Refine Agent to create CADI Configs
[aaf/authz.git] / cadi / aaf / src / main / java / org / onap / aaf / cadi / aaf / TestConnectivity.java
1 /**
2  * ============LICENSE_START====================================================
3  * org.onap.aaf
4  * ===========================================================================
5  * Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
6  * ===========================================================================
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  * 
11  *      http://www.apache.org/licenses/LICENSE-2.0
12  * 
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  * ============LICENSE_END====================================================
19  *
20  */
21
22 package org.onap.aaf.cadi.aaf;
23
24 import java.io.IOException;
25 import java.io.PrintStream;
26 import java.net.HttpURLConnection;
27 import java.net.InetSocketAddress;
28 import java.net.Socket;
29 import java.net.URI;
30 import java.util.ArrayList;
31 import java.util.Date;
32 import java.util.List;
33
34 import org.onap.aaf.cadi.CadiException;
35 import org.onap.aaf.cadi.Locator;
36 import org.onap.aaf.cadi.LocatorException;
37 import org.onap.aaf.cadi.PropAccess;
38 import org.onap.aaf.cadi.SecuritySetter;
39 import org.onap.aaf.cadi.Access.Level;
40 import org.onap.aaf.cadi.Locator.Item;
41 import org.onap.aaf.cadi.aaf.v2_0.AAFLocator;
42 import org.onap.aaf.cadi.client.Future;
43 import org.onap.aaf.cadi.config.Config;
44 import org.onap.aaf.cadi.config.SecurityInfoC;
45 import org.onap.aaf.cadi.http.HBasicAuthSS;
46 import org.onap.aaf.cadi.http.HClient;
47 import org.onap.aaf.cadi.http.HX509SS;
48 import org.onap.aaf.cadi.oauth.HRenewingTokenSS;
49 import org.onap.aaf.misc.env.APIException;
50
51 public class TestConnectivity {
52         
53         public static void main(String[] args) {
54                 if(args.length<1) {
55                         System.out.println("Usage: ConnectivityTester <cadi_prop_files> [<AAF FQDN (i.e. aaf.dev.att.com)>]");
56                 } else {
57                         print(true,"START OF CONNECTIVITY TESTS",new Date().toString(),System.getProperty("user.name"),
58                                         "Note: All API Calls are /authz/perms/user/<MechID/Alias of the caller>");
59
60                         if(!args[0].contains(Config.CADI_PROP_FILES+'=')) {
61                                 args[0]=Config.CADI_PROP_FILES+'='+args[0];
62                         }
63
64                         PropAccess access = new PropAccess(args);
65                         String aaflocate;
66                         if(args.length>1) {
67                                 aaflocate = "https://" + args[1];
68                                 access.setProperty(Config.AAF_LOCATE_URL, "https://" + args[1]);
69                         } else {
70                                 aaflocate = access.getProperty(Config.AAF_LOCATE_URL);
71                                 if(aaflocate==null) {
72                                         print(true,"Properties must contain ",Config.AAF_LOCATE_URL);
73                                 }
74                         }
75                         
76                         try {
77                                 SecurityInfoC<HttpURLConnection> si = SecurityInfoC.instance(access, HttpURLConnection.class);
78                                 
79                                 List<SecuritySetter<HttpURLConnection>> lss = loadSetters(access,si);
80                                 /////////
81                                 print(true,"Test Connections driven by AAFLocator");
82                                 URI serviceURI = new URI(aaflocate+"/locate/AAF_NS.service/2.0");
83
84                                 for(URI uri : new URI[] {
85                                                 serviceURI,
86                                                 new URI(aaflocate+"/locate/AAF_NS.service:2.0"),
87                                                 new URI(aaflocate+"/locate/AAF_NS.locate:2.0"),
88                                                 new URI(aaflocate+"/locate/AAF_NS.token:2.0"),
89                                                 new URI(aaflocate+"/locate/AAF_NS.certman:2.0"),
90                                                 new URI(aaflocate+"/locate/AAF_NS.hello")
91                                 }) {
92                                         Locator<URI> locator = new AAFLocator(si, uri);
93                                         try {
94                                                 connectTest(locator, uri);
95                                         } catch (Exception e) {
96                                                 e.printStackTrace();
97                                                 System.err.flush();
98                                         }
99                                 }
100
101                                 /////////
102                                 print(true,"Test Service for Perms driven by AAFLocator");
103                                 Locator<URI> locator = new AAFLocator(si,serviceURI);
104                                 for(SecuritySetter<HttpURLConnection> ss : lss) {
105                                         permTest(locator,ss);
106                                 }
107
108                                 /////////
109                                 // Removed for ONAP
110 //                              print(true,"Test Proxy Access driven by AAFLocator");
111 //                              locator = new AAFLocator(si, new URI(aaflocate+"/AAF_NS.gw:2.0/proxy"));
112 //                              for(SecuritySetter<HttpURLConnection> ss : lss) {
113 //                                      permTest(locator,ss);
114 //                              }
115
116                                 //////////
117                                 print(true,"Test essential BasicAuth Service call, driven by AAFLocator");
118                                 for(SecuritySetter<HttpURLConnection> ss : lss) {
119                                         if(ss instanceof HBasicAuthSS) {
120                                                 basicAuthTest(new AAFLocator(si, serviceURI),ss);
121                                         }
122                                 }
123                                 
124                         } catch(Exception e) {
125                                 e.printStackTrace(System.err);
126                         } finally {
127                                 print(true,"END OF TESTS");
128                         }
129                 }
130         }
131         
132         private static List<SecuritySetter<HttpURLConnection>> loadSetters(PropAccess access, SecurityInfoC<HttpURLConnection> si)  {
133                 print(true,"Load Security Setters from Configuration Information");
134                 String user = access.getProperty(Config.AAF_APPID);
135
136                 ArrayList<SecuritySetter<HttpURLConnection>> lss = new ArrayList<SecuritySetter<HttpURLConnection>>();
137                 
138
139                 try {
140                         HBasicAuthSS hbass = new HBasicAuthSS(si,true);
141                         if(hbass==null || hbass.getID()==null) {
142                                 access.log(Level.INFO, "BasicAuth Information is not available in configuration, BasicAuth tests will not be conducted... Continuing");
143                         } else {
144                                 access.log(Level.INFO, "BasicAuth Information found with ID",hbass.getID(),".  BasicAuth tests will be performed.");
145                                 lss.add(hbass);
146                         }
147                 } catch (Exception e) {
148                         access.log(Level.INFO, "BasicAuth Security Setter constructor threw exception: \"",e.getMessage(),"\". BasicAuth tests will not be performed");
149                 }
150
151                 try {
152                         HX509SS hxss = new HX509SS(user,si);
153                         if(hxss==null || hxss.getID()==null) {
154                                 access.log(Level.INFO, "X509 (Client certificate) Information is not available in configuration, X509 tests will not be conducted... Continuing");
155                         } else {
156                                 access.log(Level.INFO, "X509 (Client certificate) Information found with ID",hxss.getID(),".  X509 tests will be performed.");
157                                 lss.add(hxss);
158                         }
159                 } catch (Exception e) {
160                         access.log(Level.INFO, "X509 (Client certificate) Security Setter constructor threw exception: \"",e.getMessage(),"\". X509 tests will not be performed");
161                 }
162
163                 String tokenURL = access.getProperty(Config.AAF_OAUTH2_TOKEN_URL);
164                 String locateURL=access.getProperty(Config.AAF_LOCATE_URL);
165                 if(tokenURL==null || (tokenURL.contains("/locate/") && locateURL!=null)) {
166                         tokenURL=locateURL+"/locate/AAF_NS.token:2.0/token";
167                 }
168
169                 try {
170                         HRenewingTokenSS hrtss = new HRenewingTokenSS(access, tokenURL);
171                         access.log(Level.INFO, "AAF OAUTH2 Information found with ID",hrtss.getID(),".  AAF OAUTH2 tests will be performed.");
172                         lss.add(hrtss);
173                 } catch (Exception e) {
174                         access.log(Level.INFO, "AAF OAUTH2 Security Setter constructor threw exception: \"",e.getMessage(),"\". AAF OAUTH2 tests will not be conducted... Continuing");
175                 }
176                 
177                 tokenURL = access.getProperty(Config.AAF_ALT_OAUTH2_TOKEN_URL);
178                 if(tokenURL==null) {
179                         access.log(Level.INFO, "AAF Alternative OAUTH2 requires",Config.AAF_ALT_OAUTH2_TOKEN_URL, "OAuth2 tests to", tokenURL, "will not be conducted... Continuing");
180                 } else {
181                         try {
182                                 HRenewingTokenSS hrtss = new HRenewingTokenSS(access, tokenURL);
183                                 access.log(Level.INFO, "ALT OAUTH2 Information found with ID",hrtss.getID(),".  ALT OAUTH2 tests will be performed.");
184                                 lss.add(hrtss);
185                         } catch (Exception e) {
186                                 access.log(Level.INFO, "ALT OAUTH2 Security Setter constructor threw exception: \"",e.getMessage(),"\". ALT OAuth2 tests to", tokenURL, " will not be conducted... Continuing");
187                         }
188                 }
189                 
190                 return lss;
191         }
192
193         private static void print(Boolean strong, String ... args) {
194                 PrintStream out = System.out;
195                 out.println();
196                 if(strong) {
197                         for(int i=0;i<70;++i) {
198                                 out.print('=');
199                         }
200                         out.println();
201                 }
202                 for(String s : args) {
203                         out.print(strong?"==  ":"------ ");
204                         out.print(s);
205                         if(!strong) {
206                                 out.print("  ------");
207                         }
208                         out.println();
209                 }
210                 if(strong) {
211                         for(int i=0;i<70;++i) {
212                                 out.print('=');
213                         }
214                 }
215                 out.println();
216         }
217
218         private static void connectTest(Locator<URI> dl, URI locatorURI) throws LocatorException {
219                 URI uri;
220                 Socket socket;
221                 print(false,"TCP/IP Connect test to all Located Services for "  + locatorURI.toString() );
222                 for(Item li = dl.first();li!=null;li=dl.next(li)) {
223                         if((uri = dl.get(li)) == null) {
224                                 System.out.println("Locator Item empty");
225                         } else {
226                                 socket = new Socket();
227                                 try {
228                                         try {
229                                                 socket.connect(new InetSocketAddress(uri.getHost(),  uri.getPort()),3000);
230                                                 System.out.printf("Can Connect a Socket to %s %d\n",uri.getHost(),uri.getPort());
231                                         } catch (IOException e) {
232                                                 System.out.printf("Cannot Connect a Socket to  %s %d: %s\n",uri.getHost(),uri.getPort(),e.getMessage());
233                                         }
234                                 } finally {
235                                         try {
236                                                 socket.close();
237                                         } catch (IOException e1) {
238                                                 System.out.printf("Could not close Socket Connection: %s\n",e1.getMessage());
239                                         }
240                                 }
241                         }
242                 }
243         }
244
245         private static void permTest(Locator<URI> dl, SecuritySetter<HttpURLConnection> ss)  {
246                 try {
247                         URI uri = dl.get(dl.best());
248                         if(uri==null) {
249                                 System.out.print("No URI available using " + ss.getClass().getSimpleName());
250                                 System.out.println();
251                                 return;
252                         } else {
253                                 System.out.print("Resolved to: " + uri + " using " + ss.getClass().getSimpleName());
254                         }
255                         if(ss instanceof HRenewingTokenSS) {
256                                 System.out.println(" " + ((HRenewingTokenSS)ss).tokenURL());
257                         } else {
258                                 System.out.println();
259                         }
260                         HClient client = new HClient(ss, uri, 3000);
261                         client.setMethod("GET");
262                         String user = ss.getID();
263                         if(user.indexOf('@')<0) {
264                                 user+="@isam.att.com";
265                         }
266                         client.setPathInfo("/authz/perms/user/"+user);
267                         client.send();
268                         Future<String> future = client.futureReadString();
269                         if(future.get(7000)) {
270                                 System.out.println(future.body());      
271                         } else {
272                                 if(future.code()==401 && ss instanceof HX509SS) {
273                                         System.out.println("  Authentication denied with 401 for Certificate.\n\t"
274                                                         + "This means Certificate isn't valid for this environment, and has attempted another method of Authentication");
275                                 } else {
276                                         System.out.println(future.code() + ":" + future.body());
277                                 }
278                         }
279                 } catch (CadiException | LocatorException | APIException e) {
280                         e.printStackTrace();
281                 }
282         }
283
284
285         private static void basicAuthTest(Locator<URI> dl, SecuritySetter<HttpURLConnection> ss) {
286                 try {
287                         URI uri = dl.get(dl.best());
288                         System.out.println("Resolved to: " + uri);
289                         HClient client = new HClient(ss, uri, 3000);
290                         client.setMethod("GET");
291                         client.setPathInfo("/authn/basicAuth");
292                         client.addHeader("Accept", "text/plain");
293                         client.send();
294         
295                 
296                         Future<String> future = client.futureReadString();
297                         if(future.get(7000)) {
298                                 System.out.println("BasicAuth Validated");      
299                         } else {
300                                 System.out.println("Failure " + future.code() + ":" + future.body());
301                         }
302                 } catch (CadiException | LocatorException | APIException e) {
303                         e.printStackTrace();
304                 }
305         }
306 }