Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'master' of https://github.com/Evolveum/midpoint
- Loading branch information
Showing
9 changed files
with
418 additions
and
14 deletions.
There are no files selected for viewing
173 changes: 173 additions & 0 deletions
173
...min-gui/src/main/java/com/evolveum/midpoint/gui/impl/util/ReportPeerQueryInterceptor.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,173 @@ | ||
| package com.evolveum.midpoint.gui.impl.util; | ||
|
|
||
| import com.evolveum.midpoint.prism.PrismObject; | ||
| import com.evolveum.midpoint.prism.query.ObjectQuery; | ||
| import com.evolveum.midpoint.prism.query.TypeFilter; | ||
| import com.evolveum.midpoint.repo.api.RepositoryService; | ||
| import com.evolveum.midpoint.schema.result.OperationResult; | ||
| import com.evolveum.midpoint.task.api.TaskManager; | ||
| import com.evolveum.midpoint.util.logging.LoggingUtils; | ||
| import com.evolveum.midpoint.util.logging.Trace; | ||
| import com.evolveum.midpoint.util.logging.TraceManager; | ||
| import com.evolveum.midpoint.web.security.MidPointApplication; | ||
| import com.evolveum.midpoint.xml.ns._public.common.common_3.NodeType; | ||
|
|
||
| import org.apache.commons.io.IOUtils; | ||
|
|
||
| import javax.servlet.ServletContext; | ||
| import javax.servlet.ServletException; | ||
| import javax.servlet.http.HttpServlet; | ||
| import javax.servlet.http.HttpServletRequest; | ||
| import javax.servlet.http.HttpServletResponse; | ||
| import java.io.File; | ||
| import java.io.FileInputStream; | ||
| import java.io.IOException; | ||
| import java.io.OutputStream; | ||
| import java.net.URLDecoder; | ||
| import java.util.List; | ||
|
|
||
| public class ReportPeerQueryInterceptor extends HttpServlet { | ||
|
|
||
| private static final long serialVersionUID = 7612750211021974750L; | ||
| private static String MIDPOINT_HOME = System.getProperty("midpoint.home"); | ||
| private static String EXPORT_DIR = MIDPOINT_HOME + "export/"; | ||
| private static String HEADER_USERAGENT = "mp-cluser-peer-client"; | ||
| private static String DEFAULTMIMETYPE = "application/octet-stream"; | ||
| private static String FILENAMEPARAMETER = "fname"; | ||
| private static String URLENCODING = "UTF-8"; | ||
|
|
||
| private static final String INTERCEPTOR_CLASS = ReportPeerQueryInterceptor.class.getName() + "."; | ||
| private static final String OPERATION_LIST_NODES = INTERCEPTOR_CLASS + "listNodes"; | ||
|
|
||
| private static final Trace LOGGER = TraceManager.getTrace(ReportPeerQueryInterceptor.class); | ||
|
|
||
| @Override | ||
| protected void doGet(HttpServletRequest request, HttpServletResponse response) | ||
| throws ServletException, IOException { | ||
| String userAgent = request.getHeader("User-Agent"); | ||
| String remoteName = request.getRemoteHost(); | ||
| if (!HEADER_USERAGENT.equals(userAgent)) { | ||
| LOGGER.debug("Invalid user-agent: {}", userAgent); | ||
| response.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||
| } else if (!isKnownNode(remoteName, "File retrieval")) { | ||
| LOGGER.debug("Unknown node, host: {} ", remoteName); | ||
| response.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||
| } else { | ||
| String fileName = request.getParameter(FILENAMEPARAMETER); | ||
| fileName = URLDecoder.decode(fileName, URLENCODING); | ||
| StringBuilder buildfilePath = new StringBuilder(EXPORT_DIR).append(fileName); | ||
| String filePath = buildfilePath.toString(); | ||
|
|
||
| File loadedFile = new File(filePath); | ||
| if (!loadedFile.exists()) { | ||
| StringBuilder errorBuilder = new StringBuilder("Download operation not successful. The file: ") | ||
| .append(fileName).append(" was not found on the filesystem"); | ||
| LOGGER.warn(errorBuilder.toString()); | ||
| response.setStatus(HttpServletResponse.SC_NOT_FOUND); | ||
| } else if (loadedFile.isDirectory()) { | ||
| StringBuilder errorBuilder = new StringBuilder("Download operation not successful. Attempt to download a directory with the name: ") | ||
| .append(fileName).append(" this operation is prohibited."); | ||
| LOGGER.warn(errorBuilder.toString()); | ||
| response.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||
| } else { | ||
| FileInputStream fileInputStream = new FileInputStream(filePath); | ||
|
|
||
| ServletContext context = getServletContext(); | ||
| String mimeType = context.getMimeType(filePath); | ||
|
|
||
| if (mimeType == null) { | ||
| // MIME mapping not found | ||
| mimeType = DEFAULTMIMETYPE; | ||
| } | ||
|
|
||
| response.setContentType(mimeType); | ||
| response.setContentLength((int) loadedFile.length()); | ||
|
|
||
| StringBuilder headerValue = new StringBuilder("attachment; filename=\"%s\"").append(fileName); | ||
| response.setHeader("Content-Disposition", headerValue.toString()); | ||
|
|
||
| OutputStream outputStream = response.getOutputStream(); | ||
|
|
||
| byte[] buffer = new byte[1024]; | ||
| int len; | ||
| while ((len = fileInputStream.read(buffer)) > -1) { | ||
| outputStream.write(buffer, 0, len); | ||
| } | ||
| IOUtils.closeQuietly(fileInputStream); | ||
| IOUtils.closeQuietly(outputStream); | ||
| LOGGER.trace("The file {} has been dispatched to the client.", fileName); | ||
| } | ||
| } | ||
| } | ||
|
|
||
| @Override | ||
| protected void doDelete(HttpServletRequest request, HttpServletResponse response) throws ServletException, java.io.IOException { | ||
|
|
||
| String userAgent = request.getHeader("User-Agent"); | ||
| String remoteName = request.getRemoteHost(); | ||
| if (!HEADER_USERAGENT.equals(userAgent)) { | ||
| LOGGER.debug("Invalid user-agent: {}", userAgent); | ||
| response.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||
| } else if (!isKnownNode(remoteName, "File deletion")) { | ||
| LOGGER.debug("Unknown node, host: {} ", remoteName); | ||
| response.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||
| } else { | ||
| String fileName = request.getParameter(FILENAMEPARAMETER); | ||
| fileName = URLDecoder.decode(fileName, URLENCODING); | ||
| StringBuilder buildfilePath = new StringBuilder(EXPORT_DIR).append(fileName); | ||
| String filePath = buildfilePath.toString(); | ||
| File reportFile = new File(filePath); | ||
| if (!reportFile.exists()) { | ||
| StringBuilder errorBuilder = new StringBuilder("Delete operation not successful. The file: ").append(fileName) | ||
| .append(" was not found on the filesystem."); | ||
| LOGGER.warn(errorBuilder.toString()); | ||
| response.sendError(HttpServletResponse.SC_NOT_FOUND); | ||
|
|
||
| } else if (reportFile.isDirectory()) { | ||
| StringBuilder errorBuilder = new StringBuilder("Delete operation not successful. Attempt to Delete a directory with the name: ") | ||
| .append(fileName).append(" This operation is prohibited."); | ||
| LOGGER.warn(errorBuilder.toString()); | ||
| response.setStatus(HttpServletResponse.SC_FORBIDDEN); | ||
| } else { | ||
| reportFile.delete(); | ||
| response.setStatus(HttpServletResponse.SC_NO_CONTENT); | ||
| } | ||
| LOGGER.trace("Deletion of the file {} has finished.", fileName); | ||
| } | ||
| } | ||
|
|
||
| protected RepositoryService getRepositoryService() { | ||
| MidPointApplication application = (MidPointApplication) MidPointApplication.get(); | ||
| return application.getRepositoryService(); | ||
| } | ||
|
|
||
| protected TaskManager getTaskManager() { | ||
| MidPointApplication application = (MidPointApplication) MidPointApplication.get(); | ||
| return application.getTaskManager(); | ||
| } | ||
|
|
||
| protected Boolean isKnownNode(String remoteName, String operation) { | ||
|
|
||
| LOGGER.info("Checking if {} is a known node", remoteName); | ||
| OperationResult result = new OperationResult(OPERATION_LIST_NODES); | ||
| try { | ||
| ObjectQuery query = new ObjectQuery(); | ||
| TypeFilter filter = TypeFilter.createType(NodeType.COMPLEX_TYPE, null); | ||
| query.addFilter(filter); | ||
| List<PrismObject<NodeType>> knownNodes = getRepositoryService().searchObjects(NodeType.class, null, null, result); | ||
| for (PrismObject<NodeType> node : knownNodes) { | ||
| NodeType actualNode = node.asObjectable(); | ||
| if (remoteName.equals(actualNode.getHostname())) { | ||
| LOGGER.trace("The node {} was recognized as a known node. Attempting to execute the requested operation: {} ", actualNode.getHostname(), operation); | ||
| return true; | ||
| } | ||
| } | ||
|
|
||
| } catch (Exception e) { | ||
| LOGGER.error("Unhandled exception when listing nodes"); | ||
| LoggingUtils.logUnexpectedException(LOGGER, "Unhandled exception when listing nodes", e); | ||
| } | ||
| return false; | ||
| } | ||
|
|
||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.