Package com.atlassian.connect.play.java

Source Code of com.atlassian.connect.play.java.AC

package com.atlassian.connect.play.java;

import com.atlassian.connect.play.java.model.AcHostModel;
import com.atlassian.connect.play.java.oauth.OAuthSignatureCalculator;
import com.atlassian.connect.play.java.token.Token;
import com.atlassian.connect.play.java.util.OAuthKeys;
import com.atlassian.fugue.Option;
import com.google.common.base.Supplier;
import com.google.common.base.Suppliers;
import org.apache.commons.codec.binary.Base64;
import play.Play;
import play.api.libs.Crypto;
import play.db.jpa.JPA;
import play.libs.F;
import play.libs.Json;
import play.libs.WS;
import play.mvc.Http;

import java.util.concurrent.TimeUnit;

import static com.atlassian.connect.play.java.Constants.AC_DEV;
import static com.atlassian.connect.play.java.Constants.AC_HOST_PARAM;
import static com.atlassian.connect.play.java.Constants.AC_PLUGIN_KEY;
import static com.atlassian.connect.play.java.Constants.AC_TOKEN;
import static com.atlassian.connect.play.java.Constants.AC_USER_ID_PARAM;
import static com.atlassian.connect.play.java.util.Utils.LOGGER;
import static com.atlassian.fugue.Option.none;
import static com.atlassian.fugue.Option.option;
import static com.atlassian.fugue.Option.some;
import static com.google.common.base.Preconditions.checkArgument;
import static com.google.common.base.Preconditions.checkNotNull;
import static java.lang.String.format;
import static play.mvc.Http.Context.Implicit.request;

public final class AC
{
    private static final Long DEFAULT_TIMEOUT = TimeUnit.SECONDS.convert(5, TimeUnit.MILLISECONDS);

    public static String PLUGIN_KEY = Play.application().configuration().getString(AC_PLUGIN_KEY, isDev() ? "_add-on_key" : null);
    public static String PLUGIN_NAME = Option.option(Play.application().configuration().getString(Constants.AC_PLUGIN_NAME, isDev() ? "Atlassian Connect Play Add-on" : null)).getOrElse(PLUGIN_KEY);

    // the base URL
    public static BaseUrl baseUrl;
    public static long tokenExpiry;

    public static final Supplier<String> publicKey = OAuthKeys.publicKey;
    public static final Supplier<String> privateKey = OAuthKeys.privateKey;

    public static boolean isDev()
    {
        return Play.isDev()
                || Play.isTest()
                || Boolean.valueOf(Play.application().configuration().getString(AC_DEV, "false"))
                || Boolean.getBoolean(AC_DEV);
    }

    public static Option<String> getUser()
    {
        final Option<String> user = option(request().getQueryString(AC_USER_ID_PARAM));
        //user might have been set via com.atlassian.connect.play.java.token.PageTokenValidatorAction
        if (user.isEmpty())
        {
            return Option.option((String) getHttpContext().args.get(AC_USER_ID_PARAM));
        }
        return user;
    }

    public static WS.WSRequestHolder url(String url)
    {
        return url(url, checkNotNull(getAcHost(), "No AcHost found in HttpContext"));
    }

    public static WS.WSRequestHolder url(String url, AcHost acHost)
    {
        return url(url, acHost, getUser());
    }

    public static WS.WSRequestHolder url(String url, AcHost acHost, Option<String> userId)
    {
        checkNotNull(url, "Url must be non-null");
        checkNotNull(acHost, "acHost must be non-null");

        final String absoluteUrl = getAbsoluteUrl(url, acHost);

        LOGGER.debug(format("Creating request to '%s'", absoluteUrl));

        final WS.WSRequestHolder request = WS.url(absoluteUrl)
                .setTimeout(DEFAULT_TIMEOUT.intValue())
                .setFollowRedirects(false) // because we need to sign again in those cases.
                .sign(new OAuthSignatureCalculator());

        if (userId.isDefined())
        {
            request.setQueryParameter(AC_USER_ID_PARAM, userId.get());
        }
        return request;
    }

    private static String getAbsoluteUrl(String url, AcHost acHost) {
        String absoluteUrl;
        if (url.matches("^[\\w]+:.*"))
        {
            checkArgument(url.startsWith(acHost.getBaseUrl()), "Absolute request URL must begin with the host base URL");
            absoluteUrl = url;
        }
        else
        {
            absoluteUrl = acHost.getBaseUrl() + url;
        }
        return absoluteUrl;
    }

    public static AcHost getAcHost()
    {
        return (AcHost) getHttpContext().args.get(AC_HOST_PARAM);
    }

    public static AcHost setAcHost(String consumerKey)
    {
        return setAcHost(getAcHost(consumerKey).getOrError(Suppliers.ofInstance("An error occured getting the host application")));
    }

    public static Option<? extends AcHost> getAcHost(final String consumerKey)
    {
        try
        {
            return JPA.withTransaction(new F.Function0<Option<? extends AcHost>>()
            {
                @Override
                public Option<? extends AcHost> apply() throws Throwable
                {
                    return AcHostModel.findByKey(consumerKey);
                }
            });
        }
        catch (Throwable throwable)
        {
            throw new RuntimeException(throwable);
        }
    }

    public static void refreshToken(boolean allowInsecurePolling)
    {
        final Token token = new Token(AC.getAcHost().getKey(), AC.getUser(), System.currentTimeMillis(), allowInsecurePolling);

        final String jsonToken = Base64.encodeBase64String(token.toJson().toString().getBytes());
        final String encryptedToken = Crypto.encryptAES(jsonToken);

        getHttpContext().args.put(AC_TOKEN, encryptedToken);
    }

    public static Option<Token> validateToken(final String encryptedToken, final boolean allowInsecurePolling)
    {
        try
        {
            final String decrypted = Crypto.decryptAES(encryptedToken);
            final Token token = Token.fromJson(Json.parse(new String(Base64.decodeBase64(decrypted))));
            //only accept tokens which allowInsecurePolling from Actions that were annotated with this option set
            //to true!
            if(!allowInsecurePolling && token.isAllowInsecurePolling())
            {
                return none();
            }
            if (token != null && (System.currentTimeMillis() - AC.tokenExpiry) <= token.getTimestamp())
            {
                return some(token);
            }
        }
        catch(Throwable t)
        {
            //Crypto throws Exceptions when there's issues decrypting.  That's normal usage in
            //case someone's trying to fake a token, so lets ignore it here.
        }

        return none();
    }

    public static Option<String> getToken()
    {
        return Option.option((String) getHttpContext().args.get(AC_TOKEN));
    }

    static AcHost setAcHost(AcHost host)
    {
        getHttpContext().args.put(AC_HOST_PARAM, host);
        return host;
    }

    private static Http.Context getHttpContext()
    {
        return Http.Context.current();
    }
}
TOP

Related Classes of com.atlassian.connect.play.java.AC

TOP
Copyright © 2018 www.massapi.com. All rights reserved.
All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.