParserServerWebExchangeMatcher("/api/movie/**",HttpMethod.POST));

    ServerWebExchangeMatcher authMatcher = ServerWebExchangeMatchers.matchers(new OrServerWebExchangeMatcher(matchers));
    return authMatcher;
  }

  private Mono<Void> authenticate(ServerWebExchange exchange,
                                  WebFilterChain chain, Authentication token) {
    WebFilterExchange webFilterExchange = new WebFilterExchange(exchange, chain);
    return this.reactiveAuthManager.authenticate(token)
      .flatMap(authentication -> onAuthSuccess(authentication, webFilterExchange));
  }

  private Mono<Void> onAuthSuccess(Authentication authentication, WebFilterExchange webFilterExchange) {
    ServerWebExchange exchange = webFilterExchange.getExchange();
    SecurityContextImpl securityContext = new SecurityContextImpl();
    securityContext.setAuthentication(authentication);
    return this.securityContextRepository.save(exchange, securityContext)
      .then(this.authSuccessHandler
        .onAuthenticationSuccess(webFilterExchange, authentication))
      .subscriberContext(ReactiveSecurityContextHolder.withSecurityContext(Mono.just(securityContext)));
  }
}

Popularity 2/10 Helpfulness 1/10 Language java

Source: Grepper

Tags: java

Link to this answer
Share Copy Link

Contributed on Feb 22 2023

Pragya Keshap

0 Answers Avg Quality 2/10

JWTAuthWebFilter

Contents

More Related Answers

JWTAuthWebFilter

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.