ECOMP-PAP-REST/src/main/java/org/openecomp/policy/pap/xacml/rest/components/Policy.java

   1 /*-
   2  * ============LICENSE_START=======================================================
   3  * ECOMP-PAP-REST
   4  * ================================================================================
   5  * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
   6  * ================================================================================
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *      http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  * ============LICENSE_END=========================================================
  19  */
  20
  21 package org.openecomp.policy.pap.xacml.rest.components;
  22
  23 import java.io.ByteArrayInputStream;
  24 import java.io.IOException;
  25 import java.io.InputStream;
  26 import java.net.URI;
  27 import java.net.URISyntaxException;
  28 import java.nio.charset.StandardCharsets;
  29 import java.nio.file.Files;
  30 import java.nio.file.Path;
  31 import java.nio.file.Paths;
  32 import java.util.HashMap;
  33 import java.util.Map;
  34
  35 import javax.json.Json;
  36 import javax.json.JsonReader;
  37
  38 import org.apache.commons.io.FilenameUtils;
  39 import org.json.JSONObject;
  40 import org.openecomp.policy.common.logging.eelf.MessageCodes;
  41 import org.openecomp.policy.common.logging.eelf.PolicyLogger;
  42 import org.openecomp.policy.common.logging.flexlogger.FlexLogger;
  43 import org.openecomp.policy.common.logging.flexlogger.Logger;
  44 import org.openecomp.policy.rest.XACMLRestProperties;
  45 import org.openecomp.policy.rest.adapter.PolicyRestAdapter;
  46 import org.openecomp.policy.xacml.util.XACMLPolicyWriter;
  47
  48 import com.att.research.xacml.std.IdentifierImpl;
  49 import com.att.research.xacml.util.XACMLProperties;
  50 import com.att.research.xacmlatt.pdp.policy.PolicyDef;
  51 import com.att.research.xacmlatt.pdp.policy.dom.DOMPolicyDef;
  52
  53 import oasis.names.tc.xacml._3_0.core.schema.wd_17.AttributeDesignatorType;
  54 import oasis.names.tc.xacml._3_0.core.schema.wd_17.AttributeValueType;
  55 import oasis.names.tc.xacml._3_0.core.schema.wd_17.MatchType;
  56 import oasis.names.tc.xacml._3_0.core.schema.wd_17.PolicyType;
  57
  58 public abstract class Policy {
  59
  60         private static final Logger LOGGER      = FlexLogger.getLogger(Policy.class);
  61
  62
  63         /**
  64          * Common Fields
  65          */
  66         public static final String GET_INT_TYPE = "Integer";
  67         public static final String GET_STRING_TYPE = "String";
  68
  69         public static final String ECOMPID = "ECOMPName";
  70         public static final String CONFIGID = "ConfigName";
  71         public static final String CLOSEDLOOPID = "ServiceType";
  72
  73         public static final String CONFIG_POLICY = "Config";
  74         public static final String ACTION_POLICY = "Action";
  75         public static final String DECISION_POLICY = "Decision";
  76
  77         protected String policyName = null;
  78
  79         protected boolean isValidForm = true;
  80
  81         private Path finalPolicyPath = null;
  82
  83         private boolean preparedToSave = false;
  84
  85         private boolean policyExists = false;
  86
  87         public Path getFinalPolicyPath() {
  88                 return finalPolicyPath;
  89         }
  90
  91         public void setFinalPolicyPath(Path finalPolicyPath) {
  92                 this.finalPolicyPath = finalPolicyPath;
  93         }
  94
  95         // Constants Used in XML Creation
  96         public static final String CATEGORY_RECIPIENT_SUBJECT = "urn:oasis:names:tc:xacml:1.0:subject-category:recipient-subject";
  97         public static final String CATEGORY_RESOURCE = "urn:oasis:names:tc:xacml:3.0:attribute-category:resource";
  98         public static final String CATEGORY_ACTION = "urn:oasis:names:tc:xacml:3.0:attribute-category:action";
  99         public static final String CATEGORY_ACCESS_SUBJECT = "urn:oasis:names:tc:xacml:1.0:subject-category:access-subject";
 100         public static final String ACTION_ID = "urn:oasis:names:tc:xacml:1.0:action:action-id";
 101         public static final String SUBJECT_ID = "urn:oasis:names:tc:xacml:1.0:subject:subject-id";
 102         public static final String RESOURCE_ID = "urn:oasis:names:tc:xacml:1.0:resource:resource-id";
 103         public static final String FUNTION_INTEGER_ONE_AND_ONLY = "urn:oasis:names:tc:xacml:1.0:function:integer-one-and-only";
 104         public static final String FUNCTION_STRING_ONE_AND_ONLY = "urn:oasis:names:tc:xacml:1.0:function:string-one-and-only";
 105         public static final String FUNCTION_BOOLEAN_ONE_AND_ONLY = "urn:oasis:names:tc:xacml:1.0:function:boolean-one-and-only";
 106         public static final String FUNCTION_STRING_EQUAL = "urn:oasis:names:tc:xacml:1.0:function:string-equal";
 107         public static final String FUNCTION_STRING_REGEX_MATCH = "org.openecomp.function.regex-match";
 108         public static final String FUNCTION_STRING_EQUAL_IGNORE = "urn:oasis:names:tc:xacml:3.0:function:string-equal-ignore-case";
 109         public static final String INTEGER_DATATYPE = "http://www.w3.org/2001/XMLSchema#integer";
 110         public static final String BOOLEAN_DATATYPE = "http://www.w3.org/2001/XMLSchema#boolean";
 111         public static final String STRING_DATATYPE = "http://www.w3.org/2001/XMLSchema#string";
 112         public static final String URI_DATATYPE = "http://www.w3.org/2001/XMLSchema#anyURI";
 113         public static final String RULE_VARIABLE = "var:";
 114         public static final String EMPTY_STRING = "";
 115         private static final String String = null;
 116
 117         public static String CONFIG_HOME = null;
 118         public static String ACTION_HOME = null;
 119         public static String CONFIG_URL = null;
 120
 121         protected Map<String, String> performer = new HashMap<>();
 122
 123         private static String actionHome = null;
 124         private static String configHome = null;
 125
 126         public PolicyRestAdapter policyAdapter = null;
 127         String ruleID = "";
 128
 129         public Policy() {
 130                 CONFIG_HOME = getConfigHome();
 131                 ACTION_HOME = getActionHome();
 132                 CONFIG_URL = "$URL";
 133                 performer.put("PDP", "PDPAction");
 134                 performer.put("PEP", "PEPAction");
 135         }
 136
 137         //Each policy type seems to either use policyData or data field policy adapter when
 138         //getting the xml to save the policy. Instead of keep this hardcoded in the save method,
 139         //this method makes it usable outside.
 140         /**
 141          * Return the data field of the PolicyAdapter that will be used when saving this policy
 142          * with the savePolicies method.
 143          * @return Either the PolicyAdapter.getData() or PolicyAdapter.getPolicyData()
 144          */
 145         public abstract Object getCorrectPolicyDataObject();
 146         public abstract Map<String, String>  savePolicies() throws Exception;
 147
 148         //This is the method for preparing the policy for saving.  We have broken it out
 149         //separately because the fully configured policy is used for multiple things
 150         public abstract boolean prepareToSave() throws Exception;
 151
 152
 153         // create match for ecomp and config name
 154         protected MatchType createMatch(String key, String value) {
 155                 MatchType match = new MatchType();
 156
 157                 AttributeValueType attributeValue = new AttributeValueType();
 158                 attributeValue.setDataType(STRING_DATATYPE);
 159                 attributeValue.getContent().add(value);
 160                 match.setAttributeValue(attributeValue);
 161                 AttributeDesignatorType attributeDesignator = new AttributeDesignatorType();
 162                 URI uri = null;
 163                 try {
 164                         uri = new URI(key);
 165                 } catch (URISyntaxException e) {
 166                         LOGGER.error("Exception Occured"+e);
 167                 }
 168                 attributeDesignator.setCategory(CATEGORY_ACCESS_SUBJECT);
 169                 attributeDesignator.setDataType(STRING_DATATYPE);
 170                 attributeDesignator.setAttributeId(new IdentifierImpl(uri).stringValue());
 171                 match.setAttributeDesignator(attributeDesignator);
 172                 match.setMatchId(FUNCTION_STRING_REGEX_MATCH);
 173                 return match;
 174         }
 175
 176         // Creating the match for dynamically added components.
 177         protected MatchType createDynamicMatch(String key, String value) {
 178                 MatchType dynamicMatch = new MatchType();
 179                 AttributeValueType dynamicAttributeValue = new AttributeValueType();
 180                 String dataType = null;
 181                 dataType = STRING_DATATYPE;
 182                 dynamicAttributeValue.setDataType(dataType);
 183                 dynamicAttributeValue.getContent().add(value);
 184                 dynamicMatch.setAttributeValue(dynamicAttributeValue);
 185
 186                 AttributeDesignatorType dynamicAttributeDesignator = new AttributeDesignatorType();
 187
 188                 URI dynamicURI = null;
 189                 try {
 190                         dynamicURI = new URI(key);
 191                 } catch (URISyntaxException e) {
 192                         LOGGER.error("Exception Occured"+e);// log msg
 193                 }
 194                 dynamicAttributeDesignator.setCategory(CATEGORY_RESOURCE);
 195                 dynamicAttributeDesignator.setDataType(dataType);
 196                 dynamicAttributeDesignator.setAttributeId(new IdentifierImpl(dynamicURI).stringValue());
 197                 dynamicMatch.setAttributeDesignator(dynamicAttributeDesignator);
 198                 dynamicMatch.setMatchId(FUNCTION_STRING_REGEX_MATCH);
 199
 200                 return dynamicMatch;
 201         }
 202
 203         //validation for numeric
 204         protected boolean isNumeric(String str){
 205                 for (char c : str.toCharArray()){
 206                         if (!Character.isDigit(c)) return false;
 207                 }
 208                 return true;
 209         }
 210
 211         // Validation for json.
 212         protected static boolean isJSONValid(String data) {
 213                 JsonReader jsonReader = null;
 214                 try {
 215                         new JSONObject(data);
 216                         InputStream stream = new ByteArrayInputStream(data.getBytes(StandardCharsets.UTF_8));
 217                         jsonReader = Json.createReader(stream);
 218                         LOGGER.info("Json Value is: " + jsonReader.read().toString() );
 219                 } catch (Exception e) {
 220                         LOGGER.error("Exception Occured while reading json"+e);
 221                         return false;
 222                 }finally{
 223                         if(jsonReader != null){
 224                                 jsonReader.close();
 225                         }
 226                 }
 227                 return true;
 228         }
 229
 230         //  the Policy Name as Unique One throws error
 231         @SuppressWarnings("static-access")
 232         protected Path getNextFilename(Path parent, String policyType, String polcyFileName, Integer version) {
 233                 policyType = FilenameUtils.removeExtension(policyType);
 234                 polcyFileName = FilenameUtils.removeExtension(polcyFileName);
 235                 Path newFile = null;
 236                 String policyDir = EMPTY_STRING;
 237                 String absolutePath = parent.toString();
 238                 if (absolutePath != null && !absolutePath.equals(EMPTY_STRING)) {
 239                         policyDir = absolutePath.substring(absolutePath.lastIndexOf("\\") + 1, absolutePath.length());
 240                         if (policyDir == null || policyDir.equals(EMPTY_STRING)) {
 241                                 policyDir = absolutePath.substring(absolutePath.lastIndexOf("/") + 1, absolutePath.length());
 242                         }
 243                 }
 244
 245                 String fileName = "default";
 246                 if (policyDir != null && !policyDir.equals(EMPTY_STRING)) {
 247                         fileName = policyType + "_" + String.format(polcyFileName) + "." + version + ".xml";
 248                 }
 249                 if (fileName != null) {
 250                         newFile = Paths.get(parent.toString(), fileName);
 251                 }
 252                 if (Files.notExists(newFile)) {
 253                         return newFile;
 254                 }
 255                 return null;
 256         }
 257
 258         protected Path getNextLoopFilename(Path parentPath, String policyType, String policyConfigType, String policyFileName, Integer version) {
 259                 policyType = FilenameUtils.removeExtension(policyType);
 260                 policyConfigType = FilenameUtils.removeExtension(policyConfigType);
 261                 policyFileName = FilenameUtils.removeExtension(policyFileName);
 262                 Path newFile = null;
 263                 String policyDir = EMPTY_STRING;
 264                 String absolutePath = parentPath.toString();
 265                 if (absolutePath != null && !absolutePath.equals(EMPTY_STRING)) {
 266                         policyDir = absolutePath.substring(absolutePath.lastIndexOf("\\") + 1, absolutePath.length());
 267                         if (policyDir == null || policyDir.equals(EMPTY_STRING)) {
 268                                 policyDir = absolutePath.substring(absolutePath.lastIndexOf("/") + 1, absolutePath.length());
 269                         }
 270                 }
 271
 272                 String fileName = "default";
 273                 if (policyDir != null && !policyDir.equals(EMPTY_STRING)) {
 274                         if(policyConfigType.equals("ClosedLoop_PM")){
 275                                 fileName = policyType + "_" + "PM" + "_" +java.lang.String.format(policyFileName) + "." +version +".xml";
 276                         }else if(policyConfigType.equals("ClosedLoop_Fault")){
 277                                 fileName = policyType + "_" + "Fault" + "_" +java.lang.String.format(policyFileName) +  "." + version + ".xml";
 278                         }else if(policyConfigType.equals("ClosedLoop_Fault")){
 279                                 fileName = policyType + "_" + "Fault" + "_" +java.lang.String.format(policyFileName) +  "." + version + ".xml";
 280                         }else if(policyConfigType.equals("Micro Service")){
 281                                 fileName = policyType + "_" + "MS" + "_" + java.lang.String.format(policyFileName) + "." + version + ".xml";
 282                         }
 283                 }
 284                 if (fileName != null) {
 285                         newFile = Paths.get(parentPath.toString(), fileName);
 286                 }
 287                 if (Files.notExists(newFile)) {
 288                         return newFile;
 289                 }
 290                 return null;
 291         }
 292
 293
 294         //create policy once all the validations are completed
 295         protected Map<String, String> createPolicy(final Path policyPath, final Object policyData) {
 296                 Map<String, String> success = new HashMap<>();
 297                 //
 298                 // Is the root a PolicySet or Policy?
 299                 //
 300
 301                 if (policyData instanceof PolicyType) {
 302                         //
 303                         // Write it out
 304                         //
 305                         //Does not need to be XACMLPolicyWriterWithPapNotify since it is already in the PAP
 306                         //and this transaction is intercepted up stream.
 307                         InputStream inputStream = null;
 308                         try {
 309                                 inputStream = XACMLPolicyWriter.getXmlAsInputStream((PolicyType) policyData);
 310                                 PolicyDef policyDef = DOMPolicyDef.load(inputStream);
 311                                 if (policyDef == null) {
 312                                         success.put("validation", "PolicyDef Validation Failed");
 313                                 }else{
 314                                         success.put("success", "success");
 315                                 }
 316                         } catch (Exception e) {
 317                                 LOGGER.error("PolicyDef Validation failed"+e);
 318                                 success.put("error", "Validation Failed");
 319                         }finally{
 320                                 try {
 321                                         if(inputStream != null)
 322                                                 inputStream.close();
 323                                 } catch (IOException e) {
 324                                         LOGGER.error("Exception Occured while closing the input stream"+e);
 325                                 }
 326                         }
 327                 } else {
 328                         PolicyLogger.error("Unknown data type sent back.");
 329                         return success;
 330                 }
 331                 return success;
 332         }
 333
 334         public static String getConfigHome(){
 335                 try {
 336                         loadWebapps();
 337                 } catch (Exception e) {
 338                         return null;
 339                 }
 340                 return configHome;
 341         }
 342
 343         public static String getActionHome(){
 344                 try {
 345                         loadWebapps();
 346                 } catch (Exception e) {
 347                         return null;
 348                 }
 349                 return actionHome;
 350         }
 351
 352         private static void loadWebapps() throws Exception{
 353                 if(actionHome == null || configHome == null){
 354                         Path webappsPath = Paths.get(XACMLProperties.getProperty(XACMLRestProperties.PROP_PAP_WEBAPPS));
 355                         //Sanity Check
 356                         if (webappsPath == null) {
 357                                 PolicyLogger.error("Invalid Webapps Path Location property : " + XACMLRestProperties.PROP_PAP_WEBAPPS);
 358                                 throw new Exception("Invalid Webapps Path Location property : " + XACMLRestProperties.PROP_PAP_WEBAPPS);
 359                         }
 360                         Path webappsPathConfig;
 361                         Path webappsPathAction;
 362                         if(webappsPath.toString().contains("\\")){
 363                                 webappsPathConfig = Paths.get(webappsPath.toString()+"\\Config");
 364                                 webappsPathAction = Paths.get(webappsPath.toString()+"\\Action");
 365                         }else{
 366                                 webappsPathConfig = Paths.get(webappsPath.toString()+"/Config");
 367                                 webappsPathAction = Paths.get(webappsPath.toString()+"/Action");
 368                         }
 369                         if(Files.notExists(webappsPathConfig)){
 370                                 try {
 371                                         Files.createDirectories(webappsPathConfig);
 372                                 } catch (IOException e) {
 373                                         PolicyLogger.error(MessageCodes.ERROR_PROCESS_FLOW, e, "Policy", "Failed to create config directory");
 374                                 }
 375                         }
 376                         if(Files.notExists(webappsPathAction)){
 377                                 try {
 378                                         Files.createDirectories(webappsPathAction);
 379                                 } catch (IOException e) {
 380                                         PolicyLogger.error(MessageCodes.ERROR_PROCESS_FLOW, e, "Policy", "Failed to create config directory");
 381                                 }
 382                         }
 383                         actionHome = webappsPathAction.toString();
 384                         configHome = webappsPathConfig.toString();
 385                 }
 386         }
 387
 388         public boolean validateConfigForm() {
 389                 return true;
 390         }
 391
 392         /**
 393          * @return the preparedToSave
 394          */
 395         public boolean isPreparedToSave() {
 396                 return preparedToSave;
 397         }
 398
 399         /**
 400          * @param preparedToSave the preparedToSave to set
 401          */
 402         protected void setPreparedToSave(boolean preparedToSave) {
 403                 this.preparedToSave = preparedToSave;
 404         }
 405
 406         public boolean isPolicyExists() {
 407                 return policyExists;
 408         }
 409
 410         public void setPolicyExists(boolean policyExists) {
 411                 this.policyExists = policyExists;
 412         }
 413
 414
 415 }