Examples with UserAccount com.jd.blockchain.ledger.core.UserAccount used on opensource projects

Example 11 with UserAccount

use of com.jd.blockchain.ledger.core.UserAccount in project jdchain-core by blockchain-jd-com.

the class UserCAUpdateOperationHandle method doProcess.

@Override
protected void doProcess(UserCAUpdateOperation op, LedgerTransactionContext transactionContext, TransactionRequestExtension requestContext, LedgerQuery ledger, OperationHandleContext handleContext, EventManager manager) {
    // 权限校验；
    SecurityPolicy securityPolicy = SecurityContext.getContextUsersPolicy();
    securityPolicy.checkEndpointPermission(LedgerPermission.UPDATE_USER_CA, MultiIDsPolicy.AT_LEAST_ONE);
    UserAccount user = transactionContext.getDataset().getUserAccountSet().getAccount(op.getUserAddress());
    if (null == user) {
        throw new UserDoesNotExistException(String.format("User doesn't exist! --[Address=%s]", op.getUserAddress()));
    }
    if (user.getState() == AccountState.REVOKE) {
        throw new IllegalAccountStateException(String.format("Can not change user in REVOKE state! --[Address=%s]", op.getUserAddress()));
    }
    // 证书校验
    X509Certificate cert = CertificateUtils.parseCertificate(op.getCertificate());
    CertificateUtils.checkCertificateRolesAny(cert, CertificateRole.PEER, CertificateRole.GW, CertificateRole.USER);
    CertificateUtils.checkValidity(cert);
    X509Certificate[] ledgerCAs = CertificateUtils.parseCertificates(transactionContext.getDataset().getAdminDataset().getAdminSettings().getMetadata().getLedgerCertificates());
    X509Certificate[] issuers = CertificateUtils.findIssuers(cert, ledgerCAs);
    Arrays.stream(issuers).forEach(issuer -> CertificateUtils.checkCACertificate(issuer));
    CertificateUtils.checkValidityAny(issuers);
    // 操作账本；
    ((UserAccountSetEditor) (transactionContext.getDataset().getUserAccountSet())).setCertificate(op.getUserAddress(), op.getCertificate());
}