Project

General

Profile

1 59495 katerina.i
package eu.dnetlib.openaire.usermanagement;
2
3
import com.google.gson.Gson;
4 59615 katerina.i
import com.google.gson.GsonBuilder;
5 59647 katerina.i
import com.google.gson.JsonParseException;
6 59517 katerina.i
import eu.dnetlib.openaire.user.pojos.RegisteredService;
7
import eu.dnetlib.openaire.usermanagement.utils.RegisteredServicesUtils;
8 59508 katerina.i
import eu.dnetlib.openaire.usermanagement.utils.TokenUtils;
9 59615 katerina.i
import org.apache.commons.validator.routines.UrlValidator;
10 59733 katerina.i
import org.apache.http.HttpResponse;
11 59517 katerina.i
import org.apache.log4j.Logger;
12 59495 katerina.i
import org.mitre.openid.connect.model.OIDCAuthenticationToken;
13 59517 katerina.i
import org.springframework.beans.factory.annotation.Autowired;
14 59821 k.triantaf
import org.springframework.security.access.method.P;
15 59495 katerina.i
import org.springframework.security.core.context.SecurityContextHolder;
16 59517 katerina.i
import org.springframework.web.context.support.SpringBeanAutowiringSupport;
17 59495 katerina.i
18 59517 katerina.i
import javax.servlet.ServletConfig;
19 59495 katerina.i
import javax.servlet.ServletException;
20
import javax.servlet.http.HttpServlet;
21
import javax.servlet.http.HttpServletRequest;
22
import javax.servlet.http.HttpServletResponse;
23
import java.io.IOException;
24 59517 katerina.i
import java.sql.SQLException;
25 59495 katerina.i
26 59517 katerina.i
27 59495 katerina.i
public class RegisterServiceServlet extends HttpServlet {
28
29 59517 katerina.i
    private Logger logger = Logger.getLogger(RegisterServiceServlet.class);
30 59495 katerina.i
31 59517 katerina.i
    public void init(ServletConfig config) throws ServletException {
32
        super.init(config);
33
        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,
34
                config.getServletContext());
35
    }
36
37
    @Autowired
38
    private RegisteredServicesUtils registeredServicesUtils;
39
40 59714 katerina.i
    @Autowired
41
    private TokenUtils tokenUtils;
42
43 59495 katerina.i
    public void doGet(HttpServletRequest request, HttpServletResponse response)
44
            throws ServletException, IOException {
45 59638 katerina.i
46
        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.
47
                getContext().getAuthentication();
48 59714 katerina.i
        String userid = authentication.getSub();
49 59638 katerina.i
50 59654 k.triantaf
        StringBuilder name = new StringBuilder().append(authentication.getUserInfo().getGivenName().charAt(0));
51
        name.append(authentication.getUserInfo().getFamilyName().charAt(0));
52
        request.getSession().setAttribute("name", name.toString());
53 59714 katerina.i
54
        String idParam = request.getParameter("id");
55
56
        if (idParam != null && !idParam.isEmpty()) { // EDIT CASE
57
            System.out.println("In edit");
58
            try {
59
                int id = Integer.parseInt(idParam);
60
                RegisteredService registeredService = registeredServicesUtils.getRegisteredServiceDao().fetchRegisteredServiceById(id);
61
62
                if (registeredService != null && registeredServicesUtils.isAuthorized(userid, id)) {
63 59806 k.triantaf
                    ServiceResponse serviceResponse = tokenUtils.getRegisteredService(registeredService.getClientId(), registeredService.getRegistrationAccessToken());
64 59714 katerina.i
65 59821 k.triantaf
                    updateFormFields(request, registeredService.getName(), registeredService.getKeyType(), serviceResponse);
66 59714 katerina.i
67
                } else {
68
                    if (registeredService == null) {
69
                        System.out.println("No service found!");
70
                        request.getSession().setAttribute("message", "Not valid registered service with given id " + id + ".");
71
                        response.sendRedirect("./registeredServices");
72
                        logger.warn("Not valid registered service with " + id + "id.");
73
74
                    } else {
75
                        System.out.println("Not authorized");
76 59733 katerina.i
                        request.getSession().setAttribute("message", "Not authorized to edit the registered service with id " + id + ".");
77 59714 katerina.i
                        response.sendRedirect("./registeredServices");
78
                        logger.warn("Not authorized to edit the service with " + id + "id.");
79
                    }
80
                }
81
82 59821 k.triantaf
            } catch (NumberFormatException nfe) {
83 59714 katerina.i
                System.out.println("WRONG FORMAT");
84
                request.getSession().setAttribute("message", "Invalid service id.");
85
                response.sendRedirect("./registeredServices");
86
                logger.error("Invalid service id.", nfe);
87
88 59821 k.triantaf
            } catch (SQLException sqle) {
89 59714 katerina.i
                System.out.println("SQL PROBLEM");
90
                request.getSession().setAttribute("message", "Could not fetch registered service.");
91
                response.sendRedirect("./registeredServices");
92
                logger.error("Could not fetch registered service.", sqle);
93
            }
94
95
        } else {// NEW SERVICE CASE
96
            //Careful! Redirects in method
97 59821 k.triantaf
            request.getSession().setAttribute("first_name", null);
98
            request.getSession().setAttribute("key_type", null);
99
            request.getSession().setAttribute("jwksUri", null);
100
            request.getSession().setAttribute("value", null);
101 59714 katerina.i
            checkNumberOfRegisteredServices(request, response, authentication);
102
        }
103
104
        response.setContentType("text/html");
105 59495 katerina.i
        request.getRequestDispatcher("./registerService.jsp").include(request, response);
106
    }
107
108 59806 k.triantaf
    private void updateFormFields(HttpServletRequest request, String serviceName, String keyType, ServiceResponse serviceResponse) {
109 59745 katerina.i
        System.out.println("UPDATING FORM");
110 59821 k.triantaf
        request.getSession().setAttribute("first_name", serviceName);
111
        System.out.println("Service response URI " + serviceResponse.getJwksUri());
112
        request.getSession().setAttribute("key_type", keyType);
113
        if (keyType != null) {
114
            if (keyType.equals("uri")) {
115 59733 katerina.i
                request.getSession().setAttribute("jwksUri", serviceResponse.getJwksUri());
116 59714 katerina.i
            } else {
117 59756 katerina.i
                Key key;
118 59821 k.triantaf
                if (serviceResponse.getJwks() != null) {
119 59756 katerina.i
                    key = serviceResponse.getJwks().keys[0];
120
                } else {
121
                    key = new Key();
122
                }
123 59733 katerina.i
                System.out.println("Service response keys " + serviceResponse.getJwksUri());
124 59714 katerina.i
                Gson gson = new GsonBuilder().setPrettyPrinting().create();
125
                request.getSession().setAttribute("value", gson.toJson(key));
126
            }
127
        }
128
    }
129
130 59495 katerina.i
    public void doPost(HttpServletRequest request, HttpServletResponse response)
131
            throws ServletException, IOException {
132 59615 katerina.i
133 59638 katerina.i
        OIDCAuthenticationToken authentication = (OIDCAuthenticationToken) SecurityContextHolder.
134
                getContext().getAuthentication();
135 59615 katerina.i
136 59745 katerina.i
        response.setContentType("text/html");
137 59638 katerina.i
        boolean canProceed = true;
138 59644 katerina.i
139 59733 katerina.i
        String mode = request.getParameter("mode").trim();
140
        System.out.println("Mode was " + mode);
141
        checkmode(mode);
142
        System.out.println("Mode is " + mode);
143 59495 katerina.i
144 59745 katerina.i
        String serviceId = request.getParameter("id");
145
146 59495 katerina.i
        String name = request.getParameter("first_name").trim();
147 59807 k.triantaf
        if (name.isEmpty()) {
148 59745 katerina.i
            request.getSession().setAttribute("first_name_error", true);
149
            canProceed = false;
150
        }
151 59821 k.triantaf
        String keyType = request.getParameter("key_type");
152 59638 katerina.i
        String jwksUri = null;
153
        String jwksString = null;
154
        Jwks jwks = null;
155 59821 k.triantaf
        if(keyType != null) {
156
            keyType = keyType.trim();
157
            if (keyType.equals("uri")) {
158
                jwksUri = request.getParameter("uri");
159
                request.getSession().setAttribute("jwksUri", jwksUri);
160 59638 katerina.i
161 59821 k.triantaf
                String[] schemes = {"https"};
162
                UrlValidator urlValidator = new UrlValidator(schemes);
163
                if (!urlValidator.isValid(jwksUri)) {
164
                    request.getSession().setAttribute("uri_error", true);
165
                    canProceed = false;
166
                }
167
            } else {
168
                jwksString = request.getParameter("value");
169
                try {
170
                    Gson gson = new GsonBuilder().registerTypeAdapter(Jwks.class, new JwksDeserializer()).create();
171
                    String jwksSet = String.format("{\"keys\":[%s]}", jwksString);
172
                    jwks = gson.fromJson(jwksSet, Jwks.class);
173
                    request.getSession().setAttribute("value", jwksString);
174 59745 katerina.i
175 59821 k.triantaf
                    if (jwks.getKeys() == null || jwks.getKeys().length == 0) {
176
                        System.out.println("Something wrong with the keys.");
177
                        request.getSession().setAttribute("value_error", true);
178
                        canProceed = false;
179
                    }
180 59745 katerina.i
181 59821 k.triantaf
182
                } catch (JsonParseException jpe) {
183 59657 k.triantaf
                    request.getSession().setAttribute("value_error", true);
184 59647 katerina.i
                    canProceed = false;
185
                }
186 59638 katerina.i
            }
187 59615 katerina.i
        }
188 59508 katerina.i
        String userid = authentication.getSub();
189
        String email = authentication.getUserInfo().getEmail();
190 59517 katerina.i
        ServiceResponse serviceResponse = null;
191
192 59638 katerina.i
        if (nameIsValid(name) && userInfoIsValid(userid, email) && keyIsValid(keyType, jwksUri, jwksString) && canProceed) {
193 59745 katerina.i
194 59638 katerina.i
            String serverMessage;
195
196 59821 k.triantaf
            if (mode.equals("create")) {
197 59733 katerina.i
                //Careful! Redirects in method
198 59908 katerina.i
                if (!checkNumberOfRegisteredServices(request, response, authentication)) {
199
                    return;
200
                }
201 59821 k.triantaf
                String serverRequestJSON = null;
202
                if(keyType == null) {
203
                    serverRequestJSON = createServiceJson(null, name, email);
204
                } else if (keyType.equals("uri")) {
205 59807 k.triantaf
                    serverRequestJSON = createServiceJson(null, name, email, jwksUri);
206 59821 k.triantaf
                } else if (keyType.equals("value")){
207 59807 k.triantaf
                    serverRequestJSON = createServiceJson(null, name, email, jwks);
208
                }
209 59821 k.triantaf
                if(serverRequestJSON != null) {
210
                    System.out.println("SERVER JSON " + serverRequestJSON);
211
                    serverMessage = tokenUtils.registerService(serverRequestJSON);
212
                    logger.debug(serverMessage);
213
                    if (serverMessage == null) {
214
                        request.getSession().setAttribute("message", "There was an error registering your service. Please try again later.");
215
                        response.sendRedirect("./registeredServices");
216
                        return;
217
                    }
218
                    serviceResponse = new Gson().fromJson(serverMessage, ServiceResponse.class);
219
                    String client_id = serviceResponse.getClientId();
220 59733 katerina.i
221 59821 k.triantaf
                    RegisteredService registeredService = new RegisteredService(client_id, userid, name, serviceResponse.getRegistrationAccessToken(), keyType);
222 59733 katerina.i
223 59821 k.triantaf
                    try {
224
                        registeredServicesUtils.addRegistedService(registeredService);
225
                        if(registeredService.getKeyType() != null) {
226
                            request.getSession().setAttribute("success",
227
                                    "Your service has been successfully registered!<br>" +
228 59908 katerina.i
                                            "<b>Client ID</b>: " + serviceResponse.getClientId());
229 59821 k.triantaf
                        } else {
230
                            request.getSession().setAttribute("success",
231
                                    "Your service has been successfully registered!<br>" +
232
                                          "<b>Client ID</b>: " + serviceResponse.getClientId() +
233 59822 k.triantaf
                                          "<br><span style=\"word-wrap: break-word\"><b>Client Secret</b>:" + serviceResponse.getClientSecret() + "</span>");
234 59821 k.triantaf
                        }
235 59733 katerina.i
236 59821 k.triantaf
                    } catch (SQLException sqle) {
237
                        logger.error("Fail to save service.", sqle);
238
                        request.getSession().setAttribute("message", "There was an error registering your service. Please try again later.");
239
                        response.sendRedirect("./registeredServices");
240
                        return;
241
                    }
242
                } else {
243
                    logger.error("Service request JSON is null");
244 59733 katerina.i
                    request.getSession().setAttribute("message", "There was an error registering your service. Please try again later.");
245
                    response.sendRedirect("./registeredServices");
246
                    return;
247
                }
248 59638 katerina.i
            } else {
249 59807 k.triantaf
                int serviceIdInt = 0;
250 59733 katerina.i
                if (serviceId == null || serviceId.isEmpty()) { //TODO WRONG MESSAGE
251
                    request.getSession().setAttribute("message", "Service with id " + serviceId + " does not exist.");
252
                    response.sendRedirect("./registeredServices");
253 59644 katerina.i
254 59733 katerina.i
                } else {
255
                    System.out.println("In edit...");
256
                    try {
257
                        serviceIdInt = Integer.parseInt(serviceId);
258
                        if (!registeredServicesUtils.isAuthorized(authentication.getSub(), serviceIdInt)) {
259
                            request.getSession().setAttribute("message", "You have no permission to edit the service.");
260
                            response.sendRedirect("./registeredServices");
261 59517 katerina.i
262 59908 katerina.i
                        } else {
263 59733 katerina.i
264 59908 katerina.i
                            RegisteredService registeredService = registeredServicesUtils.getRegisteredServiceDao().fetchRegisteredServiceById(serviceIdInt);
265
                            if (registeredService != null && registeredService.getClientId() != null) {
266
                                String serverRequestJSON = null;
267
                                if (keyType == null) {
268
                                    serverRequestJSON = createServiceJson(registeredService.getClientId(), name, email);
269
                                } else if (keyType.equals("uri")) {
270
                                    serverRequestJSON = createServiceJson(registeredService.getClientId(), name, email, jwksUri);
271
                                } else if (keyType.equals("value")) {
272
                                    serverRequestJSON = createServiceJson(registeredService.getClientId(), name, email, jwks);
273
                                }
274
                                if (serverRequestJSON != null) {
275
                                    System.out.println("SERVER JSON " + serverRequestJSON);
276
                                    HttpResponse resp = tokenUtils.updateService(registeredService.getClientId(), serverRequestJSON, registeredService.getRegistrationAccessToken());
277
                                    if (resp.getStatusLine().getStatusCode() == 200) {
278
                                        System.out.println("NAME >>>>" + name);
279
                                        registeredService.setName(name);
280
281
                                        System.out.println("Client Id " + registeredService.getClientId());
282
                                        try {
283
                                            registeredServicesUtils.getRegisteredServiceDao().update(registeredService);
284
                                        } catch (SQLException sqle) {
285
                                            logger.error("Unable to contact db.", sqle);
286
                                            request.getSession().setAttribute("message", "Fail to delete the service. Please try again later.");
287
                                            response.setContentType("text/html");
288
                                            request.getRequestDispatcher("./registeredServices.jsp").include(request, response);
289
                                            return;
290
                                        }
291
                                        request.getSession().setAttribute("success",
292
                                                "Your service has been successfully updated!<br>" +
293
                                                        "<b>Client ID</b>: " + registeredService.getClientId());
294 59821 k.triantaf
                                    }
295 59908 katerina.i
296
                                } else {
297
                                    request.getSession().setAttribute("message", "Service with id " + serviceId + " does not exist.");
298
                                    response.sendRedirect("./registeredServices");
299
                                    return;
300 59733 katerina.i
                                }
301 59821 k.triantaf
                            } else {
302 59908 katerina.i
                                logger.error("Service request JSON is null");
303
                                request.getSession().setAttribute("message", "There was an error registering your service. Please try again later.");
304 59821 k.triantaf
                                response.sendRedirect("./registeredServices");
305
                                return;
306 59733 katerina.i
                            }
307
                        }
308 59908 katerina.i
                    } catch(SQLException sqle){
309
                        logger.error("Unable to access service with id " + serviceId, sqle);
310
                        request.getSession().setAttribute("message", "There was an error accessing your service.");
311
                        response.sendRedirect("./registeredServices");
312 59733 katerina.i
313 59908 katerina.i
                    } catch(NumberFormatException nfe){
314
                        logger.error("Unable to access service with id " + serviceId, nfe);
315
                        request.getSession().setAttribute("message", "Service with id " + serviceId + " does not exist.");
316
                        response.sendRedirect("./registeredServices");
317
                    }
318 59733 katerina.i
                }
319 59638 katerina.i
            }
320
321
        } else {
322
            //something is wrong with the form and the error messages will appear
323 59645 katerina.i
            request.getSession().setAttribute("first_name", name);
324 59821 k.triantaf
            request.getSession().setAttribute("key_type", keyType);
325
            request.getSession().setAttribute("uri", jwksUri);
326
            request.getSession().setAttribute("value", jwksString);
327 59647 katerina.i
328 59821 k.triantaf
            if (serviceId != null && !serviceId.isEmpty()) {
329
                request.getRequestDispatcher("./registerService.jsp?id=" + serviceId).forward(request, response);
330 59745 katerina.i
331
            } else {
332
                request.getRequestDispatcher("./registerService.jsp").include(request, response);
333
334
            }
335 59644 katerina.i
            return;
336 59495 katerina.i
        }
337
338 59638 katerina.i
        response.sendRedirect("./registeredServices");
339
    }
340 59517 katerina.i
341 59733 katerina.i
    private void checkmode(String mode) {
342 59821 k.triantaf
        if (mode != null && !mode.isEmpty()) {
343
            if (!mode.equals("edit") || mode.equals("create")) {
344 59733 katerina.i
                mode = "create";
345
            }
346
        } else {
347
            mode = "create";
348
        }
349
    }
350
351 59638 katerina.i
    private boolean keyIsValid(String keyType, String jwksUri, String jwksString) {
352 59821 k.triantaf
        return keyType == null || (keyType.equals("uri") && jwksUri != null && !jwksUri.isEmpty()) ||
353 59638 katerina.i
                keyType.equals("value") && jwksString != null && !jwksString.isEmpty();
354
    }
355 59517 katerina.i
356 59638 katerina.i
    private boolean userInfoIsValid(String userid, String email) {
357
        return userid != null && !userid.isEmpty() &&
358
                email != null && !email.isEmpty();
359
    }
360
361
    private boolean nameIsValid(String name) {
362
        return name != null && !name.isEmpty();
363
    }
364
365 59908 katerina.i
    private boolean checkNumberOfRegisteredServices(HttpServletRequest request, HttpServletResponse response, OIDCAuthenticationToken authentication) throws IOException {
366 59517 katerina.i
        try {
367 59638 katerina.i
            long numberOfRegisteredServices =
368
                    registeredServicesUtils.getRegisteredServiceDao().countRegisteredServices(authentication.getSub());
369 59517 katerina.i
370 59638 katerina.i
            if (numberOfRegisteredServices >= 5) {
371
                response.sendRedirect("./registeredServices"); // The message there already exists.
372 59908 katerina.i
                return false;
373 59638 katerina.i
            }
374 59644 katerina.i
375 59517 katerina.i
        } catch (SQLException sqle) {
376 59638 katerina.i
            logger.error("Unable to count registered services.", sqle);
377
            request.getSession().setAttribute("message", "Unable to contact DB. Please try again later.");
378 59601 katerina.i
            response.sendRedirect("./registeredServices");
379 59908 katerina.i
            return false;
380 59517 katerina.i
        }
381 59908 katerina.i
382
        return true;
383 59638 katerina.i
    }
384 59517 katerina.i
385 59821 k.triantaf
    private static String createServiceJson(String clientId, String name, String email) {
386
        ServiceRequest serviceJSON = new ServiceRequest();
387
        serviceJSON.setClientId(clientId);
388
        serviceJSON.setClientName(name);
389
        serviceJSON.setContacts(new String[]{email});
390
        serviceJSON.setToken_endpoint_auth_method("client_secret_basic");
391
        serviceJSON.setTokenEndpointAuthSigningAlg(null);
392
        GsonBuilder builder = new GsonBuilder();
393
        builder.serializeNulls();
394
        Gson gson = builder.create();
395
        System.out.println("Created json " + serviceJSON);
396
        return gson.toJson(serviceJSON);
397
    }
398
399 59807 k.triantaf
    private static String createServiceJson(String clientId, String name, String email, String jwksURI) {
400 59638 katerina.i
        ServiceRequest serviceJSON = new ServiceRequest();
401 59807 k.triantaf
        serviceJSON.setClientId(clientId);
402 59638 katerina.i
        serviceJSON.setClientName(name);
403
        serviceJSON.setContacts(new String[]{email});
404
        serviceJSON.setJwksUri(jwksURI);
405 59495 katerina.i
406 59638 katerina.i
        GsonBuilder builder = new GsonBuilder();
407
        builder.serializeNulls();
408
        Gson gson = builder.create();
409 59821 k.triantaf
        System.out.println("Created json " + serviceJSON);
410 59638 katerina.i
        return gson.toJson(serviceJSON);
411 59495 katerina.i
    }
412 59638 katerina.i
413 59807 k.triantaf
    private static String createServiceJson(String clientId, String name, String email, Jwks jwks) {
414 59638 katerina.i
        ServiceRequest serviceJSON = new ServiceRequest();
415 59807 k.triantaf
        serviceJSON.setClientId(clientId);
416 59638 katerina.i
        serviceJSON.setClientName(name);
417
        serviceJSON.setContacts(new String[]{email});
418
        serviceJSON.setJwks(jwks);
419
420
        GsonBuilder builder = new GsonBuilder();
421
        builder.serializeNulls();
422
        Gson gson = builder.create();
423 59821 k.triantaf
        System.out.println("Created json " + serviceJSON);
424 59638 katerina.i
        return gson.toJson(serviceJSON);
425
    }
426
427 59495 katerina.i
}