Mercurial > hg > orthanc-authorization
annotate Plugin/AuthorizationWebService.cpp @ 68:1a13c4fbc9a1
copyrights
author | Alain Mazy <am@osimis.io> |
---|---|
date | Fri, 17 Feb 2023 15:05:02 +0100 |
parents | 5281a859248d |
children | af44dce56328 |
rev | line source |
---|---|
1 | 1 /** |
2 * Advanced authorization plugin for Orthanc | |
68 | 3 * Copyright (C) 2017-2023 Osimis S.A., Belgium |
1 | 4 * |
5 * This program is free software: you can redistribute it and/or | |
6 * modify it under the terms of the GNU Affero General Public License | |
7 * as published by the Free Software Foundation, either version 3 of | |
8 * the License, or (at your option) any later version. | |
9 * | |
10 * This program is distributed in the hope that it will be useful, but | |
11 * WITHOUT ANY WARRANTY; without even the implied warranty of | |
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
13 * Affero General Public License for more details. | |
14 * | |
15 * You should have received a copy of the GNU Affero General Public License | |
16 * along with this program. If not, see <http://www.gnu.org/licenses/>. | |
17 **/ | |
18 | |
19 #include "AuthorizationWebService.h" | |
20 | |
34 | 21 #include "../Resources/Orthanc/Plugins/OrthancPluginCppWrapper.h" |
22 | |
32 | 23 #include <Logging.h> |
59
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
24 #include <Toolbox.h> |
1 | 25 |
26 namespace OrthancPlugins | |
27 { | |
28 bool AuthorizationWebService::IsGrantedInternal(unsigned int& validity, | |
29 OrthancPluginHttpMethod method, | |
30 const AccessedResource& access, | |
31 const Token* token, | |
32 const std::string& tokenValue) | |
33 { | |
34 Json::Value body = Json::objectValue; | |
35 | |
36 switch (method) | |
37 { | |
38 case OrthancPluginHttpMethod_Get: | |
39 body["method"] ="get"; | |
40 break; | |
41 | |
42 case OrthancPluginHttpMethod_Post: | |
43 body["method"] ="post"; | |
44 break; | |
45 | |
46 case OrthancPluginHttpMethod_Put: | |
47 body["method"] ="put"; | |
48 break; | |
49 | |
50 case OrthancPluginHttpMethod_Delete: | |
51 body["method"] ="delete"; | |
52 break; | |
53 | |
54 default: | |
55 throw Orthanc::OrthancException(Orthanc::ErrorCode_ParameterOutOfRange); | |
56 } | |
57 | |
58 body["level"] = EnumerationToString(access.GetLevel()); | |
59 | |
60 if (access.GetLevel() == AccessLevel_System) | |
61 { | |
62 body["uri"] = access.GetOrthancId(); | |
63 } | |
64 else | |
65 { | |
66 body["orthanc-id"] = access.GetOrthancId(); | |
67 body["dicom-uid"] = access.GetDicomUid(); | |
68 } | |
69 | |
70 if (token != NULL) | |
71 { | |
72 body["token-key"] = token->GetKey(); | |
73 body["token-value"] = tokenValue; | |
74 } | |
75 | |
54
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
76 if (!identifier_.empty()) |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
77 { |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
78 body["identifier"] = identifier_; |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
79 } |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
80 else |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
81 { |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
82 body["identifier"] = Json::nullValue; |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
83 } |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
84 |
29
bc0431cb6b8f
fix for compatibility with simplified OrthancPluginCppWrapper
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
22
diff
changeset
|
85 MemoryBuffer answerBody; |
bc0431cb6b8f
fix for compatibility with simplified OrthancPluginCppWrapper
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
22
diff
changeset
|
86 MemoryBuffer answerHeaders; |
1 | 87 uint16_t httpStatus = 0; |
88 | |
89 uint32_t headersCount = 0; | |
10 | 90 const char* headersKeys[2]; |
91 const char* headersValues[2]; | |
1 | 92 |
93 if (token != NULL && | |
94 token->GetType() == TokenType_HttpHeader) | |
95 { | |
96 // If the token source is a HTTP header, forward it also as a | |
59
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
97 // HTTP header except if it is the Authorization header that might conflict with username_ and password_ |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
98 std::string lowerTokenKey; |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
99 Orthanc::Toolbox::ToLowerCase(lowerTokenKey, token->GetKey()); |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
100 |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
101 if (!(lowerTokenKey == "authorization" && !username_.empty())) |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
102 { |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
103 headersKeys[headersCount] = token->GetKey().c_str(); |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
104 headersValues[headersCount] = tokenValue.c_str(); |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
105 headersCount++; |
a5f2976fe8a0
fix Authorization header conflicting with WebServiceUsername
Alain Mazy <am@osimis.io>
parents:
54
diff
changeset
|
106 } |
1 | 107 } |
108 | |
10 | 109 // set the correct content type for the outgoing |
110 headersKeys[headersCount] = "Content-Type"; | |
111 headersValues[headersCount] = "application/json"; | |
112 headersCount++; | |
113 | |
67 | 114 // set the correct content type for the outgoing |
115 headersKeys[headersCount] = "Expect"; | |
116 headersValues[headersCount] = ""; | |
117 headersCount++; | |
118 | |
1 | 119 std::string flatBody = body.toStyledString(); |
120 | |
29
bc0431cb6b8f
fix for compatibility with simplified OrthancPluginCppWrapper
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
22
diff
changeset
|
121 if (OrthancPluginHttpClient(GetGlobalContext(), *answerBody, *answerHeaders, |
1 | 122 &httpStatus, OrthancPluginHttpMethod_Post, |
123 url_.c_str(), headersCount, headersKeys, headersValues, | |
124 flatBody.c_str(), flatBody.size(), | |
125 username_.empty() ? NULL : username_.c_str(), | |
126 password_.empty() ? NULL : password_.c_str(), | |
127 10 /* timeout */, NULL, NULL, NULL, 0) | |
128 != OrthancPluginErrorCode_Success) | |
129 { | |
130 throw Orthanc::OrthancException(Orthanc::ErrorCode_NetworkProtocol); | |
131 } | |
132 | |
133 Json::Value answer; | |
134 answerBody.ToJson(answer); | |
135 | |
136 static const char* GRANTED = "granted"; | |
137 static const char* VALIDITY = "validity"; | |
138 | |
139 if (answer.type() != Json::objectValue || | |
140 !answer.isMember(GRANTED) || | |
141 answer[GRANTED].type() != Json::booleanValue || | |
142 (answer.isMember(VALIDITY) && | |
143 answer[VALIDITY].type() != Json::intValue)) | |
144 { | |
29
bc0431cb6b8f
fix for compatibility with simplified OrthancPluginCppWrapper
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
22
diff
changeset
|
145 throw Orthanc::OrthancException(Orthanc::ErrorCode_NetworkProtocol, |
bc0431cb6b8f
fix for compatibility with simplified OrthancPluginCppWrapper
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
22
diff
changeset
|
146 "Syntax error in the result of the Web service"); |
1 | 147 } |
148 | |
149 validity = 0; | |
150 if (answer.isMember(VALIDITY)) | |
151 { | |
152 int tmp = answer[VALIDITY].asInt(); | |
153 if (tmp < 0) | |
154 { | |
29
bc0431cb6b8f
fix for compatibility with simplified OrthancPluginCppWrapper
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
22
diff
changeset
|
155 throw Orthanc::OrthancException(Orthanc::ErrorCode_NetworkProtocol, |
bc0431cb6b8f
fix for compatibility with simplified OrthancPluginCppWrapper
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
22
diff
changeset
|
156 "A validity duration cannot be negative"); |
1 | 157 } |
158 | |
159 validity = static_cast<unsigned int>(tmp); | |
160 } | |
161 | |
162 return answer[GRANTED].asBool(); | |
163 } | |
164 | |
165 | |
166 void AuthorizationWebService::SetCredentials(const std::string& username, | |
167 const std::string& password) | |
168 { | |
169 username_ = username; | |
170 password_ = password; | |
171 } | |
54
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
172 |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
173 void AuthorizationWebService::SetIdentifier(const std::string& webServiceIdentifier) |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
174 { |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
175 identifier_ = webServiceIdentifier; |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
176 } |
317b31e99501
Added 3 new configurations: WebServiceUsername, WebServicePassword, WebServiceIdentifier. WebServiceIdentifier is now included in the payload as the 'identifier' field
Alain Mazy <am@osimis.io>
parents:
46
diff
changeset
|
177 |
1 | 178 } |