Update aaf client module

Remove aaf submodules and update aaf client
module.

Issue-id: AAF-21
Change-Id: I750ec9e26596652a142b014db94aabd082880130
Signed-off-by: sg481n <sg481n@att.com>

1 files changed, 0 insertions, 596 deletions

diff --git a/authz-defOrg/src/main/java/com/osaaf/defOrg/DefaultOrg.java b/authz-defOrg/src/main/java/com/osaaf/defOrg/DefaultOrg.java
deleted file mode 100644
index fc252604..00000000
--- a/authz-defOrg/src/main/java/com/osaaf/defOrg/DefaultOrg.java
+++ /dev/null
@@ -1,596 +0,0 @@
-/*******************************************************************************

- * ============LICENSE_START====================================================

- * * org.onap.aaf

- * * ===========================================================================

- * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.

- * * ===========================================================================

- * * Licensed under the Apache License, Version 2.0 (the "License");

- * * you may not use this file except in compliance with the License.

- * * You may obtain a copy of the License at

- * * 

- *  *      http://www.apache.org/licenses/LICENSE-2.0

- * * 

- *  * Unless required by applicable law or agreed to in writing, software

- * * distributed under the License is distributed on an "AS IS" BASIS,

- * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

- * * See the License for the specific language governing permissions and

- * * limitations under the License.

- * * ============LICENSE_END====================================================

- * *

- * * ECOMP is a trademark and service mark of AT&T Intellectual Property.

- * *

- ******************************************************************************/

-package com.osaaf.defOrg;

-

-import java.io.File;

-import java.io.IOException;

-import java.util.ArrayList;

-import java.util.Date;

-import java.util.GregorianCalendar;

-import java.util.HashSet;

-import java.util.List;

-import java.util.Set;

-

-import javax.mail.Address;

-import javax.mail.Message;

-import javax.mail.MessagingException;

-import javax.mail.Session;

-import javax.mail.Transport;

-import javax.mail.internet.InternetAddress;

-import javax.mail.internet.MimeMessage;

-

-import com.att.authz.env.AuthzEnv;

-import com.att.authz.env.AuthzTrans;

-import com.att.authz.org.EmailWarnings;

-import com.att.authz.org.Executor;

-import com.att.authz.org.Organization;

-import com.att.authz.org.OrganizationException;

-import com.osaaf.defOrg.Identities.Data;

-

-public class DefaultOrg implements Organization {

-	private static final String PROPERTY_IS_REQUIRED = " property is Required";

-	private static final String DOMAIN = "osaaf.com";

-	private static final String REALM = "com.osaaf";

-	private static final String NAME = "Default Organization";

-	private static final String NO_PASS = NAME + " does not support Passwords.  Use AAF";

-	private final String mailHost,mailFromUserId,supportAddress;

-	private String SUFFIX;

-	// Possible ID Pattern

-	private static final String ID_PATTERN = "a-z[a-z0-9]{5-8}@.*";

-

-	public DefaultOrg(AuthzEnv env) throws OrganizationException {

-		String s;

-		mailHost = env.getProperty(s=(REALM + ".mailHost"), null);

-		if(mailHost==null) {

-			throw new OrganizationException(s + PROPERTY_IS_REQUIRED);

-		}

-		supportAddress = env.getProperty(s=(REALM + ".supportEmail"), null);

-		if(supportAddress==null) {

-			throw new OrganizationException(s + PROPERTY_IS_REQUIRED);

-		}

-		

-		String temp = env.getProperty(s=(REALM + ".mailFromUserId"), null);

-		mailFromUserId = temp==null?supportAddress:temp;

-

-		System.getProperties().setProperty("mail.smtp.host",mailHost);

-		System.getProperties().setProperty("mail.user", mailFromUserId);

-		// Get the default Session object.

-		session = Session.getDefaultInstance(System.getProperties());

-

-		SUFFIX='.'+getDomain();

-		

-		try {

-			String defFile;

-			temp=env.getProperty(defFile = (getClass().getName()+".file"));

-			File fIdentities=null;

-			if(temp==null) {

-				temp = env.getProperty("aaf_data_dir");

-				if(temp!=null) {

-					env.warn().log(defFile, "is not defined. Using default: ",temp+"/identities.dat");

-					File dir = new File(temp);

-					fIdentities=new File(dir,"identities.dat");

-					if(!fIdentities.exists()) {

-						env.warn().log("No",fIdentities.getCanonicalPath(),"exists.  Creating.");

-						if(!dir.exists()) {

-							dir.mkdirs();

-						}

-						fIdentities.createNewFile();

-					}

-				}

-			} else {

-				fIdentities = new File(temp);

-				if(!fIdentities.exists()) {

-					String dataDir = env.getProperty("aaf_data_dir");

-					if(dataDir!=null) {

-						fIdentities = new File(dataDir,temp);

-					}

-				}

-			}

-			

-			if(fIdentities!=null && fIdentities.exists()) {

-				identities = new Identities(fIdentities);

-			} else {

-				throw new OrganizationException(fIdentities.getCanonicalPath() + " does not exist.");

-			}

-		} catch (IOException e) {

-			throw new OrganizationException(e);

-		}

-	}

-	

-	// Implement your own Delegation System

-	static final List<String> NULL_DELEGATES = new ArrayList<String>();

-

-	public Identities identities;

-	private boolean dryRun;

-	private Session session;

-	public enum Types {Employee, Contractor, Application, NotActive};

-	private final static Set<String> typeSet;

-	

-	static {

-		typeSet = new HashSet<String>();

-		for(Types t : Types.values()) {

-			typeSet.add(t.name());

-		}

-	}

-	

-	private static final EmailWarnings emailWarnings = new DefaultOrgWarnings();

-

-	@Override

-	public String getName() {

-		return NAME;

-	}

-

-	@Override

-	public String getRealm() {

-		return REALM;

-	}

-

-	@Override

-	public String getDomain() {

-		return DOMAIN;

-	}

-

-	@Override

-	public DefaultOrgIdentity getIdentity(AuthzTrans trans, String id) throws OrganizationException {

-		return new DefaultOrgIdentity(trans,id,this);

-	}

-

-	// Note: Return a null if found; return a String Message explaining why not found. 

-	@Override

-	public String isValidID(String id) {

-		Data data;

-		try {

-			data = identities.find(id, identities.reuse());

-		} catch (IOException e) {

-			return getName() + " could not lookup " + id + ": " + e.getLocalizedMessage();

-		}

-		return data==null?id + "is not an Identity in " + getName():null;

-	}

-

-	@Override

-	public String isValidPassword(String user, String password, String... prev) {

-		// If you have an Organization user/Password scheme, use here, otherwise, just use AAF

-		return NO_PASS;

-	}

-

-	@Override

-	public Set<String> getIdentityTypes() {

-		return typeSet;

-	}

-

-	@Override

-	public Response notify(AuthzTrans trans, Notify type, String url, String[] identities, String[] ccs, String summary, Boolean urgent) {

-		String system = trans.getProperty("CASS_ENV", "");

-

-		ArrayList<String> toList = new ArrayList<String>();

-		Identity identity;

-		if (identities != null) {

-			for (String user : identities) {

-				try {

-					identity = getIdentity(trans, user);

-					if (identity == null) {

-						trans.error().log(

-								"Failure to obtain User " + user + " for "

-										+ getName());

-					} else {

-						toList.add(identity.email());

-					}

-				} catch (Exception e) {

-					trans.error().log(

-							e,

-							"Failure to obtain User " + user + " for "

-									+ getName());

-				}

-			}

-		}

-

-		if (toList.isEmpty()) {

-			trans.error().log("No Users listed to email");

-			return Response.ERR_NotificationFailure;

-		}

-

-		ArrayList<String> ccList = new ArrayList<String>();

-

-		// If we're sending an urgent email, CC the user's supervisor

-		//

-		if (urgent) {

-			trans.info().log("urgent msg for: " + identities[0]);

-			try {

-				List<Identity> supervisors = getApprovers(trans, identities[0]);

-				for (Identity us : supervisors) {

-					trans.info().log("supervisor: " + us.email());

-					ccList.add(us.email());

-				}

-			} catch (Exception e) {

-				trans.error().log(e,

-						"Failed to find supervisor for  " + identities[0]);

-			}

-		}

-

-		if (ccs != null) {

-			for (String user : ccs) {

-				try {

-					identity = getIdentity(trans, user);

-					ccList.add(identity.email());

-				} catch (Exception e) {

-					trans.error().log(

-							e,

-							"Failure to obtain User " + user + " for "

-									+ getName());

-				}

-			}

-		}

-

-		if (summary == null) {

-			summary = "";

-		}

-

-		switch (type) {

-		case Approval:

-			try {

-				sendEmail(trans, toList, ccList,

-						"AAF Approval Notification "

-								+ (system.length() == 0 ? "" : "(ENV: "

-										+ system + ")"),

-						"AAF is the "

-						+ NAME

-						+ "System for Fine-Grained Authorizations.  You are being asked to Approve"

-								+ (system.length() == 0 ? "" : " in the "

-										+ system + " environment")

-								+ " before AAF Actions can be taken.\n\n"

-								+ "Please follow this link: \n\n\t" + url

-								+ "\n\n" + summary, urgent);

-			} catch (Exception e) {

-				trans.error().log(e, "Failure to send Email");

-				return Response.ERR_NotificationFailure;

-			}

-			break;

-		case PasswordExpiration:

-			try {

-				sendEmail(trans,

-						toList,

-						ccList,

-						"AAF Password Expiration Warning "

-								+ (system.length() == 0 ? "" : "(ENV: "

-										+ system + ")"),

-						"AAF is the "

-						+ NAME

-						+ " System for Authorizations.\n\nOne or more passwords will expire soon or have expired"

-								+ (system.length() == 0 ? "" : " in the "

-										+ system + " environment")

-								+ ".\n\nPasswords expired for more than 30 days without action are subject to deletion.\n\n"

-								+ "Please follow each link to add a New Password with Expiration Date. Either are valid until expiration. "

-								+ "Use this time to change the passwords on your system. If issues, reply to this email.\n\n"

-								+ summary, urgent);

-			} catch (Exception e) {

-				trans.error().log(e, "Failure to send Email");

-				return Response.ERR_NotificationFailure;

-			}

-			break;

-

-		case RoleExpiration:

-			try {

-				sendEmail(

-						trans,

-						toList,

-						ccList,

-						"AAF Role Expiration Warning "

-								+ (system.length() == 0 ? "" : "(ENV: "

-										+ system + ")"),

-						"AAF is the "

-						+ NAME

-						+ " System for Authorizations. One or more roles will expire soon"

-								+ (system.length() == 0 ? "" : " in the "

-										+ system + " environment")

-								+ ".\n\nRoles expired for more than 30 days are subject to deletion."

-								+ "Please follow this link the GUI Command line, and either 'extend' or 'del' the user in the role.\n"

-								+ "If issues, reply to this email.\n\n\t" + url

-								+ "\n\n" + summary, urgent);

-			} catch (Exception e) {

-				trans.error().log(e, "Failure to send Email");

-				return Response.ERR_NotificationFailure;

-			}

-			break;

-		default:

-			return Response.ERR_NotImplemented;

-		}

-		return Response.OK;

-	}

-

-	@Override

-	public int sendEmail(AuthzTrans trans, List<String> toList, List<String> ccList, String subject, String body,

-			Boolean urgent) throws OrganizationException {

-		int status = 1;

-		

-		List<String> to = new ArrayList<String>();

-		for(String em : toList) {

-			if(em.indexOf('@')<0) {

-				to.add(new DefaultOrgIdentity(trans, em, this).email());

-			} else {

-				to.add(em);

-			}

-		}

-		

-		List<String> cc = new ArrayList<String>();

-		if(ccList!=null && !ccList.isEmpty()) {

-			for(String em : ccList) {

-				if(em.indexOf('@')<0) {

-					cc.add(new DefaultOrgIdentity(trans, em, this).email());

-				} else {

-					cc.add(em);

-				}

-			}

-		}

-		

-	

-		// for now, I want all emails so we can see what goes out. Remove later

-		if (!ccList.contains(supportAddress)) {

-			ccList.add(supportAddress);

-		}

-

-		try {

-			// Create a default MimeMessage object.

-			MimeMessage message = new MimeMessage(session);

-

-			// Set From: header field of the header.

-			message.setFrom(new InternetAddress(mailFromUserId));

-

-			if (!dryRun) {

-				// Set To: header field of the header. This is a required field

-				// and calling module should make sure that it is not null or

-				// blank

-				message.addRecipients(Message.RecipientType.TO,

-						getAddresses(to));

-

-				// Set CC: header field of the header.

-				if ((ccList != null) && (ccList.size() > 0)) {

-					message.addRecipients(Message.RecipientType.CC,

-							getAddresses(cc));

-				}

-

-				// Set Subject: header field

-				message.setSubject(subject);

-

-				if (urgent) {

-					message.addHeader("X-Priority", "1");

-				}

-

-				// Now set the actual message

-				message.setText(body);

-			} else {

-				// override recipients

-				message.addRecipients(Message.RecipientType.TO,

-						InternetAddress.parse(supportAddress));

-

-				// Set Subject: header field

-				message.setSubject("[TESTMODE] " + subject);

-

-				if (urgent) {

-					message.addHeader("X-Priority", "1");

-				}

-

-				ArrayList<String> newBody = new ArrayList<String>();

-

-				Address temp[] = getAddresses(to);

-				String headerString = "TO:\t" + InternetAddress.toString(temp)

-						+ "\n";

-

-				temp = getAddresses(cc);

-				headerString += "CC:\t" + InternetAddress.toString(temp) + "\n";

-

-				newBody.add(headerString);

-

-				newBody.add("Text: \n");

-

-				newBody.add(body);

-				String outString = "";

-				for (String s : newBody) {

-					outString += s + "\n";

-				}

-

-				message.setText(outString);

-			}

-			// Send message

-			Transport.send(message);

-			status = 0;

-

-		} catch (MessagingException mex) {

-			throw new OrganizationException("Exception send email message "

-					+ mex.getMessage());

-		}

-

-		return status;	

-	}

-

-	/**

-	 * Default Policy is to set to 6 Months for Notification Types.

-	 * add others/change as required

-	 */

-	@Override

-	public Date whenToValidate(Notify type, Date lastValidated) {

-		switch(type) {

-			case Approval:

-			case PasswordExpiration:

-				return null;

-			default:

-				GregorianCalendar gc = new GregorianCalendar();

-				gc.setTime(lastValidated);

-				gc.add(GregorianCalendar.MONTH, 6);  // 6 month policy

-				return gc.getTime();

-		}

-	}

-

-	@Override

-	public GregorianCalendar expiration(GregorianCalendar gc, Expiration exp, String... extra) {

-        GregorianCalendar rv = gc==null?new GregorianCalendar():(GregorianCalendar)gc.clone();

-		switch (exp) {

-			case ExtendPassword:

-				// Extending Password give 5 extra days

-				rv.add(GregorianCalendar.DATE, 5);

-				break;

-			case Future:

-				// Future Requests last 15 days before subject to deletion.

-				rv.add(GregorianCalendar.DATE, 15);

-				break;

-			case Password:

-				// Passwords expire in 90 days

-				rv.add(GregorianCalendar.DATE, 90);

-				break;

-			case TempPassword:

-				// Temporary Passwords last for 12 hours.

-				rv.add(GregorianCalendar.HOUR, 12);

-				break;

-			case UserDelegate:

-				// Delegations expire max in 2 months

-				rv.add(GregorianCalendar.MONTH, 2);

-				break;

-			case UserInRole:

-				// Roles expire in 6 months

-				rv.add(GregorianCalendar.MONTH, 6);

-				break;

-			default:

-				// Unless other wise set, 6 months is default

-				rv.add(GregorianCalendar.MONTH, 6);

-				break;

-		}

-		return rv;

-	}

-

-	@Override

-	public EmailWarnings emailWarningPolicy() {

-		return emailWarnings;

-	}

-

-	/**

-	 * Assume the Supervisor is the Approver.

-	 */

-	@Override

-	public List<Identity> getApprovers(AuthzTrans trans, String user) throws OrganizationException {

-		Identity orgIdentity = getIdentity(trans, user);

-		List<Identity> orgIdentitys = new ArrayList<Identity>();

-		if(orgIdentity!=null) {

-			String supervisorID = orgIdentity.responsibleTo();

-			if (supervisorID.indexOf('@') < 0) {

-			    supervisorID += getDomain();

-			}

-			Identity supervisor = getIdentity(trans, supervisorID);

-			orgIdentitys.add(supervisor);

-		}

-		return orgIdentitys;	

-	}

-

-	@Override

-	public String getApproverType() {

-		return "supervisor";

-	}

-

-	@Override

-	public int startOfDay() {

-		// TODO Auto-generated method stub

-		return 0;

-	}

-

-	@Override

-	public boolean canHaveMultipleCreds(String id) {

-		// External entities are likely mono-password... if you change it, it is a global change.

-		// This is great for people, but horrible for Applications.  

-		//

-		// AAF's Password can have multiple Passwords, each with their own Expiration Date.

-		// For Default Org, we'll assume true for all, but when you add your external

-		// Identity stores, you need to return "false" if they cannot support multiple Passwords like AAF

-		return true;

-	}

-

-	@Override

-	public boolean isValidCred(String id) {

-		if(id.endsWith(SUFFIX)) {

-			return true;

-		}

-		return id.matches(ID_PATTERN);

-	}

-

-	@Override

-	public String validate(AuthzTrans trans, Policy policy, Executor executor, String... vars) throws OrganizationException {

-		switch(policy) {

-			case OWNS_MECHID:

-			case CREATE_MECHID:

-				if(vars.length>0) {

-					Identity requestor = getIdentity(trans, trans.user());

-					if(requestor!=null) {

-						Identity mechid = getIdentity(trans, vars[0]);

-						if(requestor.equals(mechid.owner())) {

-							return null;

-						}

-					}

-				}

-				return trans.user() + " is not the Sponsor of MechID " + vars[0];

-				

-			case CREATE_MECHID_BY_PERM_ONLY:

-				return getName() + " only allows sponsors to create MechIDs";

-				

-			default:

-				return policy.name() + " is unsupported at " + getName();

-		}	

-	}

-

-	@Override

-	public boolean isTestEnv() {

-		return false;

-	}

-

-	@Override

-	public void setTestMode(boolean dryRun) {

-		this.dryRun = dryRun;

-	}

-

-	/**

-	 * Convert the delimiter String into Internet addresses with the default

-	 * delimiter of ";"

-	 * @param strAddress

-	 * @return

-	 */

-	private Address[] getAddresses(List<String> strAddress) throws OrganizationException {

-		return this.getAddresses(strAddress,";");

-	}

-	/**

-	 * Convert the delimiter String into Internet addresses with the 

-	 * delimiter of provided

-	 * @param strAddress

-	 * @param delimiter

-	 * @return

-	 */

-	private Address[] getAddresses(List<String> strAddresses, String delimiter) throws OrganizationException {

-		Address[] addressArray = new Address[strAddresses.size()];

-		int count = 0;

-		for (String addr : strAddresses)

-		{

-            try{

-            	addressArray[count] = new InternetAddress(addr);

-            	count++;

-            }catch(Exception e){

-            	throw new OrganizationException("Failed to parse the email address "+ addr +": "+e.getMessage());

-            }

-        }

-        return addressArray;

-	}

-}