FileDigestsDataMessageHandler.java

/*
 * eID Applet Project.
 * Copyright (C) 2008-2009 FedICT.
 * Copyright (C) 2014 e-Contract.be BVBA.
 *
 * This is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License version
 * 3.0 as published by the Free Software Foundation.
 *
 * This software is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this software; if not, see 
 * http://www.gnu.org/licenses/.
 */

package be.fedict.eid.applet.service.impl.handler;

import java.security.NoSuchAlgorithmException;
import java.util.Iterator;
import java.util.LinkedList;
import java.util.List;
import java.util.Map;

import javax.servlet.ServletConfig;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import org.apache.commons.codec.DecoderException;
import org.apache.commons.codec.binary.Hex;

import be.fedict.eid.applet.service.impl.ServiceLocator;
import be.fedict.eid.applet.service.spi.AuthorizationException;
import be.fedict.eid.applet.service.spi.DigestInfo;
import be.fedict.eid.applet.service.spi.IdentityRequest;
import be.fedict.eid.applet.service.spi.IdentityService;
import be.fedict.eid.applet.service.spi.SignatureService;
import be.fedict.eid.applet.shared.ErrorCode;
import be.fedict.eid.applet.shared.FileDigestsDataMessage;
import be.fedict.eid.applet.shared.FinishedMessage;
import be.fedict.eid.applet.shared.SignRequestMessage;

/**
 * Message handler for file digests data messages.
 * 
 * @author Frank Cornelis
 * 
 */
@HandlesMessage(FileDigestsDataMessage.class)
public class FileDigestsDataMessageHandler implements MessageHandler<FileDigestsDataMessage> {

	@InitParam(HelloMessageHandler.SIGNATURE_SERVICE_INIT_PARAM_NAME)
	private ServiceLocator<SignatureService> signatureServiceLocator;

	@InitParam(HelloMessageHandler.REMOVE_CARD_INIT_PARAM_NAME)
	private boolean removeCard;

	@InitParam(HelloMessageHandler.LOGOFF_INIT_PARAM_NAME)
	private boolean logoff;

	@InitParam(HelloMessageHandler.REQUIRE_SECURE_READER_INIT_PARAM_NAME)
	private boolean requireSecureReader;

	@InitParam(HelloMessageHandler.IDENTITY_SERVICE_INIT_PARAM_NAME)
	private ServiceLocator<IdentityService> identityServiceLocator;

	public Object handleMessage(FileDigestsDataMessage message, Map<String, String> httpHeaders,
			HttpServletRequest request, HttpSession session) throws ServletException {
		List<DigestInfo> fileDigestInfos = new LinkedList<DigestInfo>();

		List<String> messageFileDigestInfos = message.fileDigestInfos;
		Iterator<String> messageIterator = messageFileDigestInfos.iterator();
		while (messageIterator.hasNext()) {
			String digestAlgo = messageIterator.next();
			String hexDigestValue = messageIterator.next();
			String description = messageIterator.next();
			byte[] digestValue;
			try {
				digestValue = Hex.decodeHex(hexDigestValue.toCharArray());
			} catch (DecoderException e) {
				throw new ServletException("digest value decode error: " + e.getMessage(), e);
			}
			fileDigestInfos.add(new DigestInfo(digestValue, digestAlgo, description));
		}

		// TODO DRY refactor: is a copy-paste from HelloMessageHandler
		SignatureService signatureService = this.signatureServiceLocator.locateService();

		DigestInfo digestInfo;
		try {
			digestInfo = signatureService.preSign(fileDigestInfos, null, null, null, null);
		} catch (NoSuchAlgorithmException e) {
			throw new ServletException("no such algo: " + e.getMessage(), e);
		} catch (AuthorizationException e) {
			return new FinishedMessage(ErrorCode.AUTHORIZATION);
		}

		// also save it in the session for later verification
		SignatureDataMessageHandler.setDigestValue(digestInfo.digestValue, digestInfo.digestAlgo, session);

		IdentityService identityService = this.identityServiceLocator.locateService();
		boolean removeCard;
		if (null != identityService) {
			IdentityRequest identityRequest = identityService.getIdentityRequest();
			removeCard = identityRequest.removeCard();
		} else {
			removeCard = this.removeCard;
		}

		SignRequestMessage signRequestMessage = new SignRequestMessage(digestInfo.digestValue, digestInfo.digestAlgo,
				digestInfo.description, this.logoff, removeCard, this.requireSecureReader);
		return signRequestMessage;
	}

	public void init(ServletConfig config) throws ServletException {
		// empty
	}
}