1 files changed, 167 insertions, 0 deletions
diff --git a/ecomp-sdk/epsdk-core/src/main/java/org/openecomp/portalsdk/core/interceptor/ResourceInterceptor.java b/ecomp-sdk/epsdk-core/src/main/java/org/openecomp/portalsdk/core/interceptor/ResourceInterceptor.java
new file mode 100644
index 00000000..ec6e4b6c
--- /dev/null
+++ b/ecomp-sdk/epsdk-core/src/main/java/org/openecomp/portalsdk/core/interceptor/ResourceInterceptor.java
@@ -0,0 +1,167 @@
+/*-
+ * ================================================================================
+ * eCOMP Portal SDK
+ * ================================================================================
+ * Copyright (C) 2017 AT&T Intellectual Property
+ * ================================================================================
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * 
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ * 
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ * ================================================================================
+ */
+package org.openecomp.portalsdk.core.interceptor;
+
+import java.net.HttpURLConnection;
+import java.util.List;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+import org.openecomp.portalsdk.core.controller.FusionBaseController;
+import org.openecomp.portalsdk.core.domain.App;
+import org.openecomp.portalsdk.core.exception.UrlAccessRestrictedException;
+import org.openecomp.portalsdk.core.logging.format.AlarmSeverityEnum;
+import org.openecomp.portalsdk.core.logging.logic.EELFLoggerDelegate;
+import org.openecomp.portalsdk.core.objectcache.AbstractCacheManager;
+import org.openecomp.portalsdk.core.onboarding.listener.PortalTimeoutHandler;
+import org.openecomp.portalsdk.core.onboarding.util.CipherUtil;
+import org.openecomp.portalsdk.core.onboarding.util.PortalApiConstants;
+import org.openecomp.portalsdk.core.onboarding.util.PortalApiProperties;
+import org.openecomp.portalsdk.core.service.DataAccessService;
+import org.openecomp.portalsdk.core.service.LoginService;
+import org.openecomp.portalsdk.core.service.WebServiceCallService;
+import org.openecomp.portalsdk.core.util.SystemProperties;
+import org.openecomp.portalsdk.core.web.support.UserUtils;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.web.method.HandlerMethod;
+import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
+
+public class ResourceInterceptor extends HandlerInterceptorAdapter {
+	public static final String APP_METADATA = "APP.METADATA";
+
+	EELFLoggerDelegate logger = EELFLoggerDelegate.getLogger(ResourceInterceptor.class);
+
+	@Autowired
+	private DataAccessService dataAccessService;
+	@Autowired
+	private LoginService loginService;
+	@Autowired
+	private WebServiceCallService webServiceCallService;
+
+	private AbstractCacheManager cacheManager;
+
+	@Override
+	public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
+			throws Exception {
+		String uri = request.getRequestURI();
+		String url = uri.substring(uri.indexOf("/", 1) + 1);
+		logger.info(EELFLoggerDelegate.debugLogger, "Url - " + url);
+		logger.info(EELFLoggerDelegate.debugLogger, "lastIndexOf - " + uri.substring(uri.lastIndexOf("/") + 1));
+		if (handler instanceof HandlerMethod) {
+			HandlerMethod method = (HandlerMethod) handler;
+			FusionBaseController controller = (FusionBaseController) method.getBean();
+			if (!controller.isAccessible()) {
+				if (controller.isRESTfulCall()) {
+					// check user authentication for RESTful calls
+					String secretKey = null;
+					try {
+						if (!webServiceCallService.verifyRESTCredential(secretKey, request.getHeader("username"),
+								request.getHeader("password"))) {
+							logger.error(EELFLoggerDelegate.errorLogger, "Error accesing RESTful service. Un-authorized",AlarmSeverityEnum.MINOR);
+							throw new UrlAccessRestrictedException();
+						}
+					} catch (Exception e) {
+						logger.error(EELFLoggerDelegate.errorLogger, "Error authenticating RESTful service :" + e,AlarmSeverityEnum.MINOR);
+						//throw new UrlAccessRestrictedException();
+						 HttpSession httpSession = request.getSession();
+						    ((HttpServletResponse) response).setStatus(HttpURLConnection.HTTP_UNAUTHORIZED);
+						    return false;
+					}
+				}
+				if (!UserUtils.isUrlAccessible(request, url)) {
+					logger.error(EELFLoggerDelegate.errorLogger, "Error accesing URL. Un-authorized",AlarmSeverityEnum.MINOR);
+					throw new UrlAccessRestrictedException();
+				}
+			}
+		}
+
+		logger.debug("successfully authorized rest call");
+		logger.info(EELFLoggerDelegate.debugLogger, "successfully authorized rest call");
+		handleSessionUpdates(request);
+		logger.debug("handled session updates for synchronization");
+		logger.info(EELFLoggerDelegate.debugLogger, "handled session updates for synchronization");
+		return super.preHandle(request, response, handler);
+	}
+
+	/**
+	 * 
+	 * @param request
+	 */
+	protected void handleSessionUpdates(HttpServletRequest request) {
+
+		App app = null;
+		Object appObj = getCacheManager().getObject(APP_METADATA);
+		if (appObj == null) {
+			app = findApp();
+			getCacheManager().putObject(APP_METADATA, app);
+
+		} else {
+			app = (App) appObj;
+		}
+
+		String ecompRestURL = PortalApiProperties.getProperty(PortalApiConstants.ECOMP_REST_URL);
+		String decreptedPwd = "";
+		try {
+			decreptedPwd = CipherUtil.decrypt(app.getAppPassword(),
+					SystemProperties.getProperty(SystemProperties.Decryption_Key));
+		} catch (Exception e) {
+			logger.error(EELFLoggerDelegate.errorLogger, "Could not decrypt Password" + e.getMessage(),AlarmSeverityEnum.MINOR);
+		}
+
+		PortalTimeoutHandler.handleSessionUpdatesNative(request, app.getUsername(), decreptedPwd,
+				PortalApiProperties.getProperty(PortalApiConstants.UEB_APP_KEY), ecompRestURL, null);
+	}
+
+	public App findApp() {
+		List<?> list = null;
+		StringBuffer criteria = new StringBuffer();
+		criteria.append(" where id = 1");
+		list = getDataAccessService().getList(App.class, criteria.toString(), null, null);
+		return (list == null || list.size() == 0) ? null : (App) list.get(0);
+	}
+
+	public DataAccessService getDataAccessService() {
+		return dataAccessService;
+	}
+
+	public void setDataAccessService(DataAccessService dataAccessService) {
+		this.dataAccessService = dataAccessService;
+	}
+
+	public LoginService getLoginService() {
+		return loginService;
+	}
+
+	public void setLoginService(LoginService loginService) {
+		this.loginService = loginService;
+	}
+
+	@Autowired
+	public void setCacheManager(AbstractCacheManager cacheManager) {
+		this.cacheManager = cacheManager;
+	}
+
+	public AbstractCacheManager getCacheManager() {
+		return cacheManager;
+	}
+
+}