Initializer.java

/**
 * This file is part of alf.io.
 *
 * alf.io is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * alf.io is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with alf.io.  If not, see <http://www.gnu.org/licenses/>.
 */
package alfio.config;

import alfio.util.DefaultExceptionHandler;
import com.openhtmltopdf.util.XRLog;
import lombok.extern.log4j.Log4j2;
import org.apache.commons.lang3.Validate;
import org.springframework.core.env.ConfigurableEnvironment;
import org.springframework.core.env.Environment;
import org.springframework.web.context.ConfigurableWebApplicationContext;
import org.springframework.web.context.WebApplicationContext;
import org.springframework.web.filter.CharacterEncodingFilter;
import org.springframework.web.servlet.support.AbstractAnnotationConfigDispatcherServletInitializer;

import javax.servlet.FilterRegistration.Dynamic;
import javax.servlet.ServletContext;
import javax.servlet.ServletException;
import javax.servlet.SessionCookieConfig;
import java.util.Objects;
import java.util.logging.Level;

@Log4j2
public class Initializer extends AbstractAnnotationConfigDispatcherServletInitializer {

    public static final String PROFILE_DEV = "dev";
    public static final String PROFILE_DEBUG_CSP = "debug-csp";
    public static final String PROFILE_LIVE = "!dev";
    public static final String PROFILE_HTTP = "http";
    public static final String PROFILE_SPRING_BOOT = "spring-boot";
    public static final String PROFILE_DISABLE_JOBS = "disable-jobs";
    private Environment environment;

    @Override
    public void onStartup(ServletContext servletContext) throws ServletException {
        super.onStartup(servletContext);

        Thread.setDefaultUncaughtExceptionHandler(new DefaultExceptionHandler());

        configureSessionCookie(servletContext);
        
        CharacterEncodingFilter cef = new CharacterEncodingFilter();
        cef.setEncoding("UTF-8");
        cef.setForceEncoding(true);
        
        Dynamic characterEncodingFilter = servletContext.addFilter("CharacterEncodingFilter", cef);
        characterEncodingFilter.setAsyncSupported(true);
        characterEncodingFilter.addMappingForUrlPatterns(null, false, "/*");

        //force log initialization, then disable it
        XRLog.setLevel(XRLog.EXCEPTION, Level.WARNING);
        XRLog.setLoggingEnabled(false);

    }

    @Override
    protected WebApplicationContext createRootApplicationContext() {
        ConfigurableWebApplicationContext ctx = ((ConfigurableWebApplicationContext) super.createRootApplicationContext());
        Objects.requireNonNull(ctx, "Something really bad is happening...");
        ConfigurableEnvironment environment = ctx.getEnvironment();
        if(environment.acceptsProfiles(PROFILE_DEV)) {
            environment.addActiveProfile(PROFILE_HTTP);
        }
        this.environment = environment;
        return ctx;
    }

    private void configureSessionCookie(ServletContext servletContext) {
        SessionCookieConfig config = servletContext.getSessionCookieConfig();

        config.setHttpOnly(true);
        
        Validate.notNull(environment, "environment cannot be null!");
        // set secure cookie only if current environment doesn't strictly need HTTP
        config.setSecure(!environment.acceptsProfiles(PROFILE_HTTP));
        //
        

        // FIXME and CHECKME what a mess, ouch: https://issues.jboss.org/browse/WFLY-3448 ?
        config.setPath(servletContext.getContextPath() + "/");
        //
    }

    @Override
    protected Class<?>[] getRootConfigClasses() {
        return new Class<?>[] { ApplicationPropertiesConfiguration.class, RepositoryConfiguration.class, DataSourceConfiguration.class, WebSecurityConfig.class };
    }

    @Override
    protected Class<?>[] getServletConfigClasses() {
        return new Class<?>[] { MvcConfiguration.class };
    }

    @Override
    protected String[] getServletMappings() {
        return new String[] { "/" };
    }
}