D-Net

package eu.dnetlib.openaire.usermanagement.api;

import com.fasterxml.jackson.core.JsonProcessingException;

import com.fasterxml.jackson.databind.ObjectMapper;

import com.google.gson.Gson;

import com.google.gson.JsonArray;

import com.google.gson.JsonObject;

import com.google.gson.JsonParser;

import com.unboundid.ldap.sdk.LDAPException;

import eu.dnetlib.openaire.user.pojos.migration.LDAPUser;

import eu.dnetlib.openaire.user.pojos.migration.MigrationUser;

import eu.dnetlib.openaire.user.pojos.migration.Role;

import eu.dnetlib.openaire.user.dao.RoleDAO;

import eu.dnetlib.openaire.user.dao.SQLMigrationUserDAO;

import eu.dnetlib.openaire.user.ldap.MUserActionsLDAP;

import eu.dnetlib.openaire.user.store.DataSourceConnector;

import org.apache.commons.io.IOUtils;

import org.apache.http.HttpResponse;

import org.apache.http.NameValuePair;

import org.apache.http.client.entity.UrlEncodedFormEntity;

import org.apache.http.client.methods.HttpPost;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.message.BasicNameValuePair;

import org.apache.log4j.Logger;

import org.mitre.openid.connect.model.OIDCAuthenticationToken;

import org.mitre.openid.connect.model.UserInfo;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.http.*;

import org.springframework.http.HttpMethod;

import org.springframework.security.access.prepost.PreAuthorize;

import org.springframework.security.core.annotation.AuthenticationPrincipal;

import org.springframework.security.core.context.SecurityContextHolder;

import org.springframework.security.core.userdetails.UserDetails;

import org.springframework.stereotype.Component;

import org.springframework.web.client.DefaultResponseErrorHandler;

import org.springframework.web.client.RestTemplate;

import sun.net.www.http.HttpClient;

import javax.ws.rs.*;

import javax.ws.rs.core.MediaType;

import javax.ws.rs.core.Response;

import java.io.IOException;

import java.io.InputStream;

import java.io.UnsupportedEncodingException;

import java.nio.charset.StandardCharsets;

import java.sql.SQLException;

import java.util.ArrayList;

import java.util.List;

/**

 * Created by sofia on 24/11/2016.

 */

@Component(value = "test3service")

@Path("/users")

public class Test3Service {

    private static final Logger logger = Logger.getLogger(Test3Service.class);

    @Autowired

    private SQLMigrationUserDAO sqlMigrationUserDAO;

    @Autowired

    private MUserActionsLDAP mUserActionsLDAP;

    @Autowired

    private DataSourceConnector dataSourceConnector;

    @Value("${oidc.issuer}")

    private String issuer;

    @Value("${oidc.secret}")

    private String secret;

    @Value("${oidc.id}")

    private String id;

    @GET

    @Path("/getToken")

    @Produces(MediaType.APPLICATION_JSON)

    public Response getToken(@QueryParam("accessToken") String accessToken){

        logger.debug("Refresh token " + accessToken);

        System.out.printf("HELLO PAPAGENA");

        CloseableHttpClient httpclient = HttpClients.createDefault();

        HttpPost httppost = new HttpPost(issuer+"/token");

        // Request parameters and other properties.

        List<NameValuePair> params = new ArrayList<NameValuePair>();

        params.add(new BasicNameValuePair("client_id", id));

        params.add(new BasicNameValuePair("client_secret", secret));

        params.add(new BasicNameValuePair("grant_type", "refresh_token"));

        params.add(new BasicNameValuePair("refresh_token", accessToken));

        params.add(new BasicNameValuePair("scope", "openid email profile"));

        try {

            httppost.setEntity(new UrlEncodedFormEntity(params, "UTF-8"));

            //Execute and get the response.

            HttpResponse response = null;

            response = httpclient.execute(httppost);

            org.apache.http.HttpEntity entity = response.getEntity();

            logger.debug("I am here");

            if (entity != null) {

                try (InputStream instream = entity.getContent()) {

                    logger.debug(IOUtils.toString(instream, StandardCharsets.UTF_8.name()));

                }

            }

        }  catch (UnsupportedEncodingException e) {

            logger.error(e);

        } catch (IOException e) {

            logger.error(e);

        }

        logger.info("DDDDDDDD");

        return Response.status(200).type(MediaType.APPLICATION_JSON).build();

    }

    @GET

    @Path("/getUserInfo")

    @Produces(MediaType.APPLICATION_JSON)

    //TODO REMOVE THIS and make the request directly to aai service {oidc.issuer} OR! see what is done with redis

    public Response getUserInfo(@QueryParam("accessToken") String accessToken) throws JsonProcessingException {

        //return Response.status(404).entity(compose404Message("This is a test message.")).type(MediaType.APPLICATION_JSON).build();

        // call aai with accessToken

        RestTemplate restTemplate = new RestTemplate();

        restTemplate.setErrorHandler(new DefaultResponseErrorHandler(){

            protected boolean hasError(HttpStatus statusCode) {

                return false;

            }});

        HttpHeaders headers = new HttpHeaders();

        headers.add("Authorization","Bearer " + accessToken);

        HttpEntity request = new HttpEntity(null, headers);

        String fooResourceUrl = issuer +"userinfo";

        //logger.info(restTemplate.exchange(fooResourceUrl, HttpMethod.GET, request, Object.class));

        ResponseEntity response1 = restTemplate.exchange(fooResourceUrl, HttpMethod.GET, request, Object.class);

        logger.info(response1.getBody().toString());

        ObjectMapper mapper = new ObjectMapper();

        return Response.status(response1.getStatusCode().value()).entity(mapper.writeValueAsString(response1.getBody())).type(MediaType.APPLICATION_JSON).build();

    }

    @GET

    @Path("/getUser")

    @Produces(MediaType.APPLICATION_JSON)

    public Response getUser()  {

        JsonObject userInfoJson = new JsonObject();

        try {

            OIDCAuthenticationToken authentication = null;

            try {

                authentication = (OIDCAuthenticationToken) SecurityContextHolder.getContext().getAuthentication();

            }catch (Exception e){

                logger.info("Try to get User info - no context found ");

                return Response.status(404).entity(compose404Message("Get User info: no context found ")).type(MediaType.APPLICATION_JSON).build();

            }

            UserInfo userInfo = authentication.getUserInfo();

            if(userInfo == null){

                return Response.status(404).entity(compose404Message("Get User info: user info is null ")).type(MediaType.APPLICATION_JSON).build();

            }

            logger.info("Get User:\n name: " + authentication.getUserInfo().getGivenName() + " " + authentication.getUserInfo().getFamilyName());

            userInfoJson.addProperty("sub", userInfo.getSub());

            userInfoJson.addProperty("name", userInfo.getName());

            userInfoJson.addProperty("given_name", userInfo.getGivenName());

            userInfoJson.addProperty("family_name", userInfo.getFamilyName());

            userInfoJson.addProperty("email", userInfo.getEmail());

            JsonArray roles = new JsonArray();

            JsonObject source = authentication.getUserInfo().getSource();

            roles = source.getAsJsonArray("edu_person_entitlements");

            userInfoJson.add("edu_person_entitlements", roles);

        }catch (Exception e){

            logger.error("Get User info: An error occured ",e);

            return Response.status(500).entity(compose500Message("Get User info: An error occured ",e)).type(MediaType.APPLICATION_JSON).build();

        }

        return Response.status(200).entity(userInfoJson.toString()).type(MediaType.APPLICATION_JSON).build();

    }

/*

    @GET

    @Path("/katerina")

    @Produces(MediaType.APPLICATION_JSON)

    //@PreAuthorize("hasRole('ROLE_USER')")

    @PreAuthorize("hasAuthority('urn:geant:openaire.eu:group:Registered+User#aai.openaire.eu')")

    public Response getKaterina()  {

        return Response.status(200).build();

    }

    @GET

    @Path("/skata")

    @Produces(MediaType.APPLICATION_JSON)

    @PreAuthorize("hasRole('ROLE_USER')")

    public Response getKaterina2()  {

        return Response.status(200).build();

    }

    @GET

    @Path("/skata2")

    @Produces(MediaType.APPLICATION_JSON)

    @PreAuthorize("hasAuthority('skata')")

    public Response getKaterina3()  {

        return Response.status(200).build();

    }

    @GET

    @Path("/me")

    //@Produces(MediaType.APPLICATION_JSON)

    public Response getKaterina(@AuthenticationPrincipal UserDetails userDetails)  {

        //return Response.status(200).entity(userDetails).type(MediaType.APPLICATION_JSON).build();

        return Response.status(200).build();

    }

*/

    /* JSON Utility Methods */

    private String compose401Message(String message) {

        return  "{ \"status\" : \"error\", \"code\" : \"401\", \"message\" : \"  " + message +" \" }";

    }

    private String compose404Message(String message) {

        return  "{ \"status\" : \"error\", \"code\" : \"404\", \"message\" : \"  " + message +" \" }";

    }

    private String compose500Message(String message, Exception exception) {

        return  "{ \"status\" : \"fail\", \"code\" : \"500\", \"message\" : \"  " + message + "\", " +

                "\"description\" : \""+  exception.getMessage() +"\" }";

    }

    private String composeDataResponse(LDAPUser user) {

        return " { \"status\" : \"success\", \"code\": \"200\", " + "\"data\" : " + new Gson().toJson(user) + " }";

    }

    private String composeDataResponse(String fullname) {

        return " { \"status\" : \"success\", \"code\": \"200\", " + "\"data\" : " + new Gson().toJson(fullname) + " }";

    }

    public String getIssuer() {

        return issuer;

    }

    public void setIssuer(String issuer) {

        this.issuer = issuer;

    }

}