How to implement jwt authentication inside the command and query buses ? about candid-cqrs HOT 5 CLOSED

public class UseCaseCommand { 

    String token;

    ... your other regular parameters
}

public class JwtCommandBusMiddleware implements CommandBusMiddleware {

    private JWTUtil util;
    private UserDetailsService userDetailsService;

    @Inject
    public JwtCommandBusMiddleware(JWTUtil util, UserDetailsService userDetailsService) {
        this.util = util;
        this.userDetailsService = userDetailsService;
    }

    @Override
    public <T> CommandResponse<T> dispatch(Command<T> command, CommandBus next) {

        // Reading Token from your command
        String token = command.token;
        if (token == null) {

            // throw an error

        }

        String username = util.getSubject(token);

        if (username == null) {

            // throw an error

        }

        //if username is not null & Context Authentication must be null
        UserDetails user = userDetailsService.loadUserByUsername(username);
        boolean tokenIsValid = util.isValidToken(token, user.getUsername());
        if (!tokenIsValid) {

            // throw an error
        }

        // if you are here, then your token is valid.
        // just dispatch to the next middleware in line
        return next.dispatch(command);
    }}

return CommandBusMiddleware.compositeOf(
                       ...
                        transactionalMiddleware,
                        // add here or anywhere convenient in the chain
                        // Since it is auth, i would assume the earlier the better but withing the transaction?
                        jwtCommandBusMiddleware, // !!!!
                        new DomainEventsDispatcher(domainEventBus))
                .decorate(new MapCommandBus(commandHandlersRegistry.handlers()));

public interface CommandToAuthenticate {
    String getToken();
}

public class UseCaseCommand implements Command<NoResult>, CommandToAuthenticate {

    private String token;

    // .. your other params

    @Override
    public String getToken() {
        return token;
    }
}

public class JwtCommandBusMiddleware implements CommandBusMiddleware {

    private JWTUtil util;
    private UserDetailsService userDetailsService;

    @Inject
    public JwtCommandBusMiddleware(JWTUtil util, UserDetailsService userDetailsService) {
        this.util = util;
        this.userDetailsService = userDetailsService;
    }

    @Override
    public <T> CommandResponse<T> dispatch(Command<T> command, CommandBus next) {

        if (!CommandToAuthenticate.class.isAssignableFrom(command.getClass())) {
            // no need to authenticate the command.
            // pass to the next middleware in line
            return next.dispatch(command);
        }

        // if here, your command requires authentication
        // ... proceed as decribed above
    }