JwtService.java

package edu.ucsb.cs156.frontiers.services;

import com.fasterxml.jackson.core.JsonProcessingException;

import com.fasterxml.jackson.databind.JsonNode;

import com.fasterxml.jackson.databind.ObjectMapper;

import edu.ucsb.cs156.frontiers.entities.Course;

import edu.ucsb.cs156.frontiers.errors.NoLinkedOrganizationException;

import edu.ucsb.cs156.frontiers.interceptors.RateLimitInterceptor;

import io.jsonwebtoken.Jwts;

import java.security.KeyFactory;

import java.security.NoSuchAlgorithmException;

import java.security.interfaces.RSAPrivateKey;

import java.security.spec.InvalidKeySpecException;

import java.security.spec.PKCS8EncodedKeySpec;

import java.time.Instant;

import java.time.temporal.ChronoUnit;

import java.util.Base64;

import java.util.Date;

import lombok.extern.slf4j.Slf4j;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.boot.web.client.RestTemplateBuilder;

import org.springframework.data.auditing.DateTimeProvider;

import org.springframework.http.HttpEntity;

import org.springframework.http.HttpHeaders;

import org.springframework.http.HttpMethod;

import org.springframework.http.ResponseEntity;

import org.springframework.stereotype.Service;

import org.springframework.web.client.RestTemplate;

@Service

public class JwtService {

  @Value("${app.private.key:no-key-present}")

  private String privateKey;

  @Value("${app.client.id:no-client-id}")

  private String clientId;

  private final RestTemplate restTemplate;

  private final ObjectMapper objectMapper;

  private final DateTimeProvider dateTimeProvider;

  public JwtService(

      RestTemplateBuilder restTemplateBuilder,

      ObjectMapper objectMapper,

      DateTimeProvider dateTimeProvider,

  private RSAPrivateKey getPrivateKey() throws NoSuchAlgorithmException, InvalidKeySpecException {

  }

  /**

   * Method to retrieve a signed JWT that a service can use to authenticate with GitHub as an app

   * installation without permissions to a specific organization.

   *

   * @return Signed JWT that expires in 5 minutes in the form of a String

   * @throws InvalidKeySpecException if the key is invalid, the exception will be thrown.

   */

  public String getJwt() throws NoSuchAlgorithmException, InvalidKeySpecException {

    String token =

  }

  /**

   * Method to retrieve a token to act as a particular app installation in a particular organization

   *

   * @param course ID of the particular app installation to act as

   * @return Token accepted by GitHub to act as a particular installation.

   */

  public String getInstallationToken(Course course)

      throws JsonProcessingException,

          NoSuchAlgorithmException,

          InvalidKeySpecException,

          NoLinkedOrganizationException {

    } else {

          "https://api.github.com/app/installations/"

              + "/access_tokens";

    }

  }

}

Mutations