datarouter-prov/src/main/java/org/onap/dmaap/datarouter/provisioning/utils/DRProvCadiFilter.java

   1 /**
   2  * -
   3  * ============LICENSE_START=======================================================
   4  * Copyright (C) 2019 Nordix Foundation.
   5  * ================================================================================
   6  * Licensed under the Apache License, Version 2.0 (the "License");
   7  * you may not use this file except in compliance with the License.
   8  * You may obtain a copy of the License at
   9  * <p>
  10  * http://www.apache.org/licenses/LICENSE-2.0
  11  * <p>
  12  * Unless required by applicable law or agreed to in writing, software
  13  * distributed under the License is distributed on an "AS IS" BASIS,
  14  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  15  * See the License for the specific language governing permissions and
  16  * limitations under the License.
  17  * <p>
  18  * SPDX-License-Identifier: Apache-2.0
  19  * ============LICENSE_END=========================================================
  20  */
  21 package org.onap.dmaap.datarouter.provisioning.utils;
  22
  23 import org.apache.log4j.Logger;
  24 import org.onap.aaf.cadi.PropAccess;
  25 import org.onap.aaf.cadi.filter.CadiFilter;
  26 import org.onap.dmaap.datarouter.provisioning.BaseServlet;
  27 import org.onap.dmaap.datarouter.provisioning.beans.EventLogRecord;
  28 import org.onap.dmaap.datarouter.provisioning.beans.Feed;
  29 import org.onap.dmaap.datarouter.provisioning.beans.Subscription;
  30
  31 import javax.servlet.FilterChain;
  32 import javax.servlet.ServletException;
  33 import javax.servlet.ServletRequest;
  34 import javax.servlet.ServletResponse;
  35 import javax.servlet.http.HttpServletRequest;
  36 import javax.servlet.http.HttpServletResponse;
  37 import java.io.IOException;
  38
  39
  40 public class DRProvCadiFilter extends CadiFilter {
  41     private static Logger eventlogger = Logger.getLogger("org.onap.dmaap.datarouter.provisioning.events");
  42     private static Logger intlogger = Logger.getLogger("org.onap.dmaap.datarouter.provisioning.internal");
  43     private String aafInstance = "";
  44
  45     public DRProvCadiFilter(boolean init, PropAccess access) throws ServletException {
  46         super(init, access);
  47     }
  48
  49     @Override
  50     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
  51         HttpServletRequest httpRequest = (HttpServletRequest) request;
  52         HttpServletResponse httpResponse = (HttpServletResponse) response;
  53
  54         EventLogRecord elr = new EventLogRecord(httpRequest);
  55         String excludeAAF = httpRequest.getHeader(BaseServlet.EXCLUDE_AAF_HEADER);//send this param value as true, if want to add legacy feed/subscriber in AAF env
  56
  57         String pathUrl = httpRequest.getServletPath();
  58         if (!(pathUrl.contains("internal") ||
  59                 pathUrl.contains("sublog") ||
  60                 pathUrl.contains("feedlog") ||
  61                 pathUrl.contains("statistics") ||
  62                 pathUrl.contains("publish") ||
  63                 pathUrl.contains("group"))) {
  64
  65             String method = httpRequest.getMethod().toUpperCase();
  66             if (!(method.equals("POST"))) { // if request method is PUT method (publish or Feed update) Needs to check for DELETE
  67                 if (method.equals("PUT") || method.equals("DELETE")) {
  68                     if ((pathUrl.contains("subs"))) {//edit subscriber
  69                         int subId = BaseServlet.getIdFromPath(httpRequest);
  70                         if (subId <= 0) {
  71                             String message = String.format("Invalid request URI - %s", httpRequest.getPathInfo());
  72                             elr.setMessage(message);
  73                             elr.setResult(HttpServletResponse.SC_NOT_FOUND);
  74                             eventlogger.info(elr);
  75                             httpResponse.sendError(HttpServletResponse.SC_NOT_FOUND, message);
  76                             return;
  77                         }
  78                         if (isAAFSubscriber(subId)) {//edit AAF Subscriber
  79                             String message = String.format("DRProvCadiFilter - Edit AAF Subscriber : %d : AAF Instance - %s", subId, aafInstance);
  80                             elr.setMessage(message);
  81                             eventlogger.info(elr);
  82                             //request.setAttribute("aafInstance", aafInstance);// no need to set it in request since it is taken care in respective servlets
  83                             super.doFilter(request, response, chain);
  84
  85                         } else {//Edit or publish legacy Subscriber
  86                             String message = "DRProvCadiFilter - Edit/Publish Legacy Subscriber :" + subId;
  87                             elr.setMessage(message);
  88                             eventlogger.info(elr);
  89                             chain.doFilter(request, response);
  90                         }
  91
  92                     } else {//edit or publish Feed
  93                         int feedId = BaseServlet.getIdFromPath(httpRequest);
  94                         if (feedId <= 0) {
  95                             String message = "Invalid request URI - " + httpRequest.getPathInfo();
  96                             elr.setMessage(message);
  97                             elr.setResult(HttpServletResponse.SC_NOT_FOUND);
  98                             eventlogger.info(elr);
  99                             httpResponse.sendError(HttpServletResponse.SC_NOT_FOUND, message);
 100                             return;
 101                         }
 102
 103                         if (isAAFFeed(feedId)) {//edit AAF Feed
 104                             String message = "DRProvCadiFilter - Edit AAF Feed:" + feedId + ":" + "AAF Instance -" + aafInstance;
 105                             elr.setMessage(message);
 106                             eventlogger.info(elr);
 107                             super.doFilter(request, response, chain);
 108
 109                         } else {//Edit or publish legacy Feed
 110                             String message = "DRProvCadiFilter - Edit/Publish Legacy Feed:" + feedId;
 111                             elr.setMessage(message);
 112                             eventlogger.info(elr);
 113                             chain.doFilter(request, response);
 114                         }
 115                     }
 116                 } else {// in all other cases defaults to legacy behavior
 117                     String message = "DRProvCadiFilter - Default Legacy Feed/Subscriber URI -:" + httpRequest.getPathInfo();
 118                     elr.setMessage(message);
 119                     eventlogger.info(elr);
 120                     chain.doFilter(request, response);
 121                 }
 122             } else {
 123                 //check to add legacy/AAF subscriber
 124                 if ((pathUrl.contains("subscribe"))) {//add subscriber
 125                     int feedId = BaseServlet.getIdFromPath(httpRequest);
 126                     if (feedId <= 0) {
 127                         String message = "Invalid request URI - " + httpRequest.getPathInfo();
 128                         elr.setMessage(message);
 129                         elr.setResult(HttpServletResponse.SC_NOT_FOUND);
 130                         eventlogger.info(elr);
 131                         httpResponse.sendError(HttpServletResponse.SC_NOT_FOUND, message);
 132                         return;
 133                     }
 134                     if (isAAFFeed(feedId)) {//check if AAF Feed or legacy to add new subscriber
 135                         if (excludeAAF == null) {
 136                             String message = "DRProvCadiFilter -Invalid request Header Parmeter " + BaseServlet.EXCLUDE_AAF_HEADER + " = " + httpRequest.getHeader(BaseServlet.EXCLUDE_AAF_HEADER);
 137                             elr.setMessage(message);
 138                             elr.setResult(HttpServletResponse.SC_BAD_REQUEST);
 139                             eventlogger.info(elr);
 140                             httpResponse.sendError(HttpServletResponse.SC_BAD_REQUEST, message);
 141                             return;
 142                         }
 143                         if (excludeAAF.equalsIgnoreCase("true")) {//Check to add legacy subscriber to AAF Feed
 144                             String message = "DRProvCadiFilter - add legacy subscriber to AAF Feed, FeedID:" + feedId;
 145                             elr.setMessage(message);
 146                             eventlogger.info(elr);
 147                             chain.doFilter(request, response);
 148                         } else {
 149                             String message = "DRProvCadiFilter - Add AAF subscriber to AAF Feed, FeedID:" + feedId + ":" + "AAF Instance -" + aafInstance;
 150                             elr.setMessage(message);
 151                             eventlogger.info(elr);
 152                             super.doFilter(request, response, chain);
 153                         }
 154                     } else {//Add legacy susbcriber to legacy Feed
 155                         String message = "DRProvCadiFilter - add legacy subscriber to legacy Feed:" + feedId;
 156                         elr.setMessage(message);
 157                         eventlogger.info(elr);
 158                         chain.doFilter(request, response);
 159                     }
 160                 } else {//add AAF feed
 161                     if (excludeAAF == null) {
 162                         String message = "DRProvCadiFilter -Invalid request Header Parmeter " + BaseServlet.EXCLUDE_AAF_HEADER + " = " + httpRequest.getHeader(BaseServlet.EXCLUDE_AAF_HEADER);
 163                         elr.setMessage(message);
 164                         elr.setResult(HttpServletResponse.SC_BAD_REQUEST);
 165                         eventlogger.info(elr);
 166                         httpResponse.sendError(HttpServletResponse.SC_BAD_REQUEST, message);
 167                         return;
 168                     }
 169                     if (excludeAAF.equalsIgnoreCase("true")) {//add legacy feed
 170                         String message = "DRProvCadiFilter - Create new legacy Feed : EXCLUDE_AAF = " + excludeAAF;
 171                         elr.setMessage(message);
 172                         eventlogger.info(elr);
 173                         chain.doFilter(request, response);
 174                     } else {//add AAF Feed
 175                         String message = "DRProvCadiFilter - Create new AAF Feed : EXCLUDE_AAF = " + excludeAAF;
 176                         elr.setMessage(message);
 177                         eventlogger.info(elr);
 178                         super.doFilter(request, response, chain);
 179                     }
 180                 }
 181             }
 182         } else {
 183             //All other requests default to (Non CADI) legacy
 184             chain.doFilter(request, response);
 185         }
 186     }
 187
 188     /**
 189      * Check if it is AAF feed OR existing feed.
 190      *
 191      * @param feedId the Feed ID
 192      * @return true if it is valid
 193      */
 194     @SuppressWarnings("resource")
 195     private boolean isAAFFeed(int feedId) {
 196         try {
 197             Feed feed = Feed.getFeedById(feedId);
 198             if (feed != null) {
 199                 if (!((feed.getAafInstance().equalsIgnoreCase("legacy")) || feed.getAafInstance() == null || feed.getAafInstance().equals(""))) { //also apply null check and empty check too
 200                     aafInstance = feed.getAafInstance();
 201                     String message = "DRProvCadiFilter.isAAFFeed: aafInstance-:" + aafInstance + "; feedId:- " + feedId;
 202                     intlogger.debug(message);
 203                     return true;
 204                 } else {
 205                     return false;
 206                 }
 207             } else {
 208                 String message = "DRProvCadiFilter.isAAFFeed; Feed does not exist FeedID:-" + feedId;
 209                 intlogger.debug(message);
 210             }
 211
 212         } catch (Exception e) {
 213             intlogger.error("PROV0073 DRProvCadiFilter.isAAFFeed: ", e);
 214             return false;
 215         }
 216         return false;
 217     }
 218
 219     /**
 220      * Check if it is AAF sub OR existing sub.
 221      *
 222      * @param subId the Sub ID
 223      * @return true if it is valid
 224      */
 225     @SuppressWarnings("resource")
 226     private boolean isAAFSubscriber(int subId) {
 227         try {
 228             Subscription subscriber = Subscription.getSubscriptionById(subId);
 229             if (subscriber != null) {
 230                 if (!((subscriber.getAafInstance().equalsIgnoreCase("legacy")) || subscriber.getAafInstance() == null || subscriber.getAafInstance().equals(""))) { //also apply null check and empty check too
 231                     aafInstance = subscriber.getAafInstance();
 232                     String message = "DRProvCadiFilter.isAAFSubscriber: aafInstance-:" + aafInstance + "; subId:- " + subId;
 233                     intlogger.debug(message);
 234                     return true;
 235                 } else {
 236                     return false;
 237                 }
 238             } else {
 239                 String message = "DRProvCadiFilter.isAAFSubscriber; Subscriber does not exist subId:-" + subId;
 240                 intlogger.debug(message);
 241             }
 242         } catch (Exception e) {
 243             intlogger.error("PROV0073 DRProvCadiFilter.isAAFSubscriber: ", e);
 244             return false;
 245         }
 246         return false;
 247     }
 248
 249 }