Feature/basic security

.gitignore

@@ -1,8 +1,7 @@
 # Created by .ignore support plugin (hsz.mobi)
 ### Gradle template
 .gradle
-/build/
-
+build
 # Ignore Gradle GUI config
 gradle-app.setting
 
@@ -37,6 +36,6 @@ gradle-app.setting
 
 # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
 hs_err_pid*
-/out
+out/
 .idea
 *.iml

.travis.yml

@@ -1,7 +1,14 @@
 language: java
-
 jdk:
-  - oraclejdk8
+- oraclejdk8
 before_install:
- - chmod +x gradlew
- - chmod +x gradle/wrapper/gradle-wrapper.jar
+- chmod +x gradlew
+- chmod +x gradle/wrapper/gradle-wrapper.jar
+notifications:
+  email:
+    on_success: never
+    on_failure: always
+  slack:
+    secure: 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
+    on_success: always
+    on_failure: always

README.md

@@ -1,7 +1,7 @@
-![build status image](https://travis-ci.org/Team0x2B/core-service-lib.svg?branch=master)
+[![build status image](https://travis-ci.org/Team0x2B/org.x2b.study.core-service-lib.svg?branch=master)](https://travis-ci.org/Team0x2B/core-service-lib)
 
 Right now this is just me messing around with GraphQL and Spring until I find a pattern I like. Eventually this will be
-the core service library used to start writing a new backend service.
+the org.x2b.study.core service library used to start writing a new backend service.
 
 
 # GraphQL Conventions

build.gradle

@@ -1,42 +1,40 @@
-group 'org.x2b.study.core'
+group 'org.x2b.study'
 version '0.1-SNAPSHOT'
 
+
+tasks {
+    task wrapper(type: Wrapper) {
+        gradleVersion = '4.2'
+    }
+}
+
 buildscript {
     repositories {
         maven { url "https://plugins.gradle.org/m2/" }
         maven { url 'http://repo.spring.io/plugins-release' }
+
     }
     dependencies {
-        classpath("org.springframework.boot:spring-boot-gradle-plugin:1.5.7.RELEASE")
+        classpath "org.springframework.boot:spring-boot-gradle-plugin:1.5.2.RELEASE"
         classpath "com.jfrog.bintray.gradle:gradle-bintray-plugin:1.6"
     }
 }
 
-tasks {
-    task wrapper(type: Wrapper) {
-        gradleVersion = '4.2'
-    }
-}
-
-apply plugin: 'java'
-apply plugin: 'org.springframework.boot'
+allprojects {
+    apply plugin: 'java'
 
-sourceCompatibility = 1.8
-targetCompatibility = 1.8
+    sourceCompatibility = 1.8
+    targetCompatibility = 1.8
+}
 
-repositories {
-    mavenCentral()
+subprojects {
+    repositories {
+        mavenCentral()
+        maven {url 'http://repo.spring.io/libs-release'}
+    }
 }
-bootRepackage.enabled = false
 
 dependencies {
-    testCompile group: 'junit', name: 'junit', version: '4.12'
-
-    compile 'org.springframework.boot:spring-boot-starter-web'
-
-    compile 'com.graphql-java:graphql-spring-boot-starter:3.9.2'
-
-    compile 'com.graphql-java:graphiql-spring-boot-starter:3.9.2'
-
-    compile 'com.graphql-java:graphql-java-tools:4.1.2'
+    compile project(":core-service-lib")
+    compile project(":core-service-lib-integration")
 }

core-service-lib-integration/build.gradle

@@ -0,0 +1,18 @@
+group 'org.x2b.study.org.x2b.study.core'
+version '0.1-SNAPSHOT'
+
+apply plugin: 'java'
+
+apply plugin: 'org.springframework.boot'
+
+repositories {
+    mavenCentral()
+}
+
+dependencies {
+    testCompile group: 'junit', name: 'junit', version: '4.12'
+
+    testCompile("org.springframework.boot:spring-boot-starter-test")
+
+    compile project(':core-service-lib')
+}

core-service-lib-integration/src/main/java/org/x2b/studi/core/IntegrationTestService.java

@@ -0,0 +1,47 @@
+package org.x2b.studi.core;
+
+import graphql.schema.idl.RuntimeWiring;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.cache.annotation.EnableCaching;
+import org.springframework.context.ConfigurableApplicationContext;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.data.mongodb.core.MongoClientFactoryBean;
+import org.x2b.studi.core.graphql.fetchers.mutation.createuser.CreateUserFetcher;
+import org.x2b.studi.core.graphql.fetchers.mutation.getsecure.SecureTestFetcher;
+import org.x2b.studi.core.graphql.fetchers.query.getuser.GetUserFetcher;
+import org.x2b.studi.core.security.data.mongodb.AuthorizationRepository;
+
+import java.io.IOException;
+import java.security.SecureRandom;
+import java.util.Base64;
+
+@SpringBootApplication
+@ComponentScan(basePackages = "org.x2b.study.core.*")
+@EnableCaching
+public class IntegrationTestService extends GraphQLServiceConfigure {
+
+
+    public static void main(String[] args) throws IOException {
+        ConfigurableApplicationContext ctx = SpringApplication.run(IntegrationTestService.class, args);
+    }
+
+    @Autowired
+    private AuthorizationRepository authRepo;
+
+    @Override
+    protected RuntimeWiring createRuntimeWiring() {
+        return RuntimeWiring.newRuntimeWiring()
+                .type("MutationRoot", w -> w
+                    .dataFetcher("createUser", new CreateUserFetcher(authRepo))
+                )
+                .type("QueryRoot", w -> w
+                    .dataFetcher("getUserPermissions", new GetUserFetcher(authRepo))
+                    .dataFetcher("secureGet", new SecureTestFetcher())
+                )
+                .build();
+    }
+
+
+}

core-service-lib-integration/src/main/java/org/x2b/studi/core/graphql/fetchers/mutation/createuser/CreateUserFetcher.java

@@ -0,0 +1,30 @@
+package org.x2b.studi.core.graphql.fetchers.mutation.createuser;
+
+import graphql.schema.DataFetcher;
+import graphql.schema.DataFetchingEnvironment;
+import org.x2b.studi.core.security.data.mongodb.AuthenticatedUser;
+import org.x2b.studi.core.security.data.mongodb.AuthorizationRepository;
+
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.UUID;
+
+public class CreateUserFetcher implements DataFetcher<String> {
+
+
+    private AuthorizationRepository authRepo;
+
+    public CreateUserFetcher(AuthorizationRepository authRepo) {
+        this.authRepo = authRepo;
+    }
+
+    @Override
+    public String get(DataFetchingEnvironment environment) {
+        HashMap<String, Object> input = environment.getArgument("input");
+        List<String> permissions = (List<String>) input.get("permissions");
+        AuthenticatedUser user = new AuthenticatedUser(UUID.randomUUID(), new HashSet<>(permissions));
+        authRepo.save(user);
+        return user.getUUID().toString();
+    }
+}

core-service-lib-integration/src/main/java/org/x2b/studi/core/graphql/fetchers/mutation/getsecure/SecureTestFetcher.java

@@ -0,0 +1,25 @@
+package org.x2b.studi.core.graphql.fetchers.mutation.getsecure;
+
+import graphql.schema.DataFetchingEnvironment;
+import org.apache.commons.logging.Log;
+import org.apache.commons.logging.LogFactory;
+import org.apache.shiro.SecurityUtils;
+import org.apache.shiro.authc.AuthenticationException;
+import org.apache.shiro.subject.Subject;
+import org.x2b.studi.core.graphql.fetchers.SecureRootFetcher;
+
+public class SecureTestFetcher extends SecureRootFetcher {
+    private static final Log log = LogFactory.getLog(SecureTestFetcher.class);
+
+    @Override
+    public void handleAuthenticationFailure(AuthenticationException e, DataFetchingEnvironment environment) {
+        log.debug("auth failure!");
+    }
+
+    @Override
+    public Object secureGet(DataFetchingEnvironment environment) {
+        Subject s = SecurityUtils.getSubject();
+
+        return s.isPermitted("foo:bar:read");
+    }
+}

core-service-lib-integration/src/main/java/org/x2b/studi/core/graphql/fetchers/query/getuser/GetUserFetcher.java

@@ -0,0 +1,27 @@
+package org.x2b.studi.core.graphql.fetchers.query.getuser;
+
+import graphql.schema.DataFetcher;
+import graphql.schema.DataFetchingEnvironment;
+import org.x2b.studi.core.security.data.mongodb.AuthenticatedUser;
+import org.x2b.studi.core.security.data.mongodb.AuthorizationRepository;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.UUID;
+
+public class GetUserFetcher implements DataFetcher<List<String>> {
+
+    private AuthorizationRepository authRepo;
+
+    public GetUserFetcher(AuthorizationRepository authRepo) {
+        this.authRepo = authRepo;
+    }
+
+    @Override
+    public List<String> get(DataFetchingEnvironment environment) {
+        String idString = environment.getArgument("id");
+        UUID uuid = UUID.fromString(idString);
+        AuthenticatedUser user = authRepo.findOne(uuid);
+        return new ArrayList<>(user.getPermissions());
+    }
+}

core-service-lib-integration/src/main/resources/schema.gql

@@ -0,0 +1,17 @@
+type MutationRoot {
+    createUser(input: PermissionsInput!): ID!
+}
+
+input PermissionsInput {
+    permissions: [String!]!
+}
+
+type QueryRoot {
+    getUserPermissions(id: ID!): [String]!
+    secureGet: String!
+}
+
+schema {
+    mutation: MutationRoot
+    query: QueryRoot
+}

core-service-lib-integration/src/test/java/org/x2b/studi/core/TestIntegrationService.java

@@ -0,0 +1,60 @@
+package org.x2b.studi.core;
+
+import org.junit.Before;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.test.context.ContextConfiguration;
+import org.springframework.test.context.TestPropertySource;
+import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
+import org.springframework.test.context.web.WebAppConfiguration;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.test.web.servlet.ResultMatcher;
+import org.springframework.test.web.servlet.request.MockHttpServletRequestBuilder;
+import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
+import org.springframework.test.web.servlet.result.MockMvcResultMatchers;
+import org.springframework.test.web.servlet.setup.DefaultMockMvcBuilder;
+import org.springframework.test.web.servlet.setup.MockMvcBuilders;
+import org.springframework.web.context.WebApplicationContext;
+
+@RunWith(SpringJUnit4ClassRunner.class)
+@WebAppConfiguration
+@ContextConfiguration(classes = IntegrationTestService.class)
+@TestPropertySource(properties = {
+        "studi.security.auth.secret=abcdefg123"
+})
+public class TestIntegrationService {
+
+    @Autowired
+    private WebApplicationContext wac;
+    private MockMvc mockMvc;
+
+
+
+
+    @Before
+    public void setup() {
+        DefaultMockMvcBuilder builder = MockMvcBuilders.webAppContextSetup(this.wac);
+        this.mockMvc = builder.build();
+    }
+
+
+    @Test
+    public void contextLoads() throws Exception {
+
+    }
+
+    public ResultMatcher okMatcher() {
+        return MockMvcResultMatchers.status().isOk();
+    }
+
+    @Test
+    public void testGraphQlResponds() throws Exception {
+        ResultMatcher ok = okMatcher();
+        MockHttpServletRequestBuilder builder = MockMvcRequestBuilders.get("/graphiql");
+        mockMvc.perform(builder)
+                .andExpect(ok);
+    }
+
+
+}

core-service-lib-integration/src/test/resources/schema.gql

@@ -0,0 +1,16 @@
+type MutationRoot {
+    createUser(input: PermissionsInput!): ID!
+}
+
+input PermissionsInput {
+    permissions: [String!]!
+}
+
+type QueryRoot {
+    getUserPermissions(id: ID!): [String]!
+}
+
+schema {
+    mutation: MutationRoot
+    query: QueryRoot
+}

core-service-lib/build.gradle

@@ -0,0 +1,26 @@
+group 'org.x2b.study.org.x2b.study.core'
+version '0.1-SNAPSHOT'
+
+
+apply plugin: 'org.springframework.boot'
+
+sourceCompatibility = 1.8
+targetCompatibility = 1.8
+
+bootRepackage.enabled = false
+
+dependencies {
+    testCompile group: 'junit', name: 'junit', version: '4.12'
+
+    compile 'org.springframework.boot:spring-boot-starter-web:1.5.7.RELEASE'
+
+    compile 'com.graphql-java:graphql-spring-boot-starter:3.9.2'
+
+    compile 'com.graphql-java:graphiql-spring-boot-starter:3.9.2'
+
+    compile 'org.springframework.data:spring-data-mongodb:2.0.0.RELEASE'
+
+    compile 'org.apache.shiro:shiro-all:1.2.3'
+
+    compile 'com.auth0:java-jwt:3.2.0'
+}

core-service-lib/gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,6 @@
+#Thu Oct 05 15:56:37 MDT 2017
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-4.0.1-bin.zip