Adding User Auth and permission aaf services

Issue-ID: PORTAL-334
Change-Id: I2826f2a06f7d818d918ae5f45b500a8da78cec42
Signed-off-by: Kishore Reddy, Gujja (kg811t) <kg811t@research.att.com>

1 files changed, 200 insertions, 108 deletions

diff --git a/ecomp-sdk/epsdk-aaf/src/main/java/org/onap/portalsdk/external/authorization/service/UserApiServiceImpl.java b/ecomp-sdk/epsdk-aaf/src/main/java/org/onap/portalsdk/external/authorization/service/UserApiServiceImpl.java
index fb320c17..bfe9808b 100644
--- a/ecomp-sdk/epsdk-aaf/src/main/java/org/onap/portalsdk/external/authorization/service/UserApiServiceImpl.java
+++ b/ecomp-sdk/epsdk-aaf/src/main/java/org/onap/portalsdk/external/authorization/service/UserApiServiceImpl.java
@@ -37,6 +37,7 @@
  */
 package org.onap.portalsdk.external.authorization.service;
 
+import java.io.IOException;
 import java.util.ArrayList;
 import java.util.List;
 import java.util.Set;
@@ -73,15 +74,23 @@ import org.springframework.http.ResponseEntity;
 import org.springframework.stereotype.Service;
 import org.springframework.web.client.RestTemplate;
 
+import com.fasterxml.jackson.core.JsonParseException;
+import com.fasterxml.jackson.databind.JsonMappingException;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.type.TypeFactory;
 
 @Service("userApiService")
 public class UserApiServiceImpl implements UserApiService {
 
-	private static final String AAF_GET_USER_ROLES_ENDPOINT = "roles/user/";
+	private static final String PASSCODE = "password";
 
-	private static final String AAF_GET_USER_PERMS_ENDPOINT = "perms/user/";
+	private static final String ID = "id";
+
+	private static final String EXTERNAL_AUTH_GET_USER_ROLES_ENDPOINT = "authz/roles/user/";
+
+	private static final String EXTERNAL_AUTH_GET_USER_PERMS_ENDPOINT = "authz/perms/user/";
+
+	private static final String EXTERNAL_AUTH_POST_CREDENTIALS_ENDPOINT = "authn/validate";
 
 	private static final EELFLoggerDelegate logger = EELFLoggerDelegate.getLogger(UserApiServiceImpl.class);
 
@@ -103,62 +112,29 @@ public class UserApiServiceImpl implements UserApiService {
 	private AppService appService;
 
 	@Override
-	public User getUser(String orgUserId, HttpServletRequest request)
-			throws UserNotFoundException {
+	public User getUser(String orgUserId, HttpServletRequest request) throws UserNotFoundException {
 		User user = null;
 		try {
-			String namespace = EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_NAMESPACE);
-			HttpHeaders headers = EcompExternalAuthUtils.base64encodeKeyForAAFBasicAuth();
+			String namespace = EcompExternalAuthProperties
+					.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_NAMESPACE);
+			HttpHeaders headers = getBasicAuthHeaders();
 			HttpEntity<String> entity = new HttpEntity<>(headers);
-			logger.debug(EELFLoggerDelegate.debugLogger, "getUserRoles: Connecting to external system for user {}",
+			logger.debug(EELFLoggerDelegate.debugLogger, "getUserRoles: Connecting to external auth system for user {}",
 					orgUserId);
-			String endPoint = AAF_GET_USER_ROLES_ENDPOINT + orgUserId
+			String endPoint = EXTERNAL_AUTH_GET_USER_ROLES_ENDPOINT + orgUserId
 					+ EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_USER_DOMAIN);
 			ResponseEntity<String> getResponse = template.exchange(
-					EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_URL) + endPoint, HttpMethod.GET, entity,
-					String.class);
+					EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_URL) + endPoint,
+					HttpMethod.GET, entity, String.class);
 			if (getResponse.getStatusCode().value() == 200) {
 				logger.debug(EELFLoggerDelegate.debugLogger,
-						"getUserRoles: Finished GET unp ser roles from external system and body: {}",
+						"getUserRoles: Finished GET unp ser roles from external auth system and body: {}",
 						getResponse.getBody());
 			}
 			String userRoles = getResponse.getBody();
-			JSONObject userJsonObj = null;
-			JSONArray userJsonArray = null;
 			ObjectMapper mapper = new ObjectMapper();
-			List<ExternalAccessUserRoleDetail> userRoleDetailList = new ArrayList<>();
-			if (!userRoles.equals(EcompExternalAuthUtils.EXT_EMPTY_JSON_STRING)) {
-				userJsonObj = new JSONObject(userRoles);
-				userJsonArray = userJsonObj.getJSONArray(EcompExternalAuthUtils.EXT_ROLE_FIELD);
-				ExternalAccessUserRoleDetail userRoleDetail = null;
-				for (int i = 0; i < userJsonArray.length(); i++) {
-					JSONObject role = userJsonArray.getJSONObject(i);
-					if (!role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME).endsWith(EcompExternalAuthUtils.EXT_ROLE_FIELD_ADMIN)
-							&& !role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME)
-									.endsWith(EcompExternalAuthUtils.EXT_ROLE_FIELD_OWNER)
-							&& EcompExternalAuthUtils.checkNameSpaceMatching(role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME),
-									namespace)) {
-						ExternalRoleDescription desc = new ExternalRoleDescription();
-						if(role.has(EcompExternalAuthUtils.EXT_FIELD_DESCRIPTION)
-								&& EcompExternalAuthUtils
-										.isJSONValid(role.getString(EcompExternalAuthUtils.EXT_FIELD_DESCRIPTION))) {
-							desc = mapper.readValue(role.getString(EcompExternalAuthUtils.EXT_FIELD_DESCRIPTION),
-									ExternalRoleDescription.class);
-						}
-						if(role.has(EcompExternalAuthUtils.EXT_FIELD_PERMS)) {
-							JSONArray perms = role.getJSONArray(EcompExternalAuthUtils.EXT_FIELD_PERMS);
-							List<ExternalAccessPerms> permsList = mapper.readValue(perms.toString(), TypeFactory
-									.defaultInstance().constructCollectionType(List.class, ExternalAccessPerms.class));
-							desc.setPermissions(permsList);
-						}
-						userRoleDetail = new ExternalAccessUserRoleDetail(
-								role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME), desc);
-						userRoleDetailList.add(userRoleDetail);
-					}
-				}
-			} else {
-				throw new UserNotFoundException("User roles not found!");
-			}
+			List<ExternalAccessUserRoleDetail> userRoleDetailList = setExterbalAccessUserRoles(namespace, userRoles,
+					mapper);
 
 			if (userRoleDetailList.isEmpty()) {
 				throw new UserNotFoundException("User roles not found!");
@@ -172,10 +148,48 @@ public class UserApiServiceImpl implements UserApiService {
 
 	}
 
-	@SuppressWarnings({ "rawtypes", "unchecked" })
+	private List<ExternalAccessUserRoleDetail> setExterbalAccessUserRoles(String namespace, String userRoles,
+			ObjectMapper mapper) throws IOException, JsonParseException, JsonMappingException, UserNotFoundException {
+		JSONObject userJsonObj;
+		JSONArray userJsonArray;
+		List<ExternalAccessUserRoleDetail> userRoleDetailList = new ArrayList<>();
+		if (!userRoles.equals(EcompExternalAuthUtils.EXT_EMPTY_JSON_STRING)) {
+			userJsonObj = new JSONObject(userRoles);
+			userJsonArray = userJsonObj.getJSONArray(EcompExternalAuthUtils.EXT_ROLE_FIELD);
+			ExternalAccessUserRoleDetail userRoleDetail = null;
+			for (int i = 0; i < userJsonArray.length(); i++) {
+				JSONObject role = userJsonArray.getJSONObject(i);
+				if (!role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME)
+						.endsWith(EcompExternalAuthUtils.EXT_ROLE_FIELD_ADMIN)
+						&& !role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME)
+								.endsWith(EcompExternalAuthUtils.EXT_ROLE_FIELD_OWNER)
+						&& EcompExternalAuthUtils.checkNameSpaceMatching(
+								role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME), namespace)) {
+					ExternalRoleDescription desc = new ExternalRoleDescription();
+					if (role.has(EcompExternalAuthUtils.EXT_FIELD_DESCRIPTION) && EcompExternalAuthUtils
+							.isJSONValid(role.getString(EcompExternalAuthUtils.EXT_FIELD_DESCRIPTION))) {
+						desc = mapper.readValue(role.getString(EcompExternalAuthUtils.EXT_FIELD_DESCRIPTION),
+								ExternalRoleDescription.class);
+					}
+					if (role.has(EcompExternalAuthUtils.EXT_FIELD_PERMS)) {
+						JSONArray perms = role.getJSONArray(EcompExternalAuthUtils.EXT_FIELD_PERMS);
+						List<ExternalAccessPerms> permsList = mapper.readValue(perms.toString(), TypeFactory
+								.defaultInstance().constructCollectionType(List.class, ExternalAccessPerms.class));
+						desc.setPermissions(permsList);
+					}
+					userRoleDetail = new ExternalAccessUserRoleDetail(
+							role.getString(EcompExternalAuthUtils.EXT_ROLE_FIELD_NAME), desc);
+					userRoleDetailList.add(userRoleDetail);
+				}
+			}
+		} else {
+			throw new UserNotFoundException("User roles not found!");
+		}
+		return userRoleDetailList;
+	}
+
 	private User convertAAFUserRolesToEcompSDKUser(List<ExternalAccessUserRoleDetail> userRoleDetailList,
-			String orgUserId, String namespace, HttpServletRequest request)
-			throws Exception {
+			String orgUserId, String namespace, HttpServletRequest request) throws Exception {
 		User user = loginAAFService.findUserWithoutPwd(orgUserId);
 		PostSearchBean postSearchBean = new PostSearchBean();
 		if (user == null) {
@@ -189,56 +203,7 @@ public class UserApiServiceImpl implements UserApiService {
 		}
 		App app = appService.getApp(1l);
 		try {
-			Set userApps = new TreeSet();
-			for (ExternalAccessUserRoleDetail userRoleDetail : userRoleDetailList) {
-				ExternalRoleDescription roleDesc = userRoleDetail.getDescription();
-				UserApp userApp = new UserApp();
-				Role role = new Role();
-				Set roleFunctions = new TreeSet<>();
-				if (roleDesc != null) {
-					if (roleDesc.getName() == null) {
-						role.setActive(true);
-						role.setName(userRoleDetail.getName().substring(namespace.length() + 1));
-					} else {
-						role.setActive(Boolean.valueOf(roleDesc.getActive()));
-						role.setId(Long.valueOf(roleDesc.getAppRoleId()));
-						role.setName(roleDesc.getName());
-						if (!roleDesc.getPriority().equals(EcompExternalAuthUtils.EXT_NULL_VALUE)) {
-							role.setPriority(Integer.valueOf(roleDesc.getPriority()));
-						}
-					}
-					if (roleDesc.getPermissions() != null) {
-						for (ExternalAccessPerms extPerm : roleDesc.getPermissions()) {
-							RoleFunction roleFunction = new RoleFunction();
-							roleFunction.setCode(extPerm.getInstance());
-							roleFunction.setAction(extPerm.getAction());
-							if (extPerm.getDescription() != null
-									&& EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
-								roleFunction.setName(extPerm.getDescription());
-							} else if (extPerm.getDescription() == null
-									&& EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
-								roleFunction.setName(extPerm.getType().substring(namespace.length() + 1) + "|"
-										+ extPerm.getInstance() + "|" + extPerm.getAction());
-							} else if (extPerm.getDescription() == null
-									&& !EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
-								roleFunction.setName(
-										extPerm.getType() + "|" + extPerm.getInstance() + "|" + extPerm.getAction());
-							}
-							if (EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
-								roleFunction.setType(extPerm.getType().substring(namespace.length() + 1));
-							} else {
-								roleFunction.setType(extPerm.getType());
-							}
-							roleFunctions.add(roleFunction);
-						}
-					}
-				}
-				role.setRoleFunctions(roleFunctions);
-				userApp.setApp(app);
-				userApp.setRole(role);
-				userApp.setUserId(user.getId());
-				userApps.add(userApp);
-			}
+			Set userApps = setUserApps(userRoleDetailList, namespace, user, app);
 			user.setUserApps(userApps);
 		} catch (Exception e) {
 			logger.error(EELFLoggerDelegate.errorLogger, "createEPUser: createEPUser failed", e);
@@ -248,24 +213,86 @@ public class UserApiServiceImpl implements UserApiService {
 		return user;
 	}
 
+	@SuppressWarnings({ "rawtypes", "unchecked" })
+	private Set setUserApps(List<ExternalAccessUserRoleDetail> userRoleDetailList, String namespace, User user,
+			App app) {
+		Set userApps = new TreeSet();
+		for (ExternalAccessUserRoleDetail userRoleDetail : userRoleDetailList) {
+			ExternalRoleDescription roleDesc = userRoleDetail.getDescription();
+			UserApp userApp = new UserApp();
+			Role role = new Role();
+			Set roleFunctions = new TreeSet<>();
+			if (roleDesc != null) {
+				if (roleDesc.getName() == null) {
+					role.setActive(true);
+					role.setName(userRoleDetail.getName().substring(namespace.length() + 1));
+				} else {
+					role.setActive(Boolean.valueOf(roleDesc.getActive()));
+					role.setId(Long.valueOf(roleDesc.getAppRoleId()));
+					role.setName(roleDesc.getName());
+					if (!roleDesc.getPriority().equals(EcompExternalAuthUtils.EXT_NULL_VALUE)) {
+						role.setPriority(Integer.valueOf(roleDesc.getPriority()));
+					}
+				}
+				if (roleDesc.getPermissions() != null) {
+					for (ExternalAccessPerms extPerm : roleDesc.getPermissions()) {
+						RoleFunction roleFunction = new RoleFunction();
+						roleFunction.setCode(extPerm.getInstance());
+						roleFunction.setAction(extPerm.getAction());
+						if (extPerm.getDescription() != null
+								&& EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
+							roleFunction.setName(extPerm.getDescription());
+						} else if (extPerm.getDescription() == null
+								&& EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
+							roleFunction.setName(extPerm.getType().substring(namespace.length() + 1) + "|"
+									+ extPerm.getInstance() + "|" + extPerm.getAction());
+						} else if (extPerm.getDescription() == null
+								&& !EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
+							roleFunction.setName(
+									extPerm.getType() + "|" + extPerm.getInstance() + "|" + extPerm.getAction());
+						}
+						if (EcompExternalAuthUtils.checkNameSpaceMatching(extPerm.getType(), namespace)) {
+							roleFunction.setType(extPerm.getType().substring(namespace.length() + 1));
+						} else {
+							roleFunction.setType(extPerm.getType());
+						}
+						roleFunctions.add(roleFunction);
+					}
+				}
+			}
+			role.setRoleFunctions(roleFunctions);
+			userApp.setApp(app);
+			userApp.setRole(role);
+			userApp.setUserId(user.getId());
+			userApps.add(userApp);
+		}
+		return userApps;
+	}
+
 	@Override
 	public List<RoleFunction> getRoleFunctions(String orgUserId) throws Exception {
 		ObjectMapper mapper = new ObjectMapper();
-		HttpHeaders headers = EcompExternalAuthUtils.base64encodeKeyForAAFBasicAuth();
+		HttpHeaders headers = getBasicAuthHeaders();
 		HttpEntity<String> entity = new HttpEntity<>(headers);
-		logger.debug(EELFLoggerDelegate.debugLogger, "getRoleFunctions: Connecting to external system for user {}",
+		logger.debug(EELFLoggerDelegate.debugLogger, "getRoleFunctions: Connecting to external auth system for user {}",
 				orgUserId);
-		String endPoint = AAF_GET_USER_PERMS_ENDPOINT + orgUserId
+		String endPoint = EXTERNAL_AUTH_GET_USER_PERMS_ENDPOINT + orgUserId
 				+ EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_USER_DOMAIN);
 		ResponseEntity<String> getResponse = template.exchange(
-				EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_URL) + endPoint, HttpMethod.GET, entity,
-				String.class);
+				EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_URL) + endPoint,
+				HttpMethod.GET, entity, String.class);
 		if (getResponse.getStatusCode().value() == 200) {
 			logger.debug(EELFLoggerDelegate.debugLogger,
 					"getRoleFunctions: Finished GET user perms from external system and body: {}",
 					getResponse.getBody());
 		}
 		String userPerms = getResponse.getBody();
+		List<ExternalAccessPerms> extPermsList = convertPermsJSONArrayToExternalAccessPerms(mapper, userPerms);
+		return convertToRoleFunctionList(extPermsList);
+	}
+
+	private List<ExternalAccessPerms> convertPermsJSONArrayToExternalAccessPerms(ObjectMapper mapper, String userPerms)
+			throws IOException, JsonParseException, JsonMappingException {
 		JSONObject userPermsJsonObj = null;
 		JSONArray userPermsJsonArray = null;
 		List<ExternalAccessPerms> extPermsList = new ArrayList<>();
@@ -274,13 +301,34 @@ public class UserApiServiceImpl implements UserApiService {
 			userPermsJsonArray = userPermsJsonObj.getJSONArray(EcompExternalAuthUtils.EXT_PERM_FIELD);
 			for (int i = 0; i < userPermsJsonArray.length(); i++) {
 				JSONObject permJsonObj = userPermsJsonArray.getJSONObject(i);
-				if (!permJsonObj.getString(EcompExternalAuthUtils.EXT_PERM_FIELD_TYPE).endsWith(EcompExternalAuthUtils.EXT_PERM_ACCESS)) {
+				if (!permJsonObj.getString(EcompExternalAuthUtils.EXT_PERM_FIELD_TYPE)
+						.endsWith(EcompExternalAuthUtils.EXT_PERM_ACCESS)) {
 					ExternalAccessPerms perm = mapper.readValue(permJsonObj.toString(), ExternalAccessPerms.class);
 					extPermsList.add(perm);
 				}
 			}
 		}
-		return convertToRoleFunctionList(extPermsList);
+		return extPermsList;
+	}
+
+	private ResponseEntity<String> getPermsFromExternalAuthSystem(HttpEntity<String> entity, String endPoint) {
+		ResponseEntity<String> getResponse = template.exchange(
+				EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_URL) + endPoint,
+				HttpMethod.GET, entity, String.class);
+		if (getResponse.getStatusCode().value() == 200) {
+			logger.debug(EELFLoggerDelegate.debugLogger,
+					"getPermsFromExternalAuthSystem: Finished GET user perms from external auth system and body: {}",
+					getResponse.getBody());
+		}
+		return getResponse;
+	}
+
+	private HttpHeaders getBasicAuthHeaders() throws Exception {
+		String userName = EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_USER_NAME);
+		String encryptedPass = EcompExternalAuthProperties
+				.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_PASSWORD);
+		String decryptedPass = EcompExternalAuthUtils.decryptPass(encryptedPass);
+		return EcompExternalAuthUtils.base64encodeKeyForAAFBasicAuth(userName, decryptedPass);
 	}
 
 	private List<RoleFunction> convertToRoleFunctionList(List<ExternalAccessPerms> extPermsList) {
@@ -311,11 +359,55 @@ public class UserApiServiceImpl implements UserApiService {
 		return roleFunctions;
 	}
 
-	private SearchResult loadSearchResultData(PostSearchBean searchCriteria)
-			throws NamingException {
+	private SearchResult loadSearchResultData(PostSearchBean searchCriteria) throws NamingException {
 		return ldapService.searchPost(searchCriteria.getUser(), searchCriteria.getSortBy1(),
 				searchCriteria.getSortBy2(), searchCriteria.getSortBy3(), searchCriteria.getPageNo(),
 				searchCriteria.getNewDataSize(), 1);
 	}
 
+	@Override
+	public ResponseEntity<String> checkUserExists(String username, String password) throws Exception {
+		username = changeIfUserDomainNotAppended(username);
+		HttpHeaders headers = EcompExternalAuthUtils.base64encodeKeyForAAFBasicAuth(username, password);
+		String appUsername = EcompExternalAuthProperties
+				.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_USER_NAME);
+		String appPass = EcompExternalAuthUtils.decryptPass(
+				EcompExternalAuthProperties.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_PASSWORD));
+		JSONObject credentials = new JSONObject();
+		credentials.put(ID, appUsername);
+		credentials.put(PASSCODE, appPass);
+		HttpEntity<String> entity = new HttpEntity<>(credentials.toString(), headers);
+		logger.debug(EELFLoggerDelegate.debugLogger, "checkUserExists: Connecting to external auth system for user {}",
+				username);
+		ResponseEntity<String> getResponse = template.exchange(EcompExternalAuthProperties
+				.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_URL)
+				+ EXTERNAL_AUTH_POST_CREDENTIALS_ENDPOINT, HttpMethod.POST, entity, String.class);
+		if (getResponse.getStatusCode().value() == 200) {
+			logger.debug(EELFLoggerDelegate.debugLogger,
+					"checkUserExists: Finished POST from external auth system to validate credentials and status: {}",
+					getResponse.getStatusCode().value());
+		}
+		return getResponse;
+	}
+
+	private String changeIfUserDomainNotAppended(String username) {
+		if (!EcompExternalAuthUtils.validate(username)) {
+			username = username + EcompExternalAuthProperties
+					.getProperty(EcompExternalAuthProperties.EXTERNAL_AUTH_USER_DOMAIN);
+		}
+		return username;
+	}
+
+	@Override
+	public List<ExternalAccessPerms> getIfUserPermsExists(String username) throws Exception {
+		HttpHeaders headers = getBasicAuthHeaders();
+		HttpEntity<String> entity = new HttpEntity<>(headers);
+		logger.debug(EELFLoggerDelegate.debugLogger,
+				"getIfUserPermsExists: Connecting to external auth system for user {}", username);
+		username = changeIfUserDomainNotAppended(username);
+		String endPoint = EXTERNAL_AUTH_GET_USER_PERMS_ENDPOINT + username;
+		ResponseEntity<String> getResponse = getPermsFromExternalAuthSystem(entity, endPoint);
+		return convertPermsJSONArrayToExternalAccessPerms(new ObjectMapper(), getResponse.getBody());
+	}
+
 }