SignaturaController.java

/**
 * 
 */
package net.conselldemallorca.helium.webapp.mvc;

import java.io.ObjectInputStream;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import net.conselldemallorca.helium.core.model.dto.ArxiuDto;
import net.conselldemallorca.helium.core.model.dto.DocumentDto;
import net.conselldemallorca.helium.core.model.hibernate.Entorn;
import net.conselldemallorca.helium.core.model.service.DocumentService;
import net.conselldemallorca.helium.core.model.service.ExpedientService;
import net.conselldemallorca.helium.core.util.GlobalProperties;
import net.conselldemallorca.helium.webapp.mvc.util.BaseController;

import org.apache.commons.codec.binary.Base64;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.ModelMap;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.multipart.MultipartFile;



/**
 * Controlador per a la signatura de documents
 * 
 * @author Limit Tecnologies <limit@limit.es>
 */
@Controller
public class SignaturaController extends BaseController {

	private ExpedientService expedientService;
	private DocumentService documentService;



	@Autowired
	public SignaturaController(
			ExpedientService expedientService,
			DocumentService documentService) {
		this.expedientService = expedientService;
		this.documentService = documentService;
	}

	@RequestMapping(value = "/signatura/signarAmbTokenCaib", method = RequestMethod.POST)
	public void signarDocument(
			HttpServletRequest request,
			HttpServletResponse response,
			@RequestParam(value="data", required = true) final MultipartFile multipartFile) throws ServletException {
		Entorn entorn = getEntornActiu(request);
		if (entorn != null) {
			try {
				ObjectInputStream inputFromApplet = new ObjectInputStream(multipartFile.getInputStream());
				Object[] resposta = (Object[])inputFromApplet.readObject();
				String token = (String)resposta[0];
				boolean signat = documentService.signarDocumentTascaAmbToken(
						token,
						(byte[])resposta[2]);
				if (signat) {
					logger.info("Signatura del document amb el token " + token + " processada correctament");
					response.getWriter().write("OK");
				} else {
					logger.error("Signatura del document amb el token " + token + " processada amb error");
					response.getWriter().write("KO");
				}
			} catch(Exception ex) {
				logger.error("Error rebent la firma del document", ex);
				throw new ServletException(ex);
		    }
		} else {
			try {
				response.getWriter().write("KO");
			} catch(Exception ex) {
				logger.error("Error al escriure la resposta de la signatura", ex);
		    }
		}
	}

	@RequestMapping(value = "/signatura/signarAmbToken", method = RequestMethod.POST)
	public String signarDocumentAmbToken(
			HttpServletRequest request,
			HttpServletResponse response,
			@RequestParam(value="taskId", required = true) String taskId,
			@RequestParam(value="token", required = true) String token,
			@RequestParam(value="data", required = true) String[] data) throws ServletException {
		Entorn entorn = getEntornActiu(request);
		if (entorn != null) {
			try {
				StringBuffer aData = new StringBuffer();
				for (String dat : data) {
					aData.append(dat);
				}
				boolean signat = documentService.signarDocumentTascaAmbToken(
						token,
						Base64.decodeBase64(aData.toString().getBytes()));
				if (signat) {
					logger.info("Signatura del document amb el token " + token + " processada correctament");
					missatgeInfo(request, getMessage("info.signatura.doc.processat") );
				} else {
					logger.error("Signatura del document amb el token " + token + " processada amb error de custòdia");
					missatgeError(request, getMessage("error.validar.signatura") );
				}
			} catch(Exception ex) {
				logger.error("Error rebent la signatura del document", ex);
				missatgeError(request, getMessage("error.rebre.signatura") );
		    }
			return "redirect:/tasca/signatures.html?id=" + taskId;
		} else {
			missatgeError(request, getMessage("error.no.entorn.selec") );
			return "redirect:/index.html";
		}
	}

	@RequestMapping(value = "/signatura/verificar", method = RequestMethod.GET)
	public String verificarSignatura(
			HttpServletRequest request,
			HttpServletResponse response,
			@RequestParam(value = "id", required = false) final Long id,
			@RequestParam(value = "token", required = false) final String token,
			ModelMap model) throws ServletException {
		try {
			DocumentDto document = null;
			if (id != null)
				document = documentService.documentInfo(id);
			else if (token != null)
				document = documentService.documentInfoPerToken(token);
			model.addAttribute("document", document);
			model.addAttribute(
					"instanciaProces",
					expedientService.getInstanciaProcesById(
							document.getProcessInstanceId(),
							false, false, false));
			model.addAttribute("signatures", expedientService.verificarSignatura(document.getId()));
			return "signatura/verificar";
		} catch(Exception ex) {
			logger.error("Error rebent la firma del document", ex);
			throw new ServletException(ex);
	    }
	}

	@RequestMapping(value = "/signatura/verificarExtern", method = RequestMethod.GET)
	public String verificarExtern(
			HttpServletRequest request,
			HttpServletResponse response,
			@RequestParam(value = "token", required = true) final String token,
			ModelMap model) throws ServletException {
		if (isVerificacioExternaActiva()) {
			try {
				DocumentDto document = documentService.documentInfoPerToken(token);
				if (document != null) {
					model.addAttribute("document", document);
					model.addAttribute(
							"instanciaProces",
							expedientService.getInstanciaProcesById(
									document.getProcessInstanceId(),
									false, false, false));
					model.addAttribute("signatures", expedientService.verificarSignatura(document.getId()));
				}
				return "signatura/verificar";
			} catch(Exception ex) {
				logger.error("Error rebent la firma del document", ex);
				throw new ServletException(ex);
		    }
		} else {
			response.setStatus(HttpServletResponse.SC_FORBIDDEN);
			return null;
		}
	}

	@RequestMapping(value = "/signatura/arxiu")
	public String descarregar(
			HttpServletRequest request,
			HttpServletResponse response,
			@RequestParam(value = "token", required = true) String token,
			ModelMap model) throws ServletException {
		if (request.getUserPrincipal() != null || isVerificacioExternaActiva()) {
			try {
				DocumentDto document = documentService.documentInfoPerToken(token);
				if (document != null && document.isSignat()) {
					ArxiuDto arxiu = documentService.arxiuDocumentPerMostrar(token);
					if (arxiu != null) {
						model.addAttribute(ArxiuView.MODEL_ATTRIBUTE_FILENAME, arxiu.getNom());
						model.addAttribute(ArxiuView.MODEL_ATTRIBUTE_DATA, arxiu.getContingut());
					}
				}
				return "arxiuView";
			} catch(Exception ex) {
				logger.error("Error al descarregar el document", ex);
				throw new ServletException(ex);
		    }
		} else {
			response.setStatus(HttpServletResponse.SC_FORBIDDEN);
			return null;
		}
	}



	private boolean isVerificacioExternaActiva() {
		return "true".equalsIgnoreCase((String)GlobalProperties.getInstance().get("app.verificacio.externa.activa"));
	}

	private static final Log logger = LogFactory.getLog(SignaturaController.class);

}