--- /dev/null
+/*******************************************************************************\r
+ * ============LICENSE_START====================================================\r
+ * * org.onap.aaf\r
+ * * ===========================================================================\r
+ * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.\r
+ * * ===========================================================================\r
+ * * Licensed under the Apache License, Version 2.0 (the "License");\r
+ * * you may not use this file except in compliance with the License.\r
+ * * You may obtain a copy of the License at\r
+ * * \r
+ * * http://www.apache.org/licenses/LICENSE-2.0\r
+ * * \r
+ * * Unless required by applicable law or agreed to in writing, software\r
+ * * distributed under the License is distributed on an "AS IS" BASIS,\r
+ * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
+ * * See the License for the specific language governing permissions and\r
+ * * limitations under the License.\r
+ * * ============LICENSE_END====================================================\r
+ * *\r
+ * * ECOMP is a trademark and service mark of AT&T Intellectual Property.\r
+ * *\r
+ ******************************************************************************/\r
+package org.onap.aaf.authz.service.api;\r
+\r
+import static org.onap.aaf.authz.layer.Result.OK;\r
+import static org.onap.aaf.cssa.rserv.HttpMethods.DELETE;\r
+import static org.onap.aaf.cssa.rserv.HttpMethods.GET;\r
+import static org.onap.aaf.cssa.rserv.HttpMethods.POST;\r
+import static org.onap.aaf.cssa.rserv.HttpMethods.PUT;\r
+\r
+import javax.servlet.http.HttpServletRequest;\r
+import javax.servlet.http.HttpServletResponse;\r
+\r
+import org.onap.aaf.authz.env.AuthzTrans;\r
+import org.onap.aaf.authz.facade.AuthzFacade;\r
+import org.onap.aaf.authz.layer.Result;\r
+import org.onap.aaf.authz.service.AuthAPI;\r
+import org.onap.aaf.authz.service.Code;\r
+import org.onap.aaf.authz.service.mapper.Mapper.API;\r
+\r
+import com.att.aft.dme2.internal.jetty.http.HttpStatus;\r
+\r
+/**\r
+ * User Role APIs\r
+ *\r
+ */\r
+public class API_UserRole {\r
+ /**\r
+ * Normal Init level APIs\r
+ * \r
+ * @param authzAPI\r
+ * @param facade\r
+ * @throws Exception\r
+ */\r
+ public static void init(final AuthAPI authzAPI, AuthzFacade facade) throws Exception {\r
+ /**\r
+ * Request User Role Access\r
+ */\r
+ authzAPI.route(POST,"/authz/userRole",API.USER_ROLE_REQ,new Code(facade,"Request User Role Access", true) {\r
+ @Override\r
+ public void handle(AuthzTrans trans, HttpServletRequest req, HttpServletResponse resp) throws Exception {\r
+ Result<Void> r = context.requestUserRole(trans, req, resp);\r
+ switch(r.status) {\r
+ case OK:\r
+ resp.setStatus(HttpStatus.CREATED_201); \r
+ break;\r
+ default:\r
+ context.error(trans,resp,r);\r
+ }\r
+ }\r
+ });\r
+ \r
+ \r
+ /**\r
+ * Get UserRoles by Role\r
+ */\r
+ authzAPI.route(GET,"/authz/userRoles/role/:role",API.USER_ROLES,new Code(facade,"Get UserRoles by Role", true) {\r
+ @Override\r
+ public void handle(AuthzTrans trans, HttpServletRequest req, HttpServletResponse resp) throws Exception {\r
+ Result<Void> r = context.getUserRolesByRole(trans, resp, pathParam(req,":role"));\r
+ switch(r.status) {\r
+ case OK:\r
+ resp.setStatus(HttpStatus.OK_200); \r
+ break;\r
+ default:\r
+ context.error(trans,resp,r);\r
+ }\r
+ }\r
+ });\r
+ \r
+ /**\r
+ * Get UserRoles by User\r
+ */\r
+ authzAPI.route(GET,"/authz/userRoles/user/:user",API.USER_ROLES,new Code(facade,"Get UserRoles by User", true) {\r
+ @Override\r
+ public void handle(AuthzTrans trans, HttpServletRequest req, HttpServletResponse resp) throws Exception {\r
+ Result<Void> r = context.getUserRolesByUser(trans, resp, pathParam(req,":user"));\r
+ switch(r.status) {\r
+ case OK:\r
+ resp.setStatus(HttpStatus.OK_200); \r
+ break;\r
+ default:\r
+ context.error(trans,resp,r);\r
+ }\r
+ }\r
+ });\r
+\r
+ \r
+ /**\r
+ * Update roles attached to user in path\r
+ */\r
+ authzAPI.route(PUT,"/authz/userRole/user",API.USER_ROLE_REQ,new Code(facade,"Update Roles for a user", true) {\r
+ @Override\r
+ public void handle(AuthzTrans trans, HttpServletRequest req, HttpServletResponse resp) throws Exception {\r
+ Result<Void> r = context.resetRolesForUser(trans, resp, req);\r
+ switch(r.status) {\r
+ case OK:\r
+ resp.setStatus(HttpStatus.OK_200); \r
+ break;\r
+ default:\r
+ context.error(trans,resp,r);\r
+ }\r
+ }\r
+ });\r
+ \r
+ \r
+ /**\r
+ * Update users attached to role in path\r
+ */\r
+ authzAPI.route(PUT,"/authz/userRole/role",API.USER_ROLE_REQ,new Code(facade,"Update Users for a role", true) {\r
+ @Override\r
+ public void handle(AuthzTrans trans, HttpServletRequest req, HttpServletResponse resp) throws Exception {\r
+ Result<Void> r = context.resetUsersForRole(trans, resp, req);\r
+ switch(r.status) {\r
+ case OK:\r
+ resp.setStatus(HttpStatus.OK_200); \r
+ break;\r
+ default:\r
+ context.error(trans,resp,r);\r
+ }\r
+ }\r
+ });\r
+ \r
+ /**\r
+ * Extend Expiration Date (according to Organizational rules)\r
+ */\r
+ authzAPI.route(PUT, "/authz/userRole/extend/:user/:role", API.VOID, new Code(facade,"Extend Expiration", true) {\r
+ @Override\r
+ public void handle(AuthzTrans trans, HttpServletRequest req, HttpServletResponse resp) throws Exception {\r
+ Result<Void> r = context.extendUserRoleExpiration(trans,resp,pathParam(req,":user"),pathParam(req,":role"));\r
+ switch(r.status) {\r
+ case OK:\r
+ resp.setStatus(HttpStatus.OK_200); \r
+ break;\r
+ default:\r
+ context.error(trans,resp,r);\r
+ }\r
+ \r
+ }\r
+ \r
+ });\r
+ \r
+ \r
+ /**\r
+ * Create a new ID/Credential\r
+ */\r
+ authzAPI.route(DELETE,"/authz/userRole/:user/:role",API.VOID,new Code(facade,"Delete User Role", true) {\r
+ @Override\r
+ public void handle(AuthzTrans trans, HttpServletRequest req, HttpServletResponse resp) throws Exception {\r
+ Result<Void> r = context.deleteUserRole(trans, resp, pathParam(req,":user"),pathParam(req,":role"));\r
+ switch(r.status) {\r
+ case OK:\r
+ resp.setStatus(HttpStatus.OK_200); \r
+ break;\r
+ default:\r
+ context.error(trans,resp,r);\r
+ }\r
+ }\r
+ });\r
+\r
+ }\r
+}\r
Code Review / aaf / authz.git / blobdiff