AddDefectTrackerController.java

////////////////////////////////////////////////////////////////////////
//
//     Copyright (c) 2009-2013 Denim Group, Ltd.
//
//     The contents of this file are subject to the Mozilla Public License
//     Version 2.0 (the "License"); you may not use this file except in
//     compliance with the License. You may obtain a copy of the License at
//     http://www.mozilla.org/MPL/
//
//     Software distributed under the License is distributed on an "AS IS"
//     basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See the
//     License for the specific language governing rights and limitations
//     under the License.
//
//     The Original Code is ThreadFix.
//
//     The Initial Developer of the Original Code is Denim Group, Ltd.
//     Portions created by Denim Group, Ltd. are Copyright (C)
//     Denim Group, Ltd. All Rights Reserved.
//
//     Contributor(s): Denim Group, Ltd.
//
////////////////////////////////////////////////////////////////////////
package com.denimgroup.threadfix.webapp.controller;

import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.validation.Valid;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.validation.BindingResult;
import org.springframework.web.bind.WebDataBinder;
import org.springframework.web.bind.annotation.InitBinder;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.SessionAttributes;
import org.springframework.web.bind.support.SessionStatus;

import com.denimgroup.threadfix.data.entities.Application;
import com.denimgroup.threadfix.data.entities.DefectTracker;
import com.denimgroup.threadfix.data.entities.DefectTrackerType;
import com.denimgroup.threadfix.service.ApplicationService;
import com.denimgroup.threadfix.service.DefectTrackerService;
import com.denimgroup.threadfix.service.defects.AbstractDefectTracker;
import com.denimgroup.threadfix.webapp.validator.BeanValidator;

@Controller
@RequestMapping("/configuration/defecttrackers/new")
@SessionAttributes("defectTracker")
@PreAuthorize("hasRole('ROLE_CAN_MANAGE_DEFECT_TRACKERS')")
public class AddDefectTrackerController {

	private DefectTrackerService defectTrackerService;
	private ApplicationService applicationService;
	
	public AddDefectTrackerController(){}
	
	private final Log log = LogFactory.getLog(AddDefectTrackerController.class);

	@Autowired
	public AddDefectTrackerController(ApplicationService applicationService,
			DefectTrackerService defectTrackerService) {
		this.defectTrackerService = defectTrackerService;
		this.applicationService = applicationService;
	}

	@InitBinder
	public void initBinder(WebDataBinder binder) {
		binder.setValidator(new BeanValidator());
	}
	
	@InitBinder
	public void setAllowedFields(WebDataBinder dataBinder) {
		dataBinder.setAllowedFields(new String[] { "name", "url", "defectTrackerType.id" });
	}

	@ModelAttribute
	public List<DefectTrackerType> populateDefectTrackerTypes() {
		return defectTrackerService.loadAllDefectTrackerTypes();
	}

	@RequestMapping(method = RequestMethod.GET)
	public String setup(Model model) {
		DefectTracker defectTracker = new DefectTracker();
		model.addAttribute(defectTracker);
		return "config/defecttrackers/form";
	}

	@RequestMapping(method = RequestMethod.POST)
	public String processSubmit(@Valid @ModelAttribute DefectTracker defectTracker,
			BindingResult result, SessionStatus status, Model model,
			HttpServletRequest request) {
		if (defectTracker.getName().trim().equals("") && !result.hasFieldErrors("name")) {
			result.rejectValue("name", null, null, "This field cannot be blank");
		}
		
		if (result.hasErrors()) {
			model.addAttribute("contentPage", "config/defecttrackers/forms/createDTForm.jsp");
			return "ajaxFailureHarness";
		} else {
			
			DefectTracker databaseDefectTracker = defectTrackerService.loadDefectTracker(defectTracker.getName().trim());
			if (databaseDefectTracker != null)
				result.rejectValue("name", "errors.nameTaken");

			if (defectTracker.getDefectTrackerType() == null) {
				result.rejectValue("defectTrackerType.id", "errors.invalid", 
						new String [] { "Defect Tracker Type" }, null );
			
			} else if (defectTrackerService.loadDefectTrackerType(defectTracker.getDefectTrackerType().getId()) == null) {
				result.rejectValue("defectTrackerType.id", "errors.invalid", 
						new String [] { defectTracker.getDefectTrackerType().getId().toString() }, null );
			} else if (!defectTrackerService.checkUrl(defectTracker, result)) {
				if (!result.hasFieldErrors("url")) {
					result.rejectValue("url", "errors.invalid", new String [] { "URL" }, null);		
				} else if (result.getFieldError("url").getDefaultMessage() != null &&
						result.getFieldError("url").getDefaultMessage().equals(
								AbstractDefectTracker.INVALID_CERTIFICATE)){
					model.addAttribute("showKeytoolLink", true);
				}
			}
			
			if (result.hasErrors()) {
				model.addAttribute("contentPage", "config/defecttrackers/forms/createDTForm.jsp");
				return "ajaxFailureHarness";
			}
			
			defectTrackerService.storeDefectTracker(defectTracker);
			
			String user = SecurityContextHolder.getContext().getAuthentication().getName();
			log.debug(user + " has successfully created a Defect Tracker with the name " + defectTracker.getName() +
					", the URL " + defectTracker.getUrl() + 
					", the type " + defectTracker.getDefectTrackerType().getName() + 
					", and the ID " + defectTracker.getId());
			
			String referrer = request.getHeader("referer");
			if (referrer.contains("configuration/defecttrackers")) {
				model.addAttribute("contentPage", "/configuration/defecttrackers");
				ControllerUtils.addSuccessMessage(request, 
						"Defect Tracker " + defectTracker.getName() + " has been created successfully.");
				return "ajaxRedirectHarness";
			} else {
			
				Application application = null;
				if (request.getParameter("applicationId") != null) {
					Integer testId = null;
					try {
						testId = Integer.valueOf((String)request.getParameter("applicationId"));
						application = applicationService.loadApplication(testId);
					} catch (NumberFormatException e) {
						log.warn("Non-numeric value discovered in applicationId field. Someone is trying to tamper with it.");
					}
				}
				
				model.addAttribute("application", application);
				model.addAttribute("contentPage", "applications/forms/addDTForm.jsp");
				
				model.addAttribute("newDefectTracker", defectTracker);
				model.addAttribute("defectTrackerList", defectTrackerService.loadAllDefectTrackers());
				model.addAttribute("defectTrackerTypeList", defectTrackerService.loadAllDefectTrackerTypes());
				model.addAttribute("defectTracker", new DefectTracker());
				
				return "ajaxSuccessHarness";
			}
		}
	}
}