Sprint-1-Fixes

.gitignore

@@ -4,8 +4,5 @@
 # Ignore IntelliJ
 .idea
 
-# Ignore Gradle
-gradle
-
 # Ignore Gradle build output directory
 build

assertion-rest-client-native/build.gradle

@@ -10,7 +10,8 @@
 plugins {
 	// Apply the java-library plugin for API and implementation separation.
 	id 'java-library'
-	id("io.freefair.lombok") version "8.0.0-rc4"
+	id("io.freefair.lombok") version "8.0.0"
+/*id("org.openapi.generator") version "6.5.0"*/
 }
 
 group 'it.pagopa.commons'
@@ -20,13 +21,63 @@ repositories {
 	mavenCentral()
 }
 
+configurations {
+	implementation {
+		attributes {
+			attribute(LibraryElements.LIBRARY_ELEMENTS_ATTRIBUTE, objects.named(LibraryElements, 'instrumented-core-jar'))
+		}
+	}
+}
+
+abstract class InstrumentedJarsRule implements AttributeCompatibilityRule<LibraryElements> {
+
+	@Override
+	void execute(CompatibilityCheckDetails<LibraryElements> details) {
+		if (details.consumerValue.name == 'instrumented-core-jar' && details.producerValue.name == 'jar') {
+			details.compatible()
+		}
+	}
+}
+
 dependencies {
+	attributesSchema {
+	attribute(LibraryElements.LIBRARY_ELEMENTS_ATTRIBUTE) {
+		compatibilityRules.add(InstrumentedJarsRule)
+	}
+	}
 	implementation project(path: ':core')
+
+	implementation 'javax.annotation:javax.annotation-api:1.3.2'
+	implementation 'com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.14.2'
+	implementation 'org.openapitools:jackson-databind-nullable:0.2.6'
+	implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.14.2'
+	implementation 'com.google.code.findbugs:jsr305:3.0.2'
+
+	implementation 'org.mock-server:mockserver-client-java:5.15.0'
+	implementation 'javax.inject:javax.inject:1'
+	implementation 'junit:junit:4.13.2'
 	// Use JUnit Jupiter for testing.
 	testImplementation 'org.junit.jupiter:junit-jupiter:5.9.2'
+	testImplementation 'org.assertj:assertj-core:3.24.2'
+	//Mockserver for testing api
+	testImplementation 'org.mock-server:mockserver-netty:5.15.0'
 }
 
 tasks.named('test') {
 	// Use JUnit Platform for unit tests.
 	useJUnitPlatform()
 }
+/*
+compileJava.dependsOn tasks.openApiGenerate
+
+openApiGenerate {
+	generatorName = "java"
+	inputSpec = "$projectDir/openapi/openapi-spec.yml"
+	outputDir = "$projectDir/generated"
+	configOptions = [
+			dataLibrary: "java8",
+			library: "native",
+			useRuntimeException: "true",
+			sourceFolder: "build/generated/sources/"
+	]
+}*/

assertion-rest-client-native/openapi/openapi-spec.yml

@@ -0,0 +1,166 @@
+openapi: "3.0.1"
+info:
+  title: Assertion Client
+  version: $npm_package_version
+  x-logo:
+    url: https://io.italia.it/assets/img/io-logo-blue.svg
+  description: |- 
+    Client used to get the assertion from the identity provider
+servers:
+    - url: http://localhost:3000
+security:
+  - ApiKeyAuth: []
+paths:
+  /assertions/{assertion_ref}:
+    get:
+      operationId: getAssertion
+      summary: Get Assertion related to a given assertion ref
+      parameters:
+        - name: assertion_ref
+          required: true
+          in: path
+          schema:
+            $ref: '#/components/schemas/AssertionRef'
+        - name: x-pagopa-lollipop-auth
+          required: true
+          in: header
+          schema:
+            $ref: '#/components/schemas/LollipopAuthBearer'
+      responses:
+        '200':
+          description: The assertion related to a valid assertion_ref
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/LCUserInfo'
+        '400':
+          description: Bad Request
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ProblemJson'
+        '401':
+          description: Unauthorized
+        '403':
+          description: Forbidden
+        '404':
+          description: Not Found
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ProblemJson'
+        '410':
+          description: Assertion gone
+        '500':
+          description: Internal Server Error
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ProblemJson'
+components:
+  securitySchemes:
+    ApiKeyAuth:
+      type: apiKey
+      in: header
+      name: Ocp-Apim-Subscription-Key
+  schemas:
+    ProblemJson:
+      type: object
+      properties:
+        type:
+          type: string
+          format: uri
+          description: |-
+            An absolute URI that identifies the problem type. When dereferenced,
+            it SHOULD provide human-readable documentation for the problem type
+            (e.g., using HTML).
+          default: about:blank
+          example: https://example.com/problem/constraint-violation
+        title:
+          type: string
+          description: >-
+            A short, summary of the problem type. Written in english and
+            readable
+
+            for engineers (usually not suited for non technical stakeholders and
+
+            not localized); example: Service Unavailable
+        status:
+          type: integer
+          format: int32
+          description: >-
+            The HTTP status code generated by the origin server for this
+            occurrence
+
+            of the problem.
+          minimum: 100
+          maximum: 600
+          exclusiveMaximum: true
+          example: 200
+        detail:
+          type: string
+          description: |-
+            A human readable explanation specific to this occurrence of the
+            problem.
+          example: There was an error processing the request
+        instance:
+          type: string
+          format: uri
+          description: >-
+            An absolute URI that identifies the specific occurrence of the
+            problem.
+
+            It may or may not yield further information if dereferenced.
+    AssertionType:
+      type: string
+      enum:
+        - SAML
+        - OIDC
+    AssertionRefSha256:
+      type: string
+      pattern: ^(sha256-[A-Za-z0-9-_=]{1,44})$
+    AssertionRefSha384:
+      type: string
+      pattern: ^(sha384-[A-Za-z0-9-_=]{1,66})$
+    AssertionRefSha512:
+      type: string
+      pattern: ^(sha512-[A-Za-z0-9-_=]{1,88})$
+    AssertionRef:
+      oneOf:
+        - $ref: '#/components/schemas/AssertionRefSha256'
+        - $ref: '#/components/schemas/AssertionRefSha384'
+        - $ref: '#/components/schemas/AssertionRefSha512'
+    LollipopAuthBearer:
+      type: string
+      pattern: ^Bearer [a-zA-Z0-9-_].+
+      description: A lollipop's JWT auth custom header as `Bearer <JWT Token>`
+      example: >-
+        Bearer
+        eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c
+    SamlUserInfo:
+      type: object
+      properties:
+        response_xml:
+          type: string
+          description: A string representation of a signed SPID/CIE response
+          minLength: 1
+      required:
+        - response_xml
+    OidcSignedJwt:
+      type: string
+      description: A JWT representation of a signed SPID/CIE OIDC Idp
+      minLength: 1
+    OidcUserInfo:
+      type: object
+      properties:
+        id_token:
+          $ref: '#/components/schemas/OidcSignedJwt'
+        claims_token:
+          $ref: '#/components/schemas/OidcSignedJwt'
+      required:
+        - id_token
+        - claims_token
+    LCUserInfo:
+      oneOf:
+        - $ref: '#/components/schemas/SamlUserInfo'
+        - $ref: '#/components/schemas/OidcUserInfo'

assertion-rest-client-native/src/main/java/it/pagopa/tech/lollipop/consumer/assertion/client/simple/AssertionSimpleClient.java

@@ -0,0 +1,65 @@
+/* (C)2023 */
+package it.pagopa.tech.lollipop.consumer.assertion.client.simple;
+
+import it.pagopa.tech.lollipop.consumer.assertion.client.AssertionClient;
+import it.pagopa.tech.lollipop.consumer.assertion.client.simple.internal.ApiClient;
+import it.pagopa.tech.lollipop.consumer.assertion.client.simple.internal.ApiException;
+import it.pagopa.tech.lollipop.consumer.assertion.client.simple.internal.api.DefaultApi;
+import it.pagopa.tech.lollipop.consumer.assertion.client.simple.internal.model.AssertionRef;
+import it.pagopa.tech.lollipop.consumer.assertion.client.simple.internal.model.LCUserInfo;
+import it.pagopa.tech.lollipop.consumer.assertion.client.simple.internal.model.SamlUserInfo;
+import it.pagopa.tech.lollipop.consumer.exception.LollipopAssertionNotFoundException;
+import it.pagopa.tech.lollipop.consumer.model.SamlAssertion;
+import javax.inject.Inject;
+
+/** Implementation of the @AssertionClient using generated openAPI REST Client */
+public class AssertionSimpleClient implements AssertionClient {
+
+    ApiClient apiClient;
+    DefaultApi defaultApi;
+
+    @Inject
+    public AssertionSimpleClient(ApiClient client) {
+        this.apiClient = client;
+        this.defaultApi = new DefaultApi(client);
+    }
+
+    /**
+     * Retrieve assertion from IdentityProvider using REST Client The retrieved assertion can be of
+     * two types: SAML or OIDC Only SAML assertions are supported at this moment
+     *
+     * @param jwt Auth token for header param x-pagopa-lollipop-auth
+     * @param assertionRef Assertion unique identification
+     * @return the retrieved assertion or null if the assertion is not supported (not SAML)
+     * @throws LollipopAssertionNotFoundException if some error occurred in the request
+     */
+    @Override
+    public SamlAssertion getAssertion(String jwt, String assertionRef)
+            throws LollipopAssertionNotFoundException {
+        AssertionRef ref = new AssertionRef(assertionRef);
+
+        if (jwt.isEmpty() || assertionRef.isEmpty()) {
+            throw new IllegalArgumentException("Jwt or Assertion Ref missing");
+        }
+
+        LCUserInfo responseAssertion;
+
+        try {
+            responseAssertion = this.defaultApi.getAssertion(ref, jwt);
+        } catch (ApiException e) {
+            throw new LollipopAssertionNotFoundException(
+                    "Error retrieving assertion: " + e.getMessage(), e);
+        }
+
+        if (responseAssertion.getActualInstance().getClass().equals(SamlUserInfo.class)) {
+            SamlAssertion response = new SamlAssertion();
+            SamlUserInfo data = (SamlUserInfo) responseAssertion.getActualInstance();
+            String assertionData = data.getResponseXml();
+            response.setAssertionRef(assertionRef);
+            response.setAssertionData(assertionData);
+            return response;
+        }
+
+        return null;
+    }
+}

assertion-rest-client-native/src/main/java/it/pagopa/tech/lollipop/consumer/assertion/client/simple/AssertionSimpleClientProvider.java

@@ -0,0 +1,20 @@
+/* (C)2023 */
+package it.pagopa.tech.lollipop.consumer.assertion.client.simple;
+
+import it.pagopa.tech.lollipop.consumer.assertion.client.AssertionClient;
+import it.pagopa.tech.lollipop.consumer.assertion.client.AssertionClientProvider;
+import it.pagopa.tech.lollipop.consumer.assertion.client.simple.internal.ApiClient;
+
+/** Provider class for retrieving an instance of {@link AssertionSimpleClient} */
+public class AssertionSimpleClientProvider implements AssertionClientProvider {
+
+    /**
+     * Provide an instance of {@link AssertionSimpleClient}
+     *
+     * @return {@link AssertionSimpleClient}
+     */
+    @Override
+    public AssertionClient provideClient() {
+        return new AssertionSimpleClient(new ApiClient());
+    }
+}