• Home
• com.eduworks
• kbac.skyrepo
• 3.0.7
• source code
• SkyRepo.java

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

org.cassproject.kbac.SkyRepo Maven / Gradle / Ivy

package org.cassproject.kbac;

import com.eduworks.ec.array.EcArray;
import com.eduworks.ec.array.EcObject;
import com.eduworks.ec.crypto.EcCrypto;
import com.eduworks.ec.crypto.EcPk;
import com.eduworks.ec.crypto.EcPpk;
import com.eduworks.ec.crypto.EcRsaOaep;
import com.eduworks.schema.ebac.EbacEncryptedValue;
import com.eduworks.schema.ebac.EbacSignature;
import org.cassproject.ebac.repository.EcRepository;
import org.cassproject.schema.general.EcRemoteLinkedData;
import org.stjs.javascript.*;
import org.stjs.javascript.annotation.GlobalScope;
import org.stjs.javascript.functions.*;

@GlobalScope
public class SkyRepo {
    public static boolean skyrepoDebug = false;

    public static String elasticEndpoint = "http://localhost:9200";

    public static String owner() {
        return "owner";
    }

    public static String context() {
        return "@context";
    }

    public static String type() {
        return "@type";
    }

    public static String reader() {
        return "reader";
    }

    public static String id() {
        return "@id";
    }

    public static String signature() {
        return "signature";
    }

    public static String getTypeFromObject(Object o) {
        String encryptedType = (String) JSObjectAdapter.$get(o, "encryptedType");
        String encryptedContext = (String) JSObjectAdapter.$get(o, "encryptedContext");
        String type = (String) JSObjectAdapter.$get(o, "@type");
        String context = (String) JSObjectAdapter.$get(o, "@context");
        if (type == null)
            type = (String) JSObjectAdapter.$get(o, "type");
        if (context == null)
            context = (String) JSObjectAdapter.$get(o, "context");
        if (encryptedType == null)
            encryptedType = (String) JSObjectAdapter.$get(o, "@encryptedType");
        if (encryptedContext == null)
            encryptedContext = (String) JSObjectAdapter.$get(o, "@encryptedContext");
        if (encryptedType != null)
            type = encryptedType;
        if (encryptedContext != null)
            context = encryptedContext;
        if (type == null)
            return null;
        if (type.indexOf("http") != -1)
            return type;
        if (context == null)
            return type;
        if (context.endsWith("/"))
            return context + type;
        else
            return context + "/" + type;
    }

    /**
     * Validate the signature sheet. Blow up if it is incorrect.
     *
     * @return
     */
    public static Function0> signatureSheet = new Function0>() {
        @Override
        public Array $invoke() {
            Array sigSheet = null;

            //Check cache.
            sigSheet = (Array) ctx.get("signatureSheet");
            if (sigSheet != null) return sigSheet;
            sigSheet = new Array();

            //Pull signatures from POST.
            Object fromDatastream = JSFunctionAdapter.call(levr.fileFromDatastream, this, "signatureSheet", null);
            String stringFromDatastream = levr.fileToString(fromDatastream);

            //It may be safe to optimize this code to just a simple assignment.
            if (stringFromDatastream != null)
                try {
                    sigSheet = sigSheet.concat((Array) Global.JSON.parse(stringFromDatastream));
                } catch (Exception ex) {
                }

            //Pull signature from headers. Useful in GET, PUT, DELETE
            Object hdrs = JSFunctionAdapter.call(levr.headers, this);
            String camelcaseSignatureSheet = (String) JSObjectAdapter.$get(hdrs, "signatureSheet");
            String lowercaseSignatureSheet = (String) JSObjectAdapter.$get(hdrs, "signaturesheet");

            if (camelcaseSignatureSheet != null)
                sigSheet = sigSheet.concat(Global.JSON.parse(camelcaseSignatureSheet));
            if (lowercaseSignatureSheet != null)
                sigSheet = sigSheet.concat(Global.JSON.parse(lowercaseSignatureSheet));

            for (int i = 0; i < sigSheet.$length(); i++) {
                EbacSignature signature = new EbacSignature();
                signature.copyFrom(sigSheet.$get(i));
                if (signature == null) //Should be sigSheet.$get(i), not signature.
                    levr.error("Missing Signature.", 496);

                Array validTypes = signature.getTypes();
                boolean foundType = false;
                for (int j = 0; j < validTypes.$length(); j++)
                    if (getTypeFromObject(sigSheet.$get(i)) == validTypes.$get(j))
                        foundType = true;
                if (!foundType)
                    levr.error("Invalid Signature Version.", 422);

                if (signature.expiry == null)
                    levr.error("Missing expiry date.", 422);

                Integer now = levr.date(null, null, true);
                if (signature.expiry < now)
                    levr.error("A Signature is Expired. My time is " + now + " and the signature expires at " + signature.expiry, 419);

                String signBytes = signature.signature;
                if (signBytes == null)
                    signBytes = (String) JSObjectAdapter.$get(signature,"@signature");
                signature.signature = null;
                JSObjectAdapter.$put(signature,"@signature",null);

                String owner = signature.owner;
                if (owner == null)
                    owner = (String) JSObjectAdapter.$get(signature,"@owner");
                JSObjectAdapter.$put(signature,"@owner",owner);
                signature.owner = null;
                if (!EcRsaOaep.verify(EcPk.fromPem(owner), signature.toJson(), signBytes))
                    levr.error("Invalid Signature Detected: " + signature.toJson(), 451);
                signature.owner = (String)JSObjectAdapter.$get(signature,"@owner");
                sigSheet.$set(i, signature);
            }

            ctx.put("signatureSheet", sigSheet);
            return sigSheet;
        }
    };

    public static Boolean isEncryptedType(EcRemoteLinkedData obj) {
        return obj.isAny(new EbacEncryptedValue().getTypes());
    }

    public static Function1 filterResults = new Function1() {
        @Override
        public Object $invoke(Object o) {
            if (o == null)
                return o;
            if (EcArray.isArray(o)) {
                Array ary = (Array) o;
                for (int i = 0; i < ary.$length(); i++) {
                    if (ary.$get(i) == null)
                        continue;
                    Object result = null;
                    try {
                        result = JSFunctionAdapter.call(filterResults, this, ary.$get(i), null);
                    } catch (RuntimeException ex) {
                        if (ex.getMessage() != "Signature Violation")
                            throw ex;
                    }
                    if (result == null) {
                        ary.splice(i, 1);
                        i--;
                    } else
                        ary.$set(i, result);
                }
                return ary;
            } else if (EcObject.isObject(o)) {
                EcRemoteLinkedData rld = new EcRemoteLinkedData((String) JSObjectAdapter.$get(o, "@context"), (String) JSObjectAdapter.$get(o, "@type"));
                rld.reader = (Array) JSObjectAdapter.$get(o, "reader");
                if (rld.reader == null || rld.reader.$length() == 0) {
                    rld.reader = (Array) JSObjectAdapter.$get(o, "@reader");
                }
                if ((rld.reader != null && rld.reader.$length() != 0) || isEncryptedType(rld)) {
                    Array signatures = JSFunctionAdapter.call(signatureSheet, this);
                    boolean foundSignature = false;
                    // Should explicitly go look in owner and reader for those things. Need to watch out for child objects that have readers that need access to the parent.
                    for (int i = 0; i < signatures.$length(); i++)
                        if (Global.JSON.stringify(o).indexOf(signatures.$get(i).owner) != -1) {
                            foundSignature = true;
                            break;
                        }
                    if (!foundSignature)
                        throw new RuntimeException("Signature Violation");
                }
                Array keys = EcObject.keys(o);
                for (int i = 0; i < keys.$length(); i++) {
                    String key = keys.$get(i);
                    Object result = null;
                    result = JSFunctionAdapter.call(filterResults, this, JSObjectAdapter.$get(o, key), null);
                    if (result != null)
                        JSObjectAdapter.$put(o, key, result);
                    else
                        JSObjectAdapter.$properties(o).$delete(key);
                }
                return o;
            } else
                return o;
        }
    };

    public static String skyrepoUrlType(Object o) {
        return getTypeFromObject(o);
    }

    public static Function0