TwitterCallbackHttpController.java

/*
 * Copyright (c) 2014 Martin W. Kirst (nitram509 at bitkings dot de)
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */

package net.nitram509.controller;

import net.nitram509.gateways.api.UserId;
import net.nitram509.gateways.api.UserProfile;
import net.nitram509.gateways.repository.TweetGateway;
import net.nitram509.gateways.repository.TweetGatewayRepository;
import net.nitram509.shared.AbstractHttpController;
import net.nitram509.twitter.TwitterClientToolbox;
import twitter4j.Twitter;
import twitter4j.TwitterException;
import twitter4j.User;
import twitter4j.auth.AccessToken;
import twitter4j.auth.RequestToken;

import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.QueryParam;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.Response;
import java.io.IOException;
import java.net.URISyntaxException;

import static javax.ws.rs.core.MediaType.TEXT_PLAIN;
import static net.nitram509.controller.TwitterSignInHttpController.DO_TWITTER_CALLBACK;
import static net.nitram509.page.managegateways.ManageGatewaysHtmlController.MANAGE_GATEWAYS_URL;

@Path(DO_TWITTER_CALLBACK)
public class TwitterCallbackHttpController extends AbstractHttpController {

  private TweetGatewayRepository repository = TweetGateway.getRepository();
  private TwitterClientToolbox twitterClientToolbox = new TwitterClientToolbox();

  @GET
  @Produces({TEXT_PLAIN})
  public Response doTwitterCallback(@QueryParam(value = "oauth_token") String oauth_token,
                                    @QueryParam(value = "oauth_verifier") String oauth_verifier,
                                    @Context HttpServletRequest request) throws TwitterException, IOException, URISyntaxException {

    SessionVisitor sessionVisitor = new SessionVisitor(request.getSession(true));
    if (sessionVisitor.hasRequestToken()) {
      Twitter twitter = twitterClientToolbox.getTwitterAsTweetGatewayApp();
      AccessToken accessToken = validateAndRetrieveTwitterAccessToken(twitter, sessionVisitor.loadRequestToken(), oauth_verifier);
      UserProfile userProfile = updateUserprofile(twitter, accessToken);
      markUserSessionAsAuthenticated(sessionVisitor, userProfile);
    }

    return respondTemporaryRedirect(MANAGE_GATEWAYS_URL);
  }

  public void markUserSessionAsAuthenticated(SessionVisitor sessionVisitor, UserProfile userProfile) {
    sessionVisitor.removeRequestToken();
    sessionVisitor.saveCurrentUser(userProfile.getId());
    sessionVisitor.setAuthenticatedUser(true);
  }

  public AccessToken validateAndRetrieveTwitterAccessToken(Twitter twitter, String requestTokenStr, String oauth_verifier) throws TwitterException {
    RequestToken requestToken = new RequestToken(requestTokenStr, "");
    assert requestToken.getToken() != null;
    assert requestToken.getTokenSecret() != null;
    return twitter.getOAuthAccessToken(requestToken, oauth_verifier);
  }

  public UserProfile updateUserprofile(Twitter twitter, AccessToken accessToken) throws TwitterException {
    UserProfile userProfile = retrieveUserProfileDetails(twitter, accessToken);
    repository.save(userProfile);
    return userProfile;
  }

  private UserProfile retrieveUserProfileDetails(Twitter twitter, AccessToken accessToken) throws TwitterException {
    final long twitterId = twitter.getId();
    User twitterUser = twitter.users().showUser(twitterId);
    UserProfile userProfile = new UserProfile(new UserId(twitterId));
    userProfile.setName(twitterUser.getName());
    userProfile.setScreenName(twitterUser.getScreenName());
    userProfile.setProfileImageUrlHttps(twitterUser.getProfileImageURLHttps());
    userProfile.setProfileImageUrl(twitterUser.getProfileImageURL());
    userProfile.setUrl(twitterUser.getURL());
    userProfile.setAccessToken(accessToken.getToken());
    userProfile.setAccessTokenSecret(accessToken.getTokenSecret());
    return userProfile;
  }

}