ecomp-portal-BE-common/src/main/java/org/onap/portalapp/portal/service/BasicAuthenticationCredentialServiceImpl.java

   1 /*-
   2  * ============LICENSE_START==========================================
   3  * ONAP Portal
   4  * ===================================================================
   5  * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved.
   6  * ===================================================================
   7  *
   8  * Unless otherwise specified, all software contained herein is licensed
   9  * under the Apache License, Version 2.0 (the "License");
  10  * you may not use this software except in compliance with the License.
  11  * You may obtain a copy of the License at
  12  *
  13  *             http://www.apache.org/licenses/LICENSE-2.0
  14  *
  15  * Unless required by applicable law or agreed to in writing, software
  16  * distributed under the License is distributed on an "AS IS" BASIS,
  17  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  18  * See the License for the specific language governing permissions and
  19  * limitations under the License.
  20  *
  21  * Unless otherwise specified, all documentation contained herein is licensed
  22  * under the Creative Commons License, Attribution 4.0 Intl. (the "License");
  23  * you may not use this documentation except in compliance with the License.
  24  * You may obtain a copy of the License at
  25  *
  26  *             https://creativecommons.org/licenses/by/4.0/
  27  *
  28  * Unless required by applicable law or agreed to in writing, documentation
  29  * distributed under the License is distributed on an "AS IS" BASIS,
  30  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  31  * See the License for the specific language governing permissions and
  32  * limitations under the License.
  33  *
  34  * ============LICENSE_END============================================
  35  *
  36  * ECOMP is a trademark and service mark of AT&T Intellectual Property.
  37  */
  38 package org.onap.portalapp.portal.service;
  39
  40 import java.util.ArrayList;
  41 import java.util.List;
  42
  43 import org.hibernate.criterion.Criterion;
  44 import org.hibernate.criterion.Restrictions;
  45 import org.onap.portalapp.portal.domain.BasicAuthCredentials;
  46 import org.onap.portalapp.portal.domain.EPEndpoint;
  47 import org.onap.portalapp.portal.domain.EPEndpointAccount;
  48 import org.onap.portalapp.portal.logging.aop.EPMetricsLog;
  49 import org.onap.portalsdk.core.logging.logic.EELFLoggerDelegate;
  50 import org.onap.portalsdk.core.onboarding.exception.CipherUtilException;
  51 import org.onap.portalsdk.core.onboarding.util.CipherUtil;
  52 import org.onap.portalsdk.core.service.DataAccessService;
  53 import org.onap.portalsdk.core.util.SystemProperties;
  54 import org.springframework.beans.factory.annotation.Autowired;
  55 import org.springframework.context.annotation.EnableAspectJAutoProxy;
  56 import org.springframework.stereotype.Service;
  57
  58 @Service("basicAuthenticationCredentialService")
  59 @EnableAspectJAutoProxy
  60 @EPMetricsLog
  61 public class BasicAuthenticationCredentialServiceImpl implements BasicAuthenticationCredentialService {
  62
  63         private EELFLoggerDelegate logger = EELFLoggerDelegate.getLogger(BasicAuthenticationCredentialServiceImpl.class);
  64
  65         @Autowired
  66         private DataAccessService dataAccessService;
  67
  68         @Override
  69         public BasicAuthCredentials getBasicAuthCredentialByUsernameAndPassword(String username, String password) {
  70
  71                 List<Criterion> restrictionsList = new ArrayList<Criterion>();
  72                 Criterion contextUserNameCrit = Restrictions.eq("username", username);
  73                 restrictionsList.add(contextUserNameCrit);
  74
  75                 @SuppressWarnings("unchecked")
  76                 List<BasicAuthCredentials> credList = (List<BasicAuthCredentials>) dataAccessService
  77                                 .getList(BasicAuthCredentials.class, null, restrictionsList, null);
  78                 if (credList ==null || credList.isEmpty()) {
  79                         logger.error(EELFLoggerDelegate.errorLogger,
  80                                         "getBasicAuthCredentialByAppName: no credential(s) for " + username);
  81                         return null;
  82                 }
  83                 logger.debug(EELFLoggerDelegate.debugLogger,
  84                                 "getBasicAuthCredentialByAppName: cred list size: " + credList.size());
  85                 BasicAuthCredentials cred = null;
  86                 for (BasicAuthCredentials basicAuthCredentials  : credList) {
  87                         try {
  88                                 final String dbDecryptedPwd = CipherUtil.decryptPKC(basicAuthCredentials.getPassword());
  89                                 if (dbDecryptedPwd.equals(password)) {
  90                                         cred= (BasicAuthCredentials) basicAuthCredentials;
  91                             break;
  92                         }
  93                         } catch (CipherUtilException e) {
  94                                 logger.error(EELFLoggerDelegate.errorLogger, "getBasicAuthCredentialByUsernameAndPassword() failed", e);
  95                         }
  96
  97             }
  98                  if (cred!=null && cred.getId()!=null)
  99                 cred.setEndpoints(getEndpointsByAccountId(cred.getId()));
 100                 return cred;
 101         }
 102
 103         private List<EPEndpoint> getEndpointsByAccountId(long id) {
 104                 List<EPEndpoint> list = new ArrayList<>();
 105                 List<Criterion> restrictionsList = new ArrayList<Criterion>();
 106                 Criterion contextIdCrit = Restrictions.eq("account_id", id);
 107                 restrictionsList.add(contextIdCrit);
 108                 @SuppressWarnings("unchecked")
 109                 List<EPEndpointAccount> epList = (List<EPEndpointAccount>) dataAccessService.getList(EPEndpointAccount.class,
 110                                 null, restrictionsList, null);
 111                 for (EPEndpointAccount ep : epList) {
 112                         list.add((EPEndpoint) dataAccessService.getDomainObject(EPEndpoint.class, ep.getEp_id(), null));
 113                 }
 114                 return list;
 115         }
 116
 117 }