mv com/google/domain/registry google/registry

This change renames directories in preparation for the great package
rename. The repository is now in a broken state because the code
itself hasn't been updated. However this should ensure that git
correctly preserves history for each file.

java/google/registry/tools/ValidateLoginCredentialsCommand.java

@@ -0,0 +1,145 @@
+// Copyright 2016 The Domain Registry Authors. All Rights Reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package com.google.domain.registry.tools;
+
+import static com.google.common.base.Preconditions.checkArgument;
+import static com.google.common.base.Strings.isNullOrEmpty;
+import static com.google.common.io.Resources.getResource;
+import static com.google.domain.registry.flows.EppXmlTransformer.unmarshal;
+import static com.google.domain.registry.tools.CommandUtilities.runFlow;
+import static com.google.domain.registry.util.X509Utils.getCertificateHash;
+import static com.google.domain.registry.util.X509Utils.loadCertificate;
+import static java.nio.charset.StandardCharsets.US_ASCII;
+import static java.nio.charset.StandardCharsets.UTF_8;
+
+import com.google.common.net.InetAddresses;
+import com.google.domain.registry.flows.Flow;
+import com.google.domain.registry.flows.FlowRegistry;
+import com.google.domain.registry.flows.FlowRunner;
+import com.google.domain.registry.flows.FlowRunner.CommitMode;
+import com.google.domain.registry.flows.FlowRunner.UserPrivileges;
+import com.google.domain.registry.flows.SessionMetadata;
+import com.google.domain.registry.flows.TlsCredentials;
+import com.google.domain.registry.model.eppcommon.Trid;
+import com.google.domain.registry.model.eppinput.EppInput;
+import com.google.domain.registry.tools.Command.GtechCommand;
+import com.google.domain.registry.tools.Command.RemoteApiCommand;
+import com.google.domain.registry.tools.params.PathParameter;
+import com.google.domain.registry.tools.soy.LoginSoyInfo;
+import com.google.template.soy.SoyFileSet;
+import com.google.template.soy.data.SoyMapData;
+
+import com.beust.jcommander.Parameter;
+import com.beust.jcommander.Parameters;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.HashMap;
+import java.util.Map;
+
+import javax.annotation.Nullable;
+
+/** A command to execute an epp command. */
+@Parameters(separators = " =", commandDescription = "Test registrar login credentials")
+final class ValidateLoginCredentialsCommand implements RemoteApiCommand, GtechCommand {
+
+  @Parameter(
+      names = {"-c", "--client"},
+      description = "Client identifier of the registrar to test",
+      required = true)
+  private String clientIdentifier;
+
+  @Parameter(
+      names = {"-p", "--password"},
+      description = "Password of the registrar to test",
+      required = true)
+  private String password;
+
+  @Nullable
+  @Parameter(
+      names = {"-f", "--cert_file"},
+      description = "File containing the client certificate",
+      validateWith = PathParameter.InputFile.class)
+  private Path clientCertificatePath;
+
+  @Nullable
+  @Parameter(
+      names = {"-h", "--cert_hash"},
+      description = "Hash of the client certificate.")
+  private String clientCertificateHash;
+
+  @Parameter(
+      names = {"-i", "--ip_address"},
+      description = "Client ip address to pretend to use")
+  private String clientIpAddress = "10.0.0.1";
+
+  @Override
+  public void run() throws Exception {
+    checkArgument(clientCertificatePath == null || isNullOrEmpty(clientCertificateHash),
+        "Can't specify both --cert_hash and --cert_file");
+    if (clientCertificatePath != null) {
+      String asciiCrt = new String(Files.readAllBytes(clientCertificatePath), US_ASCII);
+      clientCertificateHash = getCertificateHash(loadCertificate(asciiCrt));
+    }
+    byte[] inputXmlBytes = SoyFileSet.builder()
+        .add(getResource(LoginSoyInfo.class, LoginSoyInfo.getInstance().getFileName()))
+        .build()
+        .compileToTofu()
+        .newRenderer(LoginSoyInfo.LOGIN)
+        .setData(new SoyMapData("clientIdentifier", clientIdentifier, "password", password))
+        .render()
+        .getBytes(UTF_8);
+    EppInput eppInput = unmarshal(inputXmlBytes);
+    Class<? extends Flow> flowClass = FlowRegistry.getFlowClass(eppInput);
+    System.out.println(runFlow(
+        new FlowRunner(
+            flowClass,
+            eppInput,
+            Trid.create(eppInput.getCommandWrapper().getClTrid()),
+            new SessionMetadata() {
+
+              private final Map<String, Object> properties = new HashMap<>();
+
+              {
+                setTransportCredentials(new TlsCredentials(
+                    clientCertificateHash,
+                    InetAddresses.forString(clientIpAddress),
+                    "placeholder"));  // behave as if we have SNI on, since we're validating a cert
+              }
+
+              @Override
+              protected void setProperty(String key, Object value) {
+                properties.put(key, value);
+              }
+
+              @Override
+              protected Object getProperty(String key) {
+                return properties.get(key);
+              }
+
+              @Override
+              public SessionSource getSessionSource() {
+                return SessionSource.TOOL;
+              }
+
+              @Override
+              public void invalidate() {}
+            },
+            inputXmlBytes,
+            null),
+        CommitMode.DRY_RUN,
+        UserPrivileges.NORMAL));
+  }
+}