D-Net

package eu.dnetlib.openaire.usermanagement;

import eu.dnetlib.openaire.user.pojos.RegisteredService;

import eu.dnetlib.openaire.usermanagement.utils.RegisteredServicesUtils;

import eu.dnetlib.openaire.usermanagement.utils.TokenUtils;

import org.apache.http.HttpResponse;

import org.apache.log4j.Logger;

import org.bouncycastle.util.Integers;

import org.mitre.openid.connect.model.OIDCAuthenticationToken;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.security.core.context.SecurityContextHolder;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

import java.sql.SQLException;

public class EditRegisteredService extends HttpServlet {

    @Autowired

    private RegisteredServicesUtils registeredServicesUtils;

    private static final Logger logger = Logger.getLogger(EditRegisteredService.class);

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

    }

    @Override

    protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {

        request.getSession().setAttribute("authenticated",

                !SecurityContextHolder.getContext().getAuthentication().getPrincipal().toString()

                        .equals("anonymousUser"));

        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.

                getContext().getAuthentication();

        String accessToken = authentication.getAccessTokenValue();

        String serviceId = request.getParameter("id");

        int serviceIdInt = Integer.parseInt(serviceId);

        try {

            if (!registeredServicesUtils.isAuthorized(authentication.getSub(), serviceIdInt)) {

                request.getSession().setAttribute("message", "You have no permission to edit the service.");

                response.sendRedirect("./registeredServices");

            }

        } catch (SQLException sqle) {

            logger.error("Unable to access service with id " + serviceId, sqle);

            request.getSession().setAttribute("message", "There was an error accessing your service.");

            response.sendRedirect("./registeredServices");

        } catch (NumberFormatException nfe) {

            logger.error("Unable to access service with id " + serviceId, nfe);

            request.getSession().setAttribute("message", "Service with id " + serviceId + " does not exist.");

            response.sendRedirect("./registeredServices");

        }

        if (serviceId == null || serviceId.isEmpty()) { //TODO WRONG MESSAGE

            request.getSession().setAttribute("message", "Service with id " + serviceId + " does not exist.");

        }

        RegisteredService registeredService  = null;

        try {

            registeredService = registeredServicesUtils.getRegisteredServiceDao().fetchRegisteredServiceById(Integer.parseInt(serviceId));

        } catch (SQLException sqle) {

            logger.error("Unable to access service with id " + serviceId, sqle);

            request.getSession().setAttribute("message", "There was an error accessing your service.");

            response.sendRedirect("./registeredServices");

        }

        if (registeredService != null && registeredService.getAai_id() != null) {

            ServiceResponse serviceResponse = TokenUtils.getRegisteredService(registeredService.getAai_id(), accessToken);

            request.getSession().setAttribute("serviceId", serviceResponse.getId());

            System.out.println("service client name " + serviceResponse.getClientName());

            request.getSession().setAttribute("first_name", serviceResponse.getClientName());

            System.out.println("service client description " + serviceResponse.getClientDescription());

            request.getSession().setAttribute("description", serviceResponse.getClientDescription());

        } else {

            request.getSession().setAttribute("message", "Service with id " + serviceId + " does not exist.");

        }

        response.setContentType("text/html");

        request.getRequestDispatcher("./editRegisteredService.jsp").include(request, response);

    }

    @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {

        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.getContext().getAuthentication();

        String accessToken = authentication.getAccessTokenValue();

        String serviceId = request.getParameter("serviceId");

        String name = request.getParameter("first_name");

        String description = request.getParameter("description");

        HttpResponse resp = TokenUtils.updateService(serviceId, authentication.getSub(), name, description, authentication.getUserInfo().getEmail(), accessToken);

        if (resp.getStatusLine().getStatusCode()==200) {

            RegisteredService registeredService = new RegisteredService();

            registeredService.setName(name);

            registeredService.setAai_id(serviceId);

            try {

                registeredServicesUtils.getRegisteredServiceDao().update(registeredService);

            } catch (SQLException sqle) {

                logger.error("Unable to contact db.", sqle);

                request.getSession().setAttribute("message", "Fail to delete the service. Please try again later.");

                response.setContentType("text/html");

                request.getRequestDispatcher("./registeredServices.jsp").include(request, response);

            }

            request.getSession().setAttribute("success", "Your service with name '" + name + "' was successfully updated");

        }

        response.sendRedirect("./registeredServices");

    }

}