TokenDenylist.java

package com.iemr.admin.utils;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.stereotype.Component;

import java.util.concurrent.TimeUnit;

@Component
public class TokenDenylist {
    private final Logger logger = LoggerFactory.getLogger(this.getClass().getName());
    
    private static final String PREFIX = "denied_";

    @Autowired
    private RedisTemplate<String, Object> redisTemplate;

    private String getKey(String jti) {
        return PREFIX + jti;
    }  
    
    // Add a token's jti to the denylist with expiration time
    public void addTokenToDenylist(String jti, Long expirationTime) {
        if (jti == null || jti.trim().isEmpty()) {
            return;
        }
        if (expirationTime == null || expirationTime <= 0) {
            throw new IllegalArgumentException("Expiration time must be positive");
        }

        try {
            String key = getKey(jti);  // Use helper method to get the key
            redisTemplate.opsForValue().set(key, " ", expirationTime, TimeUnit.MILLISECONDS);
        } catch (Exception e) {
            throw new RuntimeException("Failed to denylist token", e);
        }
    }

    // Check if a token's jti is in the denylist
    public boolean isTokenDenylisted(String jti) {
        if (jti == null || jti.trim().isEmpty()) {
            return false;
        }
        try {
            String key = getKey(jti);  // Use helper method to get the key
            return Boolean.TRUE.equals(redisTemplate.hasKey(key));
        } catch (Exception e) {
            logger.error("Failed to check denylist status for jti: " + jti, e);
            // In case of Redis failure, consider the token as not denylisted to avoid blocking all requests
            return false;
        }
    }
}