de.gematik.bbriccs.konnektor.requests.VerifyDocumentRequest Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of konnektor-client-brick Show documentation
The newest version!
/*
 * Copyright 2024 gematik GmbH
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package de.gematik.bbriccs.konnektor.requests;

import static java.text.MessageFormat.format;

import de.gematik.bbriccs.konnektor.ServicePort;
import de.gematik.bbriccs.konnektor.requests.options.VerifyDocumentOptions;
import de.gematik.ws.conn.connectorcommon.v5.Status;
import de.gematik.ws.conn.connectorcontext.v2.ContextType;
import de.gematik.ws.conn.signatureservice.v7.ObjectFactory;
import de.gematik.ws.conn.signatureservice.v7.VerificationResultType;
import jakarta.xml.ws.Holder;
import lombok.extern.slf4j.Slf4j;
import lombok.val;
import oasis.names.tc.dss._1_0.core.schema.SignatureObject;
import oasis.names.tc.dss_x._1_0.profiles.verificationreport.schema_.ReturnVerificationReport;

@Slf4j
public class VerifyDocumentRequest extends AbstractKonnektorRequest {

  private final byte[] content;
  private final VerifyDocumentOptions options;

  public VerifyDocumentRequest(byte[] content) {
    this(content, VerifyDocumentOptions.getDefaultOptions());
  }

  public VerifyDocumentRequest(byte[] content, VerifyDocumentOptions options) {
    this.content = content;
    this.options = options;
  }

  @Override
  public Boolean execute(ContextType ctx, ServicePort serviceProvider) {
    ctx.setUserId(null);
    val factory = new ObjectFactory();

    val servicePort = serviceProvider.getSignatureService();

    val optionalInputs = factory.createVerifyDocumentOptionalInputs();
    optionalInputs.setReturnVerificationReport(createVerificationReportOptions());

    val signatureObject = createSignatureObject();
    val includeRevocationInfo = options.isIncludeRevocationInfo();
    val outStatus = new Holder();
    val outResult = new Holder();
    val outOptionals =
        new Holder();

    log.trace(
        format(
            "Verify Document of length {0} Bytes with SignatureType {1}",
            this.content.length, this.options.getSignatureType()));

    this.executeAction(
        () ->
            servicePort.verifyDocument(
                ctx,
                options.getTvMode(),
                optionalInputs,
                null, // don't send a document, only the signature object!
                signatureObject,
                includeRevocationInfo,
                outStatus,
                outResult,
                outOptionals));

    return mapVerificationResult(outStatus, outResult);
  }

  private boolean mapVerificationResult(
      Holder status, Holder result) {
    log.trace(
        format(
            "Verify Document result: result={0} / status={1}",
            result.value.getHighLevelResult(), status.value.getResult()));
    return !hasError(status) && isValid(result);
  }

  private boolean hasError(Holder status) {
    return status.value.getError() != null;
  }

  private boolean isValid(Holder result) {
    return result.value.getHighLevelResult().equalsIgnoreCase("valid");
  }

  private ReturnVerificationReport createVerificationReportOptions() {
    val oasisProfilesFactory =
        new oasis.names.tc.dss_x._1_0.profiles.verificationreport.schema_.ObjectFactory();
    val returnVerificationReport = oasisProfilesFactory.createReturnVerificationReport();
    returnVerificationReport.setIncludeVerifier(options.isIncludeVerifier());
    returnVerificationReport.setIncludeCertificateValues(options.isIncludeCertificateValue());
    returnVerificationReport.setIncludeRevocationValues(options.isIncludeRevocationValue());
    returnVerificationReport.setExpandBinaryValues(options.isExpandBinaryValues());
    return returnVerificationReport;
  }

  private SignatureObject createSignatureObject() {
    val oasisCoreFactory = new oasis.names.tc.dss._1_0.core.schema.ObjectFactory();
    val base64Signature = oasisCoreFactory.createBase64Signature();

    base64Signature.setValue(content);
    base64Signature.setType(options.getSignatureType().getUrn());

    val signatureObject = new SignatureObject();
    signatureObject.setBase64Signature(base64Signature);
    return signatureObject;
  }
}