mirror of
https://gitee.com/yadong.zhang/JustAuth.git
synced 2026-01-07 19:31:48 +08:00
81 lines
2.8 KiB
Java
81 lines
2.8 KiB
Java
package me.zhyd.oauth.utils;
|
||
|
||
import me.zhyd.oauth.config.AuthConfig;
|
||
import me.zhyd.oauth.config.AuthSource;
|
||
import me.zhyd.oauth.exception.AuthException;
|
||
import me.zhyd.oauth.model.AuthCallback;
|
||
import me.zhyd.oauth.model.AuthResponseStatus;
|
||
|
||
/**
|
||
* 授权配置类的校验器
|
||
*
|
||
* @author yadong.zhang (yadong.zhang0415(a)gmail.com)
|
||
* @since 1.6.1-beta
|
||
*/
|
||
public class AuthChecker {
|
||
|
||
/**
|
||
* 是否支持第三方登录
|
||
*
|
||
* @param config config
|
||
* @param source source
|
||
* @return true or false
|
||
* @since 1.6.1-beta
|
||
*/
|
||
public static boolean isSupportedAuth(AuthConfig config, AuthSource source) {
|
||
boolean isSupported = StringUtils.isNotEmpty(config.getClientId()) && StringUtils.isNotEmpty(config.getClientSecret()) && StringUtils.isNotEmpty(config.getRedirectUri());
|
||
if (isSupported && AuthSource.ALIPAY == source) {
|
||
isSupported = StringUtils.isNotEmpty(config.getAlipayPublicKey());
|
||
}
|
||
if (isSupported && AuthSource.STACK_OVERFLOW == source) {
|
||
isSupported = StringUtils.isNotEmpty(config.getStackOverflowKey());
|
||
}
|
||
return isSupported;
|
||
}
|
||
|
||
/**
|
||
* 检查配置合法性。针对部分平台， 对redirect uri有特定要求。一般来说redirect uri都是http://，而对于facebook平台， redirect uri 必须是https的链接
|
||
*
|
||
* @param config config
|
||
* @param source source
|
||
* @since 1.6.1-beta
|
||
*/
|
||
public static void checkConfig(AuthConfig config, AuthSource source) {
|
||
String redirectUri = config.getRedirectUri();
|
||
if (!GlobalAuthUtil.isHttpProtocol(redirectUri) && !GlobalAuthUtil.isHttpsProtocol(redirectUri)) {
|
||
throw new AuthException(AuthResponseStatus.ILLEGAL_REDIRECT_URI);
|
||
}
|
||
// facebook的回调地址必须为https的链接
|
||
if (AuthSource.FACEBOOK == source && !GlobalAuthUtil.isHttpsProtocol(redirectUri)) {
|
||
throw new AuthException(AuthResponseStatus.ILLEGAL_REDIRECT_URI);
|
||
}
|
||
// 支付宝在创建回调地址时，不允许使用localhost或者127.0.0.1
|
||
if (AuthSource.ALIPAY == source && GlobalAuthUtil.isLocalHost(redirectUri)) {
|
||
throw new AuthException(AuthResponseStatus.ILLEGAL_REDIRECT_URI);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 校验回调传回的code
|
||
*
|
||
* @param code 回调时传回的code
|
||
* @since 1.8.0
|
||
*/
|
||
public static void checkCode(String code) {
|
||
if (StringUtils.isEmpty(code)) {
|
||
throw new AuthException(AuthResponseStatus.ILLEGAL_CODE);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 校验回调传回的state
|
||
*
|
||
* @param authCallback 回调
|
||
*/
|
||
public static void checkState(AuthCallback authCallback) {
|
||
if (!authCallback.checkState()) {
|
||
throw new AuthException(AuthResponseStatus.ILLEGAL_REQUEST);
|
||
}
|
||
}
|
||
}
|