feat: Add server interceptors. (#3)

adempiere · Jan 15, 2024 · 5df543f · 5df543f
1 parent 529a7ab
commit 5df543f
Show file tree

Hide file tree

Showing 5 changed files with 92 additions and 35 deletions.
diff --git a/.vscode/launch.json b/.vscode/launch.json
@@ -0,0 +1,21 @@
+{
+	// Use IntelliSense para saber los atributos posibles.
+	// Mantenga el puntero para ver las descripciones de los existentes atributos.
+	// Para más información, visite: https://go.microsoft.com/fwlink/?linkid=830387
+	"version": "0.2.0",
+	"configurations": [
+		{
+			"type": "java",
+			"name": "ADmempiere gRPC Template",
+			"request": "launch",
+			"mainClass": "org.spin.template.server.TemplateServer",
+			"projectName": "adempiere-grpc-template-service",
+			"env": {
+				"ADEMPIERE_APPS_TYPE": "wildfly",
+				"JWT_SECRET_KEY": "2C51599F5B1248F945B93E05EFC43B3A15D8EB0707C0F02FD97028786C40976F",
+				"JWT_EXPIRATION_TIME": 86400000
+			},
+			"args": "'resources/env.yaml'"
+		}
+	]
+}
diff --git a/build.gradle b/build.gradle
@@ -31,8 +31,8 @@ jar {
 }
 
 repositories {
+	mavenLocal()
     mavenCentral()
-    mavenLocal()
     maven {
     	url = System.getenv("GITHUB_DEPLOY_REPOSITORY") ?: System.properties['deploy.repository'] ?: 'https://maven.pkg.github.com'
         credentials {
@@ -109,6 +109,7 @@ task createRelease(type: Copy) {
         }
    	}
 }
+
 dependencies {
 	implementation fileTree(
         dir: 'dependencies',

diff --git a/docker/backend_alpine.Dockerfile b/docker/backend_alpine.Dockerfile
@@ -39,6 +39,7 @@ COPY docker/adempiere-grpc-template-service /opt/apps/server
 COPY docker/env.yaml /opt/apps/server/env.yaml
 COPY docker/start.sh /opt/apps/server/start.sh
 
+
 RUN addgroup adempiere && \
 	adduser --disabled-password --gecos "" --ingroup adempiere --no-create-home adempiere && \
 	chown -R adempiere /opt/apps/server/ && \
@@ -48,4 +49,3 @@ USER adempiere
 
 # Start app
 ENTRYPOINT ["sh" , "start.sh"]
-
diff --git a/docker/backend_focal.Dockerfile b/docker/backend_focal.Dockerfile
@@ -27,6 +27,7 @@ RUN	apt-get update && \
 	 	fontconfig \
 		ttf-dejavu && \
 	rm -rf /var/lib/apt/lists/* \
+	rm -rf /tmp/* && \
 	echo "Set Timezone..." && \
 	echo $TZ > /etc/timezone
 

diff --git a/src/main/java/org/spin/template/server/TemplateServer.java b/src/main/java/org/spin/template/server/TemplateServer.java
@@ -16,6 +16,8 @@
 
 import java.io.File;
 import java.io.IOException;
+import java.util.Arrays;
+import java.util.List;
 import java.util.logging.Logger;
 
 import org.compiere.util.Env;
@@ -33,25 +35,52 @@
 
 public class TemplateServer {
 	private static final Logger logger = Logger.getLogger(TemplateServer.class.getName());
-	private ServiceContextProvider contextProvider =  new ServiceContextProvider();
+
 	private Server server;
+
+	private ServiceContextProvider contextProvider = new ServiceContextProvider();
+
+
+	/** Services/Methods allow request without Bearer token validation */
+	private List<String> ALLOW_REQUESTS_WITHOUT_TOKEN = Arrays.asList(
+		// proto package . proto service / proto method
+	);
+
+	/**	Revoke session	*/
+	private List<String> REVOKE_TOKEN_SERVICES = Arrays.asList(
+		// proto package . proto service / proto method
+	);
+
+	private AuthorizationServerInterceptor getInterceptor() {
+		AuthorizationServerInterceptor interceptor = new AuthorizationServerInterceptor();
+		interceptor.setAllowRequestsWithoutToken(this.ALLOW_REQUESTS_WITHOUT_TOKEN);
+		interceptor.setRevokeTokenServices(this.REVOKE_TOKEN_SERVICES);
+		return interceptor;
+	}
+
+
 	/**
 	 * Get SSL / TLS context
 	 * @return
 	 */
 	private SslContextBuilder getSslContextBuilder() {
-		SslContextBuilder sslClientContextBuilder = SslContextBuilder.forServer(new File(SetupLoader.getInstance().getServer().getCertificate_chain_file()),
-                new File(SetupLoader.getInstance().getServer().getPrivate_key_file()));
-        if (SetupLoader.getInstance().getServer().getTrust_certificate_collection_file() != null) {
-            sslClientContextBuilder.trustManager(new File(SetupLoader.getInstance().getServer().getTrust_certificate_collection_file()));
-            sslClientContextBuilder.clientAuth(ClientAuth.REQUIRE);
-        }
-        return GrpcSslContexts.configure(sslClientContextBuilder);
+		SslContextBuilder sslClientContextBuilder = SslContextBuilder.forServer(
+			new File(SetupLoader.getInstance().getServer().getCertificate_chain_file()),
+			new File(SetupLoader.getInstance().getServer().getPrivate_key_file())
+		);
+		if (SetupLoader.getInstance().getServer().getTrust_certificate_collection_file() != null) {
+			sslClientContextBuilder.trustManager(
+				new File(SetupLoader.getInstance().getServer().getTrust_certificate_collection_file())
+			);
+			sslClientContextBuilder.clientAuth(ClientAuth.REQUIRE);
+		}
+		return GrpcSslContexts.configure(sslClientContextBuilder);
 	}
-	
+
 	private void start() throws IOException {
 		//	Start based on provider
-        Env.setContextProvider(contextProvider);
+		Env.setContextProvider(this.contextProvider);
+
 		logger.info("Service Template added on " + SetupLoader.getInstance().getServer().getPort());
 		//	
 		ServerBuilder<?> serverBuilder;
@@ -60,37 +89,41 @@ private void start() throws IOException {
 				.sslContext(getSslContextBuilder().build());
 		} else {
 			serverBuilder = ServerBuilder.forPort(SetupLoader.getInstance().getServer().getPort());
-			serverBuilder.intercept(new AuthorizationServerInterceptor());
 		}
+
+		// Validate JWT on all requests
+		AuthorizationServerInterceptor interceptor = getInterceptor();
+		serverBuilder.intercept(interceptor);
+
 		serverBuilder.addService(new TemplateService());
-		server = serverBuilder.build().start();
+		this.server = serverBuilder.build().start();
 		logger.info("Server started, listening on " + SetupLoader.getInstance().getServer().getPort());
 		Runtime.getRuntime().addShutdownHook(new Thread() {
 			@Override
 			public void run() {
 				// Use stderr here since the logger may have been reset by its JVM shutdown hook.
-				logger.info("*** shutting down gRPC server since JVM is shutting down");
+				logger.info("*** shutting down gRPC Server since JVM is shutting down");
 				TemplateServer.this.stop();
 				logger.info("*** server shut down");
 			}
 		});
 	}
-	
+
 	private void stop() {
-	    if (server != null) {
-	    	server.shutdown();
-	    }
+		if (this.server != null) {
+			this.server.shutdown();
+		}
 	}
-	
+
 	/**
 	 * Await termination on the main thread since the grpc library uses daemon threads.
 	 */
 	private void blockUntilShutdown() throws InterruptedException {
-		if (server != null) {
-			server.awaitTermination();
-	    }
+		if (this.server != null) {
+			this.server.awaitTermination();
+		}
 	}
-	
+
 	public static void main(String[] args) throws Exception {
 		if (args == null) {
 			throw new Exception("Arguments Not Found");
@@ -99,15 +132,16 @@ public static void main(String[] args) throws Exception {
 		if (args.length == 0) {
 			throw new Exception("Arguments Must Be: [property file name]");
 		}
-		  String setupFileName = args[0];
-		  if(setupFileName == null || setupFileName.trim().length() == 0) {
-			  throw new Exception("Setup File not found");
-		  }
-		  SetupLoader.loadSetup(setupFileName);
-		  //	Validate load
-		  SetupLoader.getInstance().validateLoad();
-		  final TemplateServer server = new TemplateServer();
-		  server.start();
-		  server.blockUntilShutdown();
-	  }
+		String setupFileName = args[0];
+		if(setupFileName == null || setupFileName.trim().length() == 0) {
+			throw new Exception("Setup File not found");
+		}
+		SetupLoader.loadSetup(setupFileName);
+		//	Validate load
+		SetupLoader.getInstance().validateLoad();
+		final TemplateServer server = new TemplateServer();
+		server.start();
+		server.blockUntilShutdown();
+	}
+
 }