NotificationServlet.java

package se.bjurr.prnfb.presentation;

import static com.google.common.base.Throwables.propagate;
import static javax.ws.rs.core.MediaType.APPLICATION_JSON;
import static javax.ws.rs.core.Response.ok;
import static javax.ws.rs.core.Response.status;
import static javax.ws.rs.core.Response.Status.OK;
import static javax.ws.rs.core.Response.Status.UNAUTHORIZED;
import static se.bjurr.prnfb.transformer.NotificationTransformer.toNotificationDto;
import static se.bjurr.prnfb.transformer.NotificationTransformer.toNotificationDtoList;
import static se.bjurr.prnfb.transformer.NotificationTransformer.toPrnfbNotification;

import java.util.Collections;
import java.util.List;
import java.util.UUID;

import javax.ws.rs.Consumes;
import javax.ws.rs.DELETE;
import javax.ws.rs.GET;
import javax.ws.rs.POST;
import javax.ws.rs.Path;
import javax.ws.rs.PathParam;
import javax.ws.rs.Produces;
import javax.ws.rs.core.Response;

import com.atlassian.annotations.security.XsrfProtectionExcluded;

import se.bjurr.prnfb.presentation.dto.NotificationDTO;
import se.bjurr.prnfb.service.SettingsService;
import se.bjurr.prnfb.service.UserCheckService;
import se.bjurr.prnfb.settings.PrnfbNotification;

@Path("/settings/notifications")
public class NotificationServlet {
  private final SettingsService settingsService;
  private final UserCheckService userCheckService;

  public NotificationServlet(SettingsService settingsService, UserCheckService userCheckService) {
    this.settingsService = settingsService;
    this.userCheckService = userCheckService;
  }

  @POST
  @XsrfProtectionExcluded
  @Consumes(APPLICATION_JSON)
  @Produces(APPLICATION_JSON)
  public Response create(NotificationDTO notificationDto) {
    if (!this.userCheckService.isAdminAllowed(notificationDto)) {
      return status(UNAUTHORIZED).build();
    }
    try {
      PrnfbNotification prnfbNotification = toPrnfbNotification(notificationDto);
      PrnfbNotification created = this.settingsService.addOrUpdateNotification(prnfbNotification);
      NotificationDTO createdDto = toNotificationDto(created);
      return status(OK) //
          .entity(createdDto) //
          .build();
    } catch (Exception e) {
      throw propagate(e);
    }
  }

  @DELETE
  @Path("{uuid}")
  @XsrfProtectionExcluded
  @Produces(APPLICATION_JSON)
  public Response delete(@PathParam("uuid") UUID notification) {
    PrnfbNotification notificationDto = this.settingsService.getNotification(notification);
    if (!this.userCheckService.isAdminAllowed(notificationDto)) {
      return status(UNAUTHORIZED).build();
    }
    this.settingsService.deleteNotification(notification);
    return status(OK).build();
  }

  @GET
  @Produces(APPLICATION_JSON)
  public Response get() {
    List<PrnfbNotification> notifications = this.settingsService.getNotifications();
    Iterable<PrnfbNotification> notificationsFiltered =
        userCheckService.filterAdminAllowed(notifications);
    List<NotificationDTO> dtos = toNotificationDtoList(notificationsFiltered);
    Collections.sort(dtos);
    return ok(dtos).build();
  }

  @GET
  @Path("/projectKey/{projectKey}")
  @Produces(APPLICATION_JSON)
  public Response get(@PathParam("projectKey") String projectKey) {
    List<PrnfbNotification> notifications = this.settingsService.getNotifications(projectKey);
    Iterable<PrnfbNotification> notificationsFiltered =
        userCheckService.filterAdminAllowed(notifications);
    List<NotificationDTO> dtos = toNotificationDtoList(notificationsFiltered);
    Collections.sort(dtos);
    return ok(dtos).build();
  }

  @GET
  @Path("/projectKey/{projectKey}/repositorySlug/{repositorySlug}")
  @Produces(APPLICATION_JSON)
  public Response get(
      @PathParam("projectKey") String projectKey,
      @PathParam("repositorySlug") String repositorySlug) {
    List<PrnfbNotification> notifications =
        this.settingsService.getNotifications(projectKey, repositorySlug);
    Iterable<PrnfbNotification> notificationsFiltered =
        userCheckService.filterAdminAllowed(notifications);
    List<NotificationDTO> dtos = toNotificationDtoList(notificationsFiltered);
    Collections.sort(dtos);
    return ok(dtos).build();
  }

  @GET
  @Path("{uuid}")
  @Produces(APPLICATION_JSON)
  public Response get(@PathParam("uuid") UUID notificationUuid) {
    PrnfbNotification notification = this.settingsService.getNotification(notificationUuid);
    if (!this.userCheckService.isAdminAllowed(notification)) {
      return status(UNAUTHORIZED).build();
    }
    NotificationDTO dto = toNotificationDto(notification);
    return ok(dto).build();
  }
}