X509CertificateUpdater.java

/*
 * Copyright (C) 2013 tarent AG
 *
 * Permission is hereby granted, free of charge, to any person obtaining
 * a copy of this software and associated documentation files (the
 * "Software"), to deal in the Software without restriction, including
 * without limitation the rights to use, copy, modify, merge, publish,
 * distribute, sublicense, and/or sell copies of the Software, and to
 * permit persons to whom the Software is furnished to do so, subject to
 * the following conditions:
 *
 * The above copyright notice and this permission notice shall be
 * included in all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 * TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */

package org.osiam.resources.provisioning.update;

import com.google.common.base.Strings;
import org.osiam.resources.converter.X509CertificateConverter;
import org.osiam.resources.scim.X509Certificate;
import org.osiam.storage.entities.UserEntity;
import org.osiam.storage.entities.X509CertificateEntity;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import java.util.List;
import java.util.Set;

/**
 * The X509CertificateUpdater provides the functionality to update the {@link X509CertificateEntity} of a UserEntity
 */
@Service
class X509CertificateUpdater {

    private X509CertificateConverter x509CertificateConverter;

    @Autowired
    public X509CertificateUpdater(X509CertificateConverter x509CertificateConverter) {
        this.x509CertificateConverter = x509CertificateConverter;
    }

    /**
     * updates (adds new, delete, updates) the {@link X509CertificateEntity}'s of the given {@link UserEntity} based on
     * the given List of X509Certificate's
     *
     * @param x509Certificates list of X509Certificate's to be deleted, updated or added
     * @param userEntity       user who needs to be updated
     * @param attributes       all {@link X509CertificateEntity}'s will be deleted if this Set contains 'x509Certificates'
     */
    void update(List<X509Certificate> x509Certificates, UserEntity userEntity, Set<String> attributes) {

        if (attributes.contains("x509Certificates")) {
            userEntity.removeAllX509Certificates();
        }

        if (x509Certificates != null) {
            for (X509Certificate scimX509Certificate : x509Certificates) {
                X509CertificateEntity x509CertificateEntity = x509CertificateConverter.fromScim(scimX509Certificate);
                userEntity.removeX509Certificate(x509CertificateEntity); // we always have to remove the x509Certificate
                // the primary attribute has changed
                if (Strings.isNullOrEmpty(scimX509Certificate.getOperation())
                        || !scimX509Certificate.getOperation().equalsIgnoreCase("delete")) {

                    ensureOnlyOnePrimaryX509CertificateExists(x509CertificateEntity, userEntity.getX509Certificates());
                    userEntity.addX509Certificate(x509CertificateEntity);
                }
            }
        }
    }

    /**
     * if the given newX509Certificate is set to primary the primary attribute of all existing x509Certificate's in the
     * {@link UserEntity} will be removed
     *
     * @param newX509Certificate to be checked if it is primary
     * @param x509Certificates   all existing x509Certificate's of the {@link UserEntity}
     */
    private void ensureOnlyOnePrimaryX509CertificateExists(X509CertificateEntity newX509Certificate,
                                                           Set<X509CertificateEntity> x509Certificates) {
        if (newX509Certificate.isPrimary()) {
            for (X509CertificateEntity exisitngX509CertificateEntity : x509Certificates) {
                if (exisitngX509CertificateEntity.isPrimary()) {
                    exisitngX509CertificateEntity.setPrimary(false);
                }
            }
        }
    }

}