Examples with CsrSubjectFieldDescription org.niis.xroad.securityserver.restapi.openapi.model.CsrSubjectFieldDescription used on opensource projects

Example 1 with CsrSubjectFieldDescription

use of org.niis.xroad.securityserver.restapi.openapi.model.CsrSubjectFieldDescription in project X-Road by nordic-institute.

the class CertificateAuthoritiesApiController method getSubjectFieldDescriptions.

// see reason below
@SuppressWarnings("squid:S3655")
@Override
@PreAuthorize("(hasAuthority('GENERATE_AUTH_CERT_REQ') and " + " (#keyUsageType == T(org.niis.xroad.securityserver.restapi.openapi.model.KeyUsageType).AUTHENTICATION))" + " or (hasAuthority('GENERATE_SIGN_CERT_REQ') and " + "(#keyUsageType == T(org.niis.xroad.securityserver.restapi.openapi.model.KeyUsageType).SIGNING))")
public ResponseEntity<Set<CsrSubjectFieldDescription>> getSubjectFieldDescriptions(String caName, KeyUsageType keyUsageType, String keyId, String encodedMemberId, Boolean isNewMember) {
    // squid:S3655 throwing NoSuchElementException if there is no value present is
    // fine since keyUsageInfo is mandatory parameter
    KeyUsageInfo keyUsageInfo = KeyUsageTypeMapping.map(keyUsageType).get();
    // memberId is mandatory for sign csrs
    if (keyUsageInfo == KeyUsageInfo.SIGNING) {
        if (StringUtils.isBlank(encodedMemberId)) {
            throw new BadRequestException("memberId is mandatory for sign csrs");
        }
    }
    try {
        if (!StringUtils.isBlank(keyId)) {
            // validate that key.usage matches keyUsageType
            KeyInfo keyInfo = keyService.getKey(keyId);
            if (keyInfo.getUsage() != null) {
                if (keyInfo.getUsage() != keyUsageInfo) {
                    throw new BadRequestException("key is for different usage", new ErrorDeviation("wrong_key_usage"));
                }
            }
        }
        ClientId memberId = null;
        if (!StringUtils.isBlank(encodedMemberId)) {
            memberId = clientConverter.convertId(encodedMemberId);
        }
        CertificateProfileInfo profileInfo;
        profileInfo = certificateAuthorityService.getCertificateProfile(caName, keyUsageInfo, memberId, isNewMember);
        Set<CsrSubjectFieldDescription> converted = subjectConverter.convert(profileInfo.getSubjectFields());
        return new ResponseEntity<>(converted, HttpStatus.OK);
    } catch (WrongKeyUsageException | KeyNotFoundException | ClientNotFoundException e) {
        throw new BadRequestException(e);
    } catch (CertificateAuthorityNotFoundException e) {
        throw new ResourceNotFoundException(e);
    } catch (CertificateProfileInstantiationException e) {
        throw new InternalServerErrorException(e);
    }
}

Example 2 with CsrSubjectFieldDescription

use of org.niis.xroad.securityserver.restapi.openapi.model.CsrSubjectFieldDescription in project X-Road by nordic-institute.

the class CsrSubjectFieldDescriptionConverter method convert.

/**
 * convert DnFieldDescription into openapi CsrSubjectFieldDescription class
 * @param dnFieldDescription
 * @return
 */
public CsrSubjectFieldDescription convert(DnFieldDescription dnFieldDescription) {
    CsrSubjectFieldDescription description = new CsrSubjectFieldDescription();
    description.setId(dnFieldDescription.getId());
    if (dnFieldDescription.isLocalized()) {
        description.setLabelKey(dnFieldDescription.getLabelKey());
    } else {
        description.setLabel(dnFieldDescription.getLabel());
    }
    description.setLocalized(dnFieldDescription.isLocalized());
    description.setDefaultValue(dnFieldDescription.getDefaultValue());
    description.setReadOnly(dnFieldDescription.isReadOnly());
    description.setRequired(dnFieldDescription.isRequired());
    return description;
}