* This is scheduled to get fired everyday, at midnight. */ @Scheduled(cron = "0 0 0 * * ?") public void removeOldPersistentTokens() { LocalDate now = LocalDate.now(); persistentTokenRepository.findByTokenDateBefore(now.minusMonths(1)).forEach(token -> { log.debug("Deleting token {}", token.getSeries());<% if (databaseType === 'sql') { %> User user = token.getUser(); user.getPersistentTokens().remove(token);<% } %> persistentTokenRepository.delete(token); }); } <%_ } _%> <%_ if (authenticationType !== 'oauth2' && (databaseType === 'sql' || databaseType === 'mongodb' || databaseType === 'couchbase')) { _%> /** * Not activated users should be automatically deleted after 3 days. *

* This is scheduled to get fired everyday, at 01:00 (am). */ @Scheduled(cron = "0 0 1 * * ?") public void removeNotActivatedUsers() { List users = userRepository.findAllByActivatedIsFalseAndCreatedDateBefore(Instant.now().minus(3, ChronoUnit.DAYS)); for (User user : users) { log.debug("Deleting not activated user {}", user.getLogin()); userRepository.delete(user); <%_ if (searchEngine === 'elasticsearch') { _%> userSearchRepository.delete(user); <%_ } _%> <%_ if (cacheManagerIsAvailable === true) { _%> cacheManager.getCache(UserRepository.USERS_BY_LOGIN_CACHE).evict(user.getLogin()); cacheManager.getCache(UserRepository.USERS_BY_EMAIL_CACHE).evict(user.getEmail()); <%_ } _%> } } <%_ } if (databaseType === 'sql' || databaseType === 'mongodb' || databaseType === 'couchbase') { _%> /** * @return a list of all the authorities */ public List getAuthorities() { return authorityRepository.findAll().stream().map(Authority::getName).collect(Collectors.toList()); } <%_ } _%> <%_ if (authenticationType === 'oauth2' && applicationType === 'monolith') { _%> /** * Returns the user for a OAuth2 authentication. * Synchronizes the user in the local repository * * @param authentication OAuth2 authentication * @return the user from the authentication */ public UserDTO getUserFromAuthentication(OAuth2Authentication authentication) { Map details = (Map) authentication.getUserAuthentication().getDetails(); User user = getUser(details); Set<<% if (databaseType === 'couchbase') { %>String<% } else { %>Authority<% } %>> userAuthorities = extractAuthorities(authentication, details); user.setAuthorities(userAuthorities); // convert Authorities to GrantedAuthorities Set grantedAuthorities = userAuthorities.stream() <%_ if (databaseType !== 'couchbase') { _%> .map(Authority::getName) <%_ } _%> .map(SimpleGrantedAuthority::new) .collect(Collectors.toSet()); UsernamePasswordAuthenticationToken token = getToken(details, user, grantedAuthorities); authentication = new OAuth2Authentication(authentication.getOAuth2Request(), token); SecurityContextHolder.getContext().setAuthentication(authentication); return new UserDTO(syncUserWithIdP(details, user)); } private User syncUserWithIdP(Map details, User user) { // save account in to sync users between IdP and JHipster's local database Optional existingUser = userRepository.findOneByLogin(user.getLogin()); if (existingUser.isPresent()) { // if IdP sends last updated information, use it to determine if an update should happen if (details.get("updated_at") != null) { Instant dbModifiedDate = existingUser.get().getLastModifiedDate(); Instant idpModifiedDate = new Date(Long.valueOf((Integer) details.get("updated_at"))).toInstant(); if (idpModifiedDate.isAfter(dbModifiedDate)) { log.debug("Updating user '{}' in local database...", user.getLogin()); updateUser(user.getFirstName(), user.getLastName(), user.getEmail(), user.getLangKey(), user.getImageUrl()); } // no last updated info, blindly update } else { log.debug("Updating user '{}' in local database...", user.getLogin()); updateUser(user.getFirstName(), user.getLastName(), user.getEmail(), user.getLangKey(), user.getImageUrl()); } } else { log.debug("Saving user '{}' in local database...", user.getLogin()); userRepository.save(user); <%_ if (cacheManagerIsAvailable === true) { _%> cacheManager.getCache(UserRepository.USERS_BY_LOGIN_CACHE).evict(user.getLogin()); cacheManager.getCache(UserRepository.USERS_BY_EMAIL_CACHE).evict(user.getEmail()); <%_ } _%> } return user; } private static UsernamePasswordAuthenticationToken getToken(Map details, User user, Set grantedAuthorities) { // create UserDetails so #{principal.username} works UserDetails userDetails = new org.springframework.security.core.userdetails.User(user.getLogin(), "N/A", grantedAuthorities); // update Spring Security Authorities to match groups claim from IdP UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken( userDetails, "N/A", grantedAuthorities); token.setDetails(details); return token; } private static Set<<% if (databaseType === 'couchbase') { %>String<% } else { %>Authority<% } %>> extractAuthorities(OAuth2Authentication authentication, Map details) { Set<<% if (databaseType === 'couchbase') { %>String<% } else { %>Authority<% } %>> userAuthorities; // get roles from details if (details.get("roles") != null) { userAuthorities = extractAuthorities((List) details.get("roles")); // if roles don't exist, try groups } else if (details.get("groups") != null) { userAuthorities = extractAuthorities((List) details.get("groups")); } else { userAuthorities = authoritiesFromStringStream( authentication.getAuthorities().stream() .map(GrantedAuthority::getAuthority) ); } return userAuthorities; } private static User getUser(Map details) { User user = new User(); user.setLogin((String) details.get("preferred_username")); if (details.get("given_name") != null) { user.setFirstName((String) details.get("given_name")); } if (details.get("family_name") != null) { user.setLastName((String) details.get("family_name")); } if (details.get("email_verified") != null) { user.setActivated((Boolean) details.get("email_verified")); } if (details.get("email") != null) { user.setEmail((String) details.get("email")); } if (details.get("langKey") != null) { user.setLangKey((String) details.get("langKey")); } else if (details.get("locale") != null) { String locale = (String) details.get("locale"); String langKey = locale.substring(0, locale.indexOf("-")); user.setLangKey(langKey); } if (details.get("picture") != null) { user.setImageUrl((String) details.get("picture")); } return user; } private static Set<<% if (databaseType === 'couchbase') { %>String<% } else { %>Authority<% } %>> extractAuthorities(List values) { return authoritiesFromStringStream( values.stream().filter(role -> role.startsWith("ROLE_")) ); } private static Set<<% if (databaseType === 'couchbase') { %>String<% } else { %>Authority<% } %>> authoritiesFromStringStream(Stream strings) { return strings<% if (databaseType !== 'couchbase') { %> .map(string -> { Authority auth = new Authority(); auth.setName(string); return auth; })<% } %>.collect(Collectors.toSet()); } <%_ } _%> }