dmaap-bc/src/main/java/org/onap/dmaap/dbcapi/server/JettyServer.java

   1 /*-
   2  * ============LICENSE_START=======================================================
   3  * org.onap.dmaap
   4  * ================================================================================
   5  * Copyright (C) 2017 AT&T Intellectual Property.
   6  *
   7  * Modifications Copyright (C) 2019 IBM.
   8  * ================================================================================
   9  * Licensed under the Apache License, Version 2.0 (the "License");
  10  * you may not use this file except in compliance with the License.
  11  * You may obtain a copy of the License at
  12  *
  13  *      http://www.apache.org/licenses/LICENSE-2.0
  14  *
  15  * Unless required by applicable law or agreed to in writing, software
  16  * distributed under the License is distributed on an "AS IS" BASIS,
  17  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  18  * See the License for the specific language governing permissions and
  19  * limitations under the License.
  20  * ============LICENSE_END=========================================================
  21  */
  22
  23 package org.onap.dmaap.dbcapi.server;
  24
  25 import jakarta.servlet.DispatcherType;
  26 import java.util.EnumSet;
  27 import java.util.Properties;
  28 import org.eclipse.jetty.http.HttpVersion;
  29 import org.eclipse.jetty.server.HttpConfiguration;
  30 import org.eclipse.jetty.server.HttpConnectionFactory;
  31 import org.eclipse.jetty.server.SecureRequestCustomizer;
  32 import org.eclipse.jetty.server.Server;
  33 import org.eclipse.jetty.server.ServerConnector;
  34 import org.eclipse.jetty.server.SslConnectionFactory;
  35 import org.eclipse.jetty.servlet.DefaultServlet;
  36 import org.eclipse.jetty.servlet.ServletContextHandler;
  37 import org.eclipse.jetty.servlet.ServletHolder;
  38 import org.eclipse.jetty.util.ssl.SslContextFactory;
  39 import org.onap.dmaap.dbcapi.logging.BaseLoggingClass;
  40 import org.onap.dmaap.dbcapi.util.DmaapConfig;
  41
  42 /**
  43  * A  Jetty server which supports:
  44  *      - http and https (simultaneously for dev env)
  45  *  - REST API context
  46  *  - static html pages (for documentation).
  47  */
  48 public class JettyServer extends BaseLoggingClass {
  49
  50     private static final CertificateManager certificateManager =
  51         new CertficateManagerFactory(DmaapConfig.getConfig()).initCertificateManager();
  52     private final Server server;
  53
  54     public Server getServer() {
  55         return server;
  56     }
  57
  58     public static CertificateManager getCertificateManager() {
  59         return certificateManager;
  60     }
  61
  62     public JettyServer(Properties params) {
  63         server = new Server();
  64         int httpPort = Integer.parseInt(params.getProperty("IntHttpPort", "80"));
  65         int sslPort = Integer.parseInt(params.getProperty("IntHttpsPort", "443"));
  66         boolean allowHttp = Boolean.parseBoolean(params.getProperty("HttpAllowed", "false"));
  67         serverLogger.info("port params: http=" + httpPort + " https=" + sslPort);
  68         serverLogger.info("allowHttp=" + allowHttp);
  69         // HTTP Server
  70         HttpConfiguration httpConfig = new HttpConfiguration();
  71         httpConfig.setSecureScheme("https");
  72         httpConfig.setSecurePort(sslPort);
  73         httpConfig.setOutputBufferSize(32768);
  74         try (ServerConnector httpConnector = new ServerConnector(server, new HttpConnectionFactory(httpConfig))) {
  75             httpConnector.setPort(httpPort);
  76             httpConnector.setIdleTimeout(30000);
  77             // HTTPS Server
  78             HttpConfiguration httpsConfig = new HttpConfiguration(httpConfig);
  79             httpsConfig.addCustomizer(new SecureRequestCustomizer());
  80             SslContextFactory.Server sslContextFactory = new SslContextFactory.Server();
  81             sslContextFactory.setWantClientAuth(true);
  82             if (!certificateManager.isReady()) {
  83                 serverLogger.error("CertificateManager is not ready.  NOT starting https!");
  84             } else {
  85                 setUpKeystore(sslContextFactory);
  86                 setUpTrustStore(sslContextFactory);
  87                     if (sslPort != 0) {
  88                         try (ServerConnector sslConnector = new ServerConnector(server,
  89                             new SslConnectionFactory(sslContextFactory, HttpVersion.HTTP_1_1.asString()),
  90                             new HttpConnectionFactory(httpsConfig))) {
  91                             sslConnector.setPort(sslPort);
  92                             server.addConnector(sslConnector);
  93                             serverLogger.info("Starting sslConnector on port " + sslPort + " for https");
  94                         }
  95                     } else {
  96                         serverLogger.info("NOT starting sslConnector because InHttpsPort param is " + sslPort );
  97                     }
  98             }
  99             if (allowHttp) {
 100                 serverLogger.info("Starting httpConnector on port " + httpPort);
 101                 server.addConnector(httpConnector);
 102             } else {
 103                 serverLogger.info("NOT starting httpConnector because HttpAllowed param is " + allowHttp);
 104             }
 105         }
 106         // Set context for servlet.  This is shared for http and https
 107         ServletContextHandler context = new ServletContextHandler(ServletContextHandler.SESSIONS);
 108         context.setContextPath("/");
 109         server.setHandler(context);
 110
 111         ServletHolder jerseyServlet = context
 112             .addServlet(org.glassfish.jersey.servlet.ServletContainer.class, "/webapi/*");
 113         jerseyServlet.setInitOrder(1);
 114         jerseyServlet.setInitParameter("jersey.config.server.provider.packages", "org.onap.dmaap.dbcapi.resources");
 115         jerseyServlet.setInitParameter("jakarta.ws.rs.Application", "org.onap.dmaap.dbcapi.server.ApplicationConfig");
 116
 117         // also serve up some static pages...
 118         ServletHolder staticServlet = context.addServlet(DefaultServlet.class, "/*");
 119         staticServlet.setInitParameter("resourceBase", "www");
 120         staticServlet.setInitParameter("pathInfoOnly", "true");
 121
 122         if (Boolean.parseBoolean(params.getProperty("enableCADI", "false"))) {
 123             registerAuthFilters(context);
 124         }
 125
 126         try {
 127             serverLogger.info("Starting jetty server");
 128             String unitTest = params.getProperty("UnitTest", "No");
 129             serverLogger.info("UnitTest=" + unitTest);
 130             if (unitTest.equals("No")) {
 131                 server.start();
 132                 server.dumpStdErr();
 133                 server.join();
 134             }
 135         } catch (Exception e) {
 136             errorLogger.error("Exception " + e);
 137         } finally {
 138             server.destroy();
 139         }
 140     }
 141
 142     private void registerAuthFilters(ServletContextHandler context) {
 143         context.addFilter("org.onap.dmaap.dbcapi.resources.AAFAuthenticationFilter", "/webapi/*", EnumSet.of(
 144             DispatcherType.FORWARD, DispatcherType.REQUEST));
 145         context.addFilter("org.onap.dmaap.dbcapi.resources.AAFAuthorizationFilter", "/webapi/*", EnumSet.of(
 146             DispatcherType.FORWARD, DispatcherType.REQUEST));
 147     }
 148
 149     private void setUpKeystore(SslContextFactory sslContextFactory) {
 150         String keystore = JettyServer.certificateManager.getKeyStoreFile();
 151         logger.info("https Server using keystore at " + keystore);
 152         sslContextFactory.setKeyStorePath(keystore);
 153         sslContextFactory.setKeyStoreType(JettyServer.certificateManager.getKeyStoreType());
 154         sslContextFactory.setKeyStorePassword(JettyServer.certificateManager.getKeyStorePassword());
 155         sslContextFactory.setKeyManagerPassword(JettyServer.certificateManager.getKeyStorePassword());
 156     }
 157
 158     private void setUpTrustStore(SslContextFactory sslContextFactory) {
 159         String truststore = JettyServer.certificateManager.getTrustStoreFile();
 160         logger.info("https Server using truststore at " + truststore);
 161         sslContextFactory.setTrustStorePath(truststore);
 162         sslContextFactory.setTrustStoreType(JettyServer.certificateManager.getTrustStoreType());
 163         sslContextFactory.setTrustStorePassword(JettyServer.certificateManager.getTrustStorePassword());
 164     }
 165 }