RulesSettingsCreatorsRegistry.java

/*
 *    This file is part of ReadonlyREST.
 *
 *    ReadonlyREST is free software: you can redistribute it and/or modify
 *    it under the terms of the GNU General Public License as published by
 *    the Free Software Foundation, either version 3 of the License, or
 *    (at your option) any later version.
 *
 *    ReadonlyREST is distributed in the hope that it will be useful,
 *    but WITHOUT ANY WARRANTY; without even the implied warranty of
 *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *    GNU General Public License for more details.
 *
 *    You should have received a copy of the GNU General Public License
 *    along with ReadonlyREST.  If not, see http://www.gnu.org/licenses/
 */
package org.elasticsearch.plugin.readonlyrest.settings;

import org.elasticsearch.plugin.readonlyrest.settings.definitions.ExternalAuthenticationServiceSettingsCollection;
import org.elasticsearch.plugin.readonlyrest.settings.definitions.LdapSettingsCollection;
import org.elasticsearch.plugin.readonlyrest.settings.definitions.UserGroupsProviderSettingsCollection;
import org.elasticsearch.plugin.readonlyrest.settings.definitions.UserSettingsCollection;
import org.elasticsearch.plugin.readonlyrest.settings.rules.ActionsRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.ApiKeysRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.AuthKeyPlainTextRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.AuthKeySha1RuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.AuthKeySha256RuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.ExternalAuthenticationRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.GroupsProviderAuthorizationRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.GroupsRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.HostsRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.IndicesRewriteRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.IndicesRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.KibanaAccessRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.KibanaHideAppsRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.LdapAuthRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.LdapAuthenticationRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.LdapAuthorizationRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.MaxBodyLengthRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.MethodsRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.ProxyAuthRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.SearchlogRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.SessionMaxIdleRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.UriReRuleSettings;
import org.elasticsearch.plugin.readonlyrest.settings.rules.XForwardedForRuleSettings;

import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.Set;
import java.util.function.Supplier;

public class RulesSettingsCreatorsRegistry {

  private final Map<String, Supplier<RuleSettings>> ruleSettingsCreators;

  RulesSettingsCreatorsRegistry(RawSettings blockSettings,
                                AuthMethodCreatorsRegistry authMethodCreatorsRegistry,
                                LdapSettingsCollection ldapSettingsCollection,
                                UserGroupsProviderSettingsCollection groupsProviderSettingsGroup,
                                ExternalAuthenticationServiceSettingsCollection externalAuthenticationServiceSettingsCollection,
                                UserSettingsCollection userSettingsCollection) {
    Map<String, Supplier<RuleSettings>> creators = new HashMap<>();
    creators.put(LdapAuthRuleSettings.ATTRIBUTE_NAME,
        ldapAuthRuleSettingsCreator(blockSettings, ldapSettingsCollection));
    creators.put(LdapAuthenticationRuleSettings.ATTRIBUTE_NAME,
        ldapAuthenticationRuleSettingsCreator(blockSettings, ldapSettingsCollection));
    creators.put(LdapAuthorizationRuleSettings.ATTRIBUTE_NAME,
        ldapAuthorizationRuleSettingsCreator(blockSettings, ldapSettingsCollection));
    creators.put(GroupsProviderAuthorizationRuleSettings.ATTRIBUTE_NAME,
        groupsProviderAuthorizationRuleSettingsCreator(blockSettings, groupsProviderSettingsGroup));
    creators.put(ExternalAuthenticationRuleSettings.ATTRIBUTE_NAME,
        externalAuthenticationSettingsCreator(blockSettings, externalAuthenticationServiceSettingsCollection));
    creators.put(IndicesRuleSettings.ATTRIBUTE_NAME, indicesSettingsCreator(blockSettings));
    creators.put(IndicesRewriteRuleSettings.ATTRIBUTE_NAME, indicesRewriteSettingsCreator(blockSettings));
    creators.put(MethodsRuleSettings.ATTRIBUTE_NAME, methodsSettingsCreator(blockSettings));
    creators.put(ActionsRuleSettings.ATTRIBUTE_NAME, actionsSettingsCreator(blockSettings));
    creators.put(HostsRuleSettings.ATTRIBUTE_NAME, hostsSettingsCreator(blockSettings));
    creators.put(ProxyAuthRuleSettings.ATTRIBUTE_NAME, proxyAuthSettingsCreator(blockSettings, authMethodCreatorsRegistry));
    creators.put(AuthKeyPlainTextRuleSettings.ATTRIBUTE_NAME, authKeySettingsCreator(blockSettings, authMethodCreatorsRegistry));
    creators.put(AuthKeySha1RuleSettings.ATTRIBUTE_NAME, authKeySha1SettingsCreator(blockSettings, authMethodCreatorsRegistry));
    creators.put(AuthKeySha256RuleSettings.ATTRIBUTE_NAME, authKeySha256SettingsCreator(blockSettings, authMethodCreatorsRegistry));
    creators.put(KibanaAccessRuleSettings.ATTRIBUTE_NAME, kibanaAccessSettingsCreator(blockSettings));
    creators.put(KibanaHideAppsRuleSettings.ATTRIBUTE_NAME, kibanaHideAppsSettingsCreator(blockSettings));
    creators.put(ApiKeysRuleSettings.ATTRIBUTE_NAME, apiKeysSettingsCreator(blockSettings));
    creators.put(MaxBodyLengthRuleSettings.ATTRIBUTE_NAME, maxBodyLengthSettingsCreator(blockSettings));
    creators.put(SessionMaxIdleRuleSettings.ATTRIBUTE_NAME, sessionMaxIdleSettingsCreator(blockSettings));
    creators.put(SearchlogRuleSettings.ATTRIBUTE_NAME, searchlogSettingsCreator(blockSettings));
    creators.put(UriReRuleSettings.ATTRIBUTE_NAME, uriReSettingsCreator(blockSettings));
    creators.put(XForwardedForRuleSettings.ATTRIBUTE_NAME, xForwardedForSettingsCreator(blockSettings));
    creators.put(GroupsRuleSettings.ATTRIBUTE_NAME, groupsSettingsCreator(blockSettings, userSettingsCollection));
    this.ruleSettingsCreators = creators;
  }

  public RuleSettings create(String name) {
    if (!ruleSettingsCreators.containsKey(name)) {
      throw new SettingsMalformedException("Unknown rule name: '" + name + "'");
    }
    return ruleSettingsCreators.get(name).get();
  }

  private Supplier<RuleSettings> ldapAuthRuleSettingsCreator(RawSettings blockSettings,
                                                             LdapSettingsCollection ldapSettingsCollection) {
    return () -> LdapAuthRuleSettings.from(blockSettings.inner(LdapAuthRuleSettings.ATTRIBUTE_NAME), ldapSettingsCollection);
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> ldapAuthenticationRuleSettingsCreator(RawSettings blockSettings,
                                                                       LdapSettingsCollection ldapSettingsCollection) {
    return () -> {
      Object settings = blockSettings.req(LdapAuthenticationRuleSettings.ATTRIBUTE_NAME);
      return settings instanceof String
          ? LdapAuthenticationRuleSettings.from((String) settings, ldapSettingsCollection)
          : LdapAuthenticationRuleSettings.from(new RawSettings((Map<String, ?>) settings), ldapSettingsCollection);
    };
  }

  private Supplier<RuleSettings> ldapAuthorizationRuleSettingsCreator(RawSettings blockSettings,
                                                                      LdapSettingsCollection ldapSettingsCollection) {
    return () -> LdapAuthorizationRuleSettings.from(
        blockSettings.inner(LdapAuthorizationRuleSettings.ATTRIBUTE_NAME),
        ldapSettingsCollection
    );
  }

  private Supplier<RuleSettings> groupsProviderAuthorizationRuleSettingsCreator(
      RawSettings blockSettings,
      UserGroupsProviderSettingsCollection userGroupsProviderSettingsCollection) {
    return () -> GroupsProviderAuthorizationRuleSettings.from(
        blockSettings.inner(GroupsProviderAuthorizationRuleSettings.ATTRIBUTE_NAME),
        userGroupsProviderSettingsCollection
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> externalAuthenticationSettingsCreator(RawSettings blockSettings,
                ExternalAuthenticationServiceSettingsCollection externalAuthenticationServiceSettingsCollection) {
    return () -> {
      Object settings = blockSettings.req(ExternalAuthenticationRuleSettings.ATTRIBUTE_NAME);
      return settings instanceof String
          ? ExternalAuthenticationRuleSettings.from((String) settings,
          externalAuthenticationServiceSettingsCollection)
          : ExternalAuthenticationRuleSettings.from(new RawSettings((Map<String, ?>) settings),
          externalAuthenticationServiceSettingsCollection);
    };
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> indicesSettingsCreator(RawSettings blockSettings) {
    return () -> IndicesRuleSettings.from(
        (Set<String>) blockSettings.notEmptySetReq(IndicesRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> indicesRewriteSettingsCreator(RawSettings blockSettings) {
    return () -> IndicesRewriteRuleSettings.from(
        (List<String>) blockSettings.notEmptyListReq(IndicesRewriteRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> methodsSettingsCreator(RawSettings blockSettings) {
    return () -> MethodsRuleSettings.from(
        (Set<String>) blockSettings.notEmptySetReq(MethodsRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> actionsSettingsCreator(RawSettings blockSettings) {
    return () -> ActionsRuleSettings.from(
        (Set<String>) blockSettings.notEmptySetReq(ActionsRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> hostsSettingsCreator(RawSettings blockSettings) {
    return () -> HostsRuleSettings.fromBlockSettings(blockSettings);
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> proxyAuthSettingsCreator(RawSettings blockSettings,
                                                          AuthMethodCreatorsRegistry authMethodCreatorsRegistry) {
    return authRuleFrom(ProxyAuthRuleSettings.ATTRIBUTE_NAME, blockSettings, authMethodCreatorsRegistry);
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> authKeySettingsCreator(RawSettings blockSettings,
                                                        AuthMethodCreatorsRegistry authMethodCreatorsRegistry) {
    return authRuleFrom(AuthKeyPlainTextRuleSettings.ATTRIBUTE_NAME, blockSettings, authMethodCreatorsRegistry);
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> authKeySha1SettingsCreator(RawSettings blockSettings,
                                                            AuthMethodCreatorsRegistry authMethodCreatorsRegistry) {
    return authRuleFrom(AuthKeySha1RuleSettings.ATTRIBUTE_NAME, blockSettings, authMethodCreatorsRegistry);
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> authKeySha256SettingsCreator(RawSettings blockSettings,
                                                              AuthMethodCreatorsRegistry authMethodCreatorsRegistry) {
    return authRuleFrom(AuthKeySha256RuleSettings.ATTRIBUTE_NAME, blockSettings, authMethodCreatorsRegistry);
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> kibanaAccessSettingsCreator(RawSettings blockSettings) {
    return () -> KibanaAccessRuleSettings.fromBlockSettings(blockSettings);
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> kibanaHideAppsSettingsCreator(RawSettings blockSettings) {
    return () -> KibanaHideAppsRuleSettings.from(
        (Set<String>) blockSettings.notEmptySetReq(KibanaHideAppsRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> apiKeysSettingsCreator(RawSettings blockSettings) {
    return () -> ApiKeysRuleSettings.from(
        (Set<String>) blockSettings.notEmptySetReq(ApiKeysRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> maxBodyLengthSettingsCreator(RawSettings blockSettings) {
    return () -> MaxBodyLengthRuleSettings.from(
        blockSettings.intReq(MaxBodyLengthRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> searchlogSettingsCreator(RawSettings blockSettings) {
    return () -> SearchlogRuleSettings.from(
        blockSettings.booleanReq(SearchlogRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> sessionMaxIdleSettingsCreator(RawSettings blockSettings) {
    return () -> SessionMaxIdleRuleSettings.from(
        blockSettings.stringReq(SessionMaxIdleRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> uriReSettingsCreator(RawSettings blockSettings) {
    return () -> UriReRuleSettings.from(
        blockSettings.stringReq(UriReRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> xForwardedForSettingsCreator(RawSettings blockSettings) {
    return () -> XForwardedForRuleSettings.from(
        (List<String>) blockSettings.notEmptyListReq(XForwardedForRuleSettings.ATTRIBUTE_NAME)
    );
  }

  @SuppressWarnings("unchecked")
  private Supplier<RuleSettings> groupsSettingsCreator(RawSettings blockSettings,
                                                       UserSettingsCollection userSettingsCollection) {
    return () -> GroupsRuleSettings.from(
        (Set<String>) blockSettings.notEmptySetReq(GroupsRuleSettings.ATTRIBUTE_NAME),
        userSettingsCollection
    );
  }

  private Supplier<RuleSettings> authRuleFrom(String attribute, RawSettings settings,
                                              AuthMethodCreatorsRegistry authMethodCreatorsRegistry) {
    return () -> {
      AuthKeyProviderSettings authKeyProviderSettings = authMethodCreatorsRegistry.create(attribute, settings);
      if (!(authKeyProviderSettings instanceof RuleSettings)) {
        throw new SettingsMalformedException("No rule for auth method: " + attribute);
      }
      return (RuleSettings) authKeyProviderSettings;
    };
  }

}