/$sign2 with JWS

Author: aorzelskiGH

src/IO.Swagger.Lib.V3/Controllers/SubmodelRepositoryAPIApi.cs

@@ -22,10 +22,32 @@ namespace IO.Swagger.Controllers;
  * Generated by: https://github.com/swagger-api/swagger-codegen.git
  */
 
+using System;
+using System.Collections.Generic;
+using System.ComponentModel.DataAnnotations;
+using System.IO;
+using System.Linq;
+using System.Net.Mime;
+using System.Runtime.ConstrainedExecution;
+using System.Security.Claims;
+using System.Security.Cryptography;
+using System.Security.Cryptography.X509Certificates;
+using System.Security.Cryptography.Xml;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Nodes;
+using System.Text.Json.Serialization;
+using System.Threading.Tasks;
 using AasxServer;
 using AasxServerStandardBib.Interfaces;
 using AasxServerStandardBib.Logging;
+using AdminShellNS.Exceptions;
 using AdminShellNS.Lib.V3.Models;
+using Contracts;
+using Contracts.DbRequests;
+using Contracts.Exceptions;
+using Contracts.Pagination;
+using Contracts.Security;
 using DataTransferObjects.MetadataDTOs;
 using DataTransferObjects.ValueDTOs;
 using IO.Swagger.Attributes;
@@ -34,35 +56,16 @@ namespace IO.Swagger.Controllers;
 using IO.Swagger.Lib.V3.SerializationModifiers.Mappers;
 using IO.Swagger.Lib.V3.Services;
 using IO.Swagger.Models;
+using Jose;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Http;
 using Microsoft.AspNetCore.Mvc;
-using Swashbuckle.AspNetCore.Annotations;
-using System;
-using System.Collections.Generic;
-using System.ComponentModel.DataAnnotations;
-using System.IO;
-using System.Linq;
-using System.Net.Mime;
-using System.Security.Claims;
-using System.Threading.Tasks;
-using AdminShellNS.Exceptions;
 using Microsoft.IdentityModel.Tokens;
 using Namotion.Reflection;
 using Newtonsoft.Json;
+using Swashbuckle.AspNetCore.Annotations;
 using TimeStamp;
-using Contracts;
-using Contracts.DbRequests;
-using Contracts.Exceptions;
-using Contracts.Pagination;
-using Contracts.Security;
-using System.Text.Json.Serialization;
-using System.Text.Json;
-using System.Security.Cryptography.X509Certificates;
-using System.Security.Cryptography.Xml;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.Json.Nodes;
+using static QRCoder.PayloadGenerator;
 
 /// <summary>
 /// 
@@ -1455,6 +1458,113 @@ public async virtual Task<IActionResult> GetSubmodelByIdSigned([FromRoute][Requi
         throw new NotAllowed($"");
     }
 
+    /// <summary>
+    /// Returns a specific Submodel signed
+    /// </summary>
+    /// <param name="submodelIdentifier">The Submodel’s unique id (UTF8-BASE64-URL-encoded)</param>
+    /// <param name="level">Determines the structural depth of the respective resource content</param>
+    /// <param name="extent">Determines to which extent the resource is being serialized</param>
+    /// <response code="200">Requested Submodel</response>
+    /// <response code="400">Bad Request, e.g. the request parameters of the format of the request body is wrong.</response>
+    /// <response code="401">Unauthorized, e.g. the server refused the authorization attempt.</response>
+    /// <response code="403">Forbidden</response>
+    /// <response code="404">Not Found</response>
+    /// <response code="500">Internal Server Error</response>
+    /// <response code="0">Default error handling for unmentioned status codes</response>
+    [HttpGet]
+    [Route("submodels/{submodelIdentifier}/$sign2")]
+    [ValidateModelState]
+    [SwaggerOperation("GetSubmodelByIdSigned2")]
+    [SwaggerResponse(statusCode: 200, type: typeof(Submodel), description: "Requested Submodel")]
+    [SwaggerResponse(statusCode: 400, type: typeof(Result), description: "Bad Request, e.g. the request parameters of the format of the request body is wrong.")]
+    [SwaggerResponse(statusCode: 401, type: typeof(Result), description: "Unauthorized, e.g. the server refused the authorization attempt.")]
+    [SwaggerResponse(statusCode: 403, type: typeof(Result), description: "Forbidden")]
+    [SwaggerResponse(statusCode: 404, type: typeof(Result), description: "Not Found")]
+    [SwaggerResponse(statusCode: 500, type: typeof(Result), description: "Internal Server Error")]
+    [SwaggerResponse(statusCode: 0, type: typeof(Result), description: "Default error handling for unmentioned status codes")]
+    public async virtual Task<IActionResult> GetSubmodelByIdSigned2([FromRoute][Required] string submodelIdentifier, [FromQuery] string? level, [FromQuery] string? extent)
+    {
+        //Validate level and extent
+        var levelEnum = _validateModifierService.ValidateLevel(level);
+        var extentEnum = _validateModifierService.ValidateExtent(extent);
+
+        var decodedSubmodelIdentifier = _decoderService.Decode("submodelIdentifier", submodelIdentifier);
+
+        _logger.LogInformation($"Received request to get the submodel with id {decodedSubmodelIdentifier}");
+        if (decodedSubmodelIdentifier == null)
+        {
+            throw new NotAllowed($"Cannot proceed as {nameof(decodedSubmodelIdentifier)} is null");
+        }
+
+        var securityConfig = new SecurityConfig(Program.noSecurity, this);
+
+        var submodel = await _dbRequestHandlerService.ReadSubmodelById(securityConfig, null, decodedSubmodelIdentifier);
+
+        string certFile = "Andreas_Orzelski_Chain.pfx";
+        string certPW = "i40";
+        if (System.IO.File.Exists(certFile))
+        {
+            var submodelText = Jsonization.Serialize.ToJsonObject(submodel).ToJsonString();
+
+            var mStrm = new MemoryStream(Encoding.UTF8.GetBytes(submodelText));
+            var node = System.Text.Json.JsonSerializer.DeserializeAsync<JsonNode>(mStrm).Result;
+            var s = Jsonization.Deserialize.SubmodelFrom(node);
+
+            submodel.Extensions ??= [];
+            using (var certificate = new X509Certificate2(certFile, certPW))
+            {
+                if (certificate == null)
+                {
+                    throw new NotAllowed($"");
+                }
+
+                X509Certificate2Collection xc = new X509Certificate2Collection();
+                xc.Import(certFile, certPW, X509KeyStorageFlags.PersistKeySet);
+
+                var i = 0;
+                var x5c = new string[xc.Count];
+                for (var j = xc.Count - 1; j >= 0; j--)
+                {
+                    var c = Convert.ToBase64String(xc[j].GetRawCertData());
+                    x5c[i++] = c;
+                }
+
+                var headers = new Dictionary<string, object>
+                {
+                    { "alg", "RS256" },
+                    { "typ", "JWS" },
+                    { "x5c", x5c }
+                };
+
+                var signature = "";
+                try
+                {
+                    using (RSA rsa = certificate.GetRSAPrivateKey())
+                    {
+                        if (rsa == null)
+                        {
+                            throw new NotAllowed($"");
+                        }
+
+                        var jws = JWT.Encode(submodelText, rsa, JwsAlgorithm.RS256, headers);
+
+                        submodel.Extensions.Add(new Extension($"$sign_{Guid.NewGuid()}", value: jws));
+
+                        return new ObjectResult(submodel);
+                    }
+
+                }
+                // ReSharper disable EmptyGeneralCatchClause
+                catch
+                {
+                }
+
+            }
+        }
+
+        throw new NotAllowed($"");
+    }
+
     /// <summary>
     /// Returns the metadata attributes of a specific Submodel
     /// </summary>