mirror of
https://github.com/scm-manager/scm-manager.git
synced 2025-11-08 06:25:45 +01:00
remove throws NotFoundException and fix modify password
This commit is contained in:
@@ -71,7 +71,7 @@ public class ManagerDecorator<T extends ModelObject> implements Manager<T> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void delete(T object) throws NotFoundException {
|
public void delete(T object){
|
||||||
decorated.delete(object);
|
decorated.delete(object);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -82,12 +82,12 @@ public class ManagerDecorator<T extends ModelObject> implements Manager<T> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void modify(T object) throws NotFoundException {
|
public void modify(T object){
|
||||||
decorated.modify(object);
|
decorated.modify(object);
|
||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void refresh(T object) throws NotFoundException {
|
public void refresh(T object){
|
||||||
decorated.refresh(object);
|
decorated.refresh(object);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -3,6 +3,7 @@ package sonia.scm.user;
|
|||||||
public class ChangePasswordNotAllowedException extends RuntimeException {
|
public class ChangePasswordNotAllowedException extends RuntimeException {
|
||||||
|
|
||||||
public static final String WRONG_USER_TYPE = "User of type {0} are not allowed to change password";
|
public static final String WRONG_USER_TYPE = "User of type {0} are not allowed to change password";
|
||||||
|
public static final String OLD_PASSWORD_REQUIRED = "the old password is required.";
|
||||||
|
|
||||||
public ChangePasswordNotAllowedException(String message) {
|
public ChangePasswordNotAllowedException(String message) {
|
||||||
super(message);
|
super(message);
|
||||||
|
|||||||
@@ -154,7 +154,7 @@ public class SyncingRealmHelperTest {
|
|||||||
* Tests {@link SyncingRealmHelper#store(Group)} with an existing group.
|
* Tests {@link SyncingRealmHelper#store(Group)} with an existing group.
|
||||||
*/
|
*/
|
||||||
@Test
|
@Test
|
||||||
public void testStoreGroupModify() throws NotFoundException {
|
public void testStoreGroupModify(){
|
||||||
Group group = new Group("unit-test", "heartOfGold");
|
Group group = new Group("unit-test", "heartOfGold");
|
||||||
|
|
||||||
when(groupManager.get("heartOfGold")).thenReturn(group);
|
when(groupManager.get("heartOfGold")).thenReturn(group);
|
||||||
@@ -191,7 +191,7 @@ public class SyncingRealmHelperTest {
|
|||||||
* Tests {@link SyncingRealmHelper#store(User)} with an existing user.
|
* Tests {@link SyncingRealmHelper#store(User)} with an existing user.
|
||||||
*/
|
*/
|
||||||
@Test
|
@Test
|
||||||
public void testStoreUserModify() throws NotFoundException {
|
public void testStoreUserModify(){
|
||||||
when(userManager.contains("tricia")).thenReturn(Boolean.TRUE);
|
when(userManager.contains("tricia")).thenReturn(Boolean.TRUE);
|
||||||
|
|
||||||
User user = new User("tricia");
|
User user = new User("tricia");
|
||||||
|
|||||||
@@ -44,6 +44,35 @@ public class MeITCase {
|
|||||||
.assertStatusCode(204);
|
.assertStatusCode(204);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
public void nonAdminUserShouldChangeOwnPassword() {
|
||||||
|
String newPassword = "pass1";
|
||||||
|
String username = "user1";
|
||||||
|
String password = "pass";
|
||||||
|
TestData.createUser(username, password,false,"xml");
|
||||||
|
// user change the own password
|
||||||
|
ScmRequests.start()
|
||||||
|
.given()
|
||||||
|
.url(TestData.getMeUrl())
|
||||||
|
.usernameAndPassword(username, password)
|
||||||
|
.getMeResource()
|
||||||
|
.assertStatusCode(200)
|
||||||
|
.usingMeResponse()
|
||||||
|
.assertAdmin(aBoolean -> assertThat(aBoolean).isEqualTo(Boolean.FALSE))
|
||||||
|
.assertPassword(Assert::assertNull)
|
||||||
|
.assertType(s -> assertThat(s).isEqualTo("xml"))
|
||||||
|
.requestChangePassword(password, newPassword)
|
||||||
|
.assertStatusCode(204);
|
||||||
|
// assert password is changed -> login with the new Password than undo changes
|
||||||
|
ScmRequests.start()
|
||||||
|
.given()
|
||||||
|
.url(TestData.getMeUrl())
|
||||||
|
.usernameAndPassword(username, newPassword)
|
||||||
|
.getMeResource()
|
||||||
|
.assertStatusCode(200);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
public void shouldHidePasswordLinkIfUserTypeIsNotXML() {
|
public void shouldHidePasswordLinkIfUserTypeIsNotXML() {
|
||||||
String newUser = "user";
|
String newUser = "user";
|
||||||
|
|||||||
@@ -31,7 +31,7 @@ public class UserITCase {
|
|||||||
.usingUserResponse()
|
.usingUserResponse()
|
||||||
.assertAdmin(aBoolean -> assertThat(aBoolean).isEqualTo(Boolean.TRUE))
|
.assertAdmin(aBoolean -> assertThat(aBoolean).isEqualTo(Boolean.TRUE))
|
||||||
.assertPassword(Assert::assertNull)
|
.assertPassword(Assert::assertNull)
|
||||||
.requestChangePassword(newPassword) // the oldPassword is not needed in the user resource
|
.requestChangePassword(password, newPassword) // the oldPassword is needed when the own password should be changed
|
||||||
.assertStatusCode(204);
|
.assertStatusCode(204);
|
||||||
// assert password is changed -> login with the new Password
|
// assert password is changed -> login with the new Password
|
||||||
ScmRequests.start()
|
ScmRequests.start()
|
||||||
@@ -60,7 +60,7 @@ public class UserITCase {
|
|||||||
.getUserResource()
|
.getUserResource()
|
||||||
.assertStatusCode(200)
|
.assertStatusCode(200)
|
||||||
.usingUserResponse()
|
.usingUserResponse()
|
||||||
.assertAdmin(aBoolean -> assertThat(aBoolean).isEqualTo(Boolean.TRUE)) // the user anonymous is not an admin
|
.assertAdmin(aBoolean -> assertThat(aBoolean).isEqualTo(Boolean.TRUE))
|
||||||
.assertPassword(Assert::assertNull)
|
.assertPassword(Assert::assertNull)
|
||||||
.requestChangePassword(newPassword) // the oldPassword is not needed in the user resource
|
.requestChangePassword(newPassword) // the oldPassword is not needed in the user resource
|
||||||
.assertStatusCode(204);
|
.assertStatusCode(204);
|
||||||
@@ -74,6 +74,21 @@ public class UserITCase {
|
|||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
public void nonAdminUserShouldNotChangePasswordOfOtherUser() {
|
||||||
|
String user = "user";
|
||||||
|
String password = "pass";
|
||||||
|
TestData.createUser(user, password, false, "xml");
|
||||||
|
String user2 = "user2";
|
||||||
|
TestData.createUser(user2, password, false, "xml");
|
||||||
|
ScmRequests.start()
|
||||||
|
.given()
|
||||||
|
.url(TestData.getUserUrl(user2))
|
||||||
|
.usernameAndPassword(user, password)
|
||||||
|
.getUserResource()
|
||||||
|
.assertStatusCode(403);
|
||||||
|
}
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
public void nonAdminUserShouldChangeOwnPassword() {
|
public void nonAdminUserShouldChangeOwnPassword() {
|
||||||
String newUser = "user";
|
String newUser = "user";
|
||||||
@@ -88,7 +103,7 @@ public class UserITCase {
|
|||||||
.assertStatusCode(200)
|
.assertStatusCode(200)
|
||||||
.usingUserResponse()
|
.usingUserResponse()
|
||||||
.assertAdmin(aBoolean -> assertThat(aBoolean).isEqualTo(Boolean.FALSE))
|
.assertAdmin(aBoolean -> assertThat(aBoolean).isEqualTo(Boolean.FALSE))
|
||||||
.requestChangePassword(newPassword) // the oldPassword is not needed in the user resource
|
.requestChangePassword(password, newPassword) // the oldPassword is needed when the own password should be changed
|
||||||
.assertStatusCode(204);
|
.assertStatusCode(204);
|
||||||
// assert password is changed -> login with the new Password
|
// assert password is changed -> login with the new Password
|
||||||
ScmRequests.start()
|
ScmRequests.start()
|
||||||
|
|||||||
@@ -406,6 +406,10 @@ public class ScmRequests {
|
|||||||
return new AppliedChangePasswordRequest(applyPUTRequestFromLink(super.response, LINKS_PASSWORD_HREF, VndMediaType.PASSWORD_CHANGE, createPasswordChangeJson(null, newPassword)));
|
return new AppliedChangePasswordRequest(applyPUTRequestFromLink(super.response, LINKS_PASSWORD_HREF, VndMediaType.PASSWORD_CHANGE, createPasswordChangeJson(null, newPassword)));
|
||||||
}
|
}
|
||||||
|
|
||||||
|
public AppliedChangePasswordRequest requestChangePassword(String oldPassword , String newPassword) {
|
||||||
|
return new AppliedChangePasswordRequest(applyPUTRequestFromLink(super.response, LINKS_PASSWORD_HREF, VndMediaType.PASSWORD_CHANGE, createPasswordChangeJson(oldPassword, newPassword)));
|
||||||
|
}
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -196,7 +196,7 @@ public abstract class UserManagerTestBase extends ManagerTestBase<User> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Test(expected = NotFoundException.class)
|
@Test(expected = NotFoundException.class)
|
||||||
public void testModifyNotExisting() throws NotFoundException, ConcurrentModificationException {
|
public void testModifyNotExisting() {
|
||||||
manager.modify(UserTestData.createZaphod());
|
manager.modify(UserTestData.createZaphod());
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -249,7 +249,7 @@ public abstract class UserManagerTestBase extends ManagerTestBase<User> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Test(expected = NotFoundException.class)
|
@Test(expected = NotFoundException.class)
|
||||||
public void testRefreshNotFound() throws NotFoundException {
|
public void testRefreshNotFound(){
|
||||||
manager.refresh(UserTestData.createDent());
|
manager.refresh(UserTestData.createDent());
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ public class ManagerDaoAdapter<T extends ModelObject> {
|
|||||||
this.dao = dao;
|
this.dao = dao;
|
||||||
}
|
}
|
||||||
|
|
||||||
public void modify(T object, Function<T, PermissionCheck> permissionCheck, AroundHandler<T> beforeUpdate, AroundHandler<T> afterUpdate) throws NotFoundException {
|
public void modify(T object, Function<T, PermissionCheck> permissionCheck, AroundHandler<T> beforeUpdate, AroundHandler<T> afterUpdate) {
|
||||||
T notModified = dao.get(object.getId());
|
T notModified = dao.get(object.getId());
|
||||||
if (notModified != null) {
|
if (notModified != null) {
|
||||||
permissionCheck.apply(notModified).check();
|
permissionCheck.apply(notModified).check();
|
||||||
@@ -51,7 +51,7 @@ public class ManagerDaoAdapter<T extends ModelObject> {
|
|||||||
return newObject;
|
return newObject;
|
||||||
}
|
}
|
||||||
|
|
||||||
public void delete(T toDelete, Supplier<PermissionCheck> permissionCheck, AroundHandler<T> beforeDelete, AroundHandler<T> afterDelete) throws NotFoundException {
|
public void delete(T toDelete, Supplier<PermissionCheck> permissionCheck, AroundHandler<T> beforeDelete, AroundHandler<T> afterDelete) {
|
||||||
permissionCheck.get().check();
|
permissionCheck.get().check();
|
||||||
if (dao.contains(toDelete)) {
|
if (dao.contains(toDelete)) {
|
||||||
beforeDelete.handle(toDelete);
|
beforeDelete.handle(toDelete);
|
||||||
|
|||||||
@@ -109,7 +109,7 @@ public class ChangePasswordResource
|
|||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
@Produces({ MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML })
|
@Produces({ MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML })
|
||||||
public Response changePassword(@FormParam("old-password") String oldPassword, @FormParam("new-password") String newPassword) throws NotFoundException, ConcurrentModificationException {
|
public Response changePassword(@FormParam("old-password") String oldPassword, @FormParam("new-password") String newPassword) {
|
||||||
AssertUtil.assertIsNotEmpty(oldPassword);
|
AssertUtil.assertIsNotEmpty(oldPassword);
|
||||||
AssertUtil.assertIsNotEmpty(newPassword);
|
AssertUtil.assertIsNotEmpty(newPassword);
|
||||||
|
|
||||||
|
|||||||
@@ -50,7 +50,7 @@ public class DiffRootResource {
|
|||||||
@ResponseCode(code = 404, condition = "not found, no revision with the specified param for the repository available or repository not found"),
|
@ResponseCode(code = 404, condition = "not found, no revision with the specified param for the repository available or repository not found"),
|
||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name, @PathParam("revision") String revision) throws NotFoundException {
|
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name, @PathParam("revision") String revision){
|
||||||
HttpUtil.checkForCRLFInjection(revision);
|
HttpUtil.checkForCRLFInjection(revision);
|
||||||
try (RepositoryService repositoryService = serviceFactory.create(new NamespaceAndName(namespace, name))) {
|
try (RepositoryService repositoryService = serviceFactory.create(new NamespaceAndName(namespace, name))) {
|
||||||
StreamingOutput responseEntry = output -> {
|
StreamingOutput responseEntry = output -> {
|
||||||
|
|||||||
@@ -53,7 +53,7 @@ public class GroupResource {
|
|||||||
@ResponseCode(code = 404, condition = "not found, no group with the specified id/name available"),
|
@ResponseCode(code = 404, condition = "not found, no group with the specified id/name available"),
|
||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
public Response get(@PathParam("id") String id) throws NotFoundException {
|
public Response get(@PathParam("id") String id){
|
||||||
return adapter.get(id, groupToGroupDtoMapper::map);
|
return adapter.get(id, groupToGroupDtoMapper::map);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -98,7 +98,7 @@ public class GroupResource {
|
|||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
@TypeHint(TypeHint.NO_CONTENT.class)
|
@TypeHint(TypeHint.NO_CONTENT.class)
|
||||||
public Response update(@PathParam("id") String name, @Valid GroupDto groupDto) throws NotFoundException, ConcurrentModificationException {
|
public Response update(@PathParam("id") String name, @Valid GroupDto groupDto) throws ConcurrentModificationException {
|
||||||
return adapter.update(name, existing -> dtoToGroupMapper.map(groupDto));
|
return adapter.update(name, existing -> dtoToGroupMapper.map(groupDto));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -39,7 +39,7 @@ class IdResourceManagerAdapter<MODEL_OBJECT extends ModelObject,
|
|||||||
collectionAdapter = new CollectionResourceManagerAdapter<>(manager, type);
|
collectionAdapter = new CollectionResourceManagerAdapter<>(manager, type);
|
||||||
}
|
}
|
||||||
|
|
||||||
Response get(String id, Function<MODEL_OBJECT, DTO> mapToDto) throws NotFoundException {
|
Response get(String id, Function<MODEL_OBJECT, DTO> mapToDto) {
|
||||||
return singleAdapter.get(loadBy(id), mapToDto);
|
return singleAdapter.get(loadBy(id), mapToDto);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -62,7 +62,7 @@ class IdResourceManagerAdapter<MODEL_OBJECT extends ModelObject,
|
|||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
public Response changePassword(String id, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges, Consumer<MODEL_OBJECT> checker ) throws NotFoundException, ConcurrentModificationException {
|
public Response changePassword(String id, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges, Consumer<MODEL_OBJECT> checker ) throws ConcurrentModificationException {
|
||||||
return singleAdapter.changePassword(
|
return singleAdapter.changePassword(
|
||||||
loadBy(id),
|
loadBy(id),
|
||||||
applyChanges,
|
applyChanges,
|
||||||
@@ -71,7 +71,7 @@ class IdResourceManagerAdapter<MODEL_OBJECT extends ModelObject,
|
|||||||
getChangePasswordPermission(id));
|
getChangePasswordPermission(id));
|
||||||
}
|
}
|
||||||
|
|
||||||
public Response update(String id, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges) throws NotFoundException, ConcurrentModificationException {
|
public Response update(String id, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges) throws ConcurrentModificationException {
|
||||||
return singleAdapter.update(
|
return singleAdapter.update(
|
||||||
loadBy(id),
|
loadBy(id),
|
||||||
applyChanges,
|
applyChanges,
|
||||||
|
|||||||
@@ -6,11 +6,10 @@ import com.webcohesion.enunciate.metadata.rs.TypeHint;
|
|||||||
import org.apache.shiro.SecurityUtils;
|
import org.apache.shiro.SecurityUtils;
|
||||||
import org.apache.shiro.authc.credential.PasswordService;
|
import org.apache.shiro.authc.credential.PasswordService;
|
||||||
import sonia.scm.ConcurrentModificationException;
|
import sonia.scm.ConcurrentModificationException;
|
||||||
import sonia.scm.NotFoundException;
|
import sonia.scm.user.ChangePasswordNotAllowedException;
|
||||||
import sonia.scm.user.InvalidPasswordException;
|
import sonia.scm.user.InvalidPasswordException;
|
||||||
import sonia.scm.user.User;
|
import sonia.scm.user.User;
|
||||||
import sonia.scm.user.UserManager;
|
import sonia.scm.user.UserManager;
|
||||||
import sonia.scm.user.UserPermissions;
|
|
||||||
import sonia.scm.web.VndMediaType;
|
import sonia.scm.web.VndMediaType;
|
||||||
|
|
||||||
import javax.inject.Inject;
|
import javax.inject.Inject;
|
||||||
@@ -61,7 +60,7 @@ public class MeResource {
|
|||||||
@ResponseCode(code = 401, condition = "not authenticated / invalid credentials"),
|
@ResponseCode(code = 401, condition = "not authenticated / invalid credentials"),
|
||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
public Response get(@Context Request request, @Context UriInfo uriInfo) throws NotFoundException {
|
public Response get(@Context Request request, @Context UriInfo uriInfo) {
|
||||||
|
|
||||||
String id = (String) SecurityUtils.getSubject().getPrincipals().getPrimaryPrincipal();
|
String id = (String) SecurityUtils.getSubject().getPrincipals().getPrimaryPrincipal();
|
||||||
return adapter.get(id, meToUserDtoMapper::map);
|
return adapter.get(id, meToUserDtoMapper::map);
|
||||||
@@ -79,8 +78,11 @@ public class MeResource {
|
|||||||
})
|
})
|
||||||
@TypeHint(TypeHint.NO_CONTENT.class)
|
@TypeHint(TypeHint.NO_CONTENT.class)
|
||||||
@Consumes(VndMediaType.PASSWORD_CHANGE)
|
@Consumes(VndMediaType.PASSWORD_CHANGE)
|
||||||
public Response changePassword(PasswordChangeDto passwordChangeDto) throws NotFoundException, ConcurrentModificationException {
|
public Response changePassword(PasswordChangeDto passwordChangeDto) throws ConcurrentModificationException {
|
||||||
String name = (String) SecurityUtils.getSubject().getPrincipals().getPrimaryPrincipal();
|
String name = (String) SecurityUtils.getSubject().getPrincipals().getPrimaryPrincipal();
|
||||||
|
if (passwordChangeDto.getOldPassword() == null){
|
||||||
|
throw new ChangePasswordNotAllowedException(ChangePasswordNotAllowedException.OLD_PASSWORD_REQUIRED);
|
||||||
|
}
|
||||||
return adapter.changePassword(name, user -> user.clone().changePassword(passwordService.encryptPassword(passwordChangeDto.getNewPassword())), userManager.getChangePasswordChecker().andThen(getOldOriginalPasswordChecker(passwordChangeDto.getOldPassword())));
|
return adapter.changePassword(name, user -> user.clone().changePassword(passwordService.encryptPassword(passwordChangeDto.getNewPassword())), userManager.getChangePasswordChecker().andThen(getOldOriginalPasswordChecker(passwordChangeDto.getOldPassword())));
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -100,7 +100,7 @@ public class PermissionRootResource {
|
|||||||
@Produces(VndMediaType.PERMISSION)
|
@Produces(VndMediaType.PERMISSION)
|
||||||
@TypeHint(PermissionDto.class)
|
@TypeHint(PermissionDto.class)
|
||||||
@Path("{permission-name}")
|
@Path("{permission-name}")
|
||||||
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name, @PathParam("permission-name") String permissionName) throws NotFoundException {
|
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name, @PathParam("permission-name") String permissionName) {
|
||||||
Repository repository = load(namespace, name);
|
Repository repository = load(namespace, name);
|
||||||
RepositoryPermissions.permissionRead(repository).check();
|
RepositoryPermissions.permissionRead(repository).check();
|
||||||
return Response.ok(
|
return Response.ok(
|
||||||
@@ -158,7 +158,7 @@ public class PermissionRootResource {
|
|||||||
public Response update(@PathParam("namespace") String namespace,
|
public Response update(@PathParam("namespace") String namespace,
|
||||||
@PathParam("name") String name,
|
@PathParam("name") String name,
|
||||||
@PathParam("permission-name") String permissionName,
|
@PathParam("permission-name") String permissionName,
|
||||||
@Valid PermissionDto permission) throws NotFoundException, AlreadyExistsException {
|
@Valid PermissionDto permission) throws AlreadyExistsException {
|
||||||
log.info("try to update the permission with name: {}. the modified permission is: {}", permissionName, permission);
|
log.info("try to update the permission with name: {}. the modified permission is: {}", permissionName, permission);
|
||||||
Repository repository = load(namespace, name);
|
Repository repository = load(namespace, name);
|
||||||
RepositoryPermissions.permissionWrite(repository).check();
|
RepositoryPermissions.permissionWrite(repository).check();
|
||||||
@@ -198,7 +198,7 @@ public class PermissionRootResource {
|
|||||||
@Path("{permission-name}")
|
@Path("{permission-name}")
|
||||||
public Response delete(@PathParam("namespace") String namespace,
|
public Response delete(@PathParam("namespace") String namespace,
|
||||||
@PathParam("name") String name,
|
@PathParam("name") String name,
|
||||||
@PathParam("permission-name") String permissionName) throws NotFoundException {
|
@PathParam("permission-name") String permissionName) {
|
||||||
log.info("try to delete the permission with name: {}.", permissionName);
|
log.info("try to delete the permission with name: {}.", permissionName);
|
||||||
Repository repository = load(namespace, name);
|
Repository repository = load(namespace, name);
|
||||||
RepositoryPermissions.modify(repository).check();
|
RepositoryPermissions.modify(repository).check();
|
||||||
|
|||||||
@@ -91,7 +91,7 @@ public class RepositoryResource {
|
|||||||
@ResponseCode(code = 404, condition = "not found, no repository with the specified name available in the namespace"),
|
@ResponseCode(code = 404, condition = "not found, no repository with the specified name available in the namespace"),
|
||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name) throws NotFoundException {
|
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name){
|
||||||
return adapter.get(loadBy(namespace, name), repositoryToDtoMapper::map);
|
return adapter.get(loadBy(namespace, name), repositoryToDtoMapper::map);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -138,7 +138,7 @@ public class RepositoryResource {
|
|||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
@TypeHint(TypeHint.NO_CONTENT.class)
|
@TypeHint(TypeHint.NO_CONTENT.class)
|
||||||
public Response update(@PathParam("namespace") String namespace, @PathParam("name") String name, @Valid RepositoryDto repositoryDto) throws NotFoundException, ConcurrentModificationException {
|
public Response update(@PathParam("namespace") String namespace, @PathParam("name") String name, @Valid RepositoryDto repositoryDto) throws ConcurrentModificationException {
|
||||||
return adapter.update(
|
return adapter.update(
|
||||||
loadBy(namespace, name),
|
loadBy(namespace, name),
|
||||||
existing -> processUpdate(repositoryDto, existing),
|
existing -> processUpdate(repositoryDto, existing),
|
||||||
|
|||||||
@@ -46,14 +46,14 @@ class SingleResourceManagerAdapter<MODEL_OBJECT extends ModelObject,
|
|||||||
* Reads the model object for the given id, transforms it to a dto and returns a corresponding http response.
|
* Reads the model object for the given id, transforms it to a dto and returns a corresponding http response.
|
||||||
* This handles all corner cases, eg. no matching object for the id or missing privileges.
|
* This handles all corner cases, eg. no matching object for the id or missing privileges.
|
||||||
*/
|
*/
|
||||||
Response get(Supplier<Optional<MODEL_OBJECT>> reader, Function<MODEL_OBJECT, DTO> mapToDto) throws NotFoundException {
|
Response get(Supplier<Optional<MODEL_OBJECT>> reader, Function<MODEL_OBJECT, DTO> mapToDto) {
|
||||||
return reader.get()
|
return reader.get()
|
||||||
.map(mapToDto)
|
.map(mapToDto)
|
||||||
.map(Response::ok)
|
.map(Response::ok)
|
||||||
.map(Response.ResponseBuilder::build)
|
.map(Response.ResponseBuilder::build)
|
||||||
.orElseThrow(NotFoundException::new);
|
.orElseThrow(NotFoundException::new);
|
||||||
}
|
}
|
||||||
public Response changePassword(Supplier<Optional<MODEL_OBJECT>> reader, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges, Predicate<MODEL_OBJECT> hasSameKey, Consumer<MODEL_OBJECT> checker, Function<MODEL_OBJECT, PermissionCheck> permissionCheck) throws NotFoundException, ConcurrentModificationException {
|
public Response changePassword(Supplier<Optional<MODEL_OBJECT>> reader, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges, Predicate<MODEL_OBJECT> hasSameKey, Consumer<MODEL_OBJECT> checker, Function<MODEL_OBJECT, PermissionCheck> permissionCheck) throws ConcurrentModificationException {
|
||||||
MODEL_OBJECT existingModelObject = reader.get().orElseThrow(NotFoundException::new);
|
MODEL_OBJECT existingModelObject = reader.get().orElseThrow(NotFoundException::new);
|
||||||
MODEL_OBJECT changedModelObject = applyChanges.apply(existingModelObject);
|
MODEL_OBJECT changedModelObject = applyChanges.apply(existingModelObject);
|
||||||
checkForUpdate(hasSameKey, existingModelObject, changedModelObject);
|
checkForUpdate(hasSameKey, existingModelObject, changedModelObject);
|
||||||
@@ -65,7 +65,7 @@ class SingleResourceManagerAdapter<MODEL_OBJECT extends ModelObject,
|
|||||||
* Update the model object for the given id according to the given function and returns a corresponding http response.
|
* Update the model object for the given id according to the given function and returns a corresponding http response.
|
||||||
* This handles all corner cases, eg. no matching object for the id or missing privileges.
|
* This handles all corner cases, eg. no matching object for the id or missing privileges.
|
||||||
*/
|
*/
|
||||||
public Response update(Supplier<Optional<MODEL_OBJECT>> reader, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges, Predicate<MODEL_OBJECT> hasSameKey) throws NotFoundException, ConcurrentModificationException {
|
public Response update(Supplier<Optional<MODEL_OBJECT>> reader, Function<MODEL_OBJECT, MODEL_OBJECT> applyChanges, Predicate<MODEL_OBJECT> hasSameKey) throws ConcurrentModificationException {
|
||||||
MODEL_OBJECT existingModelObject = reader.get().orElseThrow(NotFoundException::new);
|
MODEL_OBJECT existingModelObject = reader.get().orElseThrow(NotFoundException::new);
|
||||||
MODEL_OBJECT changedModelObject = applyChanges.apply(existingModelObject);
|
MODEL_OBJECT changedModelObject = applyChanges.apply(existingModelObject);
|
||||||
checkForUpdate(hasSameKey, existingModelObject, changedModelObject);
|
checkForUpdate(hasSameKey, existingModelObject, changedModelObject);
|
||||||
|
|||||||
@@ -47,7 +47,7 @@ public class SourceRootResource {
|
|||||||
@GET
|
@GET
|
||||||
@Produces(VndMediaType.SOURCE)
|
@Produces(VndMediaType.SOURCE)
|
||||||
@Path("{revision}/{path: .*}")
|
@Path("{revision}/{path: .*}")
|
||||||
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name, @PathParam("revision") String revision, @PathParam("path") String path) throws NotFoundException, IOException {
|
public Response get(@PathParam("namespace") String namespace, @PathParam("name") String name, @PathParam("revision") String revision, @PathParam("path") String path) throws IOException {
|
||||||
return getSource(namespace, name, path, revision);
|
return getSource(namespace, name, path, revision);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -3,9 +3,10 @@ package sonia.scm.api.v2.resources;
|
|||||||
import com.webcohesion.enunciate.metadata.rs.ResponseCode;
|
import com.webcohesion.enunciate.metadata.rs.ResponseCode;
|
||||||
import com.webcohesion.enunciate.metadata.rs.StatusCodes;
|
import com.webcohesion.enunciate.metadata.rs.StatusCodes;
|
||||||
import com.webcohesion.enunciate.metadata.rs.TypeHint;
|
import com.webcohesion.enunciate.metadata.rs.TypeHint;
|
||||||
|
import org.apache.shiro.SecurityUtils;
|
||||||
import org.apache.shiro.authc.credential.PasswordService;
|
import org.apache.shiro.authc.credential.PasswordService;
|
||||||
import sonia.scm.ConcurrentModificationException;
|
import sonia.scm.ConcurrentModificationException;
|
||||||
import sonia.scm.NotFoundException;
|
import sonia.scm.user.ChangePasswordNotAllowedException;
|
||||||
import sonia.scm.user.User;
|
import sonia.scm.user.User;
|
||||||
import sonia.scm.user.UserManager;
|
import sonia.scm.user.UserManager;
|
||||||
import sonia.scm.web.VndMediaType;
|
import sonia.scm.web.VndMediaType;
|
||||||
@@ -57,7 +58,7 @@ public class UserResource {
|
|||||||
@ResponseCode(code = 404, condition = "not found, no user with the specified id/name available"),
|
@ResponseCode(code = 404, condition = "not found, no user with the specified id/name available"),
|
||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
public Response get(@PathParam("id") String id) throws NotFoundException {
|
public Response get(@PathParam("id") String id) {
|
||||||
return adapter.get(id, userToDtoMapper::map);
|
return adapter.get(id, userToDtoMapper::map);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -102,7 +103,7 @@ public class UserResource {
|
|||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
@TypeHint(TypeHint.NO_CONTENT.class)
|
@TypeHint(TypeHint.NO_CONTENT.class)
|
||||||
public Response update(@PathParam("id") String name, @Valid UserDto userDto) throws NotFoundException, ConcurrentModificationException {
|
public Response update(@PathParam("id") String name, @Valid UserDto userDto) throws ConcurrentModificationException {
|
||||||
return adapter.update(name, existing -> dtoToUserMapper.map(userDto, existing.getPassword()));
|
return adapter.update(name, existing -> dtoToUserMapper.map(userDto, existing.getPassword()));
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -129,7 +130,11 @@ public class UserResource {
|
|||||||
@ResponseCode(code = 500, condition = "internal server error")
|
@ResponseCode(code = 500, condition = "internal server error")
|
||||||
})
|
})
|
||||||
@TypeHint(TypeHint.NO_CONTENT.class)
|
@TypeHint(TypeHint.NO_CONTENT.class)
|
||||||
public Response changePassword(@PathParam("id") String name, @Valid PasswordChangeDto passwordChangeDto) throws NotFoundException, ConcurrentModificationException {
|
public Response changePassword(@PathParam("id") String name, @Valid PasswordChangeDto passwordChangeDto) throws ConcurrentModificationException {
|
||||||
|
String currentUserName = (String) SecurityUtils.getSubject().getPrincipals().getPrimaryPrincipal();
|
||||||
|
if (currentUserName.equals(name) && passwordChangeDto.getOldPassword() == null){
|
||||||
|
throw new ChangePasswordNotAllowedException(ChangePasswordNotAllowedException.OLD_PASSWORD_REQUIRED);
|
||||||
|
}
|
||||||
return adapter.changePassword(name, user -> user.changePassword(passwordService.encryptPassword(passwordChangeDto.getNewPassword())), userManager.getChangePasswordChecker());
|
return adapter.changePassword(name, user -> user.changePassword(passwordService.encryptPassword(passwordChangeDto.getNewPassword())), userManager.getChangePasswordChecker());
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -125,7 +125,7 @@ public class DefaultGroupManager extends AbstractGroupManager
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void delete(Group group) throws NotFoundException {
|
public void delete(Group group){
|
||||||
logger.info("delete group {} of type {}", group.getName(), group.getType());
|
logger.info("delete group {} of type {}", group.getName(), group.getType());
|
||||||
managerDaoAdapter.delete(
|
managerDaoAdapter.delete(
|
||||||
group,
|
group,
|
||||||
@@ -145,7 +145,7 @@ public class DefaultGroupManager extends AbstractGroupManager
|
|||||||
public void init(SCMContextProvider context) {}
|
public void init(SCMContextProvider context) {}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void modify(Group group) throws NotFoundException {
|
public void modify(Group group){
|
||||||
logger.info("modify group {} of type {}", group.getName(), group.getType());
|
logger.info("modify group {} of type {}", group.getName(), group.getType());
|
||||||
|
|
||||||
managerDaoAdapter.modify(
|
managerDaoAdapter.modify(
|
||||||
@@ -160,7 +160,7 @@ public class DefaultGroupManager extends AbstractGroupManager
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void refresh(Group group) throws NotFoundException {
|
public void refresh(Group group){
|
||||||
String name = group.getName();
|
String name = group.getName();
|
||||||
if (logger.isInfoEnabled())
|
if (logger.isInfoEnabled())
|
||||||
{
|
{
|
||||||
|
|||||||
@@ -151,7 +151,7 @@ public class DefaultRepositoryManager extends AbstractRepositoryManager {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void delete(Repository repository) throws NotFoundException {
|
public void delete(Repository repository){
|
||||||
logger.info("delete repository {}/{} of type {}", repository.getNamespace(), repository.getName(), repository.getType());
|
logger.info("delete repository {}/{} of type {}", repository.getNamespace(), repository.getName(), repository.getType());
|
||||||
managerDaoAdapter.delete(
|
managerDaoAdapter.delete(
|
||||||
repository,
|
repository,
|
||||||
@@ -179,7 +179,7 @@ public class DefaultRepositoryManager extends AbstractRepositoryManager {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void modify(Repository repository) throws NotFoundException {
|
public void modify(Repository repository){
|
||||||
logger.info("modify repository {}/{} of type {}", repository.getNamespace(), repository.getName(), repository.getType());
|
logger.info("modify repository {}/{} of type {}", repository.getNamespace(), repository.getName(), repository.getType());
|
||||||
|
|
||||||
managerDaoAdapter.modify(
|
managerDaoAdapter.modify(
|
||||||
|
|||||||
@@ -55,7 +55,7 @@ public final class HealthChecker {
|
|||||||
this.repositoryManager = repositoryManager;
|
this.repositoryManager = repositoryManager;
|
||||||
}
|
}
|
||||||
|
|
||||||
public void check(String id) throws NotFoundException {
|
public void check(String id){
|
||||||
RepositoryPermissions.healthCheck(id).check();
|
RepositoryPermissions.healthCheck(id).check();
|
||||||
|
|
||||||
Repository repository = repositoryManager.get(id);
|
Repository repository = repositoryManager.get(id);
|
||||||
@@ -68,7 +68,7 @@ public final class HealthChecker {
|
|||||||
}
|
}
|
||||||
|
|
||||||
public void check(Repository repository)
|
public void check(Repository repository)
|
||||||
throws NotFoundException, ConcurrentModificationException {
|
{
|
||||||
RepositoryPermissions.healthCheck(repository).check();
|
RepositoryPermissions.healthCheck(repository).check();
|
||||||
|
|
||||||
doCheck(repository);
|
doCheck(repository);
|
||||||
@@ -94,7 +94,7 @@ public final class HealthChecker {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
private void doCheck(Repository repository) throws NotFoundException {
|
private void doCheck(Repository repository){
|
||||||
logger.info("start health check for repository {}", repository.getName());
|
logger.info("start health check for repository {}", repository.getName());
|
||||||
|
|
||||||
HealthCheckResult result = HealthCheckResult.healthy();
|
HealthCheckResult result = HealthCheckResult.healthy();
|
||||||
|
|||||||
@@ -159,7 +159,7 @@ public class DefaultUserManager extends AbstractUserManager
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void delete(User user) throws NotFoundException {
|
public void delete(User user) {
|
||||||
logger.info("delete user {} of type {}", user.getName(), user.getType());
|
logger.info("delete user {} of type {}", user.getName(), user.getType());
|
||||||
managerDaoAdapter.delete(
|
managerDaoAdapter.delete(
|
||||||
user,
|
user,
|
||||||
@@ -195,12 +195,12 @@ public class DefaultUserManager extends AbstractUserManager
|
|||||||
* @throws IOException
|
* @throws IOException
|
||||||
*/
|
*/
|
||||||
@Override
|
@Override
|
||||||
public void modify(User user) throws NotFoundException {
|
public void modify(User user) {
|
||||||
modify(user,UserPermissions::modify);
|
modify(user,UserPermissions::modify);
|
||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void modify(User user, Function<User, PermissionCheck> permissionChecker) throws NotFoundException {
|
public void modify(User user, Function<User, PermissionCheck> permissionChecker) {
|
||||||
logger.info("modify user {} of type {}", user.getName(), user.getType());
|
logger.info("modify user {} of type {}", user.getName(), user.getType());
|
||||||
managerDaoAdapter.modify(
|
managerDaoAdapter.modify(
|
||||||
user,
|
user,
|
||||||
@@ -218,7 +218,7 @@ public class DefaultUserManager extends AbstractUserManager
|
|||||||
* @throws IOException
|
* @throws IOException
|
||||||
*/
|
*/
|
||||||
@Override
|
@Override
|
||||||
public void refresh(User user) throws NotFoundException {
|
public void refresh(User user) {
|
||||||
if (logger.isInfoEnabled())
|
if (logger.isInfoEnabled())
|
||||||
{
|
{
|
||||||
logger.info("refresh user {} of type {}", user.getName(), user.getType());
|
logger.info("refresh user {} of type {}", user.getName(), user.getType());
|
||||||
|
|||||||
@@ -152,7 +152,7 @@ public class DefaultRepositoryManagerTest extends ManagerTestBase<Repository> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Test(expected = NotFoundException.class)
|
@Test(expected = NotFoundException.class)
|
||||||
public void testDeleteNotFound() throws NotFoundException {
|
public void testDeleteNotFound(){
|
||||||
manager.delete(createRepositoryWithId());
|
manager.delete(createRepositoryWithId());
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -304,7 +304,7 @@ public class DefaultRepositoryManagerTest extends ManagerTestBase<Repository> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
public void testModify() throws NotFoundException, AlreadyExistsException {
|
public void testModify() throws AlreadyExistsException {
|
||||||
Repository heartOfGold = createTestRepository();
|
Repository heartOfGold = createTestRepository();
|
||||||
|
|
||||||
heartOfGold.setDescription("prototype ship");
|
heartOfGold.setDescription("prototype ship");
|
||||||
@@ -328,12 +328,12 @@ public class DefaultRepositoryManagerTest extends ManagerTestBase<Repository> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Test(expected = NotFoundException.class)
|
@Test(expected = NotFoundException.class)
|
||||||
public void testModifyNotFound() throws NotFoundException {
|
public void testModifyNotFound(){
|
||||||
manager.modify(createRepositoryWithId());
|
manager.modify(createRepositoryWithId());
|
||||||
}
|
}
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
public void testRefresh() throws NotFoundException, AlreadyExistsException {
|
public void testRefresh() throws AlreadyExistsException {
|
||||||
Repository heartOfGold = createTestRepository();
|
Repository heartOfGold = createTestRepository();
|
||||||
String description = heartOfGold.getDescription();
|
String description = heartOfGold.getDescription();
|
||||||
|
|
||||||
@@ -354,7 +354,7 @@ public class DefaultRepositoryManagerTest extends ManagerTestBase<Repository> {
|
|||||||
}
|
}
|
||||||
|
|
||||||
@Test(expected = RepositoryNotFoundException.class)
|
@Test(expected = RepositoryNotFoundException.class)
|
||||||
public void testRefreshNotFound() throws NotFoundException {
|
public void testRefreshNotFound(){
|
||||||
manager.refresh(createRepositoryWithId());
|
manager.refresh(createRepositoryWithId());
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -495,7 +495,7 @@ public class DefaultRepositoryManagerTest extends ManagerTestBase<Repository> {
|
|||||||
return createRepository(RepositoryTestData.createHeartOfGold());
|
return createRepository(RepositoryTestData.createHeartOfGold());
|
||||||
}
|
}
|
||||||
|
|
||||||
private void delete(Manager<Repository> manager, Repository repository) throws NotFoundException {
|
private void delete(Manager<Repository> manager, Repository repository){
|
||||||
|
|
||||||
String id = repository.getId();
|
String id = repository.getId();
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user