feat: add SecurityContext class

src/main/java/fr/titionfire/ffsaf/rest/ClubEndpoints.java

@@ -12,11 +12,10 @@ import fr.titionfire.ffsaf.rest.exception.DInternalError;
 import fr.titionfire.ffsaf.rest.from.FullClubForm;
 import fr.titionfire.ffsaf.rest.from.PartClubForm;
 import fr.titionfire.ffsaf.utils.Contact;
-import fr.titionfire.ffsaf.utils.GroupeUtils;
 import fr.titionfire.ffsaf.utils.PageResult;
+import fr.titionfire.ffsaf.utils.SecurityCtx;
 import fr.titionfire.ffsaf.utils.Utils;
 import io.quarkus.security.Authenticated;
-import io.quarkus.security.identity.SecurityIdentity;
 import io.smallrye.mutiny.Uni;
 import io.smallrye.mutiny.unchecked.Unchecked;
 import jakarta.annotation.security.RolesAllowed;
@@ -25,7 +24,6 @@ import jakarta.ws.rs.*;
 import jakarta.ws.rs.core.MediaType;
 import jakarta.ws.rs.core.Response;
 import org.eclipse.microprofile.config.inject.ConfigProperty;
-import org.eclipse.microprofile.jwt.JsonWebToken;
 import org.eclipse.microprofile.openapi.annotations.Operation;
 import org.eclipse.microprofile.openapi.annotations.parameters.Parameter;
 import org.eclipse.microprofile.openapi.annotations.responses.APIResponse;
@@ -45,21 +43,17 @@ public class ClubEndpoints {
     ClubService clubService;
 
     @Inject
-    JsonWebToken idToken;
-
-    @Inject
-    SecurityIdentity securityIdentity;
+    SecurityCtx securityCtx;
 
     @ConfigProperty(name = "upload_dir")
     String media;
 
     Consumer<ClubModel> checkPerm = Unchecked.consumer(clubModel -> {
-        if (!securityIdentity.getRoles().contains("federation_admin") && !GroupeUtils.isInClubGroup(clubModel.getId(),
-                idToken))
+        if (!securityCtx.roleHas("federation_admin") && !securityCtx.isInClubGroup(clubModel.getId()))
             throw new DForbiddenException();
     });
     Consumer<Long> checkPerm2 = Unchecked.consumer(id -> {
-        if (!securityIdentity.getRoles().contains("federation_admin") && !GroupeUtils.isInClubGroup(id, idToken))
+        if (!securityCtx.roleHas("federation_admin") && !securityCtx.isInClubGroup(id))
             throw new DForbiddenException();
     });
 
@@ -229,7 +223,7 @@ public class ClubEndpoints {
             @APIResponse(responseCode = "500", description = "Erreur interne du serveur")
     })
     public Uni<SimpleClub> getOfUser() {
-        return clubService.getOfUser(idToken).map(SimpleClub::fromModel)
+        return clubService.getOfUser(securityCtx).map(SimpleClub::fromModel)
                 .invoke(m -> m.setContactMap(Contact.toSite()));
     }
 
@@ -247,7 +241,7 @@ public class ClubEndpoints {
             @APIResponse(responseCode = "500", description = "Erreur interne du serveur")
     })
     public Uni<String> setClubOfUser(PartClubForm form) {
-        return clubService.updateOfUser(idToken, form);
+        return clubService.updateOfUser(securityCtx, form);
     }
 
     @GET