com.confighub.api.repository.user.audit.DecryptAuditFile.java Source code

Introduction

Here is the source code for com.confighub.api.repository.user.audit.DecryptAuditFile.java

Source

/*
 * This file is part of ConfigHub.
 *
 * ConfigHub is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * ConfigHub is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with ConfigHub.If not, see <http://www.gnu.org/licenses/>.
 */

package com.confighub.api.repository.user.audit;

import com.confighub.api.repository.user.AUserAccessValidation;
import com.confighub.core.error.ConfigException;
import com.confighub.core.error.Error;
import com.confighub.core.repository.RepoFile;
import com.confighub.core.security.Encryption;
import com.confighub.core.security.SecurityProfile;
import com.confighub.core.store.Store;
import com.confighub.core.utils.DateTimeUtils;
import com.confighub.core.utils.Utils;
import com.google.gson.Gson;
import com.google.gson.JsonElement;
import com.google.gson.JsonObject;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;

import javax.ws.rs.*;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import java.util.Date;

@Path("/decryptAuditFile")
public class DecryptAuditFile extends AUserAccessValidation {
    private static final Logger log = LogManager.getLogger(DecryptAuditFile.class);

    @POST
    @Path("/{account}/{repository}")
    @Produces("application/json")
    public Response get(@PathParam("account") String account, @PathParam("repository") String repositoryName,
            @FormParam("id") long id, @FormParam("revId") long revId, @FormParam("password") String password,
            @FormParam("oldPass") String oldPass, @FormParam("oldSpName") String oldSpName,
            @FormParam("ts") Long ts, @HeaderParam("Authorization") String token) {
        JsonObject json = new JsonObject();
        Store store = new Store();
        Gson gson = new Gson();

        try {

            int status = validate(account, repositoryName, token, store);
            if (0 != status)
                return Response.status(status).build();

            RepoFile file = store.getAuditConfigFile(user, repository, id, revId);
            if (null == file)
                throw new ConfigException(Error.Code.NOT_FOUND);

            SecurityProfile sp = file.getSecurityProfile();
            if (null != sp && !sp.isSecretValid(password))
                throw new ConfigException(Error.Code.INVALID_PASSWORD);

            if (file.isEncrypted())
                file.decryptFile(password);

            String dj = file.getDiffJson();
            if (Utils.isBlank(dj)) {
                json.addProperty("old", "");
            } else {
                JsonObject diffJson = new Gson().fromJson(dj, JsonObject.class);
                JsonElement oldContentEl = diffJson.get("content");

                if (null == oldContentEl) {
                    json.addProperty("old", "");
                } else {
                    if (diffJson.get("encrypted").getAsBoolean()) {
                        Date dateObj = DateTimeUtils.dateFromTsOrTag(null, ts, repository.getCreateDate());
                        SecurityProfile oldSp = store.getSecurityProfile(user, repository, dateObj, oldSpName);

                        String oldDecrypted = Encryption.decrypt(oldSp.getCipher(),
                                diffJson.get("content").getAsString().trim(),
                                Utils.isBlank(oldPass) ? password : oldPass);

                        json.addProperty("old", oldDecrypted);
                    } else {
                        json.addProperty("old", oldContentEl.getAsString());
                    }
                }
            }

            json.addProperty("content", file.getContent());
            json.addProperty("success", true);
            return Response.ok(gson.toJson(json), MediaType.APPLICATION_JSON).build();
        } catch (ConfigException e) {
            e.printStackTrace();
            json.addProperty("success", false);
            json.addProperty("message", e.getMessage());

            return Response.ok(gson.toJson(json), MediaType.APPLICATION_JSON).build();
        } finally {
            store.close();
        }
    }

}