Finished Hands-On JWT

Author: jclingan

working/frontend/pom.xml

@@ -1,6 +1,7 @@
 <?xml version="1.0"?>
-<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
-    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" 
+  xmlns="http://maven.apache.org/POM/4.0.0" 
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
   <modelVersion>4.0.0</modelVersion>
   <groupId>org.acme</groupId>
   <artifactId>frontend</artifactId>
@@ -30,6 +31,10 @@
     </dependencies>
   </dependencyManagement>
   <dependencies>
+    <dependency>
+      <groupId>io.quarkus</groupId>
+      <artifactId>quarkus-smallrye-jwt</artifactId>
+    </dependency>
     <dependency>
       <groupId>io.quarkus</groupId>
       <artifactId>quarkus-resteasy</artifactId>

working/frontend/src/main/java/org/acme/FrontendResource.java

@@ -1,8 +1,11 @@
 package org.acme;
 
+import java.security.Principal;
 import java.util.Arrays;
 import java.util.List;
+import java.util.stream.Collectors;
 
+import javax.annotation.security.RolesAllowed;
 import javax.inject.Inject;
 import javax.ws.rs.GET;
 import javax.ws.rs.Path;
@@ -11,6 +14,7 @@
 
 import org.eclipse.microprofile.faulttolerance.CircuitBreaker;
 import org.eclipse.microprofile.faulttolerance.Fallback;
+import org.eclipse.microprofile.jwt.JsonWebToken;
 import org.eclipse.microprofile.metrics.MetricUnits;
 import org.eclipse.microprofile.metrics.annotation.Counted;
 import org.eclipse.microprofile.metrics.annotation.Gauge;
@@ -29,12 +33,34 @@ public class FrontendResource {
     @RestClient
     StudentRestClient student;
 
+    @Inject
+    Principal principal;
+
+    @Inject
+    JsonWebToken token;
+
+    @RolesAllowed("user")
+    @GET
+    @Path("/tokeninfo")
+    @Produces(MediaType.TEXT_PLAIN)
+    public String tokeninfo() {
+        String string = "Principal: " + principal.getName();
+        string += ",\n";
+        string += token.getClaimNames()
+        .stream()
+        .map(claim -> "\n " + claim + ": " + token.getClaim(claim))
+        .collect(Collectors.toList())
+        .toString();
+        return string;
+    }
+
     @GET
     @Produces(MediaType.TEXT_PLAIN)
     public String hello() {
         return student.hello();
     }
 
+    @RolesAllowed("admin")
     @SimplyTimed(absolute = true, name = "listStudentsTime", displayName = "FrontendResource.listStudents()")
     // @Fallback(value = ListStudentsFallbackHandler.class)
     @Fallback(fallbackMethod = "listStudentsFallback")

working/frontend/src/main/java/org/acme/StudentRestClient.java

@@ -7,8 +7,10 @@
 import javax.ws.rs.Produces;
 import javax.ws.rs.core.MediaType;
 
+import org.eclipse.microprofile.rest.client.annotation.RegisterClientHeaders;
 import org.eclipse.microprofile.rest.client.inject.RegisterRestClient;
 
+@RegisterClientHeaders
 @RegisterRestClient(configKey = "StudentService")
 @Path("/student")
 public interface StudentRestClient {

working/frontend/src/main/resources/META-INF/microprofile-config.properties

@@ -10,4 +10,8 @@ StudentService/mp-rest/uri=http://localhost:8082
 
 # org.acme.FrontendResource/listStudents/Timeout/value=3000
 
-quarkus.resteasy.metrics.enabled=true
+quarkus.resteasy.metrics.enabled=true
+
+org.eclipse.microprofile.rest.client.propagateHeaders=Authorization
+mp.jwt.verify.issuer=airhacks
+mp.jwt.verify.publickey=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBR6TwVxolT5E2emnQEwqJztmeWRThU4ZA3V9+4vjOXoNmSKWrLfqLaKuMric9opYQi86yO1o0qChkAnlRY7ZytcaFqcehYOSAhcghYNn4Wzi70D2lJHj/YflFKdssySyNzqMIBMxNWZWx8kIVDRrVamsmF2Fo4Dg72ce8KiMSlqkWrHiSbfWpa2aQru9dEhErJPf05fGzQWwtvOvtLCp/tLXq7GmTE2XJJdiCk3CdE3OP/FQRWyeRtHk6Uq4hjzXTX6Wnrb7xDZCjQubfWYq9yoINet1eMFWFUXRsAJQbMJKIstcCvwmO35iPjFrftWTADOh3pzIARVqWwupDN7fwIDAQAB

working/student/pom.xml

@@ -1,6 +1,7 @@
 <?xml version="1.0"?>
-<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
-    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" 
+  xmlns="http://maven.apache.org/POM/4.0.0" 
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
   <modelVersion>4.0.0</modelVersion>
   <groupId>org.acme</groupId>
   <artifactId>student</artifactId>
@@ -30,6 +31,10 @@
     </dependencies>
   </dependencyManagement>
   <dependencies>
+    <dependency>
+      <groupId>io.quarkus</groupId>
+      <artifactId>quarkus-smallrye-jwt</artifactId>
+    </dependency>
     <dependency>
       <groupId>io.quarkus</groupId>
       <artifactId>quarkus-resteasy</artifactId>

working/student/src/main/java/org/acme/StudentResource.java

@@ -4,6 +4,7 @@
 import java.util.List;
 import java.util.concurrent.TimeUnit;
 
+import javax.annotation.security.RolesAllowed;
 import javax.inject.Inject;
 import javax.ws.rs.GET;
 import javax.ws.rs.Path;
@@ -28,6 +29,7 @@ public String hello() {
         return "Howdy";
     }
 
+    @RolesAllowed("admin")
     @GET
     @Path("/list")
     @Produces(MediaType.APPLICATION_JSON)

working/student/src/main/resources/META-INF/microprofile-config.properties

@@ -1,3 +1,6 @@
 # delay=2500
 quarkus.http.port=8082
-students=Duke,John,Jane,Arun,Christina
+students=Duke,John,Jane,Arun,Christina
+
+mp.jwt.verify.issuer=airhacks
+mp.jwt.verify.publickey=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBR6TwVxolT5E2emnQEwqJztmeWRThU4ZA3V9+4vjOXoNmSKWrLfqLaKuMric9opYQi86yO1o0qChkAnlRY7ZytcaFqcehYOSAhcghYNn4Wzi70D2lJHj/YflFKdssySyNzqMIBMxNWZWx8kIVDRrVamsmF2Fo4Dg72ce8KiMSlqkWrHiSbfWpa2aQru9dEhErJPf05fGzQWwtvOvtLCp/tLXq7GmTE2XJJdiCk3CdE3OP/FQRWyeRtHk6Uq4hjzXTX6Wnrb7xDZCjQubfWYq9yoINet1eMFWFUXRsAJQbMJKIstcCvwmO35iPjFrftWTADOh3pzIARVqWwupDN7fwIDAQAB