FIX SONAR ISSUE NESTED TRY BLOCKS
[policy/engine.git] / POLICY-SDK-APP / src / main / java / org / onap / policy / admin / PolicyRestController.java
1 /*-
2  * ============LICENSE_START=======================================================
3  * ONAP Policy Engine
4  * ================================================================================
5  * Copyright (C) 2017-2018 AT&T Intellectual Property. All rights reserved.
6  * ================================================================================
7  * Licensed under the Apache License, Version 2.0 (the "License");
8  * you may not use this file except in compliance with the License.
9  * You may obtain a copy of the License at
10  * 
11  *      http://www.apache.org/licenses/LICENSE-2.0
12  * 
13  * Unless required by applicable law or agreed to in writing, software
14  * distributed under the License is distributed on an "AS IS" BASIS,
15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  * See the License for the specific language governing permissions and
17  * limitations under the License.
18  * ============LICENSE_END=========================================================
19  */
20 package org.onap.policy.admin;
21
22 import java.io.ByteArrayInputStream;
23 import java.io.File;
24 import java.io.IOException;
25 import java.io.InputStream;
26 import java.io.OutputStream;
27 import java.io.PrintWriter;
28 import java.net.HttpURLConnection;
29 import java.net.URL;
30 import java.nio.charset.StandardCharsets;
31 import java.util.ArrayList;
32 import java.util.Base64;
33 import java.util.List;
34
35 import javax.servlet.http.HttpServletRequest;
36 import javax.servlet.http.HttpServletResponse;
37
38 import org.apache.commons.fileupload.FileItem;
39 import org.apache.commons.fileupload.disk.DiskFileItemFactory;
40 import org.apache.commons.fileupload.servlet.ServletFileUpload;
41 import org.apache.commons.io.IOUtils;
42 import org.json.JSONObject;
43 import org.onap.policy.common.logging.flexlogger.FlexLogger;
44 import org.onap.policy.common.logging.flexlogger.Logger;
45 import org.onap.policy.controller.CreateClosedLoopFaultController;
46 import org.onap.policy.controller.CreateDcaeMicroServiceController;
47 import org.onap.policy.controller.CreateFirewallController;
48 import org.onap.policy.controller.CreateOptimizationController;
49 import org.onap.policy.controller.PolicyController;
50 import org.onap.policy.rest.XACMLRestProperties;
51 import org.onap.policy.rest.adapter.PolicyRestAdapter;
52 import org.onap.policy.rest.dao.CommonClassDao;
53 import org.onap.policy.rest.jpa.PolicyVersion;
54 import org.onap.policy.utils.PolicyUtils;
55 import org.onap.policy.xacml.api.XACMLErrorConstants;
56 import org.onap.portalsdk.core.controller.RestrictedBaseController;
57 import org.onap.portalsdk.core.web.support.UserUtils;
58 import org.springframework.beans.factory.annotation.Autowired;
59 import org.springframework.http.HttpEntity;
60 import org.springframework.http.HttpHeaders;
61 import org.springframework.http.HttpMethod;
62 import org.springframework.http.HttpStatus;
63 import org.springframework.http.ResponseEntity;
64 import org.springframework.web.bind.annotation.RequestMapping;
65 import org.springframework.web.bind.annotation.RequestMethod;
66 import org.springframework.web.bind.annotation.RestController;
67 import org.springframework.web.client.HttpClientErrorException;
68 import org.springframework.web.client.RestTemplate;
69 import org.springframework.web.servlet.ModelAndView;
70 import org.onap.policy.utils.CryptoUtils;
71 import com.att.research.xacml.util.XACMLProperties;
72 import com.fasterxml.jackson.databind.DeserializationFeature;
73 import com.fasterxml.jackson.databind.JsonNode;
74 import com.fasterxml.jackson.databind.ObjectMapper;
75 import com.fasterxml.jackson.databind.SerializationFeature;
76
77 @RestController
78 @RequestMapping("/")
79 public class PolicyRestController extends RestrictedBaseController{
80
81     private static final Logger policyLogger = FlexLogger.getLogger(PolicyRestController.class);
82
83     private static final String model = "model";
84     private static final String importDictionary = "import_dictionary";
85
86     private static CommonClassDao commonClassDao;
87
88     public PolicyRestController(){
89         //default constructor
90     }
91
92     @Autowired
93     private PolicyRestController(CommonClassDao commonClassDao){
94         PolicyRestController.commonClassDao = commonClassDao;
95     }
96
97     public static CommonClassDao getCommonClassDao() {
98         return commonClassDao;
99     }
100
101     public static void setCommonClassDao(CommonClassDao commonClassDao) {
102         PolicyRestController.commonClassDao = commonClassDao;
103     }
104
105
106
107     @RequestMapping(value={"/policycreation/save_policy"}, method={RequestMethod.POST})
108     public void policyCreationController(HttpServletRequest request, HttpServletResponse response) {
109         String userId = UserUtils.getUserSession(request).getOrgUserId();
110         ObjectMapper mapper = new ObjectMapper();
111         mapper.configure(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES, false);
112         try{
113             JsonNode root = mapper.readTree(request.getReader());
114
115             policyLogger.info("****************************************Logging UserID while Create/Update Policy**************************************************");
116             policyLogger.info("UserId:  " + userId + "Policy Data Object:  "+ root.get(PolicyController.getPolicydata()).get("policy").toString());
117             policyLogger.info("***********************************************************************************************************************************");
118
119             PolicyRestAdapter policyData = mapper.readValue(root.get(PolicyController.getPolicydata()).get("policy").toString(), PolicyRestAdapter.class);
120
121             if("file".equals(root.get(PolicyController.getPolicydata()).get(model).get("type").toString().replace("\"", ""))){
122                 policyData.setEditPolicy(true);
123             }
124             if(root.get(PolicyController.getPolicydata()).get(model).get("path").size() != 0){
125                 String dirName = "";
126                 for(int i = 0; i < root.get(PolicyController.getPolicydata()).get(model).get("path").size(); i++){
127                     dirName = dirName.replace("\"", "") + root.get(PolicyController.getPolicydata()).get(model).get("path").get(i).toString().replace("\"", "") + File.separator;
128                 }
129                 if(policyData.isEditPolicy()){
130                     policyData.setDomainDir(dirName.substring(0, dirName.lastIndexOf(File.separator)));
131                 }else{
132                     policyData.setDomainDir(dirName + root.get(PolicyController.getPolicydata()).get(model).get("name").toString().replace("\"", ""));
133                 }
134             }else{
135                 String domain = root.get(PolicyController.getPolicydata()).get(model).get("name").toString();
136                 if(domain.contains("/")){
137                     domain = domain.substring(0, domain.lastIndexOf('/')).replace("/", File.separator);
138                 }
139                 domain = domain.replace("\"", "");
140                 policyData.setDomainDir(domain);
141             }
142
143             if(policyData.getConfigPolicyType() != null){
144                 if("ClosedLoop_Fault".equalsIgnoreCase(policyData.getConfigPolicyType())){
145                     policyData = new CreateClosedLoopFaultController().setDataToPolicyRestAdapter(policyData, root);
146                 }else if("Firewall Config".equalsIgnoreCase(policyData.getConfigPolicyType())){
147                     policyData = new CreateFirewallController().setDataToPolicyRestAdapter(policyData);
148                 }else if("Micro Service".equalsIgnoreCase(policyData.getConfigPolicyType())){
149                     policyData = new CreateDcaeMicroServiceController().setDataToPolicyRestAdapter(policyData, root);
150                 }else if("Optimization".equalsIgnoreCase(policyData.getConfigPolicyType())){
151                     policyData = new CreateOptimizationController().setDataToPolicyRestAdapter(policyData, root);
152                 }
153             }
154
155             policyData.setUserId(userId);
156
157             String result;
158             String body = PolicyUtils.objectToJsonString(policyData);
159             String uri = request.getRequestURI();
160             ResponseEntity<?> responseEntity = sendToPAP(body, uri, HttpMethod.POST);
161             if(responseEntity != null && responseEntity.getBody().equals(HttpServletResponse.SC_CONFLICT)){
162                 result = "PolicyExists";
163             }else if(responseEntity != null){
164                 result =  responseEntity.getBody().toString();
165                 String policyName = responseEntity.getHeaders().get("policyName").get(0);
166                 if(policyData.isEditPolicy() && "success".equalsIgnoreCase(result)){
167                     PolicyNotificationMail email = new PolicyNotificationMail();
168                     String mode = "EditPolicy";
169                     String watchPolicyName = policyName.replace(".xml", "");
170                     String version = watchPolicyName.substring(watchPolicyName.lastIndexOf('.')+1);
171                     watchPolicyName = watchPolicyName.substring(0, watchPolicyName.lastIndexOf('.')).replace(".", File.separator);
172                     String policyVersionName = watchPolicyName.replace(".", File.separator);
173                     watchPolicyName = watchPolicyName + "." + version + ".xml";
174                     PolicyVersion entityItem = new PolicyVersion();
175                     entityItem.setPolicyName(policyVersionName);
176                     entityItem.setActiveVersion(Integer.parseInt(version));
177                     entityItem.setModifiedBy(userId);
178                     email.sendMail(entityItem, watchPolicyName, mode, commonClassDao);
179                 }
180             }else{
181                 result =  "Response is null from PAP";
182             }
183
184             response.setCharacterEncoding(PolicyController.getCharacterencoding());
185             response.setContentType(PolicyController.getContenttype());
186             request.setCharacterEncoding(PolicyController.getCharacterencoding());
187
188             PrintWriter out = response.getWriter();
189             String responseString = mapper.writeValueAsString(result);
190             JSONObject j = new JSONObject("{policyData: " + responseString + "}");
191             out.write(j.toString());
192         }catch(Exception e){
193             policyLogger.error("Exception Occured while saving policy" , e);
194         }
195     }
196
197
198     private ResponseEntity<?> sendToPAP(String body, String requestURI, HttpMethod method){
199         String papUrl = PolicyController.getPapUrl();
200         String papID = XACMLProperties.getProperty(XACMLRestProperties.PROP_PAP_USERID);
201         String papPass = CryptoUtils.decryptTxtNoExStr(XACMLProperties.getProperty(XACMLRestProperties.PROP_PAP_PASS));
202
203         Base64.Encoder encoder = Base64.getEncoder();
204         String encoding = encoder.encodeToString((papID+":"+papPass).getBytes(StandardCharsets.UTF_8));
205         HttpHeaders headers = new HttpHeaders();
206         headers.set("Authorization", "Basic " + encoding);
207         headers.set("Content-Type", PolicyController.getContenttype());
208
209         RestTemplate restTemplate = new RestTemplate();
210         HttpEntity<?> requestEntity = new HttpEntity<>(body, headers);
211         ResponseEntity<?> result = null;
212         HttpClientErrorException exception = null;
213         String uri = requestURI;
214         if(uri.startsWith("/")){
215             uri = uri.substring(uri.indexOf('/')+1);
216         }
217         uri = "onap" + uri.substring(uri.indexOf('/'));
218         try{
219             result = restTemplate.exchange(papUrl + uri, method, requestEntity, String.class);
220         }catch(Exception e){
221             policyLogger.error(XACMLErrorConstants.ERROR_PROCESS_FLOW + "Error while connecting to " + papUrl, e);
222             exception = new HttpClientErrorException(HttpStatus.INTERNAL_SERVER_ERROR, e.getMessage());
223             if("409 Conflict".equals(e.getMessage())){
224                 return ResponseEntity.ok(HttpServletResponse.SC_CONFLICT);
225             }
226         }
227         if(exception != null && exception.getStatusCode()!=null){
228             if(exception.getStatusCode().equals(HttpStatus.UNAUTHORIZED)){
229                 String message = XACMLErrorConstants.ERROR_PERMISSIONS +":"+exception.getStatusCode()+":" + "ERROR_AUTH_GET_PERM" ;
230                 policyLogger.error(message);
231             }
232             if(exception.getStatusCode().equals(HttpStatus.BAD_REQUEST)){
233                 String message = XACMLErrorConstants.ERROR_DATA_ISSUE + ":"+exception.getStatusCode()+":" + exception.getResponseBodyAsString();
234                 policyLogger.error(message);
235             }
236             if(exception.getStatusCode().equals(HttpStatus.NOT_FOUND)){
237                 String message = XACMLErrorConstants.ERROR_PROCESS_FLOW + "Error while connecting to " + papUrl + exception;
238                 policyLogger.error(message);
239             }
240             String message = XACMLErrorConstants.ERROR_PROCESS_FLOW + ":"+exception.getStatusCode()+":" + exception.getResponseBodyAsString();
241             policyLogger.error(message);
242         }
243         return result;
244     }
245
246     private String callPAP(HttpServletRequest request , String method, String uriValue){
247         String uri = uriValue;
248         String boundary = null;
249         String papUrl = PolicyController.getPapUrl();
250         String papID = XACMLProperties.getProperty(XACMLRestProperties.PROP_PAP_USERID);
251         String papPass = CryptoUtils.decryptTxtNoExStr(XACMLProperties.getProperty(XACMLRestProperties.PROP_PAP_PASS));
252
253         Base64.Encoder encoder = Base64.getEncoder();
254         String encoding = encoder.encodeToString((papID+":"+papPass).getBytes(StandardCharsets.UTF_8));
255         HttpHeaders headers = new HttpHeaders();
256         headers.set("Authorization", "Basic " + encoding);
257         headers.set("Content-Type", PolicyController.getContenttype());
258
259
260         HttpURLConnection connection = null;
261         List<FileItem> items;
262         FileItem item = null;
263         File file = null;
264         if(uri.contains(importDictionary)){
265             try {
266                 items = new ServletFileUpload(new DiskFileItemFactory()).parseRequest(request);
267                 item = items.get(0);
268                 file = new File(item.getName());
269                 String newFile = file.toString();
270                 uri = uri +"&dictionaryName="+newFile;
271             } catch (Exception e2) {
272                 policyLogger.error("Exception Occured while calling PAP with import dictionary request"+e2);
273             }
274         }
275
276         try {
277             URL url = new URL(papUrl + uri);
278             connection = (HttpURLConnection)url.openConnection();
279             connection.setRequestMethod(method);
280             connection.setUseCaches(false);
281             connection.setInstanceFollowRedirects(false);
282             connection.setRequestProperty("Authorization", "Basic " + encoding);
283             connection.setDoOutput(true);
284             connection.setDoInput(true);
285
286             if(!uri.contains("searchPolicy?action=delete&")){
287
288                 if(!(uri.endsWith("set_BRMSParamData") || uri.contains(importDictionary))){
289                     connection.setRequestProperty("Content-Type",PolicyController.getContenttype());
290                     ObjectMapper mapper = new ObjectMapper();
291                     mapper.configure(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES, false);
292                     JsonNode root = getJsonNode(request, mapper);
293
294                     ObjectMapper mapper1 = new ObjectMapper();
295                     mapper1.configure(SerializationFeature.ORDER_MAP_ENTRIES_BY_KEYS, true);
296
297                     Object obj = mapper1.treeToValue(root, Object.class);
298                     String json = mapper1.writeValueAsString(obj);
299
300                     Object content =  new ByteArrayInputStream(json.getBytes());
301
302                     if (content instanceof InputStream) {
303                         // send current configuration
304                         try (OutputStream os = connection.getOutputStream()) {
305                             int count = IOUtils.copy((InputStream) content, os);
306                             if (policyLogger.isDebugEnabled()) {
307                                 policyLogger.debug("copied to output, bytes=" + count);
308                             }
309                         }
310                     }
311                 }else{
312                     if(uri.endsWith("set_BRMSParamData")){
313                         connection.setRequestProperty("Content-Type",PolicyController.getContenttype());
314                         try (OutputStream os = connection.getOutputStream()) {
315                             IOUtils.copy((InputStream) request.getInputStream(), os);
316                         }
317                     }else{
318                         boundary = "===" + System.currentTimeMillis() + "===";
319                         connection.setRequestProperty("Content-Type","multipart/form-data; boundary=" + boundary);
320                         try (OutputStream os = connection.getOutputStream()) {
321                             if(item != null){
322                                 IOUtils.copy((InputStream) item.getInputStream(), os);
323                             }
324                         }
325                     }
326                 }
327             }
328             return doConnect(connection);
329         } catch (Exception e) {
330             policyLogger.error("Exception Occured"+e);
331         }finally{
332             if(file != null && file.exists() && file.delete()){
333                 policyLogger.info("File Deleted Successfully");
334             }
335             if (connection != null) {
336                 try {
337                     // For some reason trying to get the inputStream from the connection
338                     // throws an exception rather than returning null when the InputStream does not exist.
339                     InputStream is = connection.getInputStream();
340                     if (is != null) {
341                         is.close();
342                     }
343                 } catch (IOException ex) {
344                     policyLogger.error(XACMLErrorConstants.ERROR_PROCESS_FLOW + "Failed to close connection: " + ex, ex);
345                 }
346                 connection.disconnect();
347             }
348         }
349         return null;
350     }
351
352     private JsonNode getJsonNode(HttpServletRequest request, ObjectMapper mapper) {
353         JsonNode root = null;
354         try {
355             root = mapper.readTree(request.getReader());
356         }catch (Exception e1) {
357             policyLogger.error("Exception Occured while calling PAP"+e1);
358         }
359         return root;
360     }
361
362     private String doConnect(final HttpURLConnection connection) throws IOException{
363         connection.connect();
364         int responseCode = connection.getResponseCode();
365         if(responseCode == 200){
366             // get the response content into a String
367             String responseJson = null;
368             // read the inputStream into a buffer (trick found online scans entire input looking for end-of-file)
369             try(java.util.Scanner scanner = new java.util.Scanner(connection.getInputStream())) {
370                 scanner.useDelimiter("\\A");
371                 responseJson = scanner.hasNext() ? scanner.next() : "";
372             } catch (Exception e){
373                 //Reason for rethrowing the exception is if any exception occurs during reading of inputsteam
374                 //then the exception handling is done by the outer block without returning the response immediately
375                 //Also finally block is existing only in outer block and not here so all exception handling is
376                 //done in only one place
377                 policyLogger.error("Exception Occured"+e);
378                 throw e;
379             }
380
381             policyLogger.info("JSON response from PAP: " + responseJson);
382             return responseJson;
383         }
384         return null;
385     }
386
387     @RequestMapping(value={"/getDictionary/*"}, method={RequestMethod.GET})
388     public void getDictionaryController(HttpServletRequest request, HttpServletResponse response){
389         String uri = request.getRequestURI().replace("/getDictionary", "");
390         String body;
391         ResponseEntity<?> responseEntity = sendToPAP(null, uri, HttpMethod.GET);
392         if(responseEntity != null){
393             body = responseEntity.getBody().toString();
394         }else{
395             body = "";
396         }
397         try {
398             response.getWriter().write(body);
399         } catch (IOException e) {
400             policyLogger.error("Exception occured while getting Dictionary entries", e);
401         }
402     }
403
404     @RequestMapping(value={"/saveDictionary/*/*"}, method={RequestMethod.POST})
405     public void saveDictionaryController(HttpServletRequest request, HttpServletResponse response) throws IOException{
406         String userId = "";
407         String uri = request.getRequestURI().replace("/saveDictionary", "");
408         if(uri.startsWith("/")){
409             uri = uri.substring(uri.indexOf('/')+1);
410         }
411         uri = "/onap" + uri.substring(uri.indexOf('/'));
412         if(uri.contains(importDictionary)){
413             userId = UserUtils.getUserSession(request).getOrgUserId();
414             uri = uri+ "?userId=" +userId;
415         }
416
417         policyLogger.info("****************************************Logging UserID while Saving Dictionary*****************************************************");
418         policyLogger.info("UserId:  " + userId);
419         policyLogger.info("***********************************************************************************************************************************");
420
421         String body = callPAP(request, "POST", uri.replaceFirst("/", "").trim());
422         if(body != null && !body.isEmpty()){
423             response.getWriter().write(body);
424         }else{
425             response.getWriter().write("Failed");
426         }
427     }
428
429     @RequestMapping(value={"/deleteDictionary/*/*"}, method={RequestMethod.POST})
430     public void deletetDictionaryController(HttpServletRequest request, HttpServletResponse response) throws IOException {
431         String uri = request.getRequestURI().replace("/deleteDictionary", "");
432         if(uri.startsWith("/")){
433             uri = uri.substring(uri.indexOf('/')+1);
434         }
435         uri = "/onap" + uri.substring(uri.indexOf('/'));
436
437         String userId = UserUtils.getUserSession(request).getOrgUserId();
438         policyLogger.info("****************************************Logging UserID while Deleting Dictionary*****************************************************");
439         policyLogger.info("UserId:  " + userId);
440         policyLogger.info("*************************************************************************************************************************************");
441
442         String body = callPAP(request, "POST", uri.replaceFirst("/", "").trim());
443         if(body != null && !body.isEmpty()){
444             response.getWriter().write(body);
445         }else{
446             response.getWriter().write("Failed");
447         }
448     }
449
450     @RequestMapping(value={"/searchDictionary"}, method={RequestMethod.POST})
451     public ModelAndView searchDictionaryController(HttpServletRequest request, HttpServletResponse response) throws IOException {
452         Object resultList;
453         String uri = request.getRequestURI();
454         if(uri.startsWith("/")){
455             uri = uri.substring(uri.indexOf('/')+1);
456         }
457         uri = "/onap" + uri.substring(uri.indexOf('/'));
458         try{
459             String body = callPAP(request, "POST", uri.replaceFirst("/", "").trim());
460             if(body.contains("CouldNotConnectException")){
461                 List<String> data = new ArrayList<>();
462                 data.add("Elastic Search Server is down");
463                 resultList = data;
464             }else{
465                 JSONObject json = new JSONObject(body);
466                 resultList = json.get("policyresult");
467             }
468         }catch(Exception e){
469             policyLogger.error(XACMLErrorConstants.ERROR_PROCESS_FLOW + "Exception Occured while querying Elastic Search: " + e);
470             List<String> data = new ArrayList<>();
471             data.add("Elastic Search Server is down");
472             resultList = data;
473         }
474
475         response.setCharacterEncoding(PolicyController.getCharacterencoding());
476         response.setContentType(PolicyController.getContenttype());
477         PrintWriter out = response.getWriter();
478         JSONObject j = new JSONObject("{result: " + resultList + "}");
479         out.write(j.toString());
480         return null;
481     }
482
483     @RequestMapping(value={"/searchPolicy"}, method={RequestMethod.POST})
484     public ModelAndView searchPolicy(HttpServletRequest request, HttpServletResponse response) throws IOException{
485         Object resultList;
486         String uri = request.getRequestURI()+"?action=search";
487         if(uri.startsWith("/")){
488             uri = uri.substring(uri.indexOf('/')+1);
489         }
490         uri = "/onap" + uri.substring(uri.indexOf('/'));
491         String body = callPAP(request, "POST", uri.replaceFirst("/", "").trim());
492
493         JSONObject json = new JSONObject(body);
494         try{
495             resultList = json.get("policyresult");
496         }catch(Exception e){
497             List<String> data = new ArrayList<>();
498             resultList = json.get("data");
499             data.add("Exception");
500             data.add(resultList.toString());
501             resultList = data;
502             policyLogger.error("Exception Occured while searching for Policy in Elastic Database" +e);
503         }
504
505         response.setCharacterEncoding("UTF-8");
506         response.setContentType("application / json");
507         request.setCharacterEncoding("UTF-8");
508
509         PrintWriter out = response.getWriter();
510         JSONObject j = new JSONObject("{result: " + resultList + "}");
511         out.write(j.toString());
512         return null;
513     }
514
515     public void deleteElasticData(String fileName){
516         String uri = "searchPolicy?action=delete&policyName='"+fileName+"'";
517         callPAP(null, "POST", uri.trim());
518     }
519
520     public String notifyOtherPAPSToUpdateConfigurations(String mode, String newName, String oldName){
521         String uri = "onap/notifyOtherPAPs?action="+mode+"&newPolicyName="+newName+"&oldPolicyName="+oldName+"";
522         return callPAP(null, "POST", uri.trim());
523     }
524
525 }