io.quarkiverse.xmlsec.it.XmlsecResource Maven / Gradle / Ivy

Go to download
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements.  See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License.  You may obtain a copy of the License at
*
*      http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package io.quarkiverse.xmlsec.it;

import java.io.IOException;
import java.security.Key;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.List;

import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.xml.namespace.QName;

import jakarta.enterprise.context.ApplicationScoped;
import jakarta.ws.rs.POST;
import jakarta.ws.rs.Path;
import jakarta.ws.rs.PathParam;

@Path("/xmlsec")
@ApplicationScoped
public class XmlsecResource {

    public static final String LOCALHOST_KEYSTORE_PASSWORD = "myservice-keystore-password";

    public static final String CLIENT_KEYSTORE_PASSWORD = "myclient-keystore-password";

    public static final List PAYMENT_INFO = List.of(new QName("urn:example:po", "PaymentInfo"));

    private final KeyStore keyStore;

    public XmlsecResource() throws KeyStoreException, NoSuchAlgorithmException, CertificateException, IOException {
        // Set up the Key
        keyStore = KeyStore.getInstance("pkcs12");
        keyStore.load(
                this.getClass().getClassLoader().getResource("localhost-keystore.p12").openStream(),
                LOCALHOST_KEYSTORE_PASSWORD.toCharArray());
    }

    /**
     * Adapted form https://github.com/coheigea/testcases/blob/master/apache/santuario/santuario-xml-encryption/src/test/java/org/apache/coheigea/santuario/xmlencryption/EncryptionDOMTest.java
     * by Colm O hEigeartaigh
     *
     * @param plaintext
     * @return
     * @throws Exception
     */
    @POST
    @Path("/{encryption}/encrypt")
    public byte[] encrypt(byte[] plaintext, @PathParam("encryption") Encryption encryption) throws Exception {
        X509Certificate cert = (X509Certificate) keyStore.getCertificate("localhost");

        // Set up the secret Key
        KeyGenerator keygen = KeyGenerator.getInstance("AES");
        keygen.init(128);
        SecretKey secretKey = keygen.generateKey();

        // Encrypt using DOM
        return encryption.encrypt(plaintext, PAYMENT_INFO, "http://www.w3.org/2009/xmlenc11#aes256-gcm", secretKey,
                "http://www.w3.org/2001/04/xmlenc#rsa-1_5", cert.getPublicKey(), false);
    }

    /**
     * Adapted form https://github.com/coheigea/testcases/blob/master/apache/santuario/santuario-xml-encryption/src/test/java/org/apache/coheigea/santuario/xmlencryption/EncryptionDOMTest.java
     * by Colm O hEigeartaigh
     *
     * @param encrypted
     * @return
     * @throws Exception
     */
    @POST
    @Path("/{encryption}/decrypt")
    public byte[] decrypt(byte[] encrypted, @PathParam("encryption") Encryption encryption) throws Exception {
        Key privateKey = keyStore.getKey("localhost", LOCALHOST_KEYSTORE_PASSWORD.toCharArray());
        return encryption.decrypt(encrypted, "http://www.w3.org/2009/xmlenc11#aes256-gcm", privateKey);
    }

    /**
     * Adapted form https://github.com/coheigea/testcases/blob/master/apache/santuario/santuario-xml-encryption/src/test/java/org/apache/coheigea/santuario/xmlencryption/SignatureDOMEnvelopedTest.java
     * by Colm O hEigeartaigh
     *
     * @param plaintext
     * @return
     * @throws Exception
     */
    @POST
    @Path("/{signature}/sign")
    public byte[] signEnveloped(byte[] plaintext, @PathParam("signature") Signing signature) throws Exception {

        // Set up the Key
        KeyStore keyStore = KeyStore.getInstance("pkcs12");
        keyStore.load(
                this.getClass().getClassLoader().getResource("localhost-client-keystore.p12").openStream(),
                LOCALHOST_KEYSTORE_PASSWORD.toCharArray());
        Key key = keyStore.getKey("client", CLIENT_KEYSTORE_PASSWORD.toCharArray());
        X509Certificate cert = (X509Certificate) keyStore.getCertificate("client");
        return signature.sign(plaintext, key, cert, PAYMENT_INFO);
    }

    /**
     * Adapted form https://github.com/coheigea/testcases/blob/master/apache/santuario/santuario-xml-encryption/src/test/java/org/apache/coheigea/santuario/xmlencryption/SignatureDOMEnvelopedTest.java
     * by Colm O hEigeartaigh
     *
     * @param plaintext
     * @return
     * @throws Exception
     */
    @POST
    @Path("/{signature}/verify")
    public void verifyEnveloped(byte[] plaintext, @PathParam("signature") Signing signature) throws Exception {

        // Set up the Key
        KeyStore keyStore = KeyStore.getInstance("pkcs12");
        keyStore.load(
                this.getClass().getClassLoader().getResource("localhost-client-keystore.p12").openStream(),
                LOCALHOST_KEYSTORE_PASSWORD.toCharArray());
        X509Certificate cert = (X509Certificate) keyStore.getCertificate("client");
        signature.verify(plaintext, cert);
    }

}