mirror of
https://github.com/google/nomulus.git
synced 2025-04-30 20:17:51 +02:00
1f000b94e6
A test has been added to RequestHandlerTest, making sure that, while we merely log errors for the time being, the correct dummy AuthResult is being created. Most actions use the default settings, which have been changed to INTERNAL / APP / IGNORED. Actions with non-default settings are: INTERNAL/NONE/PUBLIC (non-auth public endpoints) CheckApiAction WhoisHttpServer Rdap*Action INTERNAL,API/APP/ADMIN (things currently protected by web.xml) EppTlsAction EppToolAction CreateGroupsAction CreatePremiumListAction DeleteEntityAction List*sAction UpdatePremiumListAction VerifyOteAction WhoisServer INTERNAL,API,LEGACY/USER/PUBLIC (registrar console) RegistrarPaymentAction RegistrarPaymentSetupAction RegistrarSettingsAction EppConsoleAction INTERNAL,API,LEGACY/NONE/PUBLIC (registrar console main page) ConsoleUiAction ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=149761652
59 lines
2 KiB
Java
59 lines
2 KiB
Java
// Copyright 2017 The Nomulus Authors. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package google.registry.flows;
|
|
|
|
import com.google.appengine.api.users.UserService;
|
|
import google.registry.request.Action;
|
|
import google.registry.request.Action.Method;
|
|
import google.registry.request.Payload;
|
|
import google.registry.request.auth.Auth;
|
|
import google.registry.request.auth.AuthLevel;
|
|
import javax.inject.Inject;
|
|
import javax.servlet.http.HttpSession;
|
|
|
|
/** Runs EPP from the console and requires GAE user authentication. */
|
|
@Action(
|
|
path = "/registrar-xhr",
|
|
xsrfProtection = true,
|
|
xsrfScope = EppConsoleAction.XSRF_SCOPE,
|
|
method = Method.POST,
|
|
auth =
|
|
@Auth(
|
|
methods = {Auth.AuthMethod.INTERNAL, Auth.AuthMethod.API, Auth.AuthMethod.LEGACY},
|
|
minimumLevel = AuthLevel.USER,
|
|
userPolicy = Auth.UserPolicy.PUBLIC
|
|
)
|
|
)
|
|
public class EppConsoleAction implements Runnable {
|
|
|
|
public static final String XSRF_SCOPE = "console";
|
|
|
|
@Inject @Payload byte[] inputXmlBytes;
|
|
@Inject HttpSession session;
|
|
@Inject EppRequestHandler eppRequestHandler;
|
|
@Inject UserService userService;
|
|
@Inject EppConsoleAction() {}
|
|
|
|
@Override
|
|
public void run() {
|
|
eppRequestHandler.executeEpp(
|
|
new HttpSessionMetadata(session),
|
|
GaeUserCredentials.forCurrentUser(userService),
|
|
EppRequestSource.CONSOLE,
|
|
false, // This endpoint is never a dry run.
|
|
false, // This endpoint is never a superuser.
|
|
inputXmlBytes);
|
|
}
|
|
}
|