ClusterResource.java

/**
 * Copyright 2015 StreamSets Inc.
 *
 * Licensed under the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package com.streamsets.datacollector.restapi;

import com.google.common.base.Joiner;
import com.streamsets.datacollector.callback.CallbackInfo;
import com.streamsets.datacollector.callback.CallbackObjectType;
import com.streamsets.datacollector.execution.Manager;
import com.streamsets.datacollector.execution.Runner;
import com.streamsets.datacollector.util.AuthzRole;
import com.streamsets.datacollector.util.PipelineException;

import javax.annotation.security.DenyAll;
import javax.annotation.security.PermitAll;
import javax.inject.Inject;
import javax.servlet.http.HttpServletResponse;
import javax.ws.rs.DefaultValue;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.QueryParam;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.SecurityContext;
import java.io.IOException;
import java.security.Principal;
import java.util.ArrayList;
import java.util.Collection;
import java.util.List;

@Path("/v1/cluster")
@DenyAll
public class ClusterResource {

  private final Manager manager;
  private final String user;

  @Inject
  public ClusterResource(Manager pipelineStateManager, Principal user) {
    this.manager = pipelineStateManager;
    this.user = user.getName();
  }

  @GET
  @Path("/redirectToSlave")
  @PermitAll
  public Response redirectToSlaveInstance(
    @QueryParam("name") String name,
    @QueryParam("rev") @DefaultValue("0") String rev,
    @QueryParam("sdcURL") String sdcURL,
    @Context final HttpServletResponse response,
    @Context SecurityContext context) throws IOException, PipelineException {
    Runner runner = manager.getRunner(name, rev);
    Collection<CallbackInfo> callbackInfoCollection = runner.getSlaveCallbackList(CallbackObjectType.METRICS);
    CallbackInfo slaveCallbackInfo = null;

    for(CallbackInfo callbackInfo : callbackInfoCollection) {
      if(sdcURL.equals(callbackInfo.getSdcURL())) {
        slaveCallbackInfo = callbackInfo;
      }
    }

    if(slaveCallbackInfo != null) {
      String user;
      List<String> authTokens = new ArrayList<>();
      Principal principal = context.getUserPrincipal();

      if(principal != null) {
        user = principal.getName();
        if (context.isUserInRole(AuthzRole.GUEST) || context.isUserInRole(AuthzRole.GUEST_REMOTE)) {
          authTokens.add(slaveCallbackInfo.getGuestToken());
        }
        if (context.isUserInRole(AuthzRole.MANAGER) || context.isUserInRole(AuthzRole.MANAGER_REMOTE)) {
          authTokens.add(slaveCallbackInfo.getManagerToken());
        }
        if (context.isUserInRole(AuthzRole.CREATOR) || context.isUserInRole(AuthzRole.CREATOR_REMOTE)) {
          authTokens.add(slaveCallbackInfo.getCreatorToken());
        }
        if (context.isUserInRole(AuthzRole.ADMIN) || context.isUserInRole(AuthzRole.ADMIN_REMOTE)) {
          authTokens.add(slaveCallbackInfo.getAdminToken());
        }
      } else {
        //In case of http.authentication=none
        user = "admin";
        authTokens.add(slaveCallbackInfo.getAdminToken());
      }

      Joiner joiner = Joiner.on( "," ).skipNulls();
      String slaveURL = slaveCallbackInfo.getSdcURL() + "/collector/pipeline/" + name + "?auth_user=" + user +
        "&auth_token=" + joiner.join(authTokens);

      response.sendRedirect(slaveURL);

    } else {
      throw new RuntimeException("No Slave Instance found with URL - " + sdcURL);
    }

    return Response.ok().build();
  }

}