Examples with HTTP_FORBIDDEN java.net.HttpURLConnection.HTTP_FORBIDDEN used on opensource projects

Example 1 with HTTP_FORBIDDEN

use of java.net.HttpURLConnection.HTTP_FORBIDDEN in project sonarqube by SonarSource.

the class GithubApplicationClientImpl method checkAppPermissions.

@Override
public void checkAppPermissions(GithubAppConfiguration githubAppConfiguration) {
    AppToken appToken = appSecurity.createAppToken(githubAppConfiguration.getId(), githubAppConfiguration.getPrivateKey());
    Map<String, String> permissions = new HashMap<>();
    permissions.put("checks", WRITE_PERMISSION_NAME);
    permissions.put("pull_requests", WRITE_PERMISSION_NAME);
    permissions.put("statuses", READ_PERMISSION_NAME);
    permissions.put("metadata", READ_PERMISSION_NAME);
    String endPoint = "/app";
    GetResponse response;
    try {
        response = appHttpClient.get(githubAppConfiguration.getApiEndpoint(), appToken, endPoint);
    } catch (IOException e) {
        LOG.warn(FAILED_TO_REQUEST_BEGIN_MSG + githubAppConfiguration.getApiEndpoint() + endPoint, e);
        throw new IllegalArgumentException("Failed to validate configuration, check URL and Private Key");
    }
    if (response.getCode() == HTTP_OK) {
        Map<String, String> perms = handleResponse(response, endPoint, GsonApp.class).map(GsonApp::getPermissions).orElseThrow(() -> new IllegalArgumentException("Failed to get app permissions, unexpected response body"));
        List<String> missingPermissions = permissions.entrySet().stream().filter(permission -> !Objects.equals(permission.getValue(), perms.get(permission.getKey()))).map(Map.Entry::getKey).collect(toList());
        if (!missingPermissions.isEmpty()) {
            String message = missingPermissions.stream().map(perm -> perm + " is '" + perms.get(perm) + "', should be '" + permissions.get(perm) + "'").collect(Collectors.joining(", "));
            throw new IllegalArgumentException("Missing permissions; permission granted on " + message);
        }
    } else if (response.getCode() == HTTP_UNAUTHORIZED || response.getCode() == HTTP_FORBIDDEN) {
        throw new IllegalArgumentException("Authentication failed, verify the Client Id, Client Secret and Private Key fields");
    } else {
        throw new IllegalArgumentException("Failed to check permissions with Github, check the configuration");
    }
}