io.hops.hopsworks.common.dao.certificates.CertsFacade.java Source code

Java tutorial

Introduction

Here is the source code for io.hops.hopsworks.common.dao.certificates.CertsFacade.java

Source

/*
 * Changes to this file committed after and not including commit-id: ccc0d2c5f9a5ac661e60e6eaf138de7889928b8b
 * are released under the following license:
 *
 * This file is part of Hopsworks
 * Copyright (C) 2018, Logical Clocks AB. All rights reserved
 *
 * Hopsworks is free software: you can redistribute it and/or modify it under the terms of
 * the GNU Affero General Public License as published by the Free Software Foundation,
 * either version 3 of the License, or (at your option) any later version.
 *
 * Hopsworks is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
 * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
 * PURPOSE.  See the GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License along with this program.
 * If not, see <https://www.gnu.org/licenses/>.
 *
 * Changes to this file committed before and including commit-id: ccc0d2c5f9a5ac661e60e6eaf138de7889928b8b
 * are released under the following license:
 *
 * Copyright (C) 2013 - 2018, Logical Clocks AB and RISE SICS AB. All rights reserved
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy of this
 * software and associated documentation files (the "Software"), to deal in the Software
 * without restriction, including without limitation the rights to use, copy, modify, merge,
 * publish, distribute, sublicense, and/or sell copies of the Software, and to permit
 * persons to whom the Software is furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in all copies or
 * substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS  OR IMPLIED, INCLUDING
 * BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 * NONINFRINGEMENT. IN NO EVENT SHALL  THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
 * DAMAGES OR  OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */

package io.hops.hopsworks.common.dao.certificates;

import com.google.common.io.ByteStreams;
import io.hops.hopsworks.common.util.Settings;
import org.apache.commons.io.FileUtils;

import java.io.File;
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.util.ArrayList;
import java.util.List;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.ejb.Stateless;
import javax.persistence.EntityManager;
import javax.persistence.EntityNotFoundException;
import javax.persistence.NoResultException;
import javax.persistence.PersistenceContext;
import javax.persistence.TypedQuery;

@Stateless
public class CertsFacade {

    private final Logger LOG = Logger.getLogger(CertsFacade.class.getName());

    @PersistenceContext(unitName = "kthfsPU")
    private EntityManager em;

    protected EntityManager getEntityManager() {
        return em;
    }

    public CertsFacade() throws Exception {
    }

    public UserCerts findUserCert(String projectName, String username) {
        TypedQuery<UserCerts> query = em.createNamedQuery("UserCerts.findUserProjectCert", UserCerts.class);
        query.setParameter("projectname", projectName);
        query.setParameter("username", username);
        try {
            UserCerts res = query.getSingleResult();
            return res;
        } catch (NoResultException e) {
            Logger.getLogger(CertsFacade.class.getName()).log(Level.SEVERE, null, e);
        }
        return new UserCerts();
    }

    public List<UserCerts> findAllUserCerts() {
        TypedQuery<UserCerts> query = em.createNamedQuery("UserCerts.findAll", UserCerts.class);
        try {
            List<UserCerts> res = query.getResultList();
            return res;
        } catch (EntityNotFoundException e) {
            Logger.getLogger(CertsFacade.class.getName()).log(Level.SEVERE, null, e);
        }
        return new ArrayList<>();
    }

    public List<UserCerts> findUserCertsByProjectId(String projectname) {
        TypedQuery<UserCerts> query = em.createNamedQuery("UserCerts.findByProjectname", UserCerts.class);
        query.setParameter("projectname", projectname);
        try {
            List<UserCerts> res = query.getResultList();
            return res;
        } catch (EntityNotFoundException e) {
            Logger.getLogger(CertsFacade.class.getName()).log(Level.SEVERE, null, e);
        }
        return new ArrayList<>();
    }

    public List<UserCerts> findUserCertsByUid(String username) {
        TypedQuery<UserCerts> query = em.createNamedQuery("UserCerts.findByUsername", UserCerts.class);
        query.setParameter("username", username);
        try {
            List<UserCerts> res = query.getResultList();
            return res;
        } catch (EntityNotFoundException e) {
            Logger.getLogger(CertsFacade.class.getName()).log(Level.SEVERE, null, e);
        }
        return new ArrayList<>();
    }

    public void persist(UserCerts uc) {
        em.persist(uc);
    }

    /**
     * Persist ProjectGenericUser certificates.
     *
     * @param pgu
     */
    public void persistPGUCert(ProjectGenericUserCerts pgu) {
        em.persist(pgu);
    }

    public void updatePGUCert(ProjectGenericUserCerts pgu) {
        em.merge(pgu);
    }

    public ProjectGenericUserCerts findProjectGenericUserCerts(String projectGenericUsername) {
        TypedQuery<ProjectGenericUserCerts> query = em.createNamedQuery(
                "ProjectGenericUserCerts.findByProjectGenericUsername", ProjectGenericUserCerts.class);
        query.setParameter("projectGenericUsername", projectGenericUsername);

        try {
            return query.getSingleResult();
        } catch (NoResultException e) {
            return null;
        }
    }

    public List<ProjectGenericUserCerts> findAllProjectGenericUserCerts() {
        TypedQuery<ProjectGenericUserCerts> query = em.createNamedQuery("ProjectGenericUserCerts.findAll",
                ProjectGenericUserCerts.class);

        try {
            return query.getResultList();
        } catch (EntityNotFoundException ex) {
            LOG.log(Level.SEVERE, ex.getMessage(), ex);
        } catch (NoResultException ex) {

        }
        return new ArrayList<>();
    }

    public UserCerts putUserCerts(String projectname, String username, String userKeyPwd) throws IOException {
        File kFile = new File("/tmp/" + projectname + "__" + username + "__kstore.jks");
        FileInputStream kfin = new FileInputStream(kFile);
        File tFile = new File("/tmp/" + projectname + "__" + username + "__tstore.jks");
        FileInputStream tfin = new FileInputStream(tFile);

        byte[] kStoreBlob = ByteStreams.toByteArray(kfin);
        byte[] tStoreBlob = ByteStreams.toByteArray(tfin);

        UserCerts uc = new UserCerts(projectname, username);
        uc.setUserKey(kStoreBlob);
        uc.setUserCert(tStoreBlob);
        uc.setUserKeyPwd(userKeyPwd);
        em.persist(uc);
        em.flush();

        FileUtils.deleteQuietly(kFile);
        FileUtils.deleteQuietly(tFile);

        return uc;
    }

    public void putProjectGenericUserCerts(String projectGenericUsername, String certificatePassword) {

        File kFile = new File("/tmp/" + projectGenericUsername + "__kstore.jks");
        File tFile = new File("/tmp/" + projectGenericUsername + "__tstore.jks");
        try (FileInputStream kfin = new FileInputStream(kFile); FileInputStream tfin = new FileInputStream(tFile)) {

            byte[] kStoreBlob = ByteStreams.toByteArray(kfin);
            byte[] tStoreBlob = ByteStreams.toByteArray(tfin);

            ProjectGenericUserCerts sc = new ProjectGenericUserCerts(projectGenericUsername);
            sc.setKey(kStoreBlob);
            sc.setCert(tStoreBlob);
            sc.setCertificatePassword(certificatePassword);
            em.persist(sc);
            em.flush();

            // TODO - DO NOT SWALLOW EXCEPTIONS!!!
        } catch (FileNotFoundException e) {
            Logger.getLogger(CertsFacade.class.getName()).log(Level.SEVERE, null, e);
        } catch (IOException ex) {
            Logger.getLogger(CertsFacade.class.getName()).log(Level.SEVERE, null, ex);
        } catch (Throwable ex) {
            Logger.getLogger(CertsFacade.class.getName()).log(Level.SEVERE, null, ex);
        } finally {
            FileUtils.deleteQuietly(kFile);
            FileUtils.deleteQuietly(tFile);
        }
    }

    public void update(UserCerts uc) {
        em.merge(uc);
    }

    public <T> void remove(T uc) {
        if (uc != null) {
            em.remove(uc);
        }
    }

    public void removeUserProjectCerts(String projectname, String username) {
        UserCerts item = findUserCert(projectname, username);
        if (item != null) {
            UserCerts tmp = em.merge(item);
            remove(tmp);
        }
    }

    public void removeAllCertsOfAUser(String username) {
        List<UserCerts> items = findUserCertsByUid(username);
        if (items != null) {
            for (UserCerts uc : items) {
                UserCerts tmp = em.merge(uc);
                remove(tmp);
            }
        }
    }

    public void removeAllCertsOfAProject(String projectname) {
        List<UserCerts> items = findUserCertsByProjectId(projectname);
        removeCerts(items);

        removeProjectGenericCertificates(projectname + Settings.PROJECT_GENERIC_USER_SUFFIX);
    }

    public void removeProjectGenericCertificates(String projectGenericUser) {
        remove(findProjectGenericUserCerts(projectGenericUser));
    }

    private <T> void removeCerts(List<T> items) {
        if (items != null) {
            for (T item : items) {
                T tmp = em.merge(item);
                remove(tmp);
            }
        }
    }
}