From 62c4eb45e157d502463d797c1353802ca8e1e307 Mon Sep 17 00:00:00 2001
From: sg481n <sg481n@att.com>
Date: Fri, 25 Aug 2017 01:57:24 -0400
Subject: Update project structure for aaf/cadi

Update project structure from com.att to org.onap
and add distribution management and staging plugin.

Issue-id: AAF-22
Change-Id: Idf2b591139e38921ad28782a51486714a05dee92
Signed-off-by: sg481n <sg481n@att.com>
---
 .../onap/aaf/cadi/aaf/v2_0/AAFTrustChecker.java    | 116 +++++++++++++++++++++
 1 file changed, 116 insertions(+)
 create mode 100644 aaf/src/main/java/org/onap/aaf/cadi/aaf/v2_0/AAFTrustChecker.java

(limited to 'aaf/src/main/java/org/onap/aaf/cadi/aaf/v2_0/AAFTrustChecker.java')

diff --git a/aaf/src/main/java/org/onap/aaf/cadi/aaf/v2_0/AAFTrustChecker.java b/aaf/src/main/java/org/onap/aaf/cadi/aaf/v2_0/AAFTrustChecker.java
new file mode 100644
index 0000000..c7644a5
--- /dev/null
+++ b/aaf/src/main/java/org/onap/aaf/cadi/aaf/v2_0/AAFTrustChecker.java
@@ -0,0 +1,116 @@
+/*******************************************************************************
+ * ============LICENSE_START====================================================
+ * * org.onap.aaf
+ * * ===========================================================================
+ * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.
+ * * ===========================================================================
+ * * Licensed under the Apache License, Version 2.0 (the "License");
+ * * you may not use this file except in compliance with the License.
+ * * You may obtain a copy of the License at
+ * * 
+ *  *      http://www.apache.org/licenses/LICENSE-2.0
+ * * 
+ *  * Unless required by applicable law or agreed to in writing, software
+ * * distributed under the License is distributed on an "AS IS" BASIS,
+ * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * * See the License for the specific language governing permissions and
+ * * limitations under the License.
+ * * ============LICENSE_END====================================================
+ * *
+ * * ECOMP is a trademark and service mark of AT&T Intellectual Property.
+ * *
+ ******************************************************************************/
+package org.onap.aaf.cadi.aaf.v2_0;
+
+import javax.servlet.http.HttpServletRequest ;
+
+import org.onap.aaf.cadi.Access;
+import org.onap.aaf.cadi.Lur;
+import org.onap.aaf.cadi.TrustChecker;
+import org.onap.aaf.cadi.aaf.AAFPermission;
+import org.onap.aaf.cadi.config.Config;
+import org.onap.aaf.cadi.principal.TrustPrincipal;
+import org.onap.aaf.cadi.taf.TafResp;
+import org.onap.aaf.cadi.taf.TrustNotTafResp;
+import org.onap.aaf.cadi.taf.TrustTafResp;
+
+import org.onap.aaf.inno.env.Env;
+import org.onap.aaf.inno.env.util.Split;
+
+public class AAFTrustChecker implements TrustChecker {
+	private final String tag, id;
+	private final AAFPermission perm;
+	private Lur lur;
+
+	/**
+	 * 
+	 * Instance will be replaced by Identity
+	 * @param lur 
+	 *    
+	 * @param tag
+	 * @param perm
+	 */
+	public AAFTrustChecker(final Env env) {
+		tag = env.getProperty(Config.CADI_USER_CHAIN_TAG, Config.CADI_USER_CHAIN);
+		id = env.getProperty(Config.CADI_ALIAS,env.getProperty(Config.AAF_MECHID)); // share between components
+		String str = env.getProperty(Config.CADI_TRUST_PERM);
+		AAFPermission temp=null;
+		if(str!=null) {
+			String[] sp = Split.splitTrim('|', str);
+			if(sp.length==3) {
+				temp = new AAFPermission(sp[0],sp[1],sp[2]);
+			}
+		}
+		perm=temp;
+	}
+
+	public AAFTrustChecker(final Access access) {
+		tag = access.getProperty(Config.CADI_USER_CHAIN_TAG, Config.CADI_USER_CHAIN);
+		id = access.getProperty(Config.CADI_ALIAS,access.getProperty(Config.AAF_MECHID,null)); // share between components
+		String str = access.getProperty(Config.CADI_TRUST_PERM,null);
+		AAFPermission temp=null;
+		if(str!=null) {
+			String[] sp = Split.splitTrim('|', str);
+			if(sp.length==3) {
+				temp = new AAFPermission(sp[0],sp[1],sp[2]);
+			}
+		}
+		perm=temp;
+	}
+
+	/* (non-Javadoc)
+	 * @see com.att.cadi.TrustChecker#setLur(com.att.cadi.Lur)
+	 */
+	@Override
+	public void setLur(Lur lur) {
+		this.lur = lur;
+	}
+
+	@Override
+	public TafResp mayTrust(TafResp tresp, HttpServletRequest req) {
+		String user_info = req.getHeader(tag);
+		if(user_info !=null ) {
+			String[] info = Split.split(',', user_info);
+			if(info.length>0) {
+				String[] flds = Split.splitTrim(':',info[0]);
+				if(flds.length>3 && "AS".equals(flds[3])) { // is it set for "AS"
+					String pn = tresp.getPrincipal().getName();
+					if(pn.equals(id)  // We do trust our own App Components: if a trust entry is made with self, always accept
+					   || lur.fish(tresp.getPrincipal(), perm)) { // Have Perm set by Config.CADI_TRUST_PERM
+						return new TrustTafResp(tresp,
+								new TrustPrincipal(tresp.getPrincipal(), flds[0]),
+								"  " + flds[0] + " validated using " + flds[2] + " by " + flds[1] + ','
+							);
+					} else if(pn.equals(flds[0])) { // Ignore if same identity 
+						return tresp;
+					} else {
+						return new TrustNotTafResp(tresp, tresp.getPrincipal().getName() + " requested trust as "
+								+ flds[0] + ", but does not have Authorization");
+					}
+				}
+			}
+		}
+		return tresp;
+	}
+
+}
-- 
cgit 1.2.3-korg