src/main/kotlin/dev/dnpm/etl/processor/security/UserRoleService.kt


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

/*
 * This file is part of ETL-Processor
 *
 * Copyright (c) 2023       Comprehensive Cancer Center Mainfranken
 * Copyright (c) 2024-2026  Paul-Christian Volkmer, Datenintegrationszentrum Philipps-Universität Marburg and Contributors
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published
 * by the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

package dev.dnpm.etl.processor.security

import org.springframework.data.repository.findByIdOrNull
import org.springframework.security.core.session.SessionRegistry
import org.springframework.security.oauth2.core.oidc.user.OidcUser

class UserRoleService(
    private val userRoleRepository: UserRoleRepository,
    private val sessionRegistry: SessionRegistry,
) {
    fun updateUserRole(
        id: Long,
        role: Role,
    ) {
        val userRole = userRoleRepository.findByIdOrNull(id) ?: return
        userRole.role = role
        userRoleRepository.save(userRole)
        expireSessionFor(userRole.username)
    }

    fun deleteUserRole(id: Long) {
        val userRole = userRoleRepository.findByIdOrNull(id) ?: return
        userRoleRepository.delete(userRole)
        expireSessionFor(userRole.username)
    }

    fun findAll(): List<UserRole> = userRoleRepository.findAll().toList()

    private fun expireSessionFor(username: String) {
        sessionRegistry.allPrincipals
            .filterIsInstance<OidcUser>()
            .filter { it.preferredUsername == username }
            .flatMap { sessionRegistry.getAllSessions(it, true) }
            .onEach { it.expireNow() }
    }
}