Examples with HttpCon com.tremolosecurity.provisioning.util.HttpCon used on opensource projects

Example 86 with HttpCon

use of com.tremolosecurity.provisioning.util.HttpCon in project OpenUnison by TremoloSecurity.

the class WaitForObjectCreation method doTask.

@Override
public boolean doTask(User user, Map<String, Object> request) throws ProvisioningException {
    long start = System.currentTimeMillis();
    for (String uri : this.uris) {
        String localUri = task.renderTemplate(uri, request);
        boolean found = false;
        while (!found) {
            OpenShiftTarget k8s = (OpenShiftTarget) GlobalEntries.getGlobalEntries().getConfigManager().getProvisioningEngine().getTarget(this.targetName).getProvider();
            HttpCon con = null;
            try {
                String token = k8s.getAuthToken();
                con = k8s.createClient();
                found = k8s.isObjectExistsByPath(token, con, localUri);
                if (!found) {
                    if ((start + this.timeOut) < System.currentTimeMillis()) {
                        throw new ProvisioningException("Timeout waiting for " + localUri);
                    } else {
                        logger.info(localUri + " not found, waiting 30 seconds");
                    }
                    Thread.sleep(30000);
                } else {
                    logger.info(localUri + " found");
                }
            } catch (Exception e) {
                throw new ProvisioningException("Could not wait for object creation", e);
            } finally {
                if (con != null) {
                    try {
                        con.getHttp().close();
                    } catch (IOException e) {
                    // do nothing
                    }
                    con.getBcm().close();
                }
            }
        }
    }
    return true;
}

Example 87 with HttpCon

use of com.tremolosecurity.provisioning.util.HttpCon in project OpenUnison by TremoloSecurity.

the class K8sLoadTrusts method addObject.

@Override
public void addObject(TremoloType cfg, JSONObject item) throws ProvisioningException {
    try {
        HttpCon nonwatchHttp = this.k8sWatch.getK8s().createClient();
        this.addTrust(trusts, nonwatchHttp, this.k8sWatch.getK8s().getAuthToken(), item);
        nonwatchHttp.getHttp().close();
        nonwatchHttp.getBcm().close();
    } catch (Exception e) {
        throw new ProvisioningException("Could not add trust", e);
    }
}

Example 88 with HttpCon

use of com.tremolosecurity.provisioning.util.HttpCon in project OpenUnison by TremoloSecurity.

the class K8sLoadTrusts method modifyObject.

@Override
public void modifyObject(TremoloType cfg, JSONObject item) throws ProvisioningException {
    try {
        HttpCon nonwatchHttp = this.k8sWatch.getK8s().createClient();
        this.addTrust(trusts, nonwatchHttp, this.k8sWatch.getK8s().getAuthToken(), item);
        nonwatchHttp.getHttp().close();
        nonwatchHttp.getBcm().close();
    } catch (Exception e) {
        throw new ProvisioningException("Could not add trust", e);
    }
}

Example 89 with HttpCon

use of com.tremolosecurity.provisioning.util.HttpCon in project OpenUnison by TremoloSecurity.

the class K8sSessionStore method getSession.

@Override
public OidcSessionState getSession(String sessionId) throws Exception {
    String sessionIdName = new StringBuilder().append("x").append(sessionId).append("x").toString();
    OpenShiftTarget k8s = null;
    try {
        k8s = (OpenShiftTarget) GlobalEntries.getGlobalEntries().getConfigManager().getProvisioningEngine().getTarget(this.k8sTarget).getProvider();
    } catch (ProvisioningException e1) {
        logger.error("Could not retrieve kubernetes target", e1);
        throw new ProvisioningException("Could not connect to kubernetes", e1);
    }
    String url = new StringBuilder().append("/apis/openunison.tremolo.io/v1/namespaces/").append(this.nameSpace).append("/oidc-sessions/").append(sessionIdName).toString();
    try {
        HttpCon con = k8s.createClient();
        try {
            String jsonResp = k8s.callWS(k8s.getAuthToken(), con, url);
            if (logger.isDebugEnabled()) {
                logger.debug("json response from deleting object : " + jsonResp);
            }
            Map ret = gson.fromJson(jsonResp, Map.class);
            Map spec = (Map) ret.get("spec");
            if (spec == null) {
                return null;
            }
            OidcSessionState session = new OidcSessionState();
            session.setSessionID(spec.get("session_id").toString());
            session.setClientID(spec.get("client_id").toString());
            session.setEncryptedAccessToken(spec.get("encrypted_access_token").toString());
            session.setEncryptedIdToken(spec.get("encrypted_id_token").toString());
            session.setRefreshToken(spec.get("refresh_token").toString());
            session.setUserDN(spec.get("user_dn").toString());
            session.setExpires(ISODateTimeFormat.dateTime().parseDateTime(spec.get("expires").toString()));
            return session;
        } finally {
            con.getHttp().close();
            con.getBcm().close();
        }
    } catch (Exception e) {
        logger.error("Could not search k8s", e);
        throw new Exception("Error searching kubernetes", e);
    }
}

Example 90 with HttpCon

use of com.tremolosecurity.provisioning.util.HttpCon in project OpenUnison by TremoloSecurity.

the class K8sSessionStore method saveUserSession.

@Override
public void saveUserSession(OidcSessionState session) throws Exception {
    String sessionIdName = new StringBuilder().append("x").append(session.getSessionID()).append("x").toString();
    HashMap<String, Object> createObject = new HashMap<String, Object>();
    createObject.put("apiVersion", "openunison.tremolo.io/v1");
    createObject.put("kind", "OidcSession");
    HashMap<String, Object> metaData = new HashMap<String, Object>();
    createObject.put("metadata", metaData);
    metaData.put("name", sessionIdName);
    metaData.put("namespace", this.nameSpace);
    HashMap<String, Object> labels = new HashMap<String, Object>();
    metaData.put("labels", labels);
    labels.put("tremolo.io/user-dn", DigestUtils.sha1Hex(session.getUserDN()));
    HashMap<String, Object> spec = new HashMap<String, Object>();
    createObject.put("spec", spec);
    spec.put("session_id", session.getSessionID());
    spec.put("client_id", session.getClientID());
    spec.put("encrypted_id_token", session.getEncryptedIdToken());
    spec.put("encrypted_access_token", session.getEncryptedAccessToken());
    spec.put("user_dn", session.getUserDN());
    spec.put("refresh_token", session.getRefreshToken());
    spec.put("expires", ISODateTimeFormat.dateTime().print(session.getExpires()));
    OpenShiftTarget k8s = null;
    try {
        k8s = (OpenShiftTarget) GlobalEntries.getGlobalEntries().getConfigManager().getProvisioningEngine().getTarget(this.k8sTarget).getProvider();
    } catch (ProvisioningException e1) {
        logger.error("Could not retrieve kubernetes target", e1);
        throw new ProvisioningException("Could not connect to kubernetes", e1);
    }
    String url = new StringBuilder().append("/apis/openunison.tremolo.io/v1/namespaces/").append(this.nameSpace).append("/oidc-sessions").toString();
    try {
        HttpCon con = k8s.createClient();
        try {
            String jsonReq = this.gson.toJson(createObject);
            String jsonResp = k8s.callWSPost(k8s.getAuthToken(), con, url, jsonReq);
            if (logger.isDebugEnabled()) {
                logger.debug("json response from creating object : " + jsonResp);
            }
        // TODO do something?
        } finally {
            con.getHttp().close();
            con.getBcm().close();
        }
    } catch (Exception e) {
        logger.error("Could not search k8s", e);
        throw new Exception("Error searching kubernetes", e);
    }
}