gateway-service-vault/src/main/java/org/apache/knox/gateway/service/vault/CredentialResource.java

/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.apache.knox.gateway.service.vault;

import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.PathParam;
import javax.ws.rs.Produces;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.Response;

import org.apache.knox.gateway.services.ServiceType;
import org.apache.knox.gateway.services.GatewayServices;
import org.apache.knox.gateway.services.security.AliasService;
import org.apache.knox.gateway.services.security.AliasServiceException;

import static javax.ws.rs.core.MediaType.APPLICATION_JSON;
import static javax.ws.rs.core.MediaType.APPLICATION_XML;
import static javax.ws.rs.core.MediaType.TEXT_PLAIN_TYPE;
import static javax.ws.rs.core.Response.ok;
import static javax.ws.rs.core.Response.status;
import static javax.ws.rs.core.Response.Status.BAD_REQUEST;
import static javax.ws.rs.core.Response.Status.NOT_FOUND;

@Path( "/vault/credentials" )
public class CredentialResource {
  @Context
  private HttpServletRequest request;

  @GET
  @Path("{alias}")
  @Produces({APPLICATION_JSON, APPLICATION_XML})
  public Response getCredential(@PathParam("alias") String alias) {
    if (alias != null && !alias.isEmpty()) {
      CredentialValue value = getCredentialValueForAlias(alias);
      if (value != null) {
          return ok(value).build();
      } else {
          return status(NOT_FOUND).build();
      }
    } else {
        return status(BAD_REQUEST).
            entity("Please provide a credential alias in the path").
              type(TEXT_PLAIN_TYPE).build();
    }
  }

  @GET
  @Produces({APPLICATION_JSON, APPLICATION_XML})
  public Response getCredentials() {
    List<String> aliases = getCredentialsList();
    if (aliases != null) {
        return ok(aliases).build();
    } else {
        return status(NOT_FOUND).build();
    }
  }

  private List<String> getCredentialsList() {
    GatewayServices services = (GatewayServices)request.getServletContext().
        getAttribute(GatewayServices.GATEWAY_SERVICES_ATTRIBUTE);
    String clusterName = (String) request.getServletContext().getAttribute(GatewayServices.GATEWAY_CLUSTER_ATTRIBUTE);
    AliasService as = services.getService(ServiceType.ALIAS_SERVICE);
    List<String> aliases = null;
    try {
      aliases = as.getAliasesForCluster(clusterName);
    } catch (AliasServiceException e) {
      e.printStackTrace();
    }
    return aliases;
  }

  private CredentialValue getCredentialValueForAlias(String alias) {
    GatewayServices services = (GatewayServices)request.getServletContext().
        getAttribute(GatewayServices.GATEWAY_SERVICES_ATTRIBUTE);
    String clusterName = (String) request.getServletContext().getAttribute(GatewayServices.GATEWAY_CLUSTER_ATTRIBUTE);
    AliasService as = services.getService(ServiceType.ALIAS_SERVICE);
    char[] credential = null;
    try {
      credential = as.getPasswordFromAliasForCluster(clusterName, alias);
    } catch (AliasServiceException e) {
      e.printStackTrace();
    }
    if (credential != null) {
      return new CredentialValue(alias, new String(credential));
    }
    return null;
  }

  public static class CredentialValue {
    private String alias;
    private String credential;

    public CredentialValue(String alias, String credential) {
      super();
      this.alias = alias;
      this.credential = credential;
    }

    public String getAlias() {
      return alias;
    }
    public void setAlias(String alias) {
      this.alias = alias;
    }
    public String getCredential() {
      return credential;
    }
    public void setCredential(String credential) {
      this.credential = credential;
    }
  }
}