OAuthServiceConfig and OAuthServiceProvider Bean in ApplicationContext
<bean id="salesforceServiceConfig" class="com.example.oauth.OAuthServiceConfig"> <constructor-arg value="xxx" /> <constructor-arg value="xxxx"/> <constructor-arg value="https://www.example.com/oauth/salesforce"/> <constructor-arg value="com.example.oauth.SalesforceOauthApi"/> </bean> <bean id="salesforceServiceProvider" class="com.example.oauth.OAuthServiceProvider"> <constructor-arg name="config" ref="salesforceServiceConfig" /> </bean>
SalesforceOauthApi extends DefaultApi20
package com.example.oauth; import org.scribe.builder.api.DefaultApi20; import org.scribe.extractors.AccessTokenExtractor; import org.scribe.extractors.JsonTokenExtractor; import org.scribe.model.OAuthConfig; import org.scribe.model.Verb; public class SalesforceOauthApi extends DefaultApi20{ private static final String ACCESSTOKEN = "https://login.salesforce.com/services/oauth2/token?grant_type=authorization_code"; @Override public String getAccessTokenEndpoint() { return ACCESSTOKEN; } @Override public String getAuthorizationUrl(OAuthConfig config) { return String.format("https://login.salesforce.com/services/oauth2/authorize?client_id=%s&response_type=code&redirect_uri=%s&display=popup&scope=%s", config.getApiKey(), config.getCallback(), "full refresh_token"); } @Override public Verb getAccessTokenVerb(){ return Verb.POST; } @Override public AccessTokenExtractor getAccessTokenExtractor() { return new JsonTokenExtractor(); } }
Spring MVC SalesforceController for requesting access token
package com.example.oauth.controller; import static org.springframework.web.context.request.RequestAttributes.SCOPE_SESSION; import java.util.Map; import javax.servlet.http.HttpSession; import org.scribe.model.Token; import org.scribe.model.Verifier; import org.scribe.oauth.OAuthService; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Qualifier; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.bind.annotation.RequestParam; import org.springframework.web.context.request.RequestContextHolder; import org.springframework.web.context.request.ServletRequestAttributes; import org.springframework.web.context.request.WebRequest; import com.example.oauth.OAuthServiceProvider; @Controller @RequestMapping("/oauth/salesforce") public class SalesforceController { @Autowired @Qualifier("salesforceServiceProvider") private OAuthServiceProvider salesforceServiceProvider; private static final Token EMPTY_TOKEN = null; @RequestMapping(value = "/login-salesforce", method = RequestMethod.GET) public String loginToSalesforce(Map<String, Object> map, WebRequest request) { OAuthService service = salesforceServiceProvider.getService(); String authUrl = service.getAuthorizationUrl(EMPTY_TOKEN); System.out.println("RequestToken: " + authUrl); return "redirect:" + authUrl; } @RequestMapping(value = { "" }, method = RequestMethod.GET) public String callback( @RequestParam(value = "oauth_token", required = false) String oauthToken, @RequestParam(value = "code", required = false) String oauthVerifier, WebRequest request, Map<String, Object> map) { OAuthService service = salesforceServiceProvider.getService(); // getting access token Verifier verifier = new Verifier(oauthVerifier); Token accessToken = service.getAccessToken(EMPTY_TOKEN, verifier); // store access token as a session attribute request.setAttribute("oauthAccessToken", accessToken, SCOPE_SESSION); ServletRequestAttributes attr = (ServletRequestAttributes) RequestContextHolder .currentRequestAttributes(); HttpSession session = attr.getRequest().getSession(false); // create a // new // session session.setAttribute("accessToken", accessToken); return "settings"; } }