2 files changed, 149 insertions, 0 deletions
diff --git a/app/src/main/java/org/onap/portal/prefs/util/IdTokenExchange.java b/app/src/main/java/org/onap/portal/prefs/util/IdTokenExchange.java
new file mode 100644
index 0000000..20f1581
--- /dev/null
+++ b/app/src/main/java/org/onap/portal/prefs/util/IdTokenExchange.java
@@ -0,0 +1,91 @@
+/*
+ *
+ * Copyright (c) 2022. Deutsche Telekom AG
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ *
+ */
+
+package org.onap.portal.prefs.util;
+
+import com.nimbusds.jwt.JWTParser;
+import io.vavr.control.Option;
+import io.vavr.control.Try;
+import org.springframework.web.server.ServerWebExchange;
+import org.zalando.problem.Problem;
+import org.zalando.problem.Status;
+import reactor.core.publisher.Mono;
+
+/**
+ * Represents a function that handles the <a href="https://jwt.io/introduction">JWT</a> identity token.
+ * Use this to check if the incoming requests are authorized to call the given endpoint
+ */
+
+public final class IdTokenExchange {
+
+  public static final String X_AUTH_IDENTITY_HEADER = "X-Auth-Identity";
+  public static final String JWT_CLAIM_USERID = "sub";
+
+  private IdTokenExchange(){
+
+  }
+
+  /**
+   * Extract the identity header from the given {@link ServerWebExchange}.
+   * @param exchange the ServerWebExchange that contains information about the incoming request
+   * @return the identity header in the form of <code>Bearer {@literal <Token>}<c/ode>
+   */
+  private static Mono<String> extractIdentityHeader(ServerWebExchange exchange) {
+    return io.vavr.collection.List.ofAll(
+            exchange.getRequest().getHeaders().getOrEmpty(X_AUTH_IDENTITY_HEADER))
+        .headOption()
+        .map(Mono::just)
+        .getOrElse(Mono.error(Problem.valueOf(Status.FORBIDDEN, "ID token is missing")));
+  }
+
+    /**
+   * Extract the identity token from the given {@link ServerWebExchange}.
+   * @see <a href="https://openid.net/specs/openid-connect-core-1_0.html#IDToken">OpenId Connect ID Token</a>
+   * @param exchange the ServerWebExchange that contains information about the incoming request
+   * @return the identity token that contains user roles
+   */
+  private static Mono<String> extractIdToken(ServerWebExchange exchange) {
+    return extractIdentityHeader(exchange)
+        .map(identityHeader -> identityHeader.replace("Bearer ", ""));
+  }
+
+  /**
+   * Extract the <code>userId</code> from the given {@link ServerWebExchange}
+   * @param exchange the ServerWebExchange that contains information about the incoming request
+   * @return the id of the user
+   */
+  public static Mono<String> extractUserId(ServerWebExchange exchange) {
+     return extractIdToken(exchange)
+         .flatMap(
+             idToken ->
+                 Try.of(() -> JWTParser.parse(idToken))
+                     .mapTry(jwt -> Option.of(jwt.getJWTClaimsSet()))
+                     .map(
+                         optionJwtClaimSet ->
+                             optionJwtClaimSet
+                                 .flatMap(
+                                     jwtClaimSet ->
+                                         Option.of(jwtClaimSet.getClaim(JWT_CLAIM_USERID)))
+                                 .map(String.class::cast)
+                     .map( Mono::just).get())
+                     .getOrElseGet(Mono::error));
+  }
+}
diff --git a/app/src/main/java/org/onap/portal/prefs/util/Logger.java b/app/src/main/java/org/onap/portal/prefs/util/Logger.java
new file mode 100644
index 0000000..4f4ac6c
--- /dev/null
+++ b/app/src/main/java/org/onap/portal/prefs/util/Logger.java
@@ -0,0 +1,58 @@
+/*
+ *
+ * Copyright (c) 2022. Deutsche Telekom AG
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * SPDX-License-Identifier: Apache-2.0
+ *
+ *
+ */
+
+package org.onap.portal.prefs.util;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.HttpStatus;
+
+import java.net.URI;
+
+@Slf4j
+public class Logger {
+
+  private Logger(){}
+
+  public static void requestLog(String xRequestId, HttpMethod methode, URI path) {
+    log.info("Portal-prefs - request - X-Request-Id {} {} {}", xRequestId, methode, path);
+  }
+
+  public static void responseLog(String xRequestId, HttpStatus code) {
+    log.info("Portal-prefs - response - X-Request-Id {} {}", xRequestId, code);
+  }
+
+  public static void errorLog(String xRequestId, String msg, String id, String app) {
+    log.info(
+        "Portal-prefs - error - X-Request-Id {} {} {} not found in {}", xRequestId, msg, id, app);
+  }
+
+  public static void errorLog(
+      String xRequestId, String msg, String id, String app, String errorDetails) {
+    log.info(
+        "Portal-prefs - error - X-Request-Id {} {} {} not found in {} error message: {}",
+        xRequestId,
+        msg,
+        id,
+        app,
+        errorDetails);
+  }
+}