feat(jans-auth-server): agama consent script - set consent_flow into …

…the session Signed-off-by: YuriyZ <[email protected]>
JanssenProject · Jan 22, 2025 · f99a039 · f99a039
1 parent 37f0c36
commit f99a039
Showing 1 changed file with 52 additions and 5 deletions.
diff --git a/...erver/src/main/java/io/jans/as/server/authorize/ws/rs/ConsentGatheringSessionService.java b/...erver/src/main/java/io/jans/as/server/authorize/ws/rs/ConsentGatheringSessionService.java
@@ -8,20 +8,23 @@
 
 import io.jans.as.common.model.common.User;
 import io.jans.as.common.model.registration.Client;
-import io.jans.as.model.util.Util;
 import io.jans.as.common.model.session.SessionId;
+import io.jans.as.model.configuration.AppConfiguration;
+import io.jans.as.model.util.Util;
 import io.jans.as.server.service.ClientService;
 import io.jans.as.server.service.CookieService;
 import io.jans.as.server.service.SessionIdService;
 import io.jans.orm.exception.EntryPersistenceException;
-import org.apache.commons.lang3.StringUtils;
-import org.slf4j.Logger;
-
 import jakarta.ejb.Stateless;
 import jakarta.inject.Inject;
 import jakarta.inject.Named;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
+import org.apache.commons.lang3.StringUtils;
+import org.slf4j.Logger;
+
+import java.util.List;
+import java.util.Map;
 
 /**
  * @author Yuriy Movchan
@@ -43,6 +46,9 @@ public class ConsentGatheringSessionService {
     @Inject
     private ClientService clientService;
 
+    @Inject
+    private AppConfiguration appConfiguration;
+
     public SessionId getConnectSession(HttpServletRequest httpRequest) {
         String cookieId = cookieService.getSessionIdFromCookie(httpRequest);
         log.trace("Cookie - session_id: {}", cookieId);
@@ -141,14 +147,55 @@ public void setStep(int step, SessionId session) {
         session.getSessionAttributes().put("step", Integer.toString(step));
     }
 
-    public void configure(SessionId session, String scriptName, String clientId, String state) {
+    public String getAcr(SessionId session) {
+        return session.getSessionAttributes().get("acr");
+    }
+
+    public void setAcr(List<String> acrValues, SessionId session) {
+        session.getSessionAttributes().put("acr", Util.listAsString(acrValues));
+    }
+
+    public String getConsentFlow(SessionId session) {
+        return session.getSessionAttributes().get("consent_flow");
+    }
+
+    public void setConsentFlow(String consentFlow, SessionId session) {
+        session.getSessionAttributes().put("consent_flow", consentFlow);
+    }
+
+    public void configure(SessionId session, String scriptName, String clientId, String state, List<String> acrValues) {
         setStep(1, session);
         setScriptName(session, scriptName);
 
+        setAcr(acrValues, session);
+        setConsentFlow(determineConsentFlow(acrValues), session);
         setClientId(session, clientId);
         persist(session);
     }
 
+    private String determineConsentFlow(List<String> acrValues) {
+        if (acrValues == null || acrValues.isEmpty()) {
+            log.debug("determineConsentFlow - 'acrValues' is empty, return null for 'consent_flow'");
+            return null;
+        }
+
+        final Map<String, String> acrToConsent = appConfiguration.getAcrToConsentScriptNameMapping();
+        if (acrToConsent == null || acrToConsent.isEmpty()) {
+            log.debug("determineConsentFlow - 'acrToConsentScriptNameMapping' configuration property is empty, return null for 'consent_flow'");
+            return null;
+        }
+
+        for (String acr : acrValues) {
+            final String consentFlow = acrToConsent.get(acr);
+            if (StringUtils.isNotBlank(consentFlow)) {
+                log.debug("determineConsentFlow - found consent_flow: {} for acr: {}", consentFlow, acr);
+                return consentFlow;
+            }
+        }
+        log.debug("determineConsentFlow - unable to find any match for acr: {}, acrToConsentScriptNameMapping: {}", acrValues, acrToConsent);
+        return null;
+    }
+
     public boolean isStepPassed(SessionId session, Integer step) {
         return Boolean.parseBoolean(session.getSessionAttributes().get(String.format("consent_step_passed_%d", step)));
     }