/*
* Copyright (C) 2015 Red Hat, Inc. and/or its affiliates.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.jboss.errai.demo.todo.server;
import java.util.List;
import javax.enterprise.context.ApplicationScoped;
import javax.inject.Inject;
import org.jboss.errai.bus.server.annotations.Service;
import org.jboss.errai.jpa.sync.client.shared.DataSyncService;
import org.jboss.errai.jpa.sync.client.shared.SyncRequestOperation;
import org.jboss.errai.jpa.sync.client.shared.SyncResponse;
import org.jboss.errai.jpa.sync.client.shared.SyncableDataSet;
import org.jboss.errai.security.shared.api.identity.User;
import org.jboss.errai.security.shared.service.AuthenticationService;
@ApplicationScoped @Service
public class DataSyncServiceImpl implements DataSyncService {
@Inject private DataSyncEjb dataSyncEjb;
@Inject private AuthenticationService service;
@Override
public <X> List<SyncResponse<X>> coldSync(SyncableDataSet<X> dataSet, List<SyncRequestOperation<X>> remoteResults) {
User currentUser = service.getUser();
System.out.println("DataSyncServiceImpl.currentUser is " + currentUser);
if (currentUser == null) {
throw new IllegalStateException("Nobody is logged in!");
}
if (dataSet.getQueryName().equals("allItemsForUser")) {
// the userId that comes from the client can be tampered with and that is why we override it here
// the server state is more secure.
dataSet.getParameters().put("userId", currentUser.getIdentifier());
}
else {
throw new IllegalArgumentException("You don't have permission to sync dataset");
}
return dataSyncEjb.coldSync(dataSet, remoteResults);
}
}