gr.demokritos.iit.security.storage.SecurityHBase.java Source code

Introduction

Here is the source code for gr.demokritos.iit.security.storage.SecurityHBase.java

Source

/* 
 * Copyright 2016 IIT , NCSR Demokritos - http://www.iit.demokritos.gr,
 *                      SciFY NPO http://www.scify.org.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package gr.demokritos.iit.security.storage;

import static gr.demokritos.iit.security.SecurityLayer.LOGGER;
import gr.demokritos.iit.security.authorization.Action;
import gr.demokritos.iit.security.interfaces.ISecurityStorage;
import gr.demokritos.iit.security.ontologies.SystemUser;
import gr.demokritos.iit.utilities.configuration.PersonalAIzHBaseConfiguration;
import java.io.IOException;
import java.util.HashSet;
import java.util.Set;
import org.apache.commons.codec.digest.DigestUtils;
import org.apache.hadoop.conf.Configuration;
import org.apache.hadoop.hbase.client.HTable;
import org.apache.hadoop.hbase.client.ResultScanner;
import org.apache.hadoop.hbase.client.Scan;
import org.apache.hadoop.hbase.util.Bytes;

/**
 * This class implement the Security Apache HBase storage system.
 *
 * @author Giotis Panagiotis <giotis.p@gmail.com>
 */
public class SecurityHBase implements ISecurityStorage {

    //=================== HBase tables ========================================
    private final String table_Clients = "Clients";
    private final String table_APIKeys = "APIKeys";
    //=================== HBase Families ======================================
    private final byte[] family_Info = Bytes.toBytes("Info");
    private final byte[] family_Attributes = Bytes.toBytes("Attributes");
    private final byte[] family_Features = Bytes.toBytes("Features");
    private final byte[] family_ClientUsers = Bytes.toBytes("ClientUsers");
    private final byte[] family_Keys = Bytes.toBytes("Keys");

    //=================== HBase Families ======================================
    //=================== HBase Qualifiers ====================================
    private final byte[] qualifier_Client = Bytes.toBytes("Client");
    private final byte[] qualifier_Username = Bytes.toBytes("Username");
    private final byte[] qualifier_Password = Bytes.toBytes("Password");
    //=================== HBase Qualifiers ====================================

    private final Configuration config;

    /**
     * The constructor of Security HBase storage system.
     */
    public SecurityHBase() {
        //Create new HBase configuration
        config = new PersonalAIzHBaseConfiguration().getHBaseConfig();
    }

    //========================== Authentication ================================
    /**
     * Check credentials from HBase via username and password
     *
     * @param username Username
     * @param password Password
     * @return The status of the checking
     */
    @Override
    public boolean checkCredentials(String username, String password) {
        //Initialize variables
        boolean access = false;

        //Initialize variables
        HTable table = null;
        try {

            //Create clients table
            table = new HTable(config, table_Clients);

            Scan scan = new Scan();

            ResultScanner scanner = table.getScanner(scan);

            for (org.apache.hadoop.hbase.client.Result cResult : scanner) {
                String cName = Bytes.toString(cResult.getValue(family_Info, qualifier_Username));

                if (cName.equals(username)) {
                    String cPassword = Bytes.toString(cResult.getValue(family_Info, qualifier_Password));

                    if (cPassword.equals(DigestUtils.sha1Hex(password))) {
                        access = true;
                        break;
                    }
                }
            }
        } catch (IOException ex) {
            LOGGER.error("#SecurityHBase | checkCredentials: " + "Error on checkCredentials un: " + username
                    + " pw: " + password, ex);
        }
        return access;
    }

    /**
     * Check credentials from HBase via apikey
     *
     * @param apikey The apikey
     * @return The status of the checking
     */
    @Override
    public boolean checkCredentials(String apikey) {

        //Initialize variables
        boolean access = false;

        //Initialize variables
        HTable table = null;
        try {

            //Create clients table
            table = new HTable(config, table_APIKeys);

            Scan scan = new Scan();

            ResultScanner scanner = table.getScanner(scan);

            for (org.apache.hadoop.hbase.client.Result cResult : scanner) {
                String cAPIKey = Bytes.toString(cResult.getRow());

                if (cAPIKey.equals(apikey)) {
                    access = true;
                    break;
                }
            }
        } catch (IOException ex) {
            LOGGER.error("#SecurityHBase | checkCredentials: " + "Error on checkCredentials APIKey: " + apikey, ex);
        }

        return access;
    }

    //========================== Authorization =================================
    /**
     * Check the Access permission from HBase
     *
     * @param u The system user
     * @param a The Action for checking
     * @param Access The Access type
     * @return The permission status
     */
    @Override
    public boolean checkAccess(SystemUser u, Action a, String Access) {

        LOGGER.debug("#SecurityHBase | checkAccess: $systemUser" + u.toString() + " $Action " + a.toString()
                + " $Access " + Access);
        //TODO: Implement access read from HBase and return the status. Now return false

        Set<String> adminActions = new HashSet<>();
        adminActions.add("Admin.AddClient");
        adminActions.add("Admin.DeleteClient");
        adminActions.add("Admin.GetClients");
        adminActions.add("Admin.setClientRoles");
        adminActions.add("Admin.GetSettings");
        adminActions.add("Admin.SetSettings");
        return !adminActions.contains(a.getName());
    }

}