Examples with SignCertificateResponse org.platformlayer.auth.model.SignCertificateResponse used on opensource projects

Example 1 with SignCertificateResponse

use of org.platformlayer.auth.model.SignCertificateResponse in project platformlayer by platformlayer.

the class PkiResource method signCertificate.

@POST
@Path("csr")
public SignCertificateResponse signCertificate(SignCertificateRequest request) {
    try {
        requireSystemAccess();
    } catch (AuthenticatorException e) {
        log.warn("Error while checking system token", e);
        throwInternalError();
    }
    // TokenInfo checkTokenInfo = tokenService.decodeToken(checkToken);
    // if (checkTokenInfo == null || checkTokenInfo.hasExpired()) {
    // throw404NotFound();
    // }
    // 
    // UserEntity user = null;
    // try {
    // user = userAuthenticator.getUserFromToken(checkTokenInfo.userId, checkTokenInfo.tokenSecret);
    // } catch (AuthenticatorException e) {
    // log.warn("Error while fetching user", e);
    // throwInternalError();
    // }
    // 
    // if (user == null) {
    // throw404NotFound();
    // }
    String projectKey = request.project;
    ProjectEntity project = null;
    try {
        project = userAuthenticator.findProject(projectKey);
    } catch (AuthenticatorException e) {
        log.warn("Error while fetching project", e);
        throwInternalError();
    }
    if (project == null) {
        throw404NotFound();
    }
    project.setProjectSecret(FathomdbCrypto.deserializeKey(request.projectSecret));
    // Note that we do not unlock the user / project; we don't have any secret material
    // TODO: We could return stuff encrypted with the user's public key
    // projectEntity.unlockWithUser(userEntity);
    // 
    // if (!projectEntity.isSecretValid()) {
    // throw404NotFound();
    // }
    // UserProjectEntity userProject = null;
    // try {
    // userProject = userAuthenticator.findUserProject(user, project);
    // } catch (AuthenticatorException e) {
    // log.warn("Error while fetching project", e);
    // throwInternalError();
    // }
    // 
    // if (userProject == null) {
    // // Not a member of project
    // throw404NotFound();
    // }
    // 
    // boolean isOwner = false;
    // for (RoleId role : userProject.getRoles()) {
    // if (role.equals(RoleId.OWNER)) {
    // isOwner = true;
    // }
    // }
    // 
    // if (!isOwner) {
    // throwUnauthorized();
    // }
    List<X509Certificate> certificates = null;
    try {
        certificates = pki.signCsr(project, request.csr);
    } catch (OpsException e) {
        log.warn("Error while signing CSR", e);
        throwInternalError();
    }
    SignCertificateResponse response = new SignCertificateResponse();
    response.certificates = Lists.newArrayList();
    for (X509Certificate cert : certificates) {
        response.certificates.add(CertificateUtils.toPem(cert));
    }
    return response;
}