feat: move competition setting to ffsaf site

2024-08-09 12:09:37 +02:00
parent b766525000
commit 27dd22080c
43 changed files with 1616 additions and 34 deletions
--- a/src/main/java/fr/titionfire/ffsaf/domain/service/CompetPermService.java
+++ b/src/main/java/fr/titionfire/ffsaf/domain/service/CompetPermService.java
@@ -0,0 +1,120 @@
+package fr.titionfire.ffsaf.domain.service;
+
+import fr.titionfire.ffsaf.data.model.CompetitionModel;
+import fr.titionfire.ffsaf.data.repository.CompetitionRepository;
+import fr.titionfire.ffsaf.net2.ServerCustom;
+import fr.titionfire.ffsaf.net2.data.SimpleCompet;
+import fr.titionfire.ffsaf.net2.request.SReqCompet;
+import fr.titionfire.ffsaf.rest.exception.DForbiddenException;
+import fr.titionfire.ffsaf.utils.CompetitionSystem;
+import fr.titionfire.ffsaf.utils.GroupeUtils;
+import io.quarkus.cache.Cache;
+import io.quarkus.cache.CacheName;
+import io.quarkus.security.identity.SecurityIdentity;
+import io.smallrye.mutiny.Uni;
+import io.smallrye.mutiny.unchecked.Unchecked;
+import jakarta.enterprise.context.ApplicationScoped;
+import jakarta.inject.Inject;
+import org.eclipse.microprofile.jwt.JsonWebToken;
+
+import java.util.HashMap;
+import java.util.UUID;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.ExecutionException;
+import java.util.concurrent.TimeUnit;
+import java.util.concurrent.TimeoutException;
+
+@ApplicationScoped
+public class CompetPermService {
+
+    @Inject
+    ServerCustom serverCustom;
+
+    @Inject
+    @CacheName("safca-config")
+    Cache cache;
+
+    @Inject
+    @CacheName("safca-have-access")
+    Cache cacheAccess;
+
+    @Inject
+    CompetitionRepository competitionRepository;
+
+    public Uni<SimpleCompet> getSafcaConfig(long id) {
+        return cache.get(id, k -> {
+            CompletableFuture<SimpleCompet> f = new CompletableFuture<>();
+            SReqCompet.getConfig(serverCustom.clients, id, f);
+            System.out.println("get config");
+            try {
+                return f.get(1500, TimeUnit.MILLISECONDS);
+            } catch (InterruptedException | ExecutionException | TimeoutException e) {
+                throw new RuntimeException(e);
+            }
+        });
+    }
+
+    public Uni<HashMap<Long, String>> getAllHaveAccess (String subject) {
+        return cacheAccess.get(subject, k -> {
+            CompletableFuture<HashMap<Long, String>> f = new CompletableFuture<>();
+            SReqCompet.getAllHaveAccess(serverCustom.clients, subject, f);
+            System.out.println("get all have access");
+            try {
+                return f.get(1500, TimeUnit.MILLISECONDS);
+            } catch (InterruptedException | ExecutionException | TimeoutException e) {
+                throw new RuntimeException(e);
+            }
+        });
+    }
+
+    public Uni<CompetitionModel> hasViewPerm(JsonWebToken idToken, SecurityIdentity sid, long id) {
+        return competitionRepository.findById(id).call(o -> (
+                idToken.getSubject().equals(o.getOwner()) || sid.getRoles().contains("federation_admin")) ?
+                Uni.createFrom().nullItem()
+                :
+                o.getSystem() == CompetitionSystem.SAFCA ?
+                        hasSafcaViewPerm(idToken, sid, id)
+                        : Uni.createFrom().nullItem().invoke(Unchecked.consumer(__ -> {
+                            if (!GroupeUtils.isInClubGroup(o.getClub().getId(), idToken))
+                                throw new DForbiddenException();
+                        })
+                ));
+    }
+
+    public Uni<CompetitionModel> hasEditPerm(JsonWebToken idToken, SecurityIdentity sid, long id) {
+        return competitionRepository.findById(id).call(o -> (
+                idToken.getSubject().equals(o.getOwner()) || sid.getRoles().contains("federation_admin")) ?
+                Uni.createFrom().nullItem()
+                :
+                o.getSystem() == CompetitionSystem.SAFCA ?
+                        hasSafcaEditPerm(idToken, sid, id)
+                        : Uni.createFrom().nullItem().invoke(Unchecked.consumer(__ -> {
+                            if (!GroupeUtils.isInClubGroup(o.getClub().getId(), idToken))
+                                throw new DForbiddenException();
+                        })
+                ));
+    }
+
+    private Uni<?> hasSafcaViewPerm(JsonWebToken idToken, SecurityIdentity sid, long id) {
+        return sid.getRoles().contains("safca_super_admin") ?
+                Uni.createFrom().nullItem()
+                :
+                getSafcaConfig(id).chain(Unchecked.function(o -> {
+                    if (!o.admin().contains(UUID.fromString(idToken.getSubject())) && !o.table()
+                            .contains(UUID.fromString(idToken.getSubject())))
+                        throw new DForbiddenException();
+                    return Uni.createFrom().nullItem();
+                }));
+    }
+
+    private Uni<?> hasSafcaEditPerm(JsonWebToken idToken, SecurityIdentity sid, long id) {
+        return sid.getRoles().contains("safca_super_admin") ?
+                Uni.createFrom().nullItem()
+                :
+                getSafcaConfig(id).chain(Unchecked.function(o -> {
+                    if (!o.admin().contains(UUID.fromString(idToken.getSubject())))
+                        throw new DForbiddenException();
+                    return Uni.createFrom().nullItem();
+                }));
+    }
+}