package net.sumaris.server.http.security;
   
   /*-
    * #%L
    * SUMARiS:: Server
    * %%
    * Copyright (C) 2018 - 2019 SUMARiS Consortium
    * %%
    * This program is free software: you can redistribute it and/or modify
   * it under the terms of the GNU General Public License as
   * published by the Free Software Foundation, either version 3 of the
   * License, or (at your option) any later version.
   * 
   * This program is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   * GNU General Public License for more details.
   * 
   * You should have received a copy of the GNU General Public
   * License along with this program.  If not, see
   * <http://www.gnu.org/licenses/gpl-3.0.html>.
   * #L%
   */
  
  import lombok.AllArgsConstructor;
  import lombok.NonNull;
  import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
  import org.springframework.security.authentication.dao.AbstractUserDetailsAuthenticationProvider;
  import org.springframework.security.core.AuthenticationException;
  import org.springframework.security.core.userdetails.UserDetails;
  import org.springframework.security.core.userdetails.UsernameNotFoundException;
  import org.springframework.stereotype.Component;
  
  import java.util.Optional;
  
  import static lombok.AccessLevel.PACKAGE;
  
  /**
   * @author peck7 on 30/11/2018.
   */
  @Component
  @AllArgsConstructor(access = PACKAGE)
  public class TokenAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider {
  
      @NonNull
      private AuthService authService;
  
      @Override
      protected void additionalAuthenticationChecks(UserDetails userDetails, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException {
          // Nothing to do
      }
  
      @Override
      protected UserDetails retrieveUser(String username, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException {
          final Object token = authentication.getCredentials();
          return Optional
                  .ofNullable(token)
                  .map(String::valueOf)
                  .flatMap(authService::authenticate)
                  .orElseThrow(() -> new UsernameNotFoundException("Cannot find user with authentication token=" + token));
      }
  }