X-Git-Url: https://gerrit.onap.org/r/gitweb?p=dmaap%2Fdbcapi.git;a=blobdiff_plain;f=src%2Fmain%2Fjava%2Forg%2Fonap%2Fdmaap%2Fdbcapi%2Faaf%2FAafService.java;fp=src%2Fmain%2Fjava%2Forg%2Fonap%2Fdmaap%2Fdbcapi%2Faaf%2FAafService.java;h=30efbf2ec39365333fba69a8c44e630c44a64e43;hp=9d8776ad18245966269c7def24d8a0e1a334834e;hb=bf91de122a24dbfc9a0158556e290df21472240b;hpb=675ec9e58d26fe0e73ba91004f77729c417364fd diff --git a/src/main/java/org/onap/dmaap/dbcapi/aaf/AafService.java b/src/main/java/org/onap/dmaap/dbcapi/aaf/AafService.java index 9d8776a..30efbf2 100644 --- a/src/main/java/org/onap/dmaap/dbcapi/aaf/AafService.java +++ b/src/main/java/org/onap/dmaap/dbcapi/aaf/AafService.java @@ -7,9 +7,9 @@ * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at - * + * * http://www.apache.org/licenses/LICENSE-2.0 - * + * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. @@ -20,179 +20,27 @@ package org.onap.dmaap.dbcapi.aaf; -import org.onap.dmaap.dbcapi.logging.BaseLoggingClass; -import org.onap.dmaap.dbcapi.logging.DmaapbcLogMessageEnum; -import org.onap.dmaap.dbcapi.util.DmaapConfig; - /* * this service uses the AAF REST API endpoints to provision values in AAF */ -public class AafService extends BaseLoggingClass { - public enum ServiceType { - AAF_Admin, - AAF_TopicMgr - } - - private AafConnection aaf; - private ServiceType ctype; - private String aafURL ; - private String identity; - private boolean useAAF = false; - - - - public String getIdentity() { - return identity; - } - - - public void setIdentity(String identity) { - this.identity = identity; - } - - - private String getCred( boolean wPwd ) { - String mechIdProperty = null; - String pwdProperty = null; - DmaapConfig p = (DmaapConfig)DmaapConfig.getConfig(); - AafDecrypt decryptor = new AafDecrypt(); - - if ( ctype == ServiceType.AAF_Admin ) { - mechIdProperty = "aaf.AdminUser"; - pwdProperty = "aaf.AdminPassword"; - } else if ( ctype == ServiceType.AAF_TopicMgr ){ - mechIdProperty = "aaf.TopicMgrUser"; - pwdProperty = "aaf.TopicMgrPassword"; - } else { - logger.error( "Unexpected case for AAF credential type: " + ctype ); - return null; - } - identity = p.getProperty( mechIdProperty, "noMechId@domain.netset.com" ); +public interface AafService { + enum ServiceType { + AAF_Admin, + AAF_TopicMgr + } - String pwd = ""; - String encPwd = p.getProperty( pwdProperty, "notSet" ); + String getIdentity(); - - pwd = decryptor.decrypt(encPwd); - - if ( wPwd ) { - return identity + ":" + pwd; - } else { - return identity; - } - - - } - - - public AafService(ServiceType t ) { - DmaapConfig p = (DmaapConfig)DmaapConfig.getConfig(); - aafURL = p.getProperty( "aaf.URL", "https://authentication.domain.netset.com:8100/proxy/"); - initAafService( t ); - } - public AafService( ServiceType t, String url ) { - aafURL = url; - initAafService( t ); - } - - private void initAafService( ServiceType t ) { - DmaapConfig p = (DmaapConfig)DmaapConfig.getConfig(); - useAAF= "true".equalsIgnoreCase(p.getProperty("UseAAF", "false")); - logger.info( "AafService initAafService: useAAF=" + useAAF); - - ctype = t; - aaf = new AafConnection( getCred( true ) ); - } - - public int addPerm(DmaapPerm perm) { - logger.info( "entry: addPerm() " ); - return doPost( perm, "authz/perm", 201); - } - public int addGrant(DmaapGrant grant ) { - logger.info( "entry: addGrant() " ); - return doPost( grant, "authz/role/perm", 201 ); - } - public int addUserRole( AafUserRole ur ) { - logger.info( "entry: addUserRole() " ); - return doPost( ur, "authz/userRole", 201 ); - } + int addPerm(DmaapPerm perm); - public int delGrant( DmaapGrant grant ) { - int rc = -1; - logger.info( "entry: delGrant() " ); + int addGrant(DmaapGrant grant); - String pURL = aafURL + "authz/role/:" + grant.getRole() + "/perm"; - - if ( useAAF ) { - rc = aaf.delAaf( grant, pURL ); - } else { - rc = 200; - } - switch( rc ) { - case 401: - case 403: - errorLogger.error(DmaapbcLogMessageEnum.AAF_CREDENTIAL_ERROR, getCred( false ) ); - System.exit(1); - break; - - case 404: - logger.warn( "Perm not found...ignore"); - break; - - case 200: - logger.info( "expected response" ); - break; - default : - logger.error( "Unexpected response: " + rc ); - break; - } - - return rc; - } + int addUserRole(AafUserRole ur); - public int addRole(AafRole role) { - logger.info( "entry: addRole() " ); - return doPost( role, "authz/role", 201 ); - } + int delGrant(DmaapGrant grant); - - - public int addNamespace(AafNamespace ns) { - logger.info( "entry: addNamespace() " ); - return doPost( ns, "authz/ns", 201 ); - } + int addRole(AafRole role); - - private int doPost( AafObject obj, String uri, int expect ) { - int rc = -1; - logger.info( "entry: doPost() " ); - String pURL = aafURL + uri; - logger.info( "doPost: useAAF=" + useAAF ); - if ( useAAF ) { - logger.info( "doPost: " + obj.toJSON()); - rc = aaf.postAaf( obj, pURL ); - } else { - rc = expect; - } - switch( rc ) { - case 401: - case 403: - errorLogger.error(DmaapbcLogMessageEnum.AAF_CREDENTIAL_ERROR, getCred( false ) ); - System.exit(1); - case 409: - logger.warn( "Object for " + uri + " already exists. Possible conflict."); - break; - - default : - if ( rc == expect ) { - logger.info( "expected response: " + rc); - } else { - logger.error( "Unexpected response: " + rc ); - } - break; - } - - return rc; - } + int addNamespace(AafNamespace ns); }