mirror of
https://github.com/google/nomulus.git
synced 2025-05-14 00:17:20 +02:00
Actionize the EPP endpoints.
This introduces Actions and Dagger up until FlowRunner. The changes to the servlets are relatively simple, but the required changes to the tests, as well as to auxillary EPP endpoints (such as the http check api and the load test servlet) were vast. I've added some comments in critique to make the review easier that don't really make sense as in-code comments for the future. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=124593546
This commit is contained in:
parent
6ba1d5e6df
commit
0ce293325c
63 changed files with 1911 additions and 1630 deletions
|
@ -11,9 +11,12 @@ java_library(
|
|||
"//java/com/google/common/base",
|
||||
"//java/com/google/common/collect",
|
||||
"//java/com/google/common/net",
|
||||
"//third_party/java/dagger",
|
||||
"//third_party/java/jsr330_inject",
|
||||
"//java/google/registry/config",
|
||||
"//java/google/registry/flows",
|
||||
"//java/google/registry/model",
|
||||
"//java/google/registry/request",
|
||||
"//java/google/registry/ui/server",
|
||||
"//java/google/registry/ui/soy/api:soy_java_wrappers",
|
||||
"//java/google/registry/util",
|
||||
|
|
|
@ -31,6 +31,9 @@ import com.google.common.net.InternetDomainName;
|
|||
import com.google.common.net.MediaType;
|
||||
import com.google.template.soy.tofu.SoyTofu;
|
||||
|
||||
import dagger.Module;
|
||||
import dagger.Provides;
|
||||
|
||||
import google.registry.config.RegistryEnvironment;
|
||||
import google.registry.flows.EppException;
|
||||
import google.registry.flows.EppXmlTransformer;
|
||||
|
@ -47,37 +50,33 @@ import google.registry.model.eppinput.EppInput;
|
|||
import google.registry.model.eppoutput.CheckData.DomainCheck;
|
||||
import google.registry.model.eppoutput.CheckData.DomainCheckData;
|
||||
import google.registry.model.eppoutput.Response;
|
||||
import google.registry.request.Action;
|
||||
import google.registry.request.Parameter;
|
||||
import google.registry.request.RequestParameters;
|
||||
import google.registry.ui.soy.api.DomainCheckFeeEppSoyInfo;
|
||||
import google.registry.util.Clock;
|
||||
import google.registry.util.FormattingLogger;
|
||||
|
||||
import java.io.IOException;
|
||||
import java.util.Map;
|
||||
|
||||
import javax.servlet.http.HttpServlet;
|
||||
import javax.inject.Inject;
|
||||
import javax.servlet.http.HttpServletRequest;
|
||||
import javax.servlet.http.HttpServletResponse;
|
||||
|
||||
/**
|
||||
* A servlet that returns availability and premium checks as json.
|
||||
*
|
||||
* <p>This servlet returns plain JSON without a safety prefix, so it's vital that the output not be
|
||||
* <p>This action returns plain JSON without a safety prefix, so it's vital that the output not be
|
||||
* user controlled, lest it open an XSS vector. Do not modify this to return the domain name in the
|
||||
* response.
|
||||
*/
|
||||
public class CheckApiServlet extends HttpServlet {
|
||||
@Action(path = "/check")
|
||||
public class CheckApiAction implements Runnable {
|
||||
|
||||
private static final FormattingLogger logger = FormattingLogger.getLoggerForCallerClass();
|
||||
|
||||
private static final Supplier<SoyTofu> TOFU_SUPPLIER =
|
||||
createTofuSupplier(DomainCheckFeeEppSoyInfo.getInstance());
|
||||
|
||||
@Override
|
||||
public void doGet(HttpServletRequest req, HttpServletResponse rsp) throws IOException {
|
||||
Map<String, ?> response = doCheck(req.getParameter("domain"));
|
||||
rsp.setHeader("Content-Disposition", "attachment");
|
||||
rsp.setHeader("X-Content-Type-Options", "nosniff");
|
||||
rsp.setHeader(ACCESS_CONTROL_ALLOW_ORIGIN, "*");
|
||||
rsp.setContentType(MediaType.JSON_UTF_8.toString());
|
||||
rsp.getWriter().write(toJSONString(response));
|
||||
}
|
||||
|
||||
private StatelessRequestSessionMetadata sessionMetadata = new StatelessRequestSessionMetadata(
|
||||
RegistryEnvironment.get().config().getCheckApiServletRegistrarClientId(),
|
||||
false,
|
||||
|
@ -85,6 +84,21 @@ public class CheckApiServlet extends HttpServlet {
|
|||
ImmutableSet.of(FEE_0_6.getUri()),
|
||||
SessionSource.HTTP);
|
||||
|
||||
@Inject @Parameter("domain") String domain;
|
||||
@Inject google.registry.request.Response response;
|
||||
@Inject Clock clock;
|
||||
@Inject CheckApiAction() {}
|
||||
|
||||
@Override
|
||||
public void run() {
|
||||
Map<String, ?> checkResponse = doCheck(domain);
|
||||
response.setHeader("Content-Disposition", "attachment");
|
||||
response.setHeader("X-Content-Type-Options", "nosniff");
|
||||
response.setHeader(ACCESS_CONTROL_ALLOW_ORIGIN, "*");
|
||||
response.setContentType(MediaType.JSON_UTF_8);
|
||||
response.setPayload(toJSONString(checkResponse));
|
||||
}
|
||||
|
||||
// TODO(rgr): add whitebox instrumentation for this?
|
||||
private Map<String, ?> doCheck(String domainString) {
|
||||
try {
|
||||
|
@ -103,10 +117,11 @@ public class CheckApiServlet extends HttpServlet {
|
|||
Response response = new FlowRunner(
|
||||
DomainCheckFlow.class,
|
||||
EppXmlTransformer.<EppInput>unmarshal(inputXmlBytes),
|
||||
Trid.create(CheckApiServlet.class.getSimpleName()),
|
||||
Trid.create(getClass().getSimpleName()),
|
||||
sessionMetadata,
|
||||
inputXmlBytes,
|
||||
null)
|
||||
null,
|
||||
clock)
|
||||
.run(CommitMode.LIVE, UserPrivileges.NORMAL)
|
||||
.getResponse();
|
||||
DomainCheckData checkData = (DomainCheckData) response.getResponseData().get(0);
|
||||
|
@ -127,7 +142,7 @@ public class CheckApiServlet extends HttpServlet {
|
|||
} catch (EppException e) {
|
||||
return fail(e.getMessage());
|
||||
} catch (Exception e) {
|
||||
e.printStackTrace();
|
||||
logger.warning(e, "Unknown error");
|
||||
return fail("Invalid request");
|
||||
}
|
||||
}
|
||||
|
@ -137,4 +152,14 @@ public class CheckApiServlet extends HttpServlet {
|
|||
"status", "error",
|
||||
"reason", reason);
|
||||
}
|
||||
|
||||
/** Dagger module for the check api endpoint. */
|
||||
@Module
|
||||
public static final class CheckApiModule {
|
||||
@Provides
|
||||
@Parameter("domain")
|
||||
static String provideDomain(HttpServletRequest req) {
|
||||
return RequestParameters.extractRequiredParameter(req, "domain");
|
||||
}
|
||||
}
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue