org.commonjava.indy.service.security.common.SecurityConstraintProvider Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of indy-security Show documentation
The newest version!
/**
 * Copyright (C) 2022 Red Hat, Inc. (https://github.com/Commonjava/indy-security)
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *         http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.commonjava.indy.service.security.common;

import com.fasterxml.jackson.databind.ObjectMapper;
import com.fasterxml.jackson.dataformat.yaml.YAMLFactory;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import jakarta.annotation.PostConstruct;
import jakarta.enterprise.context.ApplicationScoped;
import jakarta.enterprise.inject.Produces;
import jakarta.inject.Inject;
import java.io.File;
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.io.InputStream;
import java.util.stream.Collectors;

@SuppressWarnings( "unused" )
@ApplicationScoped
public class SecurityConstraintProvider
{
    private final Logger logger = LoggerFactory.getLogger( getClass() );

    private static final String DEFAULT_SECURITY_BINDING_YAML = "security-bindings.yaml";

    @Inject
    SecurityConfiguration config;

    private SecurityBindings constraintSet;

    protected SecurityConstraintProvider()
    {
    }

    public SecurityConstraintProvider( final SecurityConfiguration config )
    {
        this.config = config;
        init();
    }

    @PostConstruct
    public void init()
    {
        if ( config.enabled() )
        {
            InputStream input = null;

            String loc = "config/" + DEFAULT_SECURITY_BINDING_YAML;
            if ( config.securityBindingsYaml().isPresent() )
            {
                loc = config.securityBindingsYaml().get();
            }

            final File constraintFile = new File( loc );
            if ( !constraintFile.isFile() )
            {
                logger.warn( "Cannot load security constraints: {}, will try to load from classpath.", constraintFile );
            }
            else
            {
                logger.info( "Will parse security bindings from: {}.", constraintFile );
                try
                {
                    input = new FileInputStream( constraintFile );
                }
                catch ( FileNotFoundException e )
                {
                    logger.warn( "Cannot load security constraints: {}, will try to load from classpath.",
                                 constraintFile );
                }
            }

            if ( input == null )
            {
                logger.info( "Load security bindings config from classpath resource, {}",
                             DEFAULT_SECURITY_BINDING_YAML );
                input = this.getClass().getClassLoader().getResourceAsStream( DEFAULT_SECURITY_BINDING_YAML );
            }

            if ( input == null )
            {
                logger.error( "Cannot load security constraints because missing " );
                return;
            }

            try
            {
                parseBindings( input );
            }
            catch ( IOException e )
            {
                logger.error( "Cannot load security constraints due to error: {}", e.getMessage() );
            }

        }
        else
        {
            logger.info( "indy security is not enabled, so bypassed all security configurations." );
        }
    }

    private void parseBindings( InputStream input )
            throws IOException
    {
        final ObjectMapper mapper = new ObjectMapper( new YAMLFactory() ).findAndRegisterModules();
        constraintSet = mapper.readValue( input, SecurityBindings.class );
        if ( constraintSet != null )
        {
            // Here we will sort the constraints by path segments' length for more to less,
            // because we need to match multiple paths by "longest path wins" rule
            constraintSet.setConstraints( constraintSet.getConstraints().stream().sorted( ( c1, c2 ) -> {
                final String[] arg1 = c1.getUrlPattern().split( "/" );
                final String[] arg2 = c2.getUrlPattern().split( "/" );
                return arg2.length - arg1.length;
            } ).collect( Collectors.toList() ) );
        }
    }

    @Produces
    public SecurityBindings getConstraints()
    {
        return constraintSet;
    }

}