From fc073344d4c0eb8a28bf34c07a8439176cf846ca Mon Sep 17 00:00:00 2001
From: PawelSzalapski <pawel.szalapski@nokia.com>
Date: Tue, 31 Jul 2018 08:18:03 +0200
Subject: Replace nsaCore library with Spring

Change-Id: I2227939a67a2cbba2d392136d49ef4419600d186
Issue-ID: DCAEGEN2-602
Signed-off-by: PawelSzalapski <pawel.szalapski@nokia.com>
---
 .../org/onap/dcae/restapi/ApiAuthInterceptor.java  | 78 ++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 src/main/java/org/onap/dcae/restapi/ApiAuthInterceptor.java

(limited to 'src/main/java/org/onap/dcae/restapi/ApiAuthInterceptor.java')

diff --git a/src/main/java/org/onap/dcae/restapi/ApiAuthInterceptor.java b/src/main/java/org/onap/dcae/restapi/ApiAuthInterceptor.java
new file mode 100644
index 00000000..864a16d7
--- /dev/null
+++ b/src/main/java/org/onap/dcae/restapi/ApiAuthInterceptor.java
@@ -0,0 +1,78 @@
+/*-
+ * ============LICENSE_START=======================================================
+ * org.onap.dcaegen2.collectors.ves
+ * ================================================================================
+ * Copyright (C) 2018 Nokia. All rights reserved.
+ * ================================================================================
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ * ============LICENSE_END=========================================================
+ */
+package org.onap.dcae.restapi;
+
+import io.vavr.control.Option;
+import org.onap.dcae.ApplicationSettings;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Qualifier;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+import java.util.Base64;
+
+final class ApiAuthInterceptor extends HandlerInterceptorAdapter {
+
+    private static final Logger LOG = LoggerFactory.getLogger(ApiAuthInterceptor.class);
+    private final ApplicationSettings applicationSettings;
+
+    private Logger errorLog;
+
+    ApiAuthInterceptor(ApplicationSettings applicationSettings, Logger errorLog) {
+        this.applicationSettings = applicationSettings;
+        this.errorLog = errorLog;
+    }
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response,
+                             Object handler) throws IOException {
+        if (applicationSettings.authorizationEnabled()) {
+            String authorizationHeader = request.getHeader("Authorization");
+            if (authorizationHeader == null || !isAuthorized(authorizationHeader)) {
+                response.setStatus(400);
+                errorLog.error("EVENT_RECEIPT_FAILURE: Unauthorized user");
+                response.getWriter().write(ApiException.UNAUTHORIZED_USER.toJSON().toString());
+                return false;
+            }
+        }
+        return true;
+    }
+
+    private boolean isAuthorized(String authorizationHeader) {
+        try  {
+            String encodedData = authorizationHeader.split(" ")[1];
+            String decodedData = new String(Base64.getDecoder().decode(encodedData));
+            String providedUser = decodedData.split(":")[0].trim();
+            String providedPassword = decodedData.split(":")[1].trim();
+            Option<String> maybeSavedPassword = applicationSettings.validAuthorizationCredentials().get(providedUser);
+            boolean userRegistered = maybeSavedPassword.isDefined();
+            return userRegistered && maybeSavedPassword.get().equals(providedPassword);
+        } catch (Exception e) {
+            LOG.warn(String.format("Could not check if user is authorized (header: '%s')), probably malformed header.",
+                    authorizationHeader), e);
+            return false;
+        }
+    }
+}
-- 
cgit 1.2.3-korg