ecomp-portal-BE-common/src/main/java/org/onap/portalapp/portal/service/BasicAuthenticationCredentialServiceImpl.java

   1 /*-
   2  * ============LICENSE_START==========================================
   3  * ONAP Portal
   4  * ===================================================================
   5  * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
   6  * ===================================================================
   7  *
   8  * Unless otherwise specified, all software contained herein is licensed
   9  * under the Apache License, Version 2.0 (the "License");
  10  * you may not use this software except in compliance with the License.
  11  * You may obtain a copy of the License at
  12  *
  13  *             http://www.apache.org/licenses/LICENSE-2.0
  14  *
  15  * Unless required by applicable law or agreed to in writing, software
  16  * distributed under the License is distributed on an "AS IS" BASIS,
  17  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  18  * See the License for the specific language governing permissions and
  19  * limitations under the License.
  20  *
  21  * Unless otherwise specified, all documentation contained herein is licensed
  22  * under the Creative Commons License, Attribution 4.0 Intl. (the "License");
  23  * you may not use this documentation except in compliance with the License.
  24  * You may obtain a copy of the License at
  25  *
  26  *             https://creativecommons.org/licenses/by/4.0/
  27  *
  28  * Unless required by applicable law or agreed to in writing, documentation
  29  * distributed under the License is distributed on an "AS IS" BASIS,
  30  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  31  * See the License for the specific language governing permissions and
  32  * limitations under the License.
  33  *
  34  * ============LICENSE_END============================================
  35  *
  36  *
  37  */
  38 package org.onap.portalapp.portal.service;
  39
  40 import java.util.ArrayList;
  41 import java.util.List;
  42
  43 import org.hibernate.criterion.Criterion;
  44 import org.hibernate.criterion.Restrictions;
  45 import org.onap.portalapp.portal.domain.BasicAuthCredentials;
  46 import org.onap.portalapp.portal.domain.EPEndpoint;
  47 import org.onap.portalapp.portal.domain.EPEndpointAccount;
  48 import org.onap.portalapp.portal.logging.aop.EPMetricsLog;
  49 import org.onap.portalsdk.core.logging.logic.EELFLoggerDelegate;
  50 import org.onap.portalsdk.core.onboarding.exception.CipherUtilException;
  51 import org.onap.portalsdk.core.onboarding.util.CipherUtil;
  52 import org.onap.portalsdk.core.service.DataAccessService;
  53 import org.springframework.beans.factory.annotation.Autowired;
  54 import org.springframework.context.annotation.EnableAspectJAutoProxy;
  55 import org.springframework.stereotype.Service;
  56
  57 @Service("basicAuthenticationCredentialService")
  58 @EnableAspectJAutoProxy
  59 @EPMetricsLog
  60 public class BasicAuthenticationCredentialServiceImpl implements BasicAuthenticationCredentialService {
  61
  62         private EELFLoggerDelegate logger = EELFLoggerDelegate.getLogger(BasicAuthenticationCredentialServiceImpl.class);
  63
  64         @Autowired
  65         private DataAccessService dataAccessService;
  66
  67         @Override
  68         public BasicAuthCredentials getBasicAuthCredentialByUsernameAndPassword(String username, String password) {
  69
  70                 List<Criterion> restrictionsList = new ArrayList<Criterion>();
  71                 Criterion contextUserNameCrit = Restrictions.eq("username", username);
  72                 restrictionsList.add(contextUserNameCrit);
  73
  74                 @SuppressWarnings("unchecked")
  75                 List<BasicAuthCredentials> credList = (List<BasicAuthCredentials>) dataAccessService
  76                                 .getList(BasicAuthCredentials.class, null, restrictionsList, null);
  77                 if (credList ==null || credList.isEmpty()) {
  78                         logger.error(EELFLoggerDelegate.errorLogger,
  79                                         "getBasicAuthCredentialByAppName: no credential(s) for " + username);
  80                         return null;
  81                 }
  82                 logger.debug(EELFLoggerDelegate.debugLogger,
  83                                 "getBasicAuthCredentialByAppName: cred list size: " + credList.size());
  84                 BasicAuthCredentials cred = null;
  85                 for (BasicAuthCredentials basicAuthCredentials  : credList) {
  86                         try {
  87                                 final String dbDecryptedPwd = CipherUtil.decryptPKC(basicAuthCredentials.getPassword());
  88                                 if (dbDecryptedPwd.equals(password)) {
  89                                         cred= (BasicAuthCredentials) basicAuthCredentials;
  90                             break;
  91                         }
  92                         } catch (CipherUtilException e) {
  93                                 logger.error(EELFLoggerDelegate.errorLogger, "getBasicAuthCredentialByUsernameAndPassword() failed", e);
  94                         }
  95
  96             }
  97                  if (cred!=null && cred.getId()!=null)
  98                 cred.setEndpoints(getEndpointsByAccountId(cred.getId()));
  99                 return cred;
 100         }
 101
 102         private List<EPEndpoint> getEndpointsByAccountId(long id) {
 103                 List<EPEndpoint> list = new ArrayList<>();
 104                 List<Criterion> restrictionsList = new ArrayList<Criterion>();
 105                 Criterion contextIdCrit = Restrictions.eq("account_id", id);
 106                 restrictionsList.add(contextIdCrit);
 107                 @SuppressWarnings("unchecked")
 108                 List<EPEndpointAccount> epList = (List<EPEndpointAccount>) dataAccessService.getList(EPEndpointAccount.class,
 109                                 null, restrictionsList, null);
 110                 for (EPEndpointAccount ep : epList) {
 111                         list.add((EPEndpoint) dataAccessService.getDomainObject(EPEndpoint.class, ep.getEp_id(), null));
 112                 }
 113                 return list;
 114         }
 115
 116 }