paseto-toolkit / jpaseto Goto Github PK

public static void main(String[] args) {
	
	System.out.print("Secret Key in Base64 -- " + Base64.getEncoder().encodeToString(SHARED_SECRET.getEncoded())+"\n");
	
	long start = System.currentTimeMillis();
	
    String tokenString = createToken();
    
    long end = System.currentTimeMillis();
    
    log(" Token Creation Time -- " + (end-start));
    log("Paseto token: "+ tokenString);

    start = System.currentTimeMillis();
    Paseto result = parseToken(tokenString);
    end = System.currentTimeMillis();
    log(" Token Parse Time -- " + (end-start));
    
    start = System.currentTimeMillis();
    log("Token Claims:");
    result.getClaims().forEach((key, value) -> log("    "+ key + ": " + value));
    end = System.currentTimeMillis();
    log(" Token Claims Traversal -- " + (end-start));

    start = System.currentTimeMillis();
    String audience = result.getClaims().getAudience();
    log("Audience: "+ audience);
    end = System.currentTimeMillis();
    log(" Token get Audience -- " + (end-start));
    
    start = System.currentTimeMillis();
    int rolledValue = result.getClaims().get("1d20", Integer.class);
    log("1d20 rolled: " + rolledValue);
    end = System.currentTimeMillis();
    log(" Token Custome Claim -- " + (end-start));

    start = System.currentTimeMillis();
    parseTokenWithRequirements(tokenString);
    end = System.currentTimeMillis();
    log(" Token Parse Time with Requirements -- " + (end-start));
}

public static String createToken() {
    Instant now = Instant.now();

    String token = Pasetos.V1.LOCAL.builder()
            .setSharedSecret(SHARED_SECRET)
            .setIssuedAt(now)
            .setExpiration(now.plus(1, ChronoUnit.HOURS))
            .setAudience("blog-post")
            .setIssuer("https://developer.okta.com/blog/")
            .claim("1d20", new Random().nextInt(20) + 1)
            .compact();

    return token;
}

public static Paseto parseToken(String token) {
    PasetoParser parser = Pasetos.parserBuilder()
            .setSharedSecret(SHARED_SECRET)
            .build();

    Paseto result = parser.parse(token);
    return result;
}

public static Paseto parseTokenWithRequirements(String token) {
    PasetoParser parser = Pasetos.parserBuilder()
            .setSharedSecret(SHARED_SECRET)
            .requireAudience("blog-post")
            .requireIssuer("https://developer.okta.com/blog/")
            .build();

    Paseto result = parser.parse(token);
    return result;
}

private static void log(String message) {
    System.out.println(message);
}

        <dependency>
            <groupId>dev.paseto</groupId>
            <artifactId>jpaseto-api</artifactId>
            <version>0.5.0</version>
        </dependency>

package com.apala.services.security;
import com.apala.services.repositories.UserRepo;
import dev.paseto.jpaseto.PasetoException;
import dev.paseto.jpaseto.Pasetos;
import dev.paseto.jpaseto.lang.Keys;
import lombok.Data;
import lombok.ToString;
import org.springframework.beans.factory.annotation.Autowired;

import javax.crypto.SecretKey;
import java.util.Base64;

@Data
@ToString
public class Security {

    /**
     * Secret key that generates all tokens
     */
    private SecretKey secretKey;

    private static Security security = null;

    public static Security getInstance(){
        if (security == null)
            security = new Security();
        return security;
    }

    /**
     * Generate a new security key
     */
    private Security(){
        this.secretKey=Keys.secretKey();
    }

    /**
     * @param phoneNumber of the user we want to generate the token
     * @return paseto token valid for the user
     */
    public String generateTokenForPhoneNumber(int phoneNumber){
        return Pasetos.V1.LOCAL.builder()
                .setSubject(Integer.toString(phoneNumber))
                .setSharedSecret(this.secretKey)
                .compact();
    }

    /**
     * @param token sent from the user to get validated
     * @return the phone number encrypted from the token
     * @throws PasetoException if the token is not valid
     */
    public int getPhoneNumberFromToken(String token) throws PasetoException {
        return Integer.parseInt(Pasetos.parserBuilder().setSharedSecret(this.secretKey).build().parse(token).getClaims().getSubject());
    }


    /**
     * Load a secret key from the string
     * @param key we want to be the secret key
     */
    public void loadSecretKeyFromString(String key){
        this.secretKey = Keys.secretKey(key.getBytes());
        System.out.println("This is the new secret key -> " + this.readSecretKey());
    }

    /**
     * Decodes the secret key
     * @return secret key in plain text
     */
    public String readSecretKey(){
        String base64Key = Base64.getEncoder().encodeToString(this.secretKey.getEncoded());
        byte[] decodedBytes = Base64.getDecoder().decode(base64Key);
        return new String(decodedBytes);
    }

}

WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.google.inject.internal.cglib.core.$ReflectUtils$1 (file:/usr/share/maven/lib/guice.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain)
WARNING: Please consider reporting this to the maintainers of com.google.inject.internal.cglib.core.$ReflectUtils$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
[INFO] Scanning for projects...
[INFO]
[INFO] -------------------------< com.apala:services >-------------------------
[INFO] Building services 0.1.0
[INFO] --------------------------------[ jar ]---------------------------------
[INFO]
[INFO] >>> spring-boot-maven-plugin:2.3.4.RELEASE:run (default-cli) > test-compile @ services >>>
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:resources (default-resources) @ services ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] Copying 1 resource
[INFO] Copying 0 resource
[INFO]
[INFO] --- maven-compiler-plugin:3.8.1:compile (default-compile) @ services ---
[INFO] Nothing to compile - all classes are up to date
[INFO]
[INFO] --- maven-resources-plugin:3.1.0:testResources (default-testResources) @ services ---
[INFO] Using 'UTF-8' encoding to copy filtered resources.
[INFO] skip non existing resourceDirectory /home/apala/apala/services/src/test/resources
[INFO]
[INFO] --- maven-compiler-plugin:3.8.1:testCompile (default-testCompile) @ services ---
[INFO] Nothing to compile - all classes are up to date
[INFO]
[INFO] <<< spring-boot-maven-plugin:2.3.4.RELEASE:run (default-cli) < test-compile @ services <<<
[INFO]
[INFO]
[INFO] --- spring-boot-maven-plugin:2.3.4.RELEASE:run (default-cli) @ services ---
[INFO] Attaching agents: []

@SpringBootApplication
public class ServicesApplication {

    public static void main(String[] args) {
        // Create a security key for paseto tokens
        Security.getInstance().loadSecretKeyFromString("very_very_secret_key");
        SpringApplication.run(ServicesApplication.class, args);
    }

}