Search in sources :

Example 1 with PskCredential

use of org.eclipse.hono.service.management.credentials.PskCredential in project hono by eclipse.

the class DeviceRegistryHttpClient method addPskDeviceForTenant.

/**
 * Creates a tenant and adds a device to it with a given Pre-Shared Key.
 * <p>
 * The device will be registered with a set of <em>psk</em> credentials using the device identifier as the
 * authentication identifier and PSK identity.
 *
 * @param tenantId The identifier of the tenant to add the secret to.
 * @param tenant The tenant payload as specified by the Tenant management API.
 * @param deviceId The identifier of the device to add to the tenant.
 * @param deviceData Additional data to register for the device.
 * @param key The shared key.
 * @return A future indicating the outcome of the operation.
 * @throws NullPointerException if any of the parameters are are {@code null}.
 */
public Future<HttpResponse<Buffer>> addPskDeviceForTenant(final String tenantId, final Tenant tenant, final String deviceId, final Device deviceData, final String key) {
    Objects.requireNonNull(tenant);
    Objects.requireNonNull(deviceId);
    Objects.requireNonNull(deviceData);
    Objects.requireNonNull(key);
    final PskCredential credential = IntegrationTestSupport.createPskCredentials(deviceId, key);
    return addTenant(tenantId, tenant).compose(ok -> registerDevice(tenantId, deviceId, deviceData)).compose(ok -> addCredentials(tenantId, deviceId, Collections.singleton(credential)));
}
Also used : HttpURLConnection(java.net.HttpURLConnection) X509Certificate(java.security.cert.X509Certificate) Arrays(java.util.Arrays) Json(io.vertx.core.json.Json) ResponsePredicate(io.vertx.ext.web.client.predicate.ResponsePredicate) X500Principal(javax.security.auth.x500.X500Principal) HttpResponse(io.vertx.ext.web.client.HttpResponse) LoggerFactory(org.slf4j.LoggerFactory) MultiMap(io.vertx.core.MultiMap) HashMap(java.util.HashMap) ResponsePredicateResult(io.vertx.ext.web.client.predicate.ResponsePredicateResult) X509CertificateCredential(org.eclipse.hono.service.management.credentials.X509CertificateCredential) Tenant(org.eclipse.hono.service.management.tenant.Tenant) ArrayList(java.util.ArrayList) PskCredential(org.eclipse.hono.service.management.credentials.PskCredential) Map(java.util.Map) JsonObject(io.vertx.core.json.JsonObject) RegistryManagementConstants(org.eclipse.hono.util.RegistryManagementConstants) Device(org.eclipse.hono.service.management.device.Device) Logger(org.slf4j.Logger) Collection(java.util.Collection) UrlEscapers(com.google.common.net.UrlEscapers) Vertx(io.vertx.core.Vertx) X509CertificateSecret(org.eclipse.hono.service.management.credentials.X509CertificateSecret) HttpHeaders(io.vertx.core.http.HttpHeaders) Future(io.vertx.core.Future) Objects(java.util.Objects) List(java.util.List) CommonCredential(org.eclipse.hono.service.management.credentials.CommonCredential) Buffer(io.vertx.core.buffer.Buffer) Optional(java.util.Optional) Collections(java.util.Collections) PasswordCredential(org.eclipse.hono.service.management.credentials.PasswordCredential) PskCredential(org.eclipse.hono.service.management.credentials.PskCredential)

Example 2 with PskCredential

use of org.eclipse.hono.service.management.credentials.PskCredential in project hono by eclipse.

the class RegistryServiceTest method testGetDisabledCredentials.

@Test
void testGetDisabledCredentials(final VertxTestContext context) {
    Future.succeededFuture().flatMap(x -> {
        final var device = new Device();
        return this.registrationManagement.createDevice(DEFAULT_TENANT, Optional.of("d1"), device, SPAN).onComplete(context.succeeding(result -> {
            context.verify(() -> {
                assertThat(result.getStatus()).isEqualTo(HttpURLConnection.HTTP_CREATED);
            });
        }));
    }).flatMap(x -> {
        final var credentials = new LinkedList<CommonCredential>();
        final var psk = new PskCredential("a1", List.of(new PskSecret().setKey(new byte[] { 1, 2, 3, 4 })));
        psk.setEnabled(false);
        credentials.add(psk);
        return this.credentialsManagement.updateCredentials(DEFAULT_TENANT, "d1", credentials, Optional.empty(), SPAN).onFailure(context::failNow);
    }).flatMap(x -> {
        return this.credentialsAdapter.get(DEFAULT_TENANT, CredentialsConstants.SECRETS_TYPE_PRESHARED_KEY, "d1").onComplete(context.succeeding(result -> {
            context.verify(() -> {
                assertThat(result.getStatus()).isEqualTo(HttpURLConnection.HTTP_NOT_FOUND);
            });
        }));
    }).onComplete(context.succeedingThenComplete());
}
Also used : HttpURLConnection(java.net.HttpURLConnection) VertxTestContext(io.vertx.junit5.VertxTestContext) Device(org.eclipse.hono.service.management.device.Device) RegistrationConstants(org.eclipse.hono.util.RegistrationConstants) Truth.assertThat(com.google.common.truth.Truth.assertThat) VertxExtension(io.vertx.junit5.VertxExtension) Future(io.vertx.core.Future) CredentialsConstants(org.eclipse.hono.util.CredentialsConstants) Test(org.junit.jupiter.api.Test) List(java.util.List) CommonCredential(org.eclipse.hono.service.management.credentials.CommonCredential) ExtendWith(org.junit.jupiter.api.extension.ExtendWith) PskCredential(org.eclipse.hono.service.management.credentials.PskCredential) Optional(java.util.Optional) Assertions(org.eclipse.hono.deviceregistry.util.Assertions) PskSecret(org.eclipse.hono.service.management.credentials.PskSecret) LinkedList(java.util.LinkedList) PskCredential(org.eclipse.hono.service.management.credentials.PskCredential) Device(org.eclipse.hono.service.management.device.Device) PskSecret(org.eclipse.hono.service.management.credentials.PskSecret) LinkedList(java.util.LinkedList) Test(org.junit.jupiter.api.Test)

Example 3 with PskCredential

use of org.eclipse.hono.service.management.credentials.PskCredential in project hono by eclipse.

the class CredentialsManagementIT method testAddCredentialsSucceeds.

/**
 * Verifies that a newly added device has an empty set of credentials and that the
 * service successfully adds arbitrary types of credentials.
 *
 * @param context The vert.x test context.
 */
@Test
public void testAddCredentialsSucceeds(final VertxTestContext context) {
    final PasswordCredential pwdCredential = IntegrationTestSupport.createPasswordCredential(authId, "thePassword");
    pwdCredential.getExtensions().put("client-id", "MQTT-client-2384236854");
    final PskCredential pskCredential = IntegrationTestSupport.createPskCredentials("psk-id", "psk-key");
    final var x509Credential = X509CertificateCredential.fromSubjectDn("emailAddress=foo@bar.com, CN=foo, O=bar", List.of(new X509CertificateSecret()));
    x509Credential.setComment("non-standard attribute type");
    final List<CommonCredential> credentials = List.of(pwdCredential, pskCredential, x509Credential);
    registry.getCredentials(tenantId, deviceId).compose(httpResponse -> {
        context.verify(() -> {
            assertResourceVersionHasChanged(resourceVersion, httpResponse.headers());
            assertThat(httpResponse.bodyAsJsonArray()).isEmpty();
        });
        return registry.addCredentials(tenantId, deviceId, credentials);
    }).compose(httpResponse -> {
        context.verify(() -> assertResourceVersionHasChanged(resourceVersion, httpResponse.headers()));
        return registry.getCredentials(tenantId, deviceId);
    }).onComplete(context.succeeding(httpResponse -> {
        context.verify(() -> {
            final CommonCredential[] credsOnRecord = httpResponse.bodyAsJson(CommonCredential[].class);
            assertThat(credsOnRecord).hasLength(3);
            Arrays.stream(credsOnRecord).forEach(creds -> {
                assertThat(creds.getExtensions().get("device-id")).isNull();
                if (creds instanceof PasswordCredential) {
                    assertThat(creds.getExtensions().get("client-id")).isEqualTo("MQTT-client-2384236854");
                } else if (creds instanceof X509CertificateCredential) {
                    assertThat(creds.getComment()).isEqualTo("non-standard attribute type");
                }
                creds.getSecrets().forEach(secret -> {
                    assertThat(secret.isEnabled()).isTrue();
                    assertThat(secret.getId()).isNotNull();
                });
            });
        });
        context.completeNow();
    }));
}
Also used : HttpURLConnection(java.net.HttpURLConnection) VertxTestContext(io.vertx.junit5.VertxTestContext) BeforeEach(org.junit.jupiter.api.BeforeEach) Arrays(java.util.Arrays) BCryptPasswordEncoder(org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder) LoggerFactory(org.slf4j.LoggerFactory) MultiMap(io.vertx.core.MultiMap) Credentials(org.eclipse.hono.service.management.credentials.Credentials) GenericCredential(org.eclipse.hono.service.management.credentials.GenericCredential) PasswordSecret(org.eclipse.hono.service.management.credentials.PasswordSecret) X509CertificateCredential(org.eclipse.hono.service.management.credentials.X509CertificateCredential) OptionalInt(java.util.OptionalInt) AtomicReference(java.util.concurrent.atomic.AtomicReference) Timeout(io.vertx.junit5.Timeout) ArrayList(java.util.ArrayList) IntegrationTestSupport(org.eclipse.hono.tests.IntegrationTestSupport) ExtendWith(org.junit.jupiter.api.extension.ExtendWith) PskCredential(org.eclipse.hono.service.management.credentials.PskCredential) Map(java.util.Map) Assertions(org.assertj.core.api.Assertions) HttpUtils(org.eclipse.hono.service.http.HttpUtils) JsonObject(io.vertx.core.json.JsonObject) RegistryManagementConstants(org.eclipse.hono.util.RegistryManagementConstants) Logger(org.slf4j.Logger) RecursiveComparisonConfiguration(org.assertj.core.api.recursive.comparison.RecursiveComparisonConfiguration) X509CertificateSecret(org.eclipse.hono.service.management.credentials.X509CertificateSecret) HttpHeaders(io.vertx.core.http.HttpHeaders) UUID(java.util.UUID) Truth.assertThat(com.google.common.truth.Truth.assertThat) Instant(java.time.Instant) VertxExtension(io.vertx.junit5.VertxExtension) Collectors(java.util.stream.Collectors) CredentialsConstants(org.eclipse.hono.util.CredentialsConstants) TestInfo(org.junit.jupiter.api.TestInfo) TimeUnit(java.util.concurrent.TimeUnit) Test(org.junit.jupiter.api.Test) JsonArray(io.vertx.core.json.JsonArray) List(java.util.List) ChronoUnit(java.time.temporal.ChronoUnit) CommonCredential(org.eclipse.hono.service.management.credentials.CommonCredential) CrudHttpClient(org.eclipse.hono.tests.CrudHttpClient) DeviceRegistryHttpClient(org.eclipse.hono.tests.DeviceRegistryHttpClient) Optional(java.util.Optional) GenericSecret(org.eclipse.hono.service.management.credentials.GenericSecret) PasswordCredential(org.eclipse.hono.service.management.credentials.PasswordCredential) PskCredential(org.eclipse.hono.service.management.credentials.PskCredential) X509CertificateCredential(org.eclipse.hono.service.management.credentials.X509CertificateCredential) PasswordCredential(org.eclipse.hono.service.management.credentials.PasswordCredential) CommonCredential(org.eclipse.hono.service.management.credentials.CommonCredential) X509CertificateSecret(org.eclipse.hono.service.management.credentials.X509CertificateSecret) Test(org.junit.jupiter.api.Test)

Aggregations

HttpURLConnection (java.net.HttpURLConnection)3 List (java.util.List)3 Optional (java.util.Optional)3 CommonCredential (org.eclipse.hono.service.management.credentials.CommonCredential)3 PskCredential (org.eclipse.hono.service.management.credentials.PskCredential)3 Truth.assertThat (com.google.common.truth.Truth.assertThat)2 Future (io.vertx.core.Future)2 MultiMap (io.vertx.core.MultiMap)2 HttpHeaders (io.vertx.core.http.HttpHeaders)2 JsonObject (io.vertx.core.json.JsonObject)2 VertxExtension (io.vertx.junit5.VertxExtension)2 VertxTestContext (io.vertx.junit5.VertxTestContext)2 ArrayList (java.util.ArrayList)2 Arrays (java.util.Arrays)2 Map (java.util.Map)2 PasswordCredential (org.eclipse.hono.service.management.credentials.PasswordCredential)2 X509CertificateCredential (org.eclipse.hono.service.management.credentials.X509CertificateCredential)2 X509CertificateSecret (org.eclipse.hono.service.management.credentials.X509CertificateSecret)2 Device (org.eclipse.hono.service.management.device.Device)2 CredentialsConstants (org.eclipse.hono.util.CredentialsConstants)2