OAuthServiceConfig and OAuthServiceProvider Bean in ApplicationContext
<bean id="salesforceServiceConfig" class="com.example.oauth.OAuthServiceConfig"> <constructor-arg value="xxx" /> <constructor-arg value="xxxx"/> <constructor-arg value="https://www.example.com/oauth/salesforce"/> <constructor-arg value="com.example.oauth.SalesforceOauthApi"/> </bean> <bean id="salesforceServiceProvider" class="com.example.oauth.OAuthServiceProvider"> <constructor-arg name="config" ref="salesforceServiceConfig" /> </bean>
SalesforceOauthApi extends DefaultApi20
package com.example.oauth;
import org.scribe.builder.api.DefaultApi20;
import org.scribe.extractors.AccessTokenExtractor;
import org.scribe.extractors.JsonTokenExtractor;
import org.scribe.model.OAuthConfig;
import org.scribe.model.Verb;
public class SalesforceOauthApi extends DefaultApi20{
private static final String ACCESSTOKEN = "https://login.salesforce.com/services/oauth2/token?grant_type=authorization_code";
@Override
public String getAccessTokenEndpoint() {
return ACCESSTOKEN;
}
@Override
public String getAuthorizationUrl(OAuthConfig config) {
return String.format("https://login.salesforce.com/services/oauth2/authorize?client_id=%s&response_type=code&redirect_uri=%s&display=popup&scope=%s", config.getApiKey(), config.getCallback(), "full refresh_token");
}
@Override
public Verb getAccessTokenVerb(){
return Verb.POST;
}
@Override
public AccessTokenExtractor getAccessTokenExtractor() {
return new JsonTokenExtractor();
}
}
Spring MVC SalesforceController for requesting access token
package com.example.oauth.controller;
import static org.springframework.web.context.request.RequestAttributes.SCOPE_SESSION;
import java.util.Map;
import javax.servlet.http.HttpSession;
import org.scribe.model.Token;
import org.scribe.model.Verifier;
import org.scribe.oauth.OAuthService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.context.request.ServletRequestAttributes;
import org.springframework.web.context.request.WebRequest;
import com.example.oauth.OAuthServiceProvider;
@Controller
@RequestMapping("/oauth/salesforce")
public class SalesforceController {
@Autowired
@Qualifier("salesforceServiceProvider")
private OAuthServiceProvider salesforceServiceProvider;
private static final Token EMPTY_TOKEN = null;
@RequestMapping(value = "/login-salesforce", method = RequestMethod.GET)
public String loginToSalesforce(Map<String, Object> map, WebRequest request) {
OAuthService service = salesforceServiceProvider.getService();
String authUrl = service.getAuthorizationUrl(EMPTY_TOKEN);
System.out.println("RequestToken: " + authUrl);
return "redirect:" + authUrl;
}
@RequestMapping(value = { "" }, method = RequestMethod.GET)
public String callback(
@RequestParam(value = "oauth_token", required = false) String oauthToken,
@RequestParam(value = "code", required = false) String oauthVerifier,
WebRequest request, Map<String, Object> map) {
OAuthService service = salesforceServiceProvider.getService();
// getting access token
Verifier verifier = new Verifier(oauthVerifier);
Token accessToken = service.getAccessToken(EMPTY_TOKEN, verifier);
// store access token as a session attribute
request.setAttribute("oauthAccessToken", accessToken, SCOPE_SESSION);
ServletRequestAttributes attr = (ServletRequestAttributes) RequestContextHolder
.currentRequestAttributes();
HttpSession session = attr.getRequest().getSession(false); // create a
// new
// session
session.setAttribute("accessToken", accessToken);
return "settings";
}
}





