google-nomulus/java/google/registry/rdap/RdapModule.java
guyben 3b8a8892bb Inject RdapAuthorization
We currently create it from injected arguments, and pass it to every function.

Instead, we just create a provider for it and inject it where needed.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=247072517
2019-05-13 12:34:53 -04:00

118 lines
4 KiB
Java

// Copyright 2017 The Nomulus Authors. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package google.registry.rdap;
import com.google.common.collect.ImmutableSet;
import com.google.common.flogger.FluentLogger;
import dagger.Module;
import dagger.Provides;
import google.registry.request.Parameter;
import google.registry.request.RequestParameters;
import google.registry.request.auth.AuthResult;
import google.registry.request.auth.AuthenticatedRegistrarAccessor;
import google.registry.request.auth.UserAuthInfo;
import java.util.Optional;
import javax.servlet.http.HttpServletRequest;
/** Dagger module for the RDAP package. */
@Module
public final class RdapModule {
private static final FluentLogger logger = FluentLogger.forEnclosingClass();
@Provides
@Parameter("name")
static Optional<String> provideName(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "name");
}
@Provides
@Parameter("nsLdhName")
static Optional<String> provideNsLdhName(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "nsLdhName");
}
@Provides
@Parameter("nsIp")
static Optional<String> provideNsIp(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "nsIp");
}
@Provides
@Parameter("ip")
static Optional<String> provideIp(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "ip");
}
@Provides
@Parameter("fn")
static Optional<String> provideFn(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "fn");
}
@Provides
@Parameter("handle")
static Optional<String> provideHandle(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "handle");
}
@Provides
@Parameter("registrar")
static Optional<String> provideRegistrar(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "registrar");
}
@Provides
@Parameter("subtype")
static Optional<String> provideSubtype(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "subtype");
}
@Provides
@Parameter("includeDeleted")
static Optional<Boolean> provideIncludeDeleted(HttpServletRequest req) {
return RequestParameters.extractOptionalBooleanParameter(req, "includeDeleted");
}
@Provides
@Parameter("formatOutput")
static Optional<Boolean> provideFormatOutput(HttpServletRequest req) {
return RequestParameters.extractOptionalBooleanParameter(req, "formatOutput");
}
@Provides
@Parameter("cursor")
static Optional<String> provideCursor(HttpServletRequest req) {
return RequestParameters.extractOptionalParameter(req, "cursor");
}
@Provides
static RdapAuthorization provideRdapAuthorization(
AuthResult authResult, AuthenticatedRegistrarAccessor registrarAccessor) {
if (!authResult.userAuthInfo().isPresent()) {
return RdapAuthorization.PUBLIC_AUTHORIZATION;
}
UserAuthInfo userAuthInfo = authResult.userAuthInfo().get();
if (userAuthInfo.isUserAdmin()) {
return RdapAuthorization.ADMINISTRATOR_AUTHORIZATION;
}
ImmutableSet<String> clientIds = registrarAccessor.getAllClientIdWithRoles().keySet();
if (clientIds.isEmpty()) {
logger.atWarning().log("Couldn't find registrar for User %s.", authResult.userIdForLogging());
return RdapAuthorization.PUBLIC_AUTHORIZATION;
}
return RdapAuthorization.create(RdapAuthorization.Role.REGISTRAR, clientIds);
}
}