add security

src/main/java/com/billpaymentservice/bbps/config/JwtUtil.java

@@ -0,0 +1,102 @@
+package com.billpaymentservice.bbps.config;
+
+import java.security.Key;
+import java.util.Date;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.function.Function;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.stereotype.Service;
+
+import io.jsonwebtoken.Claims;
+import io.jsonwebtoken.Jwts;
+import io.jsonwebtoken.SignatureAlgorithm;
+import io.jsonwebtoken.io.Decoders;
+import io.jsonwebtoken.security.Keys;
+
+@Service
+public class JwtUtil {
+
+	@Value("${jwt.secret}")
+	private String secret;
+
+	private Key getSigningKey() {
+		byte[] keyBytes = Decoders.BASE64.decode(secret);
+		return Keys.hmacShaKeyFor(keyBytes);
+	}
+
+	// Access Token - 2 Hours
+	private final long jwtExpirationInMs = 1000 * 60 * 60 * 2; // 2 hours
+
+	// Refresh Token - 7 Days
+	private final long refreshExpirationDateInMs = 1000L * 60 * 60 * 24 * 7; // 7 days
+
+	private final Map<String, Date> tokenBlacklist = new HashMap<>();
+
+	public String doGenerateRefreshToken(Map<String, Object> claims, String subject) {
+		return Jwts.builder().setClaims(claims).setSubject(subject).setIssuedAt(new Date(System.currentTimeMillis()))
+				.setExpiration(new Date(System.currentTimeMillis() + refreshExpirationDateInMs))
+				.signWith(getSigningKey(), SignatureAlgorithm.HS512).compact();
+	}
+
+	public String extractUsername(String token) {
+		return extractClaim(token, Claims::getSubject);
+	}
+
+	public Date extractExpiration(String token) {
+		return extractClaim(token, Claims::getExpiration);
+	}
+
+	public <T> T extractClaim(String token, Function<Claims, T> claimsResolver) {
+		final Claims claims = extractAllClaims(token);
+		return claimsResolver.apply(claims);
+	}
+
+	private Claims extractAllClaims(String token) {
+		return Jwts.parserBuilder().setSigningKey(getSigningKey()).build().parseClaimsJws(token).getBody();
+	}
+
+	private Boolean isTokenExpired(String token) {
+		return extractExpiration(token).before(new Date());
+	}
+
+	public String generateToken(String username, String mid) {
+		Map<String, Object> claims = new HashMap<>();
+		claims.put("mid", mid);
+		claims.put("expiryTime", new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 10).toString());
+		return createToken(claims, username.toUpperCase());
+	}
+
+	private String createToken(Map<String, Object> claims, String subject) {
+		return Jwts.builder().setClaims(claims).setSubject(subject).setIssuedAt(new Date(System.currentTimeMillis()))
+				.setExpiration(new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 10))
+				.signWith(getSigningKey(), SignatureAlgorithm.HS512).compact();
+	}
+
+	private String createToken1(String subject) {
+		return Jwts.builder().setSubject(subject).setIssuedAt(new Date(System.currentTimeMillis()))
+				.setExpiration(new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 10))
+				.signWith(getSigningKey(), SignatureAlgorithm.HS512).compact();
+	}
+
+	public Boolean validateToken(String token, UserDetails userDetails) {
+		final String username = extractUsername(token);
+		return true;
+	}
+
+	public void invalidateToken(String token) {
+		tokenBlacklist.put(token, new Date());
+	}
+
+	public boolean isTokenBlacklisted(String token) {
+		Date invalidationTime = tokenBlacklist.get(token);
+		return invalidationTime != null && invalidationTime.before(new Date());
+	}
+
+	public String generateToken(String mobileNo) {
+		return createToken1(mobileNo);
+	}
+
+}