1 package org.onap.so.cloud.authentication;
3 import java.util.ArrayList;
4 import java.util.Arrays;
6 import java.util.concurrent.TimeUnit;
7 import java.util.function.Predicate;
9 import org.onap.so.config.beans.PoConfig;
10 import org.onap.so.db.catalog.beans.CloudIdentity;
11 import org.onap.so.db.catalog.beans.CloudSite;
12 import org.onap.so.openstack.exceptions.MsoException;
13 import org.onap.so.openstack.utils.MsoTenantUtils;
14 import org.onap.so.openstack.utils.MsoTenantUtilsFactory;
15 import org.springframework.beans.factory.annotation.Autowired;
16 import org.springframework.stereotype.Component;
18 import com.woorea.openstack.base.client.OpenStackConnectException;
19 import com.woorea.openstack.base.client.OpenStackRequest;
20 import com.woorea.openstack.base.client.OpenStackResponse;
21 import com.woorea.openstack.base.client.OpenStackResponseException;
22 import com.woorea.openstack.keystone.v3.Keystone;
23 import com.woorea.openstack.keystone.v3.model.Authentication;
24 import com.woorea.openstack.keystone.v3.model.Token;
25 import com.woorea.openstack.keystone.v3.model.Token.Service;
27 import net.jodah.failsafe.Failsafe;
28 import net.jodah.failsafe.RetryPolicy;
32 public class KeystoneV3Authentication {
35 private AuthenticationMethodFactory authenticationMethodFactory;
38 private MsoTenantUtilsFactory tenantUtilsFactory;
41 private PoConfig poConfig;
43 public KeystoneAuthHolder getToken(CloudSite cloudSite, String tenantId, String type) throws MsoException {
45 String cloudId = cloudSite.getId();
46 String region = cloudSite.getRegionId();
48 CloudIdentity cloudIdentity = cloudSite.getIdentityService();
49 MsoTenantUtils tenantUtils = tenantUtilsFactory.getTenantUtilsByServerType(cloudIdentity.getIdentityServerType());
50 String keystoneUrl = tenantUtils.getKeystoneUrl(cloudId, cloudIdentity);
51 Keystone keystoneTenantClient = new Keystone (keystoneUrl);
52 Authentication v3Credentials = authenticationMethodFactory.getAuthenticationForV3(cloudIdentity, tenantId);
55 OpenStackRequest<Token> v3Request = keystoneTenantClient.tokens ()
56 .authenticate(v3Credentials);
58 KeystoneAuthHolder holder = makeRequest(v3Request, type, region);
63 protected KeystoneAuthHolder makeRequest(OpenStackRequest<Token> v3Request, String type, String region) {
65 OpenStackResponse response = Failsafe.with(createRetryPolicy()).get(() -> {
66 return v3Request.request();
68 String id = response.header("X-Subject-Token");
69 Token token = response.getEntity(Token.class);
70 KeystoneAuthHolder result = new KeystoneAuthHolder();
72 result.setexpiration(token.getExpiresAt());
73 result.setHeatUrl(findEndpointURL(token.getCatalog(), type, region, "public"));
77 protected RetryPolicy createRetryPolicy() {
78 RetryPolicy policy = new RetryPolicy();
79 List<Predicate<Throwable>> result = new ArrayList<>();
81 return e.getCause() instanceof OpenStackResponseException
82 && Arrays.asList(poConfig.getRetryCodes().split(","))
83 .contains(Integer.toString(((OpenStackResponseException)e).getStatus()));
86 return e.getCause() instanceof OpenStackConnectException;
89 Predicate<Throwable> pred = result.stream().reduce(Predicate::or).orElse(x -> false);
91 policy.retryOn(error -> pred.test(error));
93 policy.withDelay(poConfig.getRetryDelay(), TimeUnit.SECONDS)
94 .withMaxRetries(poConfig.getRetryCount());
99 protected String findEndpointURL(List<Service> serviceCatalog, String type, String region, String facing) {
100 for(Service service : serviceCatalog) {
101 if(type.equals(service.getType())) {
102 for(Service.Endpoint endpoint : service.getEndpoints()) {
103 if(region == null || region.equals(endpoint.getRegion())) {
104 if(facing.equals(endpoint.getInterface())) {
105 return endpoint.getUrl();
111 throw new ServiceEndpointNotFoundException("endpoint url not found");