integration-web-core--socle 1.4.2

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/accountactivation/AccountActivationFragment.java

@@ -0,0 +1,32 @@
+package com.adeo.authentication.components.accountactivation;
+
+import com.fasterxml.jackson.annotation.JsonAutoDetect;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.kjetland.jackson.jsonSchema.annotations.JsonSchemaTitle;
+import io.kobi.starter.annotation.Fragment;
+import lombok.AccessLevel;
+import lombok.EqualsAndHashCode;
+import lombok.NoArgsConstructor;
+
+/**
+ * AccountActivation fragment for KOBI
+ */
+@Fragment(
+        id = "com.adeo.authentication.AccountActivation",
+        label = "AccountActivation component",
+        requestTimeout = 5000,
+        location = "/components/accountactivation?token={query.token}&email={query.email}",
+        thumbnail = "data:image/png;base64,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")
+@JsonSchemaTitle(value = "AccountActivation")
+@EqualsAndHashCode()
+@NoArgsConstructor(access = AccessLevel.PUBLIC)
+@JsonIgnoreProperties(ignoreUnknown = true)
+@JsonAutoDetect(
+        creatorVisibility = JsonAutoDetect.Visibility.NONE, isGetterVisibility = JsonAutoDetect.Visibility.NONE,
+        getterVisibility = JsonAutoDetect.Visibility.NONE, setterVisibility = JsonAutoDetect.Visibility.NONE)
+@JsonInclude(value = JsonInclude.Include.NON_NULL)
+public class AccountActivationFragment {
+
+
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/accountactivation/AccountActivationSmsComponent.java

@@ -0,0 +1,70 @@
+package com.adeo.authentication.components.accountactivation;
+
+
+import com.adeo.authentication.config.ApplicationConfig;
+import com.adeo.authentication.helpers.WebUserHelper;
+import com.adeo.authentication.model.account.CiamAccountDTO;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import reactor.core.publisher.Mono;
+
+import static com.adeo.authentication.commons.Constants.*;
+import static com.adeo.authentication.commons.Constants.Cookie.CUSTOMER_NUMBER;
+
+/**
+ * This is the fragment displaying the link to the account activation app
+ */
+@Slf4j
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(value = "/components/accountactivationsms")
+public class AccountActivationSmsComponent {
+    private static final String TEMPLATE = "/components/accountactivation/accountactivationsms";
+
+    private final ApplicationConfig applicationConfig;
+
+    private final WebUserHelper webUserHelper;
+
+    @GetMapping
+    public Mono<String> getBasedTemplate(
+            @RequestParam(name = "data") String formData,
+            @RequestParam(name = CUSTOMER_NUMBER) String customerNumber,
+            Model model) {
+
+        CiamAccountDTO ciamAccount;
+
+        model.addAttribute("formData", formData);
+        model.addAttribute(CUSTOMER_NUMBER, customerNumber);
+        model.addAttribute(HOME_URL, applicationConfig.getRedirectAfterBadLoginPath());
+        model.addAttribute(RESET_PASSWORD_URL, applicationConfig.getResetPasswordUrl());
+        model.addAttribute(CGU_URL, applicationConfig.getCguUrl());
+        model.addAttribute(IS_ACCOUNT_ALREADY_ACTIVATED, false);
+        model.addAttribute(DISPLAY_CUSTOM_ERROR, false);
+
+
+        try {
+            ciamAccount = webUserHelper.getAccountFromEncodedData(formData);
+        } catch (Exception e) {
+            log.warn("Error decoding data for activation sms component: " + e.getMessage());
+            model.addAttribute(DISPLAY_CUSTOM_ERROR, true);
+            return Mono.just(TEMPLATE);
+        }
+
+        if (ciamAccount.getIdentity().getCustomerNumber() != null && !customerNumber.equals(ciamAccount.getIdentity().getCustomerNumber().toString())) {
+            model.addAttribute(DISPLAY_CUSTOM_ERROR, true);
+            return Mono.just(TEMPLATE);
+        }
+
+        if (webUserHelper.isAccountActivated(ciamAccount)) {
+            model.addAttribute(IS_ACCOUNT_ALREADY_ACTIVATED, true);
+            return Mono.just(TEMPLATE);
+        }
+
+        return Mono.just(TEMPLATE);
+    }
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/accountactivation/AccountActivationSmsFragment.java

@@ -0,0 +1,32 @@
+package com.adeo.authentication.components.accountactivation;
+
+import com.fasterxml.jackson.annotation.JsonAutoDetect;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.kjetland.jackson.jsonSchema.annotations.JsonSchemaTitle;
+import io.kobi.starter.annotation.Fragment;
+import lombok.AccessLevel;
+import lombok.EqualsAndHashCode;
+import lombok.NoArgsConstructor;
+
+/**
+ * AccountActivation fragment for KOBI
+ */
+@Fragment(
+        id = "com.adeo.authentication.AccountActivationSms",
+        label = "AccountActivation Sms component",
+        requestTimeout = 5000,
+        location = "/components/accountactivationsms?data={query.data}&customerNumber={query.customerNumber}",
+        thumbnail = "data:image/png;base64,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")
+@JsonSchemaTitle(value = "AccountActivationSms")
+@EqualsAndHashCode()
+@NoArgsConstructor(access = AccessLevel.PUBLIC)
+@JsonIgnoreProperties(ignoreUnknown = true)
+@JsonAutoDetect(
+        creatorVisibility = JsonAutoDetect.Visibility.NONE, isGetterVisibility = JsonAutoDetect.Visibility.NONE,
+        getterVisibility = JsonAutoDetect.Visibility.NONE, setterVisibility = JsonAutoDetect.Visibility.NONE)
+@JsonInclude(value = JsonInclude.Include.NON_NULL)
+public class AccountActivationSmsFragment {
+
+
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/callback/BaseCallbackPingController.java

@@ -0,0 +1,135 @@
+package com.adeo.authentication.components.callback;
+
+import com.adeo.authentication.config.AuthenticationConfig;
+import com.adeo.authentication.helpers.LogHelper;
+import com.adeo.authentication.model.AccessToken;
+import com.adeo.authentication.model.collab.RedirectByRole;
+import com.adeo.authentication.model.cookie.CookieTypeEnum;
+import com.adeo.authentication.model.ping.PingUserInfos;
+import com.adeo.authentication.services.CookieService;
+import com.adeo.authentication.services.RoleMappingService;
+import com.adeo.authentication.services.JwtService;
+import com.adeo.authentication.services.PingService;
+import com.adeo.authentication.services.postauthent.ContextualizationService;
+import io.kobi.security.common.KobiUser;
+import lombok.RequiredArgsConstructor;
+import lombok.Setter;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+
+import java.util.Arrays;
+import java.util.Objects;
+import java.util.Optional;
+import java.util.Set;
+
+@Slf4j
+@RequiredArgsConstructor
+public class BaseCallbackPingController {
+
+    private static final String REDIRECT_FALLBACK = "/";
+
+    final PingService pingService;
+
+    final JwtService jwtService;
+
+    final CookieService cookieService;
+
+    final RoleMappingService customerProfileService;
+
+    final ContextualizationService contextualizationService;
+
+    final AuthenticationConfig authenticationConfig;
+
+    @Setter
+    @Value("${minimumStoreIdToIgnoreForCollab}")
+    private Integer minimumStoreIdToIgnoreForCollab;
+
+    @Setter
+    @Value("${storeIdToIgnoreForCollab}")
+    private Integer storeIdToIgnoreForCollab;
+
+    /**
+     * Handle sync post auth actions
+     *
+     * @param accessToken
+     * @param serverWebExchange
+     * @return target uri requested by the user
+     */
+    Mono<String> doCommonPostAuthenticationActions(
+            final AccessToken accessToken,
+            ServerWebExchange serverWebExchange,
+            boolean isEloAuthentication) {
+
+        cookieService.removeLegacyCookies(serverWebExchange);
+        cookieService.deleteCookiesFromNamesAndDomains(serverWebExchange, Set.of(CookieTypeEnum.ORDER_KEY, CookieTypeEnum.LEGACY_ORDER_KEY, CookieTypeEnum.CUSTOMER_ORDER_KEY, CookieTypeEnum.CUSTOMER_SPACE_KEY));
+        return pingService.getUserInfos(accessToken.getAccessToken())
+                .flatMap(pingUserInfos -> customerProfileService.getRolesWithStoreFilter(pingUserInfos)
+                        .map(roles -> {
+                            KobiUser kobiUser = jwtService.buildKobiUser(accessToken, pingUserInfos, roles);
+                            jwtService.buildKobiJwtCookie(serverWebExchange, kobiUser,
+                                    accessToken.getExpiresIn());
+                            cookieService.addCookieFromNamesAndDomains(serverWebExchange, CookieTypeEnum.ID_TOKEN_KEY,
+                                    accessToken.getIdToken(), accessToken.getExpiresIn(), true);
+                            cookieService.addHasLoggedCookie(serverWebExchange);
+                            updateStoreCookies(serverWebExchange, pingUserInfos);
+
+                            LogHelper.fillMdcContext(serverWebExchange, pingUserInfos.getSub());
+                            log.debug("Authenticated collaborator : {}", pingUserInfos.getSub());
+                            LogHelper.clearMdcContext();
+
+                            return kobiUser;
+                        }))
+                .map(kobiUser -> computeTargetUri(kobiUser, isEloAuthentication));
+    }
+
+    String computeTargetUri(final KobiUser kobiUser, final boolean isEloAuthentication) {
+
+        Objects.requireNonNull(kobiUser);
+
+        final String finalTargetUri = Optional.ofNullable(authenticationConfig.getRedirectByRoles())
+                .flatMap(redirectByRoles -> redirectByRoles.stream()
+                        .filter(redirectByRole -> hasRole(kobiUser, redirectByRole.getRole()))
+                        .findFirst()
+                        .map(RedirectByRole::getRedirectUri))
+                .orElse(getDefaultRedirectUri(isEloAuthentication)
+                        .orElse(REDIRECT_FALLBACK));
+
+        log.debug("Final target uri for user {} : {} ", kobiUser.getUserId(), finalTargetUri);
+        return finalTargetUri;
+    }
+
+    private Optional<String> getDefaultRedirectUri(boolean isEloAuthentication) {
+        if (isEloAuthentication) {
+            return Optional.ofNullable(authenticationConfig.getEloRedirectUri());
+        } else {
+            return Optional.ofNullable(authenticationConfig.getDefaultRedirectUri());
+        }
+    }
+
+    boolean hasRole(final KobiUser kobiUser, final String role) {
+
+        return Arrays.stream(kobiUser.getRoles())
+                .anyMatch(userRole -> userRole.equalsIgnoreCase(role));
+    }
+
+    void updateStoreCookies(final ServerWebExchange serverWebExchange, final PingUserInfos pingUserInfos) {
+
+        if (pingUserInfos == null) {
+            log.warn("Unable to update cookie on null scimGlobalResponse");
+            return;
+        }
+        log.debug("Update store cookie on user {}, ignore limit {}  ", pingUserInfos.getUid(), minimumStoreIdToIgnoreForCollab);
+
+        Optional.of(pingUserInfos)
+                .map(PingUserInfos::getPrivBusinessCategoryCode)
+                .ifPresent(storeCode -> {
+                    final int storeId = Integer.parseInt(storeCode);
+                    if ((minimumStoreIdToIgnoreForCollab != null && storeId < minimumStoreIdToIgnoreForCollab) && (storeIdToIgnoreForCollab == null || !storeIdToIgnoreForCollab.equals(storeId))) {
+                        log.debug("Add store cookie for user {}, store code {}", pingUserInfos.getUid(), storeCode);
+                        contextualizationService.addStoreCookies(serverWebExchange, storeCode);
+                    }
+                });
+    }
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/callback/CallbackController.java

@@ -0,0 +1,140 @@
+package com.adeo.authentication.components.callback;
+
+import com.adeo.authentication.commons.Constants;
+import com.adeo.authentication.components.login.LoginController;
+import com.adeo.authentication.config.ApplicationConfig;
+import com.adeo.authentication.controllers.exceptions.EmptyStateAtLoginException;
+import com.adeo.authentication.model.login.State;
+import com.adeo.authentication.rest.resources.SavedLoginCookieNotFoundException;
+import com.adeo.authentication.services.CookieService;
+import com.adeo.authentication.services.ReachFiveService;
+import com.adeo.authentication.services.RequestSavingService;
+import com.adeo.authentication.services.postauthent.PostAuthenticationService;
+import io.kobi.starter.annotation.ApplicationContext;
+import io.kobi.starter.annotation.RegisterApplicationContext;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
+import org.springframework.http.HttpStatus;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+
+import javax.annotation.PostConstruct;
+import java.net.URI;
+import java.util.regex.Pattern;
+
+/**
+ * Handle Oauth callback
+ */
+@Slf4j
+@Controller
+@RegisterApplicationContext(value = {
+        @ApplicationContext(value = "authentication-callback", label = "Callback handler for authentication")
+})
+@ConditionalOnProperty(name = "authentication.reachFiveEnabled", havingValue = "true")
+@RequestMapping(value = "/oauth2/callback")
+@RequiredArgsConstructor
+public class CallbackController {
+
+    public static final String EMAIL_ALREADY_EXISTS = "email_already_exists";
+    public static final String ERROR_SOCIAL_ACCOUNT_EMAIL_ALREADY_IN_USE = "error.socialAccountEmailAlreadyInUse";
+
+    private final ReachFiveService reachFiveService;
+
+    private final RequestSavingService requestSavingService;
+
+    private final ApplicationConfig applicationConfig;
+
+    private final PostAuthenticationService postAuthenticationService;
+
+    private final CookieService cookieService;
+
+    @Value("${emailVerificationUrl}")
+    protected String emailVerificationUrl;
+
+    private Pattern pattern;
+
+    @PostConstruct
+    public void init() {
+
+        pattern = Pattern.compile(applicationConfig.getWebsiteUriPattern());
+    }
+
+    @GetMapping
+    @ApplicationContext(value = "authentication-callback", label = "Callback handler for authentication")
+    public Mono<Void> getBasedTemplate(
+            @RequestParam(name = "code", required = false) String code,
+            @RequestParam(name = "state", required = true) String base64State,
+            @RequestParam(name = "error", required = false) String reachFiveError,
+            @RequestParam(name = "error_message_key", required = false) String reachFiveErrorMessageKey,
+            ServerWebExchange serverWebExchange) {
+
+        State state = new State(base64State);
+        return requestSavingService.getSavedRequest(serverWebExchange)
+                .flatMap(savedLoginRequest -> {
+                    final String targetUri = savedLoginRequest.getDecodedTargetUri();
+                    // First we need to check if both state (query param & cookie) are equals
+                    if (!savedLoginRequest.getState().equals(state.getState())) {
+                        log.error("State are not equals, possible csrf attack");
+                        cookieService.logout(serverWebExchange);
+                        URI requestURI = serverWebExchange.getRequest().getURI();
+                        String forwardedHost = serverWebExchange.getRequest().getHeaders().getFirst("X-Forwarded-Host");
+                        String targetUrl = requestURI.getScheme() + "://" + forwardedHost + applicationConfig.getRedirectAfterBadLoginPath();
+                        return reachFiveService.logout(targetUrl).flatMap(logoutUrl -> {
+                            serverWebExchange.getResponse().getHeaders().setLocation(URI.create(logoutUrl));
+                            serverWebExchange.getResponse().setStatusCode(HttpStatus.SEE_OTHER);
+                            return serverWebExchange.getResponse().setComplete();
+                        });
+                    }
+                    if (!targetUri.startsWith("/") && !isWebsiteUri(targetUri)) {
+                        return Mono.error(new IllegalArgumentException("Target uri must be a leroymerlin uri or starts with '/'"));
+                    }
+
+                    if (code == null) {
+                        return handleMissingCode(reachFiveError, reachFiveErrorMessageKey, serverWebExchange, targetUri);
+                    }
+
+                    return reachFiveService.exchangeAuthorizationCode(code, state.getRedirectUri())
+                            .flatMap(accessToken -> reachFiveService.introspect(accessToken.getRefreshToken())
+                                    .zipWith(reachFiveService.getUserInfosMono(accessToken.getIdToken()))
+                                    .flatMap(tuple2 -> postAuthenticationService.authenticate(
+                                            serverWebExchange,
+                                            accessToken,
+                                            tuple2.getT1(),
+                                            tuple2.getT2(),
+                                            targetUri)
+                                    )
+                            );
+                })
+                .onErrorResume(SavedLoginCookieNotFoundException.class, e -> {
+                    serverWebExchange.getResponse().getHeaders().setLocation(URI.create("/"));
+                    serverWebExchange.getResponse().setStatusCode(HttpStatus.SEE_OTHER);
+                    return serverWebExchange.getResponse().setComplete();
+                });
+    }
+
+    /**
+     * Check if the given uri is part of the website
+     *
+     * @param uri
+     * @return
+     */
+    private boolean isWebsiteUri(final String uri) {
+
+        return pattern.matcher(uri).matches();
+    }
+
+    private Mono<Void> handleMissingCode(String reachFiveError, String reachFiveErrorMessageKey, ServerWebExchange serverWebExchange, String callback) {
+        if (EMAIL_ALREADY_EXISTS.equals(reachFiveError) && ERROR_SOCIAL_ACCOUNT_EMAIL_ALREADY_IN_USE.equals(reachFiveErrorMessageKey)) {
+            serverWebExchange.getResponse().getHeaders().setLocation(URI.create(emailVerificationUrl));
+            serverWebExchange.getResponse().setStatusCode(HttpStatus.SEE_OTHER);
+            return serverWebExchange.getResponse().setComplete();
+        }
+        return Mono.error(new EmptyStateAtLoginException(LoginController.REACH_FIVE_AUTHORIZE_ENDPOINT + callback));
+    }
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/callback/CallbackPingController.java

@@ -0,0 +1,87 @@
+package com.adeo.authentication.components.callback;
+
+import com.adeo.authentication.config.AccountConfig;
+import com.adeo.authentication.config.ApplicationConfig;
+import com.adeo.authentication.config.AuthenticationConfig;
+import com.adeo.authentication.model.AccessToken;
+import com.adeo.authentication.model.cookie.CookieTypeEnum;
+import com.adeo.authentication.model.login.State;
+import com.adeo.authentication.rest.resources.SavedLoginCookieNotFoundException;
+import com.adeo.authentication.services.CookieService;
+import com.adeo.authentication.services.RoleMappingService;
+import com.adeo.authentication.services.JwtService;
+import com.adeo.authentication.services.PingService;
+import com.adeo.authentication.services.RequestSavingService;
+import com.adeo.authentication.services.postauthent.ContextualizationService;
+import io.kobi.starter.annotation.ApplicationContext;
+import io.kobi.starter.annotation.RegisterApplicationContext;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+
+@Slf4j
+@RegisterApplicationContext(value = {
+        @ApplicationContext(value = "authentication-callback-ping", label = "Callback handler for authentication ping")
+})
+@ConditionalOnProperty(name = "authentication.enabled.ping.default", havingValue = "true", matchIfMissing = true)
+@RequestMapping(value = "/oauth2/callback/ping")
+@Controller
+public class CallbackPingController extends BaseCallbackPingController {
+
+    final RequestSavingService requestSavingService;
+    final ApplicationConfig applicationConfig;
+    final AccountConfig accountConfig;
+
+    private final static String FALLBACK_REDIRECT_VALUE = "redirect:/";
+
+    public CallbackPingController(PingService pingService, JwtService jwtService, CookieService cookieService,
+                                  RoleMappingService roleMappingService, ContextualizationService contextualizationService,
+                                  ApplicationConfig applicationConfig, AccountConfig accountConfig, RequestSavingService requestSavingService,
+                                  AuthenticationConfig authenticationConfig) {
+
+        super(pingService, jwtService, cookieService, roleMappingService, contextualizationService, authenticationConfig);
+        this.requestSavingService = requestSavingService;
+        this.applicationConfig = applicationConfig;
+        this.accountConfig = accountConfig;
+    }
+
+    @GetMapping
+    @ApplicationContext(value = "authentication-callback", label = "Callback handler for authentication")
+    public Mono<String> getBasedTemplate(
+            @RequestParam(name = "code", required = true) String code,
+            @RequestParam(name = "state", required = true) String base64State,
+            ServerWebExchange serverWebExchange) {
+
+        State state = new State(base64State);
+        return requestSavingService.getSavedRequest(serverWebExchange)
+                .flatMap(savedLoginRequest -> {
+                    // First we need to check if both state (query param & cookie) are equals
+                    if (!savedLoginRequest.getState().equals(state.getState())) {
+                        log.error("State are not equals, possible csrf attack");
+                        cookieService.deleteCookieFromNamesAndDomains(serverWebExchange, CookieTypeEnum.LOGIN_REQUEST_KEY);
+                        return Mono.just(FALLBACK_REDIRECT_VALUE);
+
+                    }
+
+                    return pingService.exchangeAuthorizationCode(code, state.getRedirectUri())
+                            .flatMap(accessToken -> doPostAuthenticationActions(accessToken, serverWebExchange)
+                                    .map(finalTargetUri -> "redirect:" + finalTargetUri)
+                            );
+                })
+                .onErrorReturn(SavedLoginCookieNotFoundException.class, FALLBACK_REDIRECT_VALUE);
+    }
+
+    private Mono<String> doPostAuthenticationActions(final AccessToken accessToken, ServerWebExchange serverWebExchange) {
+
+        return doCommonPostAuthenticationActions(accessToken, serverWebExchange, false)
+                .map(targetUri -> {
+                    cookieService.deleteCookieFromNamesAndDomains(serverWebExchange, CookieTypeEnum.LOGIN_REQUEST_KEY);
+                    return targetUri;
+                });
+    }
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/callback/SplittedCallbackPingController.java

@@ -0,0 +1,58 @@
+package com.adeo.authentication.components.callback;
+
+import com.adeo.authentication.config.AuthenticationConfig;
+import com.adeo.authentication.model.cookie.CookieTypeEnum;
+import com.adeo.authentication.services.CookieService;
+import com.adeo.authentication.services.RoleMappingService;
+import com.adeo.authentication.services.JwtService;
+import com.adeo.authentication.services.PingService;
+import com.adeo.authentication.services.postauthent.ContextualizationService;
+import io.kobi.starter.annotation.ApplicationContext;
+import io.kobi.starter.annotation.RegisterApplicationContext;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
+import org.springframework.stereotype.Controller;
+import org.springframework.util.StringUtils;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+
+/**
+ * Handle Oauth callback
+ */
+@Slf4j
+@RegisterApplicationContext(value = {
+        @ApplicationContext(value = "authentication-callback-ping", label = "Callback handler for authentication ping on splitted sites")
+})
+@ConditionalOnProperty(name = "authentication.enabled.ping.splitted", havingValue = "true")
+@RequestMapping(value = "/oauth2/callback/splitted/ping")
+@Controller
+public class SplittedCallbackPingController extends BaseCallbackPingController {
+
+    public SplittedCallbackPingController(PingService pingService, JwtService jwtService, CookieService cookieService,
+                                          RoleMappingService roleMappingService,
+                                          ContextualizationService contextualizationService, AuthenticationConfig authenticationConfig) {
+
+        super(pingService, jwtService, cookieService, roleMappingService, contextualizationService, authenticationConfig);
+    }
+
+
+    @GetMapping
+    @ApplicationContext(value = "authentication-callback-ping", label = "Callback handler for authentication ping on splitted sites")
+    public Mono<String> getBasedTemplate(ServerWebExchange serverWebExchange) {
+
+        String idToken = cookieService.getCookieValue(CookieTypeEnum.COLLAB_AUTH_ID_TOKEN_KEY, serverWebExchange, null);
+        String accessToken = cookieService.getCookieValue(CookieTypeEnum.COLLAB_AUTH_ACCESS_TOKEN_KEY, serverWebExchange, null);
+        String refreshToken = cookieService.getCookieValue(CookieTypeEnum.COLLAB_AUTH_REFRESH_TOKEN_KEY, serverWebExchange, null);
+
+        if (StringUtils.isEmpty(idToken) || StringUtils.isEmpty(accessToken)) {
+            return Mono.error(new IllegalArgumentException("IdToken and AccessToken cookies must be set"));
+        }
+
+        return pingService.computePingAccessToken(accessToken, idToken, refreshToken)
+                .flatMap(decodedAccessToken -> doCommonPostAuthenticationActions(decodedAccessToken, serverWebExchange, true)
+                        .map(finalTargetUri -> "redirect:" + finalTargetUri)
+                );
+    }
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/keepalive/KeepAliveComponent.java

@@ -0,0 +1,42 @@
+package com.adeo.authentication.components.keepalive;
+
+
+import com.adeo.authentication.commons.Constants;
+import com.adeo.authentication.helpers.KobiUserHelper;
+import io.kobi.starter.annotation.ApplicationContext;
+import io.kobi.starter.annotation.RegisterApplicationContext;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.server.ServerWebExchange;
+import reactor.core.publisher.Mono;
+
+/**
+ * This is the fragment displaying the link to the account activation app
+ */
+@Slf4j
+@Controller
+@RequiredArgsConstructor
+@RequestMapping(value = "/components/keepalive")
+@RegisterApplicationContext(value = {
+        @ApplicationContext(value = "authentication-keepalive", label = "keep session alive on non authenticated pages")
+})
+public class KeepAliveComponent {
+
+    private static final String KEEPALIVE_TEMPLATE = "/components/keepalive/keepalive";
+
+    private final KobiUserHelper kobiUserHelper;
+
+    @GetMapping
+
+    @ApplicationContext(value = "authentication-keepalive", label = "keep session alive on non authenticated pages")
+    public Mono<String> getBasedTemplate(
+            ServerWebExchange serverWebExchange, Model model) {
+
+        model.addAttribute("keepAliveStatus", kobiUserHelper.getKeepAliveStatus(serverWebExchange));
+        return Mono.just(KEEPALIVE_TEMPLATE);
+    }
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/keepalive/KeepAliveFragment.java

@@ -0,0 +1,32 @@
+package com.adeo.authentication.components.keepalive;
+
+import com.fasterxml.jackson.annotation.JsonAutoDetect;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.kjetland.jackson.jsonSchema.annotations.JsonSchemaTitle;
+import io.kobi.starter.annotation.Fragment;
+import lombok.AccessLevel;
+import lombok.EqualsAndHashCode;
+import lombok.NoArgsConstructor;
+
+/**
+ * KeepAlive fragment for KOBI
+ */
+@Fragment(
+        id = "com.adeo.authentication.KeepAlive",
+        label = "KeepAlive component",
+        requestTimeout = 5000,
+        location = "/components/keepalive",
+        thumbnail = "data:image/png;base64,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")
+@JsonSchemaTitle(value = "KeepAlive")
+@EqualsAndHashCode()
+@NoArgsConstructor(access = AccessLevel.PUBLIC)
+@JsonIgnoreProperties(ignoreUnknown = true)
+@JsonAutoDetect(
+        creatorVisibility = JsonAutoDetect.Visibility.NONE, isGetterVisibility = JsonAutoDetect.Visibility.NONE,
+        getterVisibility = JsonAutoDetect.Visibility.NONE, setterVisibility = JsonAutoDetect.Visibility.NONE)
+@JsonInclude(value = JsonInclude.Include.NON_NULL)
+public class KeepAliveFragment {
+
+
+}

package/cdp-due--authentication-module-master/src/main/java/com/adeo/authentication/components/landing/ExampleLandingController.java

@@ -0,0 +1,24 @@
+package com.adeo.authentication.components.landing;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.security.core.Authentication;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import reactor.core.publisher.Mono;
+
+@Slf4j
+@Controller
+@RequestMapping(value = "/components/landing")
+public class ExampleLandingController {
+
+	@GetMapping
+	public Mono<String> loginByFrame(Authentication authentication, Model model) {
+		if(authentication != null) {
+			model.addAttribute("user", authentication.getPrincipal());
+		}
+		return Mono.just("/components/landing/home");
+	}
+}
+