|
12 | 12 | import com.uid2.shared.attest.EncryptedAttestationToken; |
13 | 13 | import com.uid2.shared.attest.IAttestationTokenService; |
14 | 14 | import com.uid2.shared.attest.JwtService; |
| 15 | +import com.uid2.shared.audit.Audit; |
15 | 16 | import com.uid2.shared.audit.AuditParams; |
16 | 17 | import com.uid2.shared.auth.*; |
17 | 18 | import com.uid2.shared.cloud.ICloudStorage; |
@@ -193,25 +194,25 @@ private Router createRoutesSetup() { |
193 | 194 | router.post(Endpoints.ATTEST.toString()) |
194 | 195 | .handler(new AttestationFailureHandler()) |
195 | 196 | .handler(auth.handleWithAudit(this::handleAttestAsync, new AuditParams(Collections.emptyList(), Arrays.asList("application_name", "application_version", OPERATOR_TYPE, "components.uid2-attestation-api", "components.uid2-shared")), |
196 | | - enableAuditLog, Role.OPERATOR, Role.OPTOUT_SERVICE)); |
197 | | - router.get(Endpoints.CLOUD_ENCRYPTION_KEYS_RETRIEVE.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleCloudEncryptionKeysRetrieval), auditParams, enableAuditLog, Role.OPERATOR)); |
198 | | - router.get(Endpoints.SITES_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleSiteRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
199 | | - router.get(Endpoints.KEY_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeyRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
200 | | - router.get(Endpoints.KEY_ACL_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeyAclRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
201 | | - router.get(Endpoints.KEY_KEYSET_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeysetRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
202 | | - router.get(Endpoints.KEY_KEYSET_KEYS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeysetKeyRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
203 | | - router.get(Endpoints.SALT_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleSaltRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
204 | | - router.get(Endpoints.CLIENTS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleClientRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
205 | | - router.get(Endpoints.CLIENT_SIDE_KEYPAIRS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleClientSideKeypairRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
206 | | - router.get(Endpoints.SERVICES_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleServiceRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
207 | | - router.get(Endpoints.SERVICE_LINKS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleServiceLinkRefresh), auditParams, enableAuditLog, Role.OPERATOR)); |
208 | | - router.get(Endpoints.OPERATORS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleOperatorRefresh), auditParams, enableAuditLog, Role.OPTOUT_SERVICE)); |
209 | | - router.get(Endpoints.PARTNERS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handlePartnerRefresh), auditParams, enableAuditLog, Role.OPTOUT_SERVICE)); |
| 197 | + enableAuditLog, List.of(Role.OPERATOR, Role.OPTOUT_SERVICE))); |
| 198 | + router.get(Endpoints.CLOUD_ENCRYPTION_KEYS_RETRIEVE.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleCloudEncryptionKeysRetrieval), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 199 | + router.get(Endpoints.SITES_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleSiteRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 200 | + router.get(Endpoints.KEY_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeyRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 201 | + router.get(Endpoints.KEY_ACL_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeyAclRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 202 | + router.get(Endpoints.KEY_KEYSET_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeysetRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 203 | + router.get(Endpoints.KEY_KEYSET_KEYS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleKeysetKeyRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 204 | + router.get(Endpoints.SALT_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleSaltRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 205 | + router.get(Endpoints.CLIENTS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleClientRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 206 | + router.get(Endpoints.CLIENT_SIDE_KEYPAIRS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleClientSideKeypairRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 207 | + router.get(Endpoints.SERVICES_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleServiceRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 208 | + router.get(Endpoints.SERVICE_LINKS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleServiceLinkRefresh), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
| 209 | + router.get(Endpoints.OPERATORS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleOperatorRefresh), auditParams, enableAuditLog, List.of(Role.OPTOUT_SERVICE))); |
| 210 | + router.get(Endpoints.PARTNERS_REFRESH.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handlePartnerRefresh), auditParams, enableAuditLog, List.of(Role.OPTOUT_SERVICE))); |
210 | 211 | router.get(Endpoints.OPS_HEALTHCHECK.toString()).handler(this::handleHealthCheck); |
211 | | - router.get(Endpoints.OPERATOR_CONFIG.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleGetConfig), auditParams, enableAuditLog, Role.OPERATOR)); |
| 212 | + router.get(Endpoints.OPERATOR_CONFIG.toString()).handler(auth.handleWithAudit(attestationMiddleware.handle(this::handleGetConfig), auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
212 | 213 |
|
213 | 214 | if (Optional.ofNullable(ConfigStore.Global.getBoolean("enable_test_endpoints")).orElse(false)) { |
214 | | - router.route(Endpoints.ATTEST_GET_TOKEN.toString()).handler(auth.handleWithAudit(this::handleTestGetAttestationToken, auditParams, enableAuditLog, Role.OPERATOR)); |
| 215 | + router.route(Endpoints.ATTEST_GET_TOKEN.toString()).handler(auth.handleWithAudit(this::handleTestGetAttestationToken, auditParams, enableAuditLog, List.of(Role.OPERATOR))); |
215 | 216 | } |
216 | 217 |
|
217 | 218 | return router; |
@@ -298,6 +299,8 @@ private void handleAttestAsync(RoutingContext rc) { |
298 | 299 | } |
299 | 300 |
|
300 | 301 | final AttestationResult attestationResult = ar.result(); |
| 302 | + JsonObject auditUserDetails = rc.get(Audit.USER_DETAILS, new JsonObject()); |
| 303 | + auditUserDetails.put("enclaveId", attestationResult.getEnclaveId()); |
301 | 304 | if (!attestationResult.isSuccess()) { |
302 | 305 | AttestationFailure failure = attestationResult.getFailure(); |
303 | 306 | switch (failure) { |
|
0 commit comments