DMAAP-83 Initial code import

[dmaap/dbcapi.git] / src / main / java / org / onap / dmaap / dbcapi / aaf / AafService.java

diff --git a/src/main/java/org/onap/dmaap/dbcapi/aaf/AafService.java b/src/main/java/org/onap/dmaap/dbcapi/aaf/AafService.java
new file mode 100644 (file)
index 0000000..727ec19
--- /dev/null
+++ b/src/main/java/org/onap/dmaap/dbcapi/aaf/AafService.java
@@ -0,0 +1,180 @@
+/*-
+ * ============LICENSE_START=======================================================
+ * org.onap.dmaap
+ * ================================================================================
+ * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
+ * ================================================================================
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * 
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ * 
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ * ============LICENSE_END=========================================================
+ */
+
+package org.onap.dmaap.dbcapi.aaf;
+
+import java.io.IOException;
+
+import org.apache.log4j.Logger;
+import org.onap.dmaap.dbcapi.logging.BaseLoggingClass;
+import org.onap.dmaap.dbcapi.logging.DmaapbcLogMessageEnum;
+import org.onap.dmaap.dbcapi.util.DmaapConfig;
+
+public class AafService extends BaseLoggingClass {
+       public enum ServiceType {
+               AAF_Admin,
+               AAF_TopicMgr
+       }
+       
+       private AafConnection aaf;
+       private ServiceType ctype;
+       private String aafURL ;
+       
+       private String getCred( boolean wPwd ) {
+               String mechIdProperty = null;
+               String pwdProperty = null;
+               DmaapConfig p = (DmaapConfig)DmaapConfig.getConfig();
+               AafDecrypt decryptor = new AafDecrypt();
+
+               if ( ctype == ServiceType.AAF_Admin ) {
+                        mechIdProperty = "aaf.AdminUser";
+                        pwdProperty = "aaf.AdminPassword";
+               } else if ( ctype == ServiceType.AAF_TopicMgr ){        
+                        mechIdProperty = "aaf.TopicMgrUser";
+                        pwdProperty = "aaf.TopicMgrPassword";
+               } else {
+                       logger.error( "Unexpected case for AAF credential type: " + ctype );
+                       return null;
+               }
+               String user = p.getProperty( mechIdProperty, "noMechId@domain.netset.com" );
+               //String dClass = p.getProperty( "AafDecryption.Class", "org.openecomp.dmaapbc.aaf.ClearDecrypt");
+               String pwd = "";
+               String encPwd = p.getProperty( pwdProperty, "notSet" );
+               //DecryptionInterface dec = null;
+               //try {
+               //      dec = (DecryptionInterface) (Class.forName(dClass).newInstance());      
+               //      dec.init( p.getProperty("CredentialCodecKeyfile", "LocalKey"));
+               //} catch (Exception ee ) {
+               //      errorLogger.error(DmaapbcLogMessageEnum.UNEXPECTED_CONDITION, "attempting to use " + dClass + " to decrypt " + encPwd );                
+               //}     
+               //try {         
+               //      pwd = dec.decrypt( encPwd );
+               //} catch( IOException io ) {
+               //      errorLogger.error(DmaapbcLogMessageEnum.DECRYPT_IO_ERROR, dClass, encPwd );
+               //} 
+               
+               pwd = decryptor.decrypt(encPwd);
+               
+               if ( wPwd ) {
+                       return user + ":" + pwd;
+               } else {
+                       return user;
+               }
+               
+               
+       }
+       
+       public AafService(ServiceType t ) {
+               DmaapConfig p = (DmaapConfig)DmaapConfig.getConfig();
+               aafURL = p.getProperty( "aaf.URL", "https://authentication.domain.netset.com:8095/proxy/");
+               initAafService( t );
+       }
+       public AafService( ServiceType t, String url ) {
+               aafURL = url;
+               initAafService( t );
+       }
+               
+       private void initAafService( ServiceType t ) {
+               ctype = t;
+               aaf = new AafConnection( getCred( true ) );
+       }
+       
+       public int addPerm(DmaapPerm perm) {
+
+               int rc = -1;
+               logger.info( "entry: addPerm() "  );
+               String pURL = aafURL + "authz/perm";
+               rc = aaf.postAaf( perm, pURL );
+        switch( rc ) {
+       case 401:
+       case 403:
+                       errorLogger.error(DmaapbcLogMessageEnum.AAF_CREDENTIAL_ERROR,  getCred( false ) );
+               System.exit(1);
+       case 409:
+               logger.warn( "Perm already exists. Possible conflict.");
+               break;
+               
+       case 201:
+               logger.info( "expected response" );
+               break;
+               default :
+               logger.error( "Unexpected response: " + rc );
+               break;
+        }
+               
+               return rc;
+       }
+       public int addGrant(DmaapGrant grant ) {
+
+               int rc = -1;
+               logger.info( "entry: addGrant() "  );
+
+               String pURL = aafURL + "authz/role/perm";
+               rc = aaf.postAaf( grant, pURL );
+        switch( rc ) {
+       case 401:
+       case 403:
+                       errorLogger.error(DmaapbcLogMessageEnum.AAF_CREDENTIAL_ERROR,  getCred( false ) );
+               System.exit(1);
+               break;
+
+       case 409:
+               logger.warn( "Perm already exists. Possible conflict.");
+               break;
+               
+       case 201:
+               logger.info( "expected response" );
+               break;
+               default :
+               logger.error( "Unexpected response: " + rc );
+               break;
+        }
+               
+               return rc;
+       }
+
+       public int delGrant( DmaapGrant grant ) {
+               int rc = -1;
+               logger.info( "entry: delGrant() "  );
+
+               String pURL = aafURL + "authz/role/:" + grant.getRole() + "/perm";
+               rc = aaf.delAaf( grant, pURL );
+        switch( rc ) {
+       case 401:
+               case 403:
+               errorLogger.error(DmaapbcLogMessageEnum.AAF_CREDENTIAL_ERROR,  getCred( false ) );
+               System.exit(1);
+               break;
+ 
+       case 404:
+               logger.warn( "Perm not found...ignore");
+               break;
+               
+       case 200:
+               logger.info( "expected response" );
+               break;
+               default :
+               logger.error( "Unexpected response: " + rc );
+               break;
+        }
+               
+               return rc;
+       }
+}