• Home
• com.eduworks
• kbac.skyrepo
• 2.3.1
• source code
• SkyRepo.java

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

org.cassproject.kbac.SkyRepo Maven / Gradle / Ivy

package org.cassproject.kbac;

import com.eduworks.ec.array.EcArray;
import com.eduworks.ec.array.EcObject;
import com.eduworks.ec.crypto.EcPk;
import com.eduworks.ec.crypto.EcPpk;
import com.eduworks.ec.crypto.EcRsaOaep;
import com.eduworks.schema.ebac.EbacEncryptedValue;
import com.eduworks.schema.ebac.EbacSignature;
import org.cassproject.schema.general.EcRemoteLinkedData;
import org.stjs.javascript.Array;
import org.stjs.javascript.Global;
import org.stjs.javascript.JSFunctionAdapter;
import org.stjs.javascript.JSObjectAdapter;
import org.stjs.javascript.annotation.GlobalScope;
import org.stjs.javascript.functions.*;

@GlobalScope
public class SkyRepo {
	public static boolean skyrepoDebug = false;

	public static String elasticEndpoint = "http://localhost:9200";

	public static String owner() {
		return "@owner";
	}

	public static String context() {
		return "@context";
	}

	public static String type() {
		return "@type";
	}

	public static String reader() {
		return "@reader";
	}

	public static String id() {
		return "@id";
	}

	public static String signature() {
		return "@signature";
	}

	public static String getTypeFromObject(Object o) {
		String type = (String) JSObjectAdapter.$get(o, "@type");
		String context = (String) JSObjectAdapter.$get(o, "@context");
		if (type == null)
			return null;
		if (type.indexOf("http") != -1)
			return type;
		if (context == null)
			return type;
		if (context.endsWith("/"))
			return context + type;
		else
			return context + "/" + type;
	}

	/**
	 * Validate the signature sheet. Blow up if it is incorrect.
	 *
	 * @return
	 */
	public static Function0> signatureSheet = new Function0>() {
		@Override
		public Array $invoke() {
			Array sigSheet = null;

			//Check cache.
			sigSheet = (Array) JSObjectAdapter.$get(this, "signatureSheet");
			if (sigSheet != null) return sigSheet;
			sigSheet = new Array();

			//Pull signatures from POST.
			Object fromDatastream = JSFunctionAdapter.call(levr.fileFromDatastream, this, "signatureSheet", null);
			String stringFromDatastream = levr.fileToString(fromDatastream);

			if (stringFromDatastream != null)
				try {
					sigSheet = sigSheet.concat((Array) Global.JSON.parse(stringFromDatastream));
				} catch (Exception ex) {
				}

			//Pull signature from headers.
			Object hdrs = JSFunctionAdapter.call(levr.headers, this);
			String camelcaseSignatureSheet = (String) JSObjectAdapter.$get(hdrs, "signatureSheet");
			String lowercaseSignatureSheet = (String) JSObjectAdapter.$get(hdrs, "signaturesheet");

			if (camelcaseSignatureSheet != null)
				sigSheet = sigSheet.concat(Global.JSON.parse(camelcaseSignatureSheet));
			if (lowercaseSignatureSheet != null)
				sigSheet = sigSheet.concat(Global.JSON.parse(lowercaseSignatureSheet));

			for (int i = 0; i < sigSheet.$length(); i++) {
				EbacSignature signature = new EbacSignature();
				signature.copyFrom(sigSheet.$get(i));
				if (signature == null)
					levr.error("Missing Signature.", 496);

				if (getTypeFromObject(sigSheet.$get(i)) != "http://schema.cassproject.org/kbac/0.2/TimeLimitedSignature")
					levr.error("Invalid Signature Version.", 422);

				if (signature.expiry == null)
					levr.error("Missing expiry date.", 422);

				Integer now = levr.date(null, null, true);
				if (signature.expiry < now)
					levr.error("A Signature is Expired. My time is " + now + " and the signature expires at " + signature.expiry, 419);

				String signBytes = signature.signature;
				signature.signature = null;

				if (!EcRsaOaep.verify(EcPk.fromPem(signature.owner), signature.toJson(), signBytes))
					levr.error("Invalid Signature Detected: " + signature.toJson(), 451);
				sigSheet.$set(i, signature);
			}
			JSObjectAdapter.$put(this, "signatureSheet", sigSheet);
			return sigSheet;
		}
	};
	//skyrepo.crypto.rs2 done.
	//skyrepo.security.rs2 start.

	public static Boolean isEncryptedType(EcRemoteLinkedData obj) {
		return obj.isAny(new EbacEncryptedValue().getTypes());
	}

	public static Function1 filterResults = new Function1() {
		@Override
		public Object $invoke(Object o) {
			if (o == null)
				return o;
			if (EcArray.isArray(o)) {
				Array ary = (Array) o;
				for (int i = 0; i < ary.$length(); i++) {
					if (ary.$get(i) == null)
						continue;
					Object result = JSFunctionAdapter.call(filterResults, this, ary.$get(i), null);
					if (result == null) {
						ary.splice(i, 1);
						i--;
					} else
						ary.$set(i, result);
				}
				return ary;
			} else if (EcObject.isObject(o)) {
				EcRemoteLinkedData rld = new EcRemoteLinkedData(null, null);
				rld.copyFrom(o);
				if (isEncryptedType(rld)) {
					Array signatures = JSFunctionAdapter.call(signatureSheet, this);
					boolean foundSignature = false;
					for (int i = 0; i < signatures.$length(); i++)
						if (rld.toJson().indexOf(signatures.$get(i).owner) != -1) {
							foundSignature = true;
							break;
						}
//                        if (rld.hasOwner(EcPk.fromPem(signatures.$get(i).owner))) {
//                            foundSignature = true;
//                            break;
//                        } else if (rld.hasReader(EcPk.fromPem(signatures.$get(i).owner))) {
//                            foundSignature = true;
//                            break;
//                        }
					if (!foundSignature)
						return null;
				}
				Array keys = EcObject.keys(o);
				for (int i = 0; i < keys.$length(); i++) {
					String key = keys.$get(i);
					JSObjectAdapter.$put(rld, key, JSFunctionAdapter.call(filterResults, this, JSObjectAdapter.$get(o, key), null));
				}
				return rld.atIfy();
			} else
				return o;
		}
	};

	//skyrepo.security.rs2 done.
	//going to try to skip skyrepo.type.rs2
	public static String skyrepoUrlType(Object o) {
		return getTypeFromObject(o);
	}

	public static Function0