Mercurial > hg > orthanc-gcp
annotate Plugin/GoogleAccount.cpp @ 26:d9e1b60a9aa6
upgrade to year 2020
| author | Sebastien Jodogne <s.jodogne@gmail.com> |
|---|---|
| date | Fri, 31 Jan 2020 17:53:02 +0100 |
| parents | 798951e457f3 |
| children | acfe1ea3206b |
| rev | line source |
|---|---|
| 0 | 1 /** |
| 2 * Google Cloud Platform credentials for DICOMweb and Orthanc | |
|
26
d9e1b60a9aa6
upgrade to year 2020
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
11
diff
changeset
|
3 * Copyright (C) 2019-2020 Osimis S.A., Belgium |
| 0 | 4 * |
| 5 * This program is free software: you can redistribute it and/or | |
| 6 * modify it under the terms of the GNU General Public License as | |
| 7 * published by the Free Software Foundation, either version 3 of the | |
| 8 * License, or (at your option) any later version. | |
| 9 * | |
| 10 * In addition, as a special exception, the copyright holders of this | |
| 11 * program give permission to link the code of its release with the | |
| 12 * OpenSSL project's "OpenSSL" library (or with modified versions of it | |
| 13 * that use the same license as the "OpenSSL" library), and distribute | |
| 14 * the linked executables. You must obey the GNU General Public License | |
| 15 * in all respects for all of the code used other than "OpenSSL". If you | |
| 16 * modify file(s) with this exception, you may extend this exception to | |
| 17 * your version of the file(s), but you are not obligated to do so. If | |
| 18 * you do not wish to do so, delete this exception statement from your | |
| 19 * version. If you delete this exception statement from all source files | |
| 20 * in the program, then also delete it here. | |
| 21 * | |
| 22 * This program is distributed in the hope that it will be useful, but | |
| 23 * WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 24 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
| 25 * General Public License for more details. | |
| 26 * | |
| 27 * You should have received a copy of the GNU General Public License | |
| 28 * along with this program. If not, see <http://www.gnu.org/licenses/>. | |
| 29 **/ | |
| 30 | |
| 31 | |
| 32 #include "GoogleAccount.h" | |
| 33 | |
|
11
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
34 #include <Core/Toolbox.h> |
| 0 | 35 |
| 36 void GoogleAccount::LoadAuthorizedUser(const std::string& json) | |
| 37 { | |
| 38 google::cloud::StatusOr<google::cloud::storage::oauth2::AuthorizedUserCredentialsInfo> info = | |
| 39 google::cloud::storage::oauth2::ParseAuthorizedUserCredentials(json, "memory"); | |
| 40 | |
| 41 if (!info) | |
| 42 { | |
| 43 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadFileFormat, | |
| 44 "Cannot parse authorized user configuration"); | |
| 45 } | |
| 46 else | |
| 47 { | |
| 48 type_ = Type_AuthorizedUser; | |
| 49 authorizedUser_.reset(new google::cloud::storage::oauth2::AuthorizedUserCredentialsInfo(*info)); | |
| 50 } | |
| 51 } | |
| 52 | |
| 53 | |
| 54 bool GoogleAccount::LoadServiceAccount(const OrthancPlugins::OrthancConfiguration& account) | |
| 55 { | |
| 56 std::string path; | |
| 57 | |
| 58 if (!account.LookupStringValue(path, "ServiceAccountFile")) | |
| 59 { | |
| 60 return false; | |
| 61 } | |
| 62 | |
| 63 OrthancPlugins::MemoryBuffer f; | |
| 64 f.ReadFile(path); | |
| 65 | |
| 66 std::string s; | |
| 67 f.ToString(s); | |
| 68 | |
| 69 google::cloud::StatusOr<google::cloud::storage::oauth2::ServiceAccountCredentialsInfo> info = | |
| 70 google::cloud::storage::oauth2::ParseServiceAccountCredentials(s, "memory"); | |
| 71 | |
| 72 if (!info) | |
| 73 { | |
| 74 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadFileFormat, | |
| 75 "Cannot parse service account configuration at: " + path); | |
| 76 } | |
| 77 | |
| 78 type_ = Type_ServiceAccount; | |
| 79 serviceAccount_.reset(new google::cloud::storage::oauth2::ServiceAccountCredentialsInfo(*info)); | |
| 80 return true; | |
| 81 } | |
| 82 | |
| 83 | |
| 84 bool GoogleAccount::LoadAuthorizedUserFile(const OrthancPlugins::OrthancConfiguration& account) | |
| 85 { | |
| 86 std::string path; | |
| 87 | |
| 88 if (account.LookupStringValue(path, "AuthorizedUserFile")) | |
| 89 { | |
| 90 OrthancPlugins::MemoryBuffer f; | |
| 91 f.ReadFile(path); | |
| 92 | |
| 93 std::string s; | |
| 94 f.ToString(s); | |
| 95 | |
| 96 LoadAuthorizedUser(s); | |
| 97 return true; | |
| 98 } | |
| 99 else | |
| 100 { | |
| 101 return false; | |
| 102 } | |
| 103 } | |
| 104 | |
| 105 | |
| 106 bool GoogleAccount::LoadAuthorizedUserStrings(const OrthancPlugins::OrthancConfiguration& account) | |
| 107 { | |
| 108 std::string clientId, clientSecret, refreshToken; | |
| 109 | |
| 110 if (account.LookupStringValue(clientId, "AuthorizedUserClientId") && | |
| 111 account.LookupStringValue(clientSecret, "AuthorizedUserClientSecret") && | |
| 112 account.LookupStringValue(refreshToken, "AuthorizedUserRefreshToken")) | |
| 113 { | |
| 114 Json::Value json = Json::objectValue; | |
| 115 json["client_id"] = clientId; | |
| 116 json["client_secret"] = clientSecret; | |
| 117 json["refresh_token"] = refreshToken; | |
| 118 | |
| 119 LoadAuthorizedUser(json.toStyledString()); | |
| 120 return true; | |
| 121 } | |
| 122 else | |
| 123 { | |
| 124 return false; | |
| 125 } | |
| 126 } | |
| 127 | |
| 128 | |
| 129 GoogleAccount::GoogleAccount(const OrthancPlugins::OrthancConfiguration& account, | |
| 130 const std::string& name) : | |
| 131 name_(name) | |
| 132 { | |
| 133 if (!account.LookupStringValue(project_, "Project")) | |
| 134 { | |
| 135 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadFileFormat, | |
| 136 "Missing \"Project\" option for account \"" + name + "\""); | |
| 137 } | |
| 138 | |
| 139 if (!account.LookupStringValue(location_, "Location")) | |
| 140 { | |
| 141 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadFileFormat, | |
| 142 "Missing \"Location\" option for account \"" + name + "\""); | |
| 143 } | |
| 144 | |
| 145 if (!account.LookupStringValue(dataset_, "Dataset")) | |
| 146 { | |
| 147 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadFileFormat, | |
| 148 "Missing \"Dataset\" option for account \"" + name + "\""); | |
| 149 } | |
| 150 | |
| 151 if (!account.LookupStringValue(dicomStore_, "DicomStore")) | |
| 152 { | |
| 153 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadFileFormat, | |
| 154 "Missing \"DicomStore\" option for account \"" + name + "\""); | |
| 155 } | |
| 156 | |
| 157 if (!LoadServiceAccount(account) && | |
| 158 !LoadAuthorizedUserFile(account) && | |
| 159 !LoadAuthorizedUserStrings(account)) | |
| 160 { | |
| 161 throw Orthanc::OrthancException( | |
| 162 Orthanc::ErrorCode_BadFileFormat, | |
| 163 "Missing \"ServiceAccount\" or \"AuthorizedUserXXX\" option for account \"" + name + "\""); | |
| 164 } | |
| 165 } | |
| 166 | |
| 167 | |
| 168 const google::cloud::storage::oauth2::AuthorizedUserCredentialsInfo& GoogleAccount::GetAuthorizedUser() const | |
| 169 { | |
| 170 if (authorizedUser_.get() == NULL) | |
| 171 { | |
| 172 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadSequenceOfCalls); | |
| 173 } | |
| 174 else | |
| 175 { | |
| 176 return *authorizedUser_; | |
| 177 } | |
| 178 } | |
| 179 | |
| 180 | |
| 181 google::cloud::storage::oauth2::ServiceAccountCredentialsInfo& GoogleAccount::GetServiceAccount() const | |
| 182 { | |
| 183 if (serviceAccount_.get() == NULL) | |
| 184 { | |
| 185 throw Orthanc::OrthancException(Orthanc::ErrorCode_BadSequenceOfCalls); | |
| 186 } | |
| 187 else | |
| 188 { | |
| 189 return *serviceAccount_; | |
| 190 } | |
| 191 } | |
| 192 | |
| 193 | |
| 194 static std::string AddTrailingSlash(const std::string& url) | |
| 195 { | |
| 196 // Add a trailing slash if needed | |
| 197 if (url.empty() || | |
| 198 url[url.size() - 1] != '/') | |
| 199 { | |
| 200 return url + '/'; | |
| 201 } | |
| 202 else | |
| 203 { | |
| 204 return url; | |
| 205 } | |
| 206 } | |
| 207 | |
| 208 | |
| 209 bool GoogleAccount::UpdateServerDefinition(const std::string& dicomWebPluginRoot, | |
| 210 const std::string& baseGoogleUrl, | |
| 211 const std::string& token) const | |
| 212 { | |
| 213 std::string url = (AddTrailingSlash(baseGoogleUrl) + | |
| 214 "projects/" + project_ + | |
| 215 "/locations/" + location_ + | |
| 216 "/datasets/" + dataset_ + | |
| 217 "/dicomStores/" + dicomStore_ + | |
| 218 "/dicomWeb/"); | |
| 219 | |
|
11
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
220 size_t colon = token.find(':'); |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
221 if (colon == std::string::npos) |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
222 { |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
223 throw Orthanc::OrthancException(Orthanc::ErrorCode_InternalError); |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
224 } |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
225 |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
226 std::string headerKey = Orthanc::Toolbox::StripSpaces(token.substr(0, colon)); |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
227 std::string headerValue = Orthanc::Toolbox::StripSpaces(token.substr(colon + 1)); |
|
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
228 |
| 0 | 229 Json::Value headers = Json::objectValue; |
|
11
798951e457f3
fix parsing of authorization header
Sebastien Jodogne <s.jodogne@gmail.com>
parents:
0
diff
changeset
|
230 headers[headerKey] = headerValue; |
| 0 | 231 |
| 232 Json::Value server = Json::objectValue; | |
| 233 server["Url"] = url; | |
| 234 server["HasDelete"] = "1"; // Google Cloud Platform allows "-X DELETE" | |
| 235 server["HttpHeaders"] = headers; | |
| 236 | |
| 237 Json::Value answer; | |
| 238 if (OrthancPlugins::RestApiPut(answer, AddTrailingSlash(dicomWebPluginRoot) + "servers/" + name_, | |
| 239 server, true)) | |
| 240 { | |
| 241 return true; | |
| 242 } | |
| 243 else | |
| 244 { | |
| 245 LOG(ERROR) << "Cannot update DICOMweb access to Google Cloud Platform: " << name_; | |
| 246 return false; | |
| 247 } | |
| 248 } |