use of io.getlime.security.powerauth.rest.api.spring.exception.authentication.PowerAuthInvalidRequestException in project powerauth-restful-integration by lime-company.
the class RecoveryService method confirmRecoveryCode.
/**
* Confirm recovery code.
* @param request ECIES encrypted request.
* @param authentication PowerAuth API authentication object.
* @return ECIES encrypted response.
* @throws PowerAuthAuthenticationException In case confirm recovery fails.
*/
public EciesEncryptedResponse confirmRecoveryCode(EciesEncryptedRequest request, PowerAuthApiAuthentication authentication) throws PowerAuthAuthenticationException {
try {
final String activationId = authentication.getActivationContext().getActivationId();
final PowerAuthSignatureHttpHeader httpHeader = (PowerAuthSignatureHttpHeader) authentication.getHttpHeader();
final String applicationKey = httpHeader.getApplicationKey();
if (activationId == null || applicationKey == null || request.getEphemeralPublicKey() == null || request.getEncryptedData() == null || request.getMac() == null) {
logger.warn("PowerAuth confirm recovery failed because of invalid request");
throw new PowerAuthInvalidRequestException();
}
final ConfirmRecoveryCodeResponse paResponse = powerAuthClient.confirmRecoveryCode(activationId, applicationKey, request.getEphemeralPublicKey(), request.getEncryptedData(), request.getMac(), request.getNonce());
if (!paResponse.getActivationId().equals(activationId)) {
logger.warn("PowerAuth confirm recovery failed because of invalid activation ID in response");
throw new PowerAuthInvalidRequestException();
}
return new EciesEncryptedResponse(paResponse.getEncryptedData(), paResponse.getMac());
} catch (Exception ex) {
logger.warn("PowerAuth confirm recovery failed, error: {}", ex.getMessage());
logger.debug(ex.getMessage(), ex);
throw new PowerAuthRecoveryConfirmationException();
}
}
Aggregations