AttachmentInfoServlet.java

/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package org.waveprotocol.box.server.rpc;

import com.google.inject.Inject;
import com.google.inject.Singleton;

import java.util.logging.Level;
import org.waveprotocol.box.server.authentication.SessionManager;
import org.waveprotocol.box.server.rpc.ProtoSerializer.SerializationException;
import org.waveprotocol.box.server.waveserver.WaveletProvider;
import org.waveprotocol.wave.model.id.InvalidIdException;
import org.waveprotocol.wave.model.id.WaveletName;
import org.waveprotocol.wave.model.wave.ParticipantId;
import org.waveprotocol.wave.util.logging.Log;

import java.io.IOException;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.waveprotocol.box.attachment.AttachmentMetadata;
import org.waveprotocol.box.attachment.AttachmentProto.AttachmentsResponse;
import org.waveprotocol.box.attachment.proto.AttachmentMetadataProtoImpl;
import org.waveprotocol.box.server.attachment.AttachmentService;
import org.waveprotocol.box.server.persistence.AttachmentUtil;
import org.waveprotocol.box.server.waveserver.WaveServerException;
import org.waveprotocol.wave.media.model.AttachmentId;

/*
 * Serves attachments info from a provided store.
 *
 * @author akaplanov@gmail.com (A. Kaplanov)
 */

@SuppressWarnings("serial")
@Singleton
public class AttachmentInfoServlet extends HttpServlet {
  public static final String ATTACHMENTS_INFO_URL = "/attachmentsInfo";

  private static final Log LOG = Log.get(AttachmentInfoServlet.class);

  private final AttachmentService service;
  private final WaveletProvider waveletProvider;
  private final SessionManager sessionManager;
  private final ProtoSerializer serializer;

  @Inject
  private AttachmentInfoServlet(AttachmentService service, WaveletProvider waveletProvider,
      SessionManager sessionManager, ProtoSerializer serializer) {
    this.service = service;
    this.waveletProvider = waveletProvider;
    this.sessionManager = sessionManager;
    this.serializer = serializer;
  }

  @Override
  protected void doGet(HttpServletRequest request, HttpServletResponse response) throws IOException {
    List<AttachmentId> attachmentIds = getIdsFromRequest(request);

    if (attachmentIds == null) {
      response.sendError(HttpServletResponse.SC_NOT_FOUND);
      return;
    }

    ParticipantId user = sessionManager.getLoggedInUser(request.getSession(false));

    AttachmentsResponse.Builder attachmentsResponse = AttachmentsResponse.newBuilder();
    for (AttachmentId id : attachmentIds) {
      AttachmentMetadata metadata = service.getMetadata(id);
      if (metadata != null) {
        boolean isAuthorized = false;
        WaveletName waveletName = AttachmentUtil.waveRef2WaveletName(metadata.getWaveRef());
        try {
          isAuthorized = waveletProvider.checkAccessPermission(waveletName, user);
        } catch (WaveServerException e) {
          LOG.warning("Problem while authorizing user: " + user + " for wavelet: " + waveletName, e);
        }
        if (isAuthorized) {
          attachmentsResponse.addAttachment(new AttachmentMetadataProtoImpl(metadata).getPB());
        }
      }
    }

    String info;
    try {
      info = serializer.toJson(attachmentsResponse.build()).toString();
    } catch (SerializationException ex) {
      LOG.log(Level.SEVERE, "Attachments info serialize", ex);
      response.sendError(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
      return;
    }

    response.setStatus(HttpServletResponse.SC_OK);
    response.setContentType("application/json; charset=utf8");
    response.setHeader("Cache-Control", "no-store");
    response.getWriter().append(info);

    LOG.info("Fetched info for " + attachmentIds.size() + " attachments");
  }

  /**
   * Get the attachment Ids from the URL in the request.
   *
   * @param request
   * @return the list of Ids.
   */
  private static List<AttachmentId> getIdsFromRequest(HttpServletRequest request) {
    String par = request.getParameter("attachmentIds");
    if (par != null) {
      List<AttachmentId> ids = new ArrayList<AttachmentId>();
      for (String id : par.split(",", -1)) {
        try {
          ids.add(AttachmentId.deserialise(id));
        } catch (InvalidIdException ex) {
          LOG.log(Level.SEVERE, "Deserialize attachment Id " + id, ex);
        }
      }
      return ids;
    }
    return null;
  }

}