Catalog alignment
[sdc.git] / catalog-be / src / main / java / org / openecomp / sdc / be / distribution / servlet / DistributionCatalogServlet.java
index 31c3d67..4c5b4f6 100644 (file)
-/*-\r
- * ============LICENSE_START=======================================================\r
- * SDC\r
- * ================================================================================\r
- * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.\r
- * ================================================================================\r
- * Licensed under the Apache License, Version 2.0 (the "License");\r
- * you may not use this file except in compliance with the License.\r
- * You may obtain a copy of the License at\r
- * \r
- *      http://www.apache.org/licenses/LICENSE-2.0\r
- * \r
- * Unless required by applicable law or agreed to in writing, software\r
- * distributed under the License is distributed on an "AS IS" BASIS,\r
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
- * See the License for the specific language governing permissions and\r
- * limitations under the License.\r
- * ============LICENSE_END=========================================================\r
- * Modifications copyright (c) 2019 Nokia\r
- * ================================================================================\r
- */\r
-\r
-package org.openecomp.sdc.be.distribution.servlet;\r
-\r
-import java.io.ByteArrayInputStream;\r
-import java.io.InputStream;\r
-import java.util.HashMap;\r
-import java.util.Map;\r
-import javax.inject.Inject;\r
-import javax.inject.Singleton;\r
-import javax.servlet.http.HttpServletRequest;\r
-import javax.ws.rs.Consumes;\r
-import javax.ws.rs.GET;\r
-import javax.ws.rs.HeaderParam;\r
-import javax.ws.rs.Path;\r
-import javax.ws.rs.PathParam;\r
-import javax.ws.rs.Produces;\r
-import javax.ws.rs.core.Context;\r
-import javax.ws.rs.core.MediaType;\r
-import javax.ws.rs.core.Response;\r
-import org.openecomp.sdc.be.components.impl.ArtifactsBusinessLogic;\r
-import org.openecomp.sdc.be.config.BeEcompErrorManager;\r
-import org.openecomp.sdc.be.dao.api.ActionStatus;\r
-import org.openecomp.sdc.be.impl.ComponentsUtils;\r
-import org.openecomp.sdc.be.resources.data.auditing.model.DistributionData;\r
-import org.openecomp.sdc.be.servlets.BeGenericServlet;\r
-import org.openecomp.sdc.be.user.UserBusinessLogic;\r
-import org.openecomp.sdc.common.api.Constants;\r
-import org.openecomp.sdc.common.datastructure.Wrapper;\r
-import org.openecomp.sdc.common.log.wrappers.Logger;\r
-import org.openecomp.sdc.exception.ResponseFormat;\r
-import com.jcabi.aspects.Loggable;\r
-import fj.data.Either;\r
-import io.swagger.v3.oas.annotations.OpenAPIDefinition;\r
-import io.swagger.v3.oas.annotations.Operation;\r
-import io.swagger.v3.oas.annotations.Parameter;\r
-import io.swagger.v3.oas.annotations.info.Info;\r
-import io.swagger.v3.oas.annotations.media.ArraySchema;\r
-import io.swagger.v3.oas.annotations.media.Content;\r
-import io.swagger.v3.oas.annotations.media.Schema;\r
-import io.swagger.v3.oas.annotations.responses.ApiResponse;\r
-import io.swagger.v3.oas.annotations.responses.ApiResponses;\r
-\r
-/**\r
- * This Servlet serves external users to download artifacts.\r
- * \r
- * @author tgitelman\r
- *\r
- */\r
-\r
-@Loggable(prepend = true, value = Loggable.DEBUG, trim = false)\r
-@Path("/v1/catalog")\r
-@OpenAPIDefinition(info =  @Info(title = "Distribution Catalog Servlet",description = "This Servlet serves external users to download artifacts."))\r
-@Singleton\r
-public class DistributionCatalogServlet extends BeGenericServlet {\r
-\r
-    private static final String DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION = "download artifact failed with exception";\r
-       private static final String MISSING_X_ECOMP_INSTANCE_ID_HEADER = "Missing X-ECOMP-InstanceID header";\r
-       private static final Logger log = Logger.getLogger(DistributionCatalogServlet.class);\r
-       private final ArtifactsBusinessLogic artifactsBusinessLogic;\r
-\r
-       @Inject\r
-    public DistributionCatalogServlet(UserBusinessLogic userBusinessLogic,\r
-        ComponentsUtils componentsUtils,\r
-        ArtifactsBusinessLogic artifactsBusinessLogic) {\r
-        super(userBusinessLogic, componentsUtils);\r
-        this.artifactsBusinessLogic = artifactsBusinessLogic;\r
-    }\r
-\r
-    @Context\r
-    private HttpServletRequest request;\r
-\r
-    // *******************************************************\r
-    // Download (GET) artifacts\r
-    // **********************************************************/\r
-    /**\r
-     *\r
-     * @param requestId\r
-     * @param instanceIdHeader\r
-     * @param accept\r
-     * @param authorization\r
-     * @param serviceName\r
-     * @param serviceVersion\r
-     * @param artifactName\r
-     * @return\r
-     */\r
-    @GET\r
-    @Path("/services/{serviceName}/{serviceVersion}/artifacts/{artifactName}")\r
-    @Consumes(MediaType.APPLICATION_JSON)\r
-    @Produces(MediaType.APPLICATION_OCTET_STREAM)\r
-    @Operation(description = "Download service artifact", method = "GET", summary = "Returns downloaded artifact",\r
-            responses = @ApiResponse(\r
-                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))))\r
-    @ApiResponses(value = {\r
-            @ApiResponse(responseCode = "200", description = "The artifact is found and streamed.",\r
-                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))),\r
-            @ApiResponse(responseCode = "400", description = "Missing  'X-ECOMP-InstanceID'  HTTP header - POL5001"),\r
-            @ApiResponse(responseCode = "401", description = "ECOMP component  should authenticate itself  and  to  re-send  again  HTTP  request  with its Basic  Authentication credentials - POL5002"),\r
-            @ApiResponse(responseCode = "403", description = "ECOMP component is not authorized - POL5003"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Service is not found - SVC4503"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Service Version is  not  found - SVC4504"),\r
-            @ApiResponse(responseCode = "404", description = "Specified artifact is  not found - SVC4505"),\r
-            @ApiResponse(responseCode = "405", description = "Method  Not Allowed: Invalid HTTP method type used (PUT,DELETE,POST will be rejected) - POL4050"),\r
-            @ApiResponse(responseCode = "500", description = "The GET request failed either due to internal SDC problem or Cambria Service failure. ECOMP Component should continue the attempts to get the needed information - POL5000")})\r
-    public Response downloadServiceArtifact(\r
-            @Parameter(description = "X-ECOMP-RequestID header", required = false)@HeaderParam(value = Constants.X_ECOMP_REQUEST_ID_HEADER) String requestId,\r
-            @Parameter(description = "X-ECOMP-InstanceID header", required = true)@HeaderParam(value = Constants.X_ECOMP_INSTANCE_ID_HEADER) final String instanceIdHeader,\r
-            @Parameter(description = "Determines the format of the body of the response", required = false)@HeaderParam(value = Constants.ACCEPT_HEADER) String accept,\r
-            @Parameter(description = "The username and password", required = true)@HeaderParam(value = Constants.AUTHORIZATION_HEADER) String authorization,\r
-            @PathParam("serviceName") final String serviceName,\r
-            @PathParam("serviceVersion") final String serviceVersion,\r
-            @PathParam("artifactName") final String artifactName) {\r
-\r
-        String requestURI = request.getRequestURI();\r
-        Wrapper<Response> responseWrapper = validateInstanceIdHeader(new Wrapper<>(), instanceIdHeader, requestURI);\r
-        if(!responseWrapper.isEmpty()) {\r
-            return responseWrapper.getInnerElement();\r
-        }\r
-\r
-        try {\r
-            Either<byte[], ResponseFormat> downloadRsrcArtifactEither = artifactsBusinessLogic\r
-                .downloadServiceArtifactByNames(serviceName, serviceVersion, artifactName);\r
-            if (downloadRsrcArtifactEither.isRight()) {\r
-                ResponseFormat responseFormat = downloadRsrcArtifactEither.right().value();\r
-                getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));\r
-                responseWrapper.setInnerElement(buildErrorResponse(responseFormat));\r
-            } else {\r
-                byte[] value = downloadRsrcArtifactEither.left().value();\r
-                InputStream is = new ByteArrayInputStream(value);\r
-\r
-                Map<String, String> headers = new HashMap<>();\r
-                headers.put(Constants.CONTENT_DISPOSITION_HEADER, getContentDispositionValue(artifactName));\r
-                ResponseFormat responseFormat = getComponentsUtils().getResponseFormat(ActionStatus.OK);\r
-                getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));\r
-                responseWrapper.setInnerElement(buildOkResponse(responseFormat, is, headers));\r
-            }\r
-            return responseWrapper.getInnerElement();\r
-\r
-        } catch (Exception e) {\r
-            BeEcompErrorManager.getInstance().logBeRestApiGeneralError("download Murano package artifact for service - external API");\r
-            log.debug(DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION, e);\r
-            return buildErrorResponse(getComponentsUtils().getResponseFormat(ActionStatus.GENERAL_ERROR));\r
-        }\r
-    }\r
-\r
-    private Wrapper<Response> validateInstanceIdHeader(Wrapper<Response> responseWrapper, String instanceIdHeader, String requestURI) {\r
-        if (instanceIdHeader == null || instanceIdHeader.isEmpty()) {\r
-            log.debug(MISSING_X_ECOMP_INSTANCE_ID_HEADER);\r
-            ResponseFormat errorResponseFormat = getComponentsUtils().getResponseFormat(ActionStatus.MISSING_X_ECOMP_INSTANCE_ID);\r
-            getComponentsUtils().auditDistributionDownload(errorResponseFormat, new DistributionData(instanceIdHeader, requestURI));\r
-            responseWrapper.setInnerElement(buildErrorResponse(errorResponseFormat));\r
-        }\r
-        return responseWrapper;\r
-    }\r
-\r
-    /**\r
-     *\r
-     * @param requestId\r
-     * @param instanceIdHeader\r
-     * @param accept\r
-     * @param authorization\r
-     * @param serviceName\r
-     * @param serviceVersion\r
-     * @param resourceName\r
-     * @param resourceVersion\r
-     * @param artifactName\r
-     * @return\r
-     */\r
-    @GET\r
-    @Path("/services/{serviceName}/{serviceVersion}/resources/{resourceName}/{resourceVersion}/artifacts/{artifactName}")\r
-    @Consumes(MediaType.APPLICATION_JSON)\r
-    @Produces(MediaType.APPLICATION_OCTET_STREAM)\r
-    @Operation(description = "Download resource artifact", method  = "GET", summary = "Returns downloaded artifact", responses = @ApiResponse(\r
-            content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))))\r
-    @ApiResponses(value = {\r
-            @ApiResponse(responseCode = "200", description = "The artifact is found and streamed.", \r
-                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))),\r
-            @ApiResponse(responseCode = "400", description = "Missing  'X-ECOMP-InstanceID'  HTTP header - POL5001"),\r
-            @ApiResponse(responseCode = "401", description = "ECOMP component  should authenticate itself  and  to  re-send  again  HTTP  request  with its Basic  Authentication credentials - POL5002"),\r
-            @ApiResponse(responseCode = "403", description = "ECOMP component is not authorized - POL5003"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Service is not found - SVC4503"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Resource Instance  is not found - SVC4526"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Service Version is  not  found - SVC4504"),\r
-            @ApiResponse(responseCode = "404", description = "Specified artifact is  not found - SVC4505"),\r
-            @ApiResponse(responseCode = "405", description = "Method  Not Allowed: Invalid HTTP method type used (PUT,DELETE,POST will be rejected) - POL4050"),\r
-            @ApiResponse(responseCode = "500", description = "The GET request failed either due to internal SDC problem or Cambria Service failure. ECOMP Component should continue the attempts to get the needed information - POL5000")})\r
-    public Response downloadResourceArtifact(\r
-            @Parameter(description = "X-ECOMP-RequestID header", required = false)@HeaderParam(value = Constants.X_ECOMP_REQUEST_ID_HEADER) String requestId,\r
-            @Parameter(description = "X-ECOMP-InstanceID header", required = true)@HeaderParam(value = Constants.X_ECOMP_INSTANCE_ID_HEADER) final String instanceIdHeader,\r
-            @Parameter(description = "Determines the format of the body of the response", required = false)@HeaderParam(value = Constants.ACCEPT_HEADER) String accept,\r
-            @Parameter(description = "The username and password", required = true)@HeaderParam(value = Constants.AUTHORIZATION_HEADER) String authorization,\r
-            @PathParam("serviceName") final String serviceName,\r
-            @PathParam("serviceVersion") final String serviceVersion,\r
-            @PathParam("resourceName") final String resourceName,\r
-            @PathParam("resourceVersion") final String resourceVersion,\r
-            @PathParam("artifactName") final String artifactName) {\r
-\r
-        String requestURI = request.getRequestURI();\r
-        Wrapper<Response> responseWrapper = validateInstanceIdHeader(new Wrapper<>(), instanceIdHeader, requestURI);\r
-\r
-        if(!responseWrapper.isEmpty()) {\r
-            return responseWrapper.getInnerElement();\r
-        }\r
-\r
-        try {\r
-            Either<byte[], ResponseFormat> downloadRsrcArtifactEither = artifactsBusinessLogic\r
-                .downloadRsrcArtifactByNames(serviceName, serviceVersion, resourceName, resourceVersion, artifactName);\r
-            if (downloadRsrcArtifactEither.isRight()) {\r
-                ResponseFormat responseFormat = downloadRsrcArtifactEither.right().value();\r
-                getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));\r
-                responseWrapper.setInnerElement(buildErrorResponse(responseFormat));\r
-            } else {\r
-                byte[] value = downloadRsrcArtifactEither.left().value();\r
-                // Returning 64-encoded as it was received during upload\r
-                InputStream is = new ByteArrayInputStream(value);\r
-                Map<String, String> headers = new HashMap<>();\r
-                headers.put(Constants.CONTENT_DISPOSITION_HEADER, getContentDispositionValue(artifactName));\r
-                ResponseFormat responseFormat = getComponentsUtils().getResponseFormat(ActionStatus.OK);\r
-                getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));\r
-                responseWrapper.setInnerElement(buildOkResponse(responseFormat, is, headers));\r
-            }\r
-            return responseWrapper.getInnerElement();\r
-\r
-        } catch (Exception e) {\r
-            BeEcompErrorManager.getInstance().logBeRestApiGeneralError("download interface artifact for resource - external API");\r
-            log.debug(DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION, e);\r
-            return buildErrorResponse(getComponentsUtils().getResponseFormat(ActionStatus.GENERAL_ERROR));\r
-        }\r
-    }\r
-\r
-    /**\r
-     *\r
-     * @param requestId\r
-     * @param instanceIdHeader\r
-     * @param accept\r
-     * @param authorization\r
-     * @param serviceName\r
-     * @param serviceVersion\r
-     * @param resourceInstanceName\r
-     * @param artifactName\r
-     * @return\r
-     */\r
-    @GET\r
-    @Path("/services/{serviceName}/{serviceVersion}/resourceInstances/{resourceInstanceName}/artifacts/{artifactName}")\r
-    @Consumes(MediaType.APPLICATION_JSON)\r
-    @Produces(MediaType.APPLICATION_OCTET_STREAM)\r
-    @Operation(description = "Download resource instance artifact", method = "GET", summary = "Returns downloaded artifact", responses = @ApiResponse(\r
-            content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))))\r
-    @ApiResponses(value = {\r
-            @ApiResponse(responseCode = "200", description = "The artifact is found and streamed.", \r
-                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))),\r
-            @ApiResponse(responseCode = "400", description = "Missing  'X-ECOMP-InstanceID'  HTTP header - POL5001"),\r
-            @ApiResponse(responseCode = "401", description = "ECOMP component  should authenticate itself  and  to  re-send  again  HTTP  request  with its Basic  Authentication credentials - POL5002"),\r
-            @ApiResponse(responseCode = "403", description = "ECOMP component is not authorized - POL5003"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Service is not found - SVC4503"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Resource Instance  is not found - SVC4526"),\r
-            @ApiResponse(responseCode = "404", description = "Specified Service Version is  not  found - SVC4504"),\r
-            @ApiResponse(responseCode = "404", description = "Specified artifact is  not found - SVC4505"),\r
-            @ApiResponse(responseCode = "405", description = "Method  Not Allowed: Invalid HTTP method type used (PUT,DELETE,POST will be rejected) - POL4050"),\r
-            @ApiResponse(responseCode = "500", description = "The GET request failed either due to internal SDC problem or Cambria Service failure. ECOMP Component should continue the attempts to get the needed information - POL5000")})\r
-    public Response downloadResourceInstanceArtifactByName(\r
-            @Parameter(description = "X-ECOMP-RequestID header", required = false)@HeaderParam(value = Constants.X_ECOMP_REQUEST_ID_HEADER) String requestId,\r
-            @Parameter(description = "X-ECOMP-InstanceID header", required = true)@HeaderParam(value = Constants.X_ECOMP_INSTANCE_ID_HEADER) final String instanceIdHeader,\r
-            @Parameter(description = "Determines the format of the body of the response", required = false)@HeaderParam(value = Constants.ACCEPT_HEADER) String accept,\r
-            @Parameter(description = "The username and password", required = true)@HeaderParam(value = Constants.AUTHORIZATION_HEADER) String authorization,\r
-            @PathParam("serviceName") final String serviceName,\r
-            @PathParam("serviceVersion") final String serviceVersion,\r
-            @PathParam("resourceInstanceName") final String resourceInstanceName,\r
-            @PathParam("artifactName") final String artifactName) {\r
-\r
-        String requestURI = request.getRequestURI();\r
-        Wrapper<Response> responseWrapper = validateInstanceIdHeader(new Wrapper<>(), instanceIdHeader, requestURI);\r
-\r
-        if(!responseWrapper.isEmpty()) {\r
-            return responseWrapper.getInnerElement();\r
-        }\r
-\r
-        try {\r
-            Either<byte[], ResponseFormat> downloadRsrcArtifactEither = artifactsBusinessLogic\r
-                .downloadRsrcInstArtifactByNames(serviceName, serviceVersion, resourceInstanceName, artifactName);\r
-            if (downloadRsrcArtifactEither.isRight()) {\r
-                ResponseFormat responseFormat = downloadRsrcArtifactEither.right().value();\r
-                getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));\r
-                responseWrapper.setInnerElement(buildErrorResponse(responseFormat));\r
-            } else {\r
-                byte[] value = downloadRsrcArtifactEither.left().value();\r
-                // Returning 64-encoded as it was received during upload\r
-                InputStream is = new ByteArrayInputStream(value);\r
-                Map<String, String> headers = new HashMap<>();\r
-                headers.put(Constants.CONTENT_DISPOSITION_HEADER, getContentDispositionValue(artifactName));\r
-                ResponseFormat responseFormat = getComponentsUtils().getResponseFormat(ActionStatus.OK);\r
-                getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));\r
-                responseWrapper.setInnerElement(buildOkResponse(responseFormat, is, headers));\r
-            }\r
-            return responseWrapper.getInnerElement();\r
-\r
-        } catch (Exception e) {\r
-            BeEcompErrorManager.getInstance().logBeRestApiGeneralError("download interface artifact for resource - external API");\r
-            log.debug(DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION, e);\r
-            return buildErrorResponse(getComponentsUtils().getResponseFormat(ActionStatus.GENERAL_ERROR));\r
-        }\r
-    }\r
-}\r
+/*-
+ * ============LICENSE_START=======================================================
+ * SDC
+ * ================================================================================
+ * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
+ * ================================================================================
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * 
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ * 
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ * ============LICENSE_END=========================================================
+ * Modifications copyright (c) 2019 Nokia
+ * ================================================================================
+ */
+
+package org.openecomp.sdc.be.distribution.servlet;
+
+import com.jcabi.aspects.Loggable;
+import io.swagger.v3.oas.annotations.OpenAPIDefinition;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.info.Info;
+import io.swagger.v3.oas.annotations.media.ArraySchema;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import org.openecomp.sdc.be.components.impl.ArtifactsBusinessLogic;
+import org.openecomp.sdc.be.components.impl.aaf.AafPermission;
+import org.openecomp.sdc.be.components.impl.aaf.PermissionAllowed;
+import org.openecomp.sdc.be.components.impl.exceptions.ComponentException;
+import org.openecomp.sdc.be.config.BeEcompErrorManager;
+import org.openecomp.sdc.be.dao.api.ActionStatus;
+import org.openecomp.sdc.be.impl.ComponentsUtils;
+import org.openecomp.sdc.be.resources.data.auditing.model.DistributionData;
+import org.openecomp.sdc.be.servlets.BeGenericServlet;
+import org.openecomp.sdc.be.user.UserBusinessLogic;
+import org.openecomp.sdc.common.api.Constants;
+import org.openecomp.sdc.common.datastructure.Wrapper;
+import org.openecomp.sdc.common.log.wrappers.Logger;
+import org.openecomp.sdc.exception.ResponseFormat;
+
+import javax.inject.Inject;
+import javax.inject.Singleton;
+import javax.servlet.http.HttpServletRequest;
+import javax.ws.rs.Consumes;
+import javax.ws.rs.GET;
+import javax.ws.rs.HeaderParam;
+import javax.ws.rs.Path;
+import javax.ws.rs.PathParam;
+import javax.ws.rs.Produces;
+import javax.ws.rs.core.Context;
+import javax.ws.rs.core.MediaType;
+import javax.ws.rs.core.Response;
+import java.io.ByteArrayInputStream;
+import java.io.InputStream;
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * This Servlet serves external users to download artifacts.
+ * 
+ * @author tgitelman
+ *
+ */
+
+@Loggable(prepend = true, value = Loggable.DEBUG, trim = false)
+@Path("/v1/catalog")
+@OpenAPIDefinition(info =  @Info(title = "Distribution Catalog Servlet",description = "This Servlet serves external users to download artifacts."))
+@Singleton
+public class DistributionCatalogServlet extends BeGenericServlet {
+
+    private static final String DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION = "download artifact failed with exception";
+       private static final String MISSING_X_ECOMP_INSTANCE_ID_HEADER = "Missing X-ECOMP-InstanceID header";
+       private static final Logger log = Logger.getLogger(DistributionCatalogServlet.class);
+       private final ArtifactsBusinessLogic artifactsBusinessLogic;
+
+       @Inject
+    public DistributionCatalogServlet(UserBusinessLogic userBusinessLogic,
+        ComponentsUtils componentsUtils,
+        ArtifactsBusinessLogic artifactsBusinessLogic) {
+        super(userBusinessLogic, componentsUtils);
+        this.artifactsBusinessLogic = artifactsBusinessLogic;
+    }
+
+    @Context
+    private HttpServletRequest request;
+
+    // *******************************************************
+    // Download (GET) artifacts
+    // **********************************************************/
+    /**
+     *
+     * @param requestId
+     * @param instanceIdHeader
+     * @param accept
+     * @param authorization
+     * @param serviceName
+     * @param serviceVersion
+     * @param artifactName
+     * @return
+     */
+    @GET
+    @Path("/services/{serviceName}/{serviceVersion}/artifacts/{artifactName}")
+    @Consumes(MediaType.APPLICATION_JSON)
+    @Produces(MediaType.APPLICATION_OCTET_STREAM)
+    @Operation(description = "Download service artifact", method = "GET", summary = "Returns downloaded artifact",
+            responses = @ApiResponse(
+                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))))
+    @ApiResponses(value = {
+            @ApiResponse(responseCode = "200", description = "The artifact is found and streamed.",
+                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))),
+            @ApiResponse(responseCode = "400", description = "Missing  'X-ECOMP-InstanceID'  HTTP header - POL5001"),
+            @ApiResponse(responseCode = "401", description = "ECOMP component  should authenticate itself  and  to  re-send  again  HTTP  request  with its Basic  Authentication credentials - POL5002"),
+            @ApiResponse(responseCode = "403", description = "ECOMP component is not authorized - POL5003"),
+            @ApiResponse(responseCode = "404", description = "Specified Service is not found - SVC4503"),
+            @ApiResponse(responseCode = "404", description = "Specified Service Version is  not  found - SVC4504"),
+            @ApiResponse(responseCode = "404", description = "Specified artifact is  not found - SVC4505"),
+            @ApiResponse(responseCode = "405", description = "Method  Not Allowed: Invalid HTTP method type used (PUT,DELETE,POST will be rejected) - POL4050"),
+            @ApiResponse(responseCode = "500", description = "The GET request failed either due to internal SDC problem or Cambria Service failure. ECOMP Component should continue the attempts to get the needed information - POL5000")})
+    @PermissionAllowed({AafPermission.PermNames.READ_VALUE})
+    public Response downloadServiceArtifact(
+            @Parameter(description = "X-ECOMP-RequestID header", required = false)@HeaderParam(value = Constants.X_ECOMP_REQUEST_ID_HEADER) String requestId,
+            @Parameter(description = "X-ECOMP-InstanceID header", required = true)@HeaderParam(value = Constants.X_ECOMP_INSTANCE_ID_HEADER) final String instanceIdHeader,
+            @Parameter(description = "Determines the format of the body of the response", required = false)@HeaderParam(value = Constants.ACCEPT_HEADER) String accept,
+            @Parameter(description = "The username and password", required = true)@HeaderParam(value = Constants.AUTHORIZATION_HEADER) String authorization,
+            @PathParam("serviceName") final String serviceName,
+            @PathParam("serviceVersion") final String serviceVersion,
+            @PathParam("artifactName") final String artifactName) {
+
+        String requestURI = request.getRequestURI();
+        Wrapper<Response> responseWrapper = validateInstanceIdHeader(new Wrapper<>(), instanceIdHeader, requestURI);
+        if(!responseWrapper.isEmpty()) {
+            return responseWrapper.getInnerElement();
+        }
+
+        try {
+            byte[] downloadRsrcArtifactEither = artifactsBusinessLogic.downloadServiceArtifactByNames(serviceName, serviceVersion, artifactName);
+            byte[] value = downloadRsrcArtifactEither;
+            InputStream is = new ByteArrayInputStream(value);
+
+            Map<String, String> headers = new HashMap<>();
+            headers.put(Constants.CONTENT_DISPOSITION_HEADER, getContentDispositionValue(artifactName));
+            ResponseFormat responseFormat = getComponentsUtils().getResponseFormat(ActionStatus.OK);
+            getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));
+            return buildOkResponse(responseFormat, is, headers);
+
+        } catch (ComponentException e) {
+            getComponentsUtils().auditDistributionDownload(e.getResponseFormat(), new DistributionData(instanceIdHeader, requestURI));
+            BeEcompErrorManager.getInstance().logBeRestApiGeneralError("download Murano package artifact for service - external API");
+            log.debug(DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION, e);
+            return buildErrorResponse(e.getResponseFormat());
+        }
+    }
+
+    private Wrapper<Response> validateInstanceIdHeader(Wrapper<Response> responseWrapper, String instanceIdHeader, String requestURI) {
+        if (instanceIdHeader == null || instanceIdHeader.isEmpty()) {
+            log.debug(MISSING_X_ECOMP_INSTANCE_ID_HEADER);
+            ResponseFormat errorResponseFormat = getComponentsUtils().getResponseFormat(ActionStatus.MISSING_X_ECOMP_INSTANCE_ID);
+            getComponentsUtils().auditDistributionDownload(errorResponseFormat, new DistributionData(instanceIdHeader, requestURI));
+            responseWrapper.setInnerElement(buildErrorResponse(errorResponseFormat));
+        }
+        return responseWrapper;
+    }
+
+    /**
+     *
+     * @param requestId
+     * @param instanceIdHeader
+     * @param accept
+     * @param authorization
+     * @param serviceName
+     * @param serviceVersion
+     * @param resourceName
+     * @param resourceVersion
+     * @param artifactName
+     * @return
+     */
+    @GET
+    @Path("/services/{serviceName}/{serviceVersion}/resources/{resourceName}/{resourceVersion}/artifacts/{artifactName}")
+    @Consumes(MediaType.APPLICATION_JSON)
+    @Produces(MediaType.APPLICATION_OCTET_STREAM)
+    @Operation(description = "Download resource artifact", method  = "GET", summary = "Returns downloaded artifact", responses = @ApiResponse(
+            content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))))
+    @ApiResponses(value = {
+            @ApiResponse(responseCode = "200", description = "The artifact is found and streamed.",
+                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))),
+            @ApiResponse(responseCode = "400", description = "Missing  'X-ECOMP-InstanceID'  HTTP header - POL5001"),
+            @ApiResponse(responseCode = "401", description = "ECOMP component  should authenticate itself  and  to  re-send  again  HTTP  request  with its Basic  Authentication credentials - POL5002"),
+            @ApiResponse(responseCode = "403", description = "ECOMP component is not authorized - POL5003"),
+            @ApiResponse(responseCode = "404", description = "Specified Service is not found - SVC4503"),
+            @ApiResponse(responseCode = "404", description = "Specified Resource Instance  is not found - SVC4526"),
+            @ApiResponse(responseCode = "404", description = "Specified Service Version is  not  found - SVC4504"),
+            @ApiResponse(responseCode = "404", description = "Specified artifact is  not found - SVC4505"),
+            @ApiResponse(responseCode = "405", description = "Method  Not Allowed: Invalid HTTP method type used (PUT,DELETE,POST will be rejected) - POL4050"),
+            @ApiResponse(responseCode = "500", description = "The GET request failed either due to internal SDC problem or Cambria Service failure. ECOMP Component should continue the attempts to get the needed information - POL5000")})
+    @PermissionAllowed({AafPermission.PermNames.READ_VALUE})
+    public Response downloadResourceArtifact(
+            @Parameter(description = "X-ECOMP-RequestID header", required = false)@HeaderParam(value = Constants.X_ECOMP_REQUEST_ID_HEADER) String requestId,
+            @Parameter(description = "X-ECOMP-InstanceID header", required = true)@HeaderParam(value = Constants.X_ECOMP_INSTANCE_ID_HEADER) final String instanceIdHeader,
+            @Parameter(description = "Determines the format of the body of the response", required = false)@HeaderParam(value = Constants.ACCEPT_HEADER) String accept,
+            @Parameter(description = "The username and password", required = true)@HeaderParam(value = Constants.AUTHORIZATION_HEADER) String authorization,
+            @PathParam("serviceName") final String serviceName,
+            @PathParam("serviceVersion") final String serviceVersion,
+            @PathParam("resourceName") final String resourceName,
+            @PathParam("resourceVersion") final String resourceVersion,
+            @PathParam("artifactName") final String artifactName) {
+
+        String requestURI = request.getRequestURI();
+        Wrapper<Response> responseWrapper = validateInstanceIdHeader(new Wrapper<>(), instanceIdHeader, requestURI);
+
+        if(!responseWrapper.isEmpty()) {
+            return responseWrapper.getInnerElement();
+        }
+
+        try {
+            ArtifactsBusinessLogic artifactsLogic = getArtifactBL(request.getSession().getServletContext());
+            byte[] downloadRsrcArtifactEither = artifactsLogic.downloadRsrcArtifactByNames(serviceName, serviceVersion, resourceName, resourceVersion, artifactName);
+            byte[] value = downloadRsrcArtifactEither;
+            // Returning 64-encoded as it was received during upload
+            InputStream is = new ByteArrayInputStream(value);
+            Map<String, String> headers = new HashMap<>();
+            headers.put(Constants.CONTENT_DISPOSITION_HEADER, getContentDispositionValue(artifactName));
+            ResponseFormat responseFormat = getComponentsUtils().getResponseFormat(ActionStatus.OK);
+            getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));
+            return buildOkResponse(responseFormat, is, headers);
+
+        } catch (ComponentException e) {
+            getComponentsUtils().auditDistributionDownload(e.getResponseFormat(), new DistributionData(instanceIdHeader, requestURI));
+            BeEcompErrorManager.getInstance().logBeRestApiGeneralError("download interface artifact for resource - external API");
+            log.debug(DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION, e);
+            return buildErrorResponse(e.getResponseFormat());
+        }
+    }
+
+    /**
+     *
+     * @param requestId
+     * @param instanceIdHeader
+     * @param accept
+     * @param authorization
+     * @param serviceName
+     * @param serviceVersion
+     * @param resourceInstanceName
+     * @param artifactName
+     * @return
+     */
+    @GET
+    @Path("/services/{serviceName}/{serviceVersion}/resourceInstances/{resourceInstanceName}/artifacts/{artifactName}")
+    @Consumes(MediaType.APPLICATION_JSON)
+    @Produces(MediaType.APPLICATION_OCTET_STREAM)
+    @Operation(description = "Download resource instance artifact", method = "GET", summary = "Returns downloaded artifact", responses = @ApiResponse(
+            content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))))
+    @ApiResponses(value = {
+            @ApiResponse(responseCode = "200", description = "The artifact is found and streamed.",
+                    content = @Content(array = @ArraySchema(schema = @Schema(implementation = String.class)))),
+            @ApiResponse(responseCode = "400", description = "Missing  'X-ECOMP-InstanceID'  HTTP header - POL5001"),
+            @ApiResponse(responseCode = "401", description = "ECOMP component  should authenticate itself  and  to  re-send  again  HTTP  request  with its Basic  Authentication credentials - POL5002"),
+            @ApiResponse(responseCode = "403", description = "ECOMP component is not authorized - POL5003"),
+            @ApiResponse(responseCode = "404", description = "Specified Service is not found - SVC4503"),
+            @ApiResponse(responseCode = "404", description = "Specified Resource Instance  is not found - SVC4526"),
+            @ApiResponse(responseCode = "404", description = "Specified Service Version is  not  found - SVC4504"),
+            @ApiResponse(responseCode = "404", description = "Specified artifact is  not found - SVC4505"),
+            @ApiResponse(responseCode = "405", description = "Method  Not Allowed: Invalid HTTP method type used (PUT,DELETE,POST will be rejected) - POL4050"),
+            @ApiResponse(responseCode = "500", description = "The GET request failed either due to internal SDC problem or Cambria Service failure. ECOMP Component should continue the attempts to get the needed information - POL5000")})
+    @PermissionAllowed({AafPermission.PermNames.READ_VALUE})
+    public Response downloadResourceInstanceArtifactByName(
+            @Parameter(description = "X-ECOMP-RequestID header", required = false)@HeaderParam(value = Constants.X_ECOMP_REQUEST_ID_HEADER) String requestId,
+            @Parameter(description = "X-ECOMP-InstanceID header", required = true)@HeaderParam(value = Constants.X_ECOMP_INSTANCE_ID_HEADER) final String instanceIdHeader,
+            @Parameter(description = "Determines the format of the body of the response", required = false)@HeaderParam(value = Constants.ACCEPT_HEADER) String accept,
+            @Parameter(description = "The username and password", required = true)@HeaderParam(value = Constants.AUTHORIZATION_HEADER) String authorization,
+            @PathParam("serviceName") final String serviceName,
+            @PathParam("serviceVersion") final String serviceVersion,
+            @PathParam("resourceInstanceName") final String resourceInstanceName,
+            @PathParam("artifactName") final String artifactName) {
+
+        String requestURI = request.getRequestURI();
+        Wrapper<Response> responseWrapper = validateInstanceIdHeader(new Wrapper<>(), instanceIdHeader, requestURI);
+
+        if(!responseWrapper.isEmpty()) {
+            return responseWrapper.getInnerElement();
+        }
+
+        try {
+            byte[] downloadRsrcArtifactEither = artifactsBusinessLogic.downloadRsrcInstArtifactByNames(serviceName, serviceVersion, resourceInstanceName, artifactName);
+            byte[] value = downloadRsrcArtifactEither;
+            // Returning 64-encoded as it was received during upload
+            InputStream is = new ByteArrayInputStream(value);
+            Map<String, String> headers = new HashMap<>();
+            headers.put(Constants.CONTENT_DISPOSITION_HEADER, getContentDispositionValue(artifactName));
+            ResponseFormat responseFormat = getComponentsUtils().getResponseFormat(ActionStatus.OK);
+            getComponentsUtils().auditDistributionDownload(responseFormat, new DistributionData(instanceIdHeader, requestURI));
+            return buildOkResponse(responseFormat, is, headers);
+
+        } catch (ComponentException e) {
+            getComponentsUtils().auditDistributionDownload(e.getResponseFormat(), new DistributionData(instanceIdHeader, requestURI));
+            BeEcompErrorManager.getInstance().logBeRestApiGeneralError("download interface artifact for resource - external API");
+            log.debug(DOWNLOAD_ARTIFACT_FAILED_WITH_EXCEPTION, e);
+            return buildErrorResponse(e.getResponseFormat());
+        }
+    }
+}