[SLO] Implement for discoverOIDC method

(cherry picked from commit 76ee41a238ad3e626148f3a236f20c6cd370df3a)
This commit is contained in:
Dat PHAM HOANG
2023-03-27 15:32:11 +02:00
committed by Dat Vu
parent c3a17dbf37
commit c45118021e
6 changed files with 68 additions and 23 deletions
@@ -37,6 +37,13 @@ class AuthenticationOIDCDataSourceImpl extends AuthenticationOIDCDataSource {
}).catchError(_exceptionThrower.throwException);
}
@override
Future<OIDCDiscoveryResponse> discoverOIDC(OIDCConfiguration oidcConfiguration) {
return Future.sync(() async {
return await _oidcHttpClient.discoverOIDC(oidcConfiguration);
}).catchError(_exceptionThrower.throwException);
}
@override
Future<TokenOIDC> getTokenOIDC(String clientId, String redirectUrl, String discoveryUrl, List<String> scopes) {
return Future.sync(() async {
@@ -91,9 +98,9 @@ class AuthenticationOIDCDataSourceImpl extends AuthenticationOIDCDataSource {
}
@override
Future<bool> logout(TokenId tokenId, OIDCConfiguration config) {
Future<bool> logout(TokenId tokenId, OIDCConfiguration config, OIDCDiscoveryResponse oidcRescovery) {
return Future.sync(() async {
return await _authenticationClient.logoutOidc(tokenId, config);
return await _authenticationClient.logoutOidc(tokenId, config, oidcRescovery);
}).catchError(_exceptionThrower.throwException);
}
@@ -3,6 +3,7 @@ import 'package:core/utils/app_logger.dart';
import 'package:flutter_appauth/flutter_appauth.dart';
import 'package:get/get.dart';
import 'package:model/oidc/oidc_configuration.dart';
import 'package:model/oidc/response/oidc_discovery_response.dart';
import 'package:model/oidc/token_id.dart';
import 'package:model/oidc/token_oidc.dart';
import 'package:tmail_ui_user/features/login/data/extensions/authentication_token_extension.dart';
@@ -43,11 +44,19 @@ class AuthenticationClientMobile implements AuthenticationClientBase {
}
@override
Future<bool> logoutOidc(TokenId tokenId, OIDCConfiguration config) async {
Future<bool> logoutOidc(TokenId tokenId, OIDCConfiguration config, OIDCDiscoveryResponse oidcRescovery) async {
final authorizationServiceConfiguration = oidcRescovery.authorizationEndpoint == null || oidcRescovery.tokenEndpoint == null
? null
: AuthorizationServiceConfiguration(
authorizationEndpoint: oidcRescovery.authorizationEndpoint!,
tokenEndpoint: oidcRescovery.tokenEndpoint!,
endSessionEndpoint: oidcRescovery.endSessionEndpoint);
final endSession = await _appAuth.endSession(EndSessionRequest(
idTokenHint: tokenId.uuid,
postLogoutRedirectUrl: config.logoutRedirectUrl,
discoveryUrl: config.discoveryUrl
discoveryUrl: config.discoveryUrl,
serviceConfiguration: authorizationServiceConfiguration
));
log('AuthenticationClientMobile::logoutOidc(): ${endSession?.state}');
return endSession?.state?.isNotEmpty == true;
@@ -1,6 +1,7 @@
import 'package:core/utils/app_logger.dart';
import 'package:get/get.dart';
import 'package:model/oidc/response/oidc_discovery_response.dart';
import 'package:tmail_ui_user/features/login/data/extensions/authentication_token_extension.dart';
import 'package:tmail_ui_user/features/login/domain/extensions/oidc_configuration_extensions.dart';
import 'package:tmail_ui_user/features/login/data/extensions/token_response_extension.dart';
@@ -45,11 +46,18 @@ class AuthenticationClientWeb implements AuthenticationClientBase {
}
@override
Future<bool> logoutOidc(TokenId tokenId, OIDCConfiguration config) async {
Future<bool> logoutOidc(TokenId tokenId, OIDCConfiguration config, OIDCDiscoveryResponse oidcRescovery) async {
final authorizationServiceConfiguration = oidcRescovery.authorizationEndpoint == null || oidcRescovery.tokenEndpoint == null
? null
: AuthorizationServiceConfiguration(
authorizationEndpoint: oidcRescovery.authorizationEndpoint!,
tokenEndpoint: oidcRescovery.tokenEndpoint!,
endSessionEndpoint: oidcRescovery.endSessionEndpoint);
final endSession = await _appAuthWeb.endSession(EndSessionRequest(
idTokenHint: tokenId.uuid,
postLogoutRedirectUrl: config.logoutRedirectUrl,
discoveryUrl: config.discoveryUrl
discoveryUrl: config.discoveryUrl,
serviceConfiguration: authorizationServiceConfiguration
));
return endSession != null;
}
@@ -7,6 +7,7 @@ import 'package:core/utils/app_logger.dart';
import 'package:model/oidc/oidc_configuration.dart';
import 'package:model/oidc/request/oidc_request.dart';
import 'package:model/oidc/response/oidc_response.dart';
import 'package:model/oidc/response/oidc_discovery_response.dart';
import 'package:tmail_ui_user/features/login/data/extensions/service_path_extension.dart';
import 'package:tmail_ui_user/features/login/data/network/config/oidc_constant.dart';
import 'package:tmail_ui_user/features/login/data/network/endpoint.dart';
@@ -47,4 +48,14 @@ class OIDCHttpClient {
scopes: OIDCConstant.oidcScope
);
}
Future<OIDCDiscoveryResponse> discoverOIDC(OIDCConfiguration configuration) async {
final result = await _dioClient.get(configuration.discoveryUrl);
log('OIDCHttpClient::discoverOIDC(): RESULT: $result');
if (result is Map<String, dynamic>) {
return OIDCDiscoveryResponse.fromJson(result);
} else {
return OIDCDiscoveryResponse.fromJson(jsonDecode(result));
}
}
}
@@ -1,5 +1,6 @@
import 'package:model/oidc/oidc_configuration.dart';
import 'package:model/oidc/request/oidc_request.dart';
import 'package:model/oidc/response/oidc_discovery_response.dart';
import 'package:model/oidc/response/oidc_response.dart';
import 'package:model/oidc/token_id.dart';
import 'package:model/oidc/token_oidc.dart';
@@ -21,6 +22,12 @@ class AuthenticationOIDCRepositoryImpl extends AuthenticationOIDCRepository {
return _oidcDataSource.getOIDCConfiguration(oidcResponse);
}
@override
Future<OIDCDiscoveryResponse> discoverOIDC(OIDCConfiguration oidcConfiguration) {
return _oidcDataSource.discoverOIDC(oidcConfiguration);
}
@override
Future<TokenOIDC> getTokenOIDC(String clientId, String redirectUrl, String discoveryUrl, List<String> scopes) {
return _oidcDataSource.getTokenOIDC(clientId, redirectUrl, discoveryUrl, scopes);
@@ -63,8 +70,8 @@ class AuthenticationOIDCRepositoryImpl extends AuthenticationOIDCRepository {
}
@override
Future<bool> logout(TokenId tokenId, OIDCConfiguration config) {
return _oidcDataSource.logout(tokenId, config);
Future<bool> logout(TokenId tokenId, OIDCConfiguration config, OIDCDiscoveryResponse oidcRescovery) {
return _oidcDataSource.logout(tokenId, config, oidcRescovery);
}
@override
@@ -1,10 +1,10 @@
import 'package:core/presentation/state/failure.dart';
import 'package:core/presentation/state/success.dart';
import 'package:core/utils/app_logger.dart';
import 'package:dartz/dartz.dart';
import 'package:model/account/authentication_type.dart';
import 'package:model/oidc/oidc_configuration.dart';
import 'package:model/oidc/response/oidc_discovery_response.dart';
import 'package:model/oidc/token_oidc.dart';
import 'package:tmail_ui_user/features/login/domain/exceptions/authentication_exception.dart';
import 'package:tmail_ui_user/features/login/domain/repository/account_repository.dart';
@@ -12,27 +12,29 @@ import 'package:tmail_ui_user/features/login/domain/repository/authentication_oi
import 'package:tmail_ui_user/features/manage_account/domain/state/log_out_oidc_state.dart';
class LogoutOidcInteractor {
final AccountRepository _accountRepository;
final AuthenticationOIDCRepository _authenticationOIDCRepository;
LogoutOidcInteractor(this._accountRepository, this._authenticationOIDCRepository);
LogoutOidcInteractor(
this._accountRepository, this._authenticationOIDCRepository);
Stream<Either<Failure, Success>> execute() async* {
try {
final currentAccount = await _accountRepository.getCurrentAccount();
log('LogoutOidcInteractor::execute(): currentAccount: $currentAccount');
if (currentAccount.authenticationType == AuthenticationType.oidc) {
final result = await Future.wait([
_authenticationOIDCRepository.getStoredTokenOIDC(currentAccount.id),
_authenticationOIDCRepository.getStoredOidcConfiguration()
]).then((result) async {
final tokenOidc = result.first as TokenOIDC;
final oidcConfig = result.last as OIDCConfiguration;
log('LogoutOidcInteractor::execute(): tokenOidc: ${tokenOidc.tokenId.uuid}');
log('LogoutOidcInteractor::execute(): oidcConfig: $oidcConfig');
return await _authenticationOIDCRepository.logout(tokenOidc.tokenId, oidcConfig);
});
final result = await _authenticationOIDCRepository.getStoredOidcConfiguration()
.then((oidcConfig) => Future.wait([
Future.value(oidcConfig),
_authenticationOIDCRepository.getStoredTokenOIDC(currentAccount.id),
_authenticationOIDCRepository.discoverOIDC(oidcConfig)
]))
.then((oidcParameters) async {
final oidcConfig = oidcParameters[0] as OIDCConfiguration;
final tokenOIDC = oidcParameters[1] as TokenOIDC;
final oidcDiscoveryResponse = oidcParameters[2] as OIDCDiscoveryResponse;
return await _authenticationOIDCRepository.logout(tokenOIDC.tokenId, oidcConfig, oidcDiscoveryResponse);
});
log('LogoutOidcInteractor::execute(): statusSuccess: $result');
if (result) {
yield Right<Failure, Success>(LogoutOidcSuccess());
@@ -40,11 +42,12 @@ class LogoutOidcInteractor {
yield Left<Failure, Success>(LogoutOidcFailure(null));
}
} else {
yield Left<Failure, Success>(LogoutOidcFailure(NotFoundAuthenticatedAccountException()));
yield Left<Failure, Success>(
LogoutOidcFailure(NotFoundAuthenticatedAccountException()));
}
} catch (e) {
log('LogoutOidcInteractor::execute(): EXCEPTION: $e');
yield Left<Failure, Success>(LogoutOidcFailure(e));
}
}
}
}