D-Net

package eu.dnetlib.openaire.usermanagement;

import com.google.gson.Gson;

import com.google.gson.GsonBuilder;

import com.google.gson.JsonParseException;

import eu.dnetlib.openaire.user.pojos.RegisteredService;

import eu.dnetlib.openaire.usermanagement.utils.RegisteredServicesUtils;

import eu.dnetlib.openaire.usermanagement.utils.TokenUtils;

import org.apache.commons.validator.routines.UrlValidator;

import org.apache.log4j.Logger;

import org.mitre.openid.connect.model.OIDCAuthenticationToken;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.security.core.context.SecurityContextHolder;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

import java.sql.SQLException;

public class RegisterServiceServlet extends HttpServlet {

    private Logger logger = Logger.getLogger(RegisterServiceServlet.class);

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

    }

    @Autowired

    private RegisteredServicesUtils registeredServicesUtils;

    public void doGet(HttpServletRequest request, HttpServletResponse response)

            throws ServletException, IOException {

        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.

                getContext().getAuthentication();

        //Careful! Redirects in method

        checkNumberOfRegisteredServices(request, response, authentication);

        response.setContentType("text/html");

        StringBuilder name = new StringBuilder().append(authentication.getUserInfo().getGivenName().charAt(0));

        name.append(authentication.getUserInfo().getFamilyName().charAt(0));

        request.getSession().setAttribute("name", name.toString());

        request.getRequestDispatcher("./registerService.jsp").include(request, response);

    }

    public void doPost(HttpServletRequest request, HttpServletResponse response)

            throws ServletException, IOException {

        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.

                getContext().getAuthentication();

        boolean canProceed = true;

        //Careful! Redirects in method

        checkNumberOfRegisteredServices(request, response, authentication);

        String name = request.getParameter("first_name").trim();

        String description = request.getParameter("description").trim();

        String keyType = request.getParameter("key_radio").trim();

        String jwksUri = null;

        String jwksString = null;

        Jwks jwks = null;

        if (keyType.equals("uri")) {

            jwksUri = request.getParameter("uri");

            String[] schemes = {"https"};

            UrlValidator urlValidator = new UrlValidator(schemes);

            if (!urlValidator.isValid(jwksUri)){

                System.out.println("Not valid? " + jwksUri);

                request.getSession().setAttribute("msg_key_uri_error_display", "display:block");

                canProceed = false;

            }

        } else {

            jwksString = request.getParameter("value");

            try {

                Gson gson = new GsonBuilder().registerTypeAdapter(Jwks.class, new JwksDeserializer()).create();

                jwks = gson.fromJson(jwksString, Jwks.class);

                if (jwks.getKeys() == null || jwks.getKeys().length == 0) {

                    System.out.println("Something wrong with the keys.");

                    request.getSession().setAttribute("msg_key_value_error_display", "display:block");

                    canProceed = false;

                }

            } catch (JsonParseException jpe) {

                request.getSession().setAttribute("msg_key_value_error_display", "display:block");

                canProceed = false;

            }

        }

        String userid = authentication.getSub();

        String email = authentication.getUserInfo().getEmail();

        String accessToken = authentication.getAccessTokenValue();

        ServiceResponse serviceResponse = null;

        if (nameIsValid(name) && userInfoIsValid(userid, email) && keyIsValid(keyType, jwksUri, jwksString) && canProceed) {

            String serverRequestJSON;

            String serverMessage;

            if (keyType.equals("uri")){

                serverRequestJSON = createServiceJson(name, description, email, jwksUri);

            } else {

                serverRequestJSON = createServiceJson(name, description, email, jwks);

            }

            serverMessage = TokenUtils.registerService(serverRequestJSON, accessToken);

            if (serverMessage == null) {

                request.getSession().setAttribute("message", "There was an error registering your service. Please try again later.");

                response.sendRedirect("./registeredServices");

            }

            serviceResponse = new Gson().fromJson(serverMessage, ServiceResponse.class);

            String aai_id = serviceResponse.getId();

            String owner = userid;

            RegisteredService registeredService = new RegisteredService(aai_id, owner, name);

            try {

                registeredServicesUtils.addRegistedService(registeredService);

                request.getSession().setAttribute("success", "Your service has been successfully registered!");

            } catch (SQLException sqle) {

                logger.error("Fail to save service.", sqle);

                request.getSession().setAttribute("message", "There was an error registering your service. Please try again later.");

                response.sendRedirect("./registeredServices");

                return;

            }

        } else {

            //something is wrong with the form and the error messages will appear

            request.getSession().setAttribute("first_name", name);

            request.getSession().setAttribute("description", description);

            request.getSession().setAttribute("key_radio",  keyType);

            request.getSession().setAttribute("uri",  jwksUri);

            request.getSession().setAttribute("value",  jwksString);

            response.sendRedirect("./registerService");

            return;

        }

        response.sendRedirect("./registeredServices");

    }

    private boolean keyIsValid(String keyType, String jwksUri, String jwksString) {

        return (keyType.equals("uri") && jwksUri != null && !jwksUri.isEmpty()) ||

                keyType.equals("value") && jwksString != null && !jwksString.isEmpty();

    }

    private boolean userInfoIsValid(String userid, String email) {

        return userid != null && !userid.isEmpty() &&

                email != null && !email.isEmpty();

    }

    private boolean nameIsValid(String name) {

        return name != null && !name.isEmpty();

    }

    private void checkNumberOfRegisteredServices(HttpServletRequest request, HttpServletResponse response, OIDCAuthenticationToken authentication) throws IOException {

        try {

            long numberOfRegisteredServices =

                    registeredServicesUtils.getRegisteredServiceDao().countRegisteredServices(authentication.getSub());

            if (numberOfRegisteredServices >= 5) {

                response.sendRedirect("./registeredServices"); // The message there already exists.

            }

        } catch (SQLException sqle) {

            logger.error("Unable to count registered services.", sqle);

            request.getSession().setAttribute("message", "Unable to contact DB. Please try again later.");

            response.sendRedirect("./registeredServices");

            return;

        }

    }

    private static String createServiceJson(String name, String description, String email, String jwksURI) {

        ServiceRequest serviceJSON = new ServiceRequest();

        serviceJSON.setClientName(name);

        serviceJSON.setClientDescription(description);

        serviceJSON.setContacts(new String[]{email});

        serviceJSON.setJwksUri(jwksURI);

        GsonBuilder builder = new GsonBuilder();

        builder.serializeNulls();

        Gson gson = builder.create();

        System.out.println("Created json " +serviceJSON);

        return gson.toJson(serviceJSON);

    }

    private static String createServiceJson(String name, String description, String email, Jwks jwks) {

        ServiceRequest serviceJSON = new ServiceRequest();

        serviceJSON.setClientName(name);

        serviceJSON.setClientDescription(description);

        serviceJSON.setContacts(new String[]{email});

        serviceJSON.setJwksType("VAL");

        serviceJSON.setJwks(jwks);

        GsonBuilder builder = new GsonBuilder();

        builder.serializeNulls();

        Gson gson = builder.create();

        System.out.println("Created json " +serviceJSON);

        return gson.toJson(serviceJSON);

    }

}