org.mitre.uma.service.impl.DefaultResourceSetService Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of uma-server Show documentation
User Managed Access (UMA) extension of the MITREid Connect server
There is a newer version: 1.3.4
/*******************************************************************************
 * Copyright 2017 The MITRE Corporation
 *   and the MIT Internet Trust Consortium
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *******************************************************************************/

package org.mitre.uma.service.impl;

import java.util.Collection;

import org.mitre.oauth2.model.ClientDetailsEntity;
import org.mitre.oauth2.model.OAuth2AccessTokenEntity;
import org.mitre.oauth2.repository.OAuth2TokenRepository;
import org.mitre.uma.model.PermissionTicket;
import org.mitre.uma.model.Policy;
import org.mitre.uma.model.ResourceSet;
import org.mitre.uma.repository.PermissionRepository;
import org.mitre.uma.repository.ResourceSetRepository;
import org.mitre.uma.service.ResourceSetService;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Primary;
import org.springframework.stereotype.Service;

/**
 * @author jricher
 *
 */
@Service
@Primary
public class DefaultResourceSetService implements ResourceSetService {

	private static final Logger logger = LoggerFactory.getLogger(DefaultResourceSetService.class);

	@Autowired
	private ResourceSetRepository repository;

	@Autowired
	private OAuth2TokenRepository tokenRepository;

	@Autowired
	private PermissionRepository ticketRepository;

	@Override
	public ResourceSet saveNew(ResourceSet rs) {

		if (rs.getId() != null) {
			throw new IllegalArgumentException("Can't save a new resource set with an ID already set to it.");
		}

		if (!checkScopeConsistency(rs)) {
			throw new IllegalArgumentException("Can't save a resource set with inconsistent claims.");
		}

		ResourceSet saved = repository.save(rs);

		return saved;

	}

	@Override
	public ResourceSet getById(Long id) {
		return repository.getById(id);
	}

	@Override
	public ResourceSet update(ResourceSet oldRs, ResourceSet newRs) {

		if (oldRs.getId() == null || newRs.getId() == null
				|| !oldRs.getId().equals(newRs.getId())) {

			throw new IllegalArgumentException("Resource set IDs mismatched");

		}

		if (!checkScopeConsistency(newRs)) {
			throw new IllegalArgumentException("Can't save a resource set with inconsistent claims.");
		}

		newRs.setOwner(oldRs.getOwner()); // preserve the owner tag across updates
		newRs.setClientId(oldRs.getClientId()); // preserve the client id across updates

		ResourceSet saved = repository.save(newRs);

		return saved;

	}

	@Override
	public void remove(ResourceSet rs) {
		// find all the access tokens issued against this resource set and revoke them
		Collection tokens = tokenRepository.getAccessTokensForResourceSet(rs);
		for (OAuth2AccessTokenEntity token : tokens) {
			tokenRepository.removeAccessToken(token);
		}

		// find all outstanding tickets issued against this resource set and revoke them too
		Collection tickets = ticketRepository.getPermissionTicketsForResourceSet(rs);
		for (PermissionTicket ticket : tickets) {
			ticketRepository.remove(ticket);
		}

		repository.remove(rs);
	}

	@Override
	public Collection getAllForOwner(String owner) {
		return repository.getAllForOwner(owner);
	}

	@Override
	public Collection getAllForOwnerAndClient(String owner, String clientId) {
		return repository.getAllForOwnerAndClient(owner, clientId);
	}

	private boolean checkScopeConsistency(ResourceSet rs) {
		if (rs.getPolicies() == null) {
			// nothing to check, no problem!
			return true;
		}
		for (Policy policy : rs.getPolicies()) {
			if (!rs.getScopes().containsAll(policy.getScopes())) {
				return false;
			}
		}
		// we've checked everything, we're good
		return true;
	}

	/* (non-Javadoc)
	 * @see org.mitre.uma.service.ResourceSetService#getAllForClient(org.mitre.oauth2.model.ClientDetailsEntity)
	 */
	@Override
	public Collection getAllForClient(ClientDetailsEntity client) {
		return repository.getAllForClient(client.getClientId());
	}

}