/* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, * software distributed under the License is distributed on an * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY * KIND, either express or implied. See the License for the * specific language governing permissions and limitations * under the License. */ package org.apache.syncope.core.persistence.jpa.validation.entity; import java.util.regex.Pattern; import javax.validation.ConstraintValidatorContext; import org.apache.syncope.common.lib.SyncopeConstants; import org.apache.syncope.common.lib.types.EntityViolationType; import org.apache.syncope.core.persistence.api.entity.Realm; import org.apache.syncope.core.provisioning.api.LogicActions; public class RealmValidator extends AbstractValidator<RealmCheck, Realm> { private static final Pattern REALM_NAME_PATTERN = Pattern.compile("^[A-Za-z0-9]+"); @Override public boolean isValid(final Realm realm, final ConstraintValidatorContext context) { context.disableDefaultConstraintViolation(); boolean isValid = true; if (SyncopeConstants.ROOT_REALM.equals(realm.getName())) { if (realm.getParent() != null) { isValid = false; context.buildConstraintViolationWithTemplate( getTemplate(EntityViolationType.InvalidRealm, "Root realm cannot have a parent realm")). addPropertyNode("parent").addConstraintViolation(); } } else { if (realm.getParent() == null) { isValid = false; context.buildConstraintViolationWithTemplate( getTemplate(EntityViolationType.InvalidRealm, "A realm needs to reference a parent realm")). addPropertyNode("parent").addConstraintViolation(); } if (!REALM_NAME_PATTERN.matcher(realm.getName()).matches()) { isValid = false; context.buildConstraintViolationWithTemplate( getTemplate(EntityViolationType.InvalidRealm, "Only letters and numbers are allowed in realm name")). addPropertyNode("name").addConstraintViolation(); } } if (!realm.getActionsClassNames().isEmpty()) { for (String className : realm.getActionsClassNames()) { Class<?> actionsClass = null; boolean isAssignable = false; try { actionsClass = Class.forName(className); isAssignable = LogicActions.class.isAssignableFrom(actionsClass); } catch (Exception e) { LOG.error("Invalid {} specified", LogicActions.class.getName(), e); isValid = false; } if (actionsClass == null || !isAssignable) { isValid = false; context.disableDefaultConstraintViolation(); context.buildConstraintViolationWithTemplate( getTemplate(EntityViolationType.InvalidRealm, "Invalid class name")). addPropertyNode("actionsClassName").addConstraintViolation(); } } } return isValid; } }