Implementation/SAS:APS Server/SAS.java

/*
 * Feel free to copy/use it for your own project.
 * Keep in mind that it took me several days/weeks, beers and asperines to make this.
 * So be nice, and give me some credit, I won't bite and it won't hurt you.
 */

import java.io.IOException;
import java.io.PrintWriter;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.HashMap;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.naming.NamingException;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.json.simple.JSONObject;
import org.json.simple.parser.ParseException;

/**
 *
 * @author Deben Oldert
 */
@WebServlet(urlPatterns = {"/SAS"})
public class SAS extends HttpServlet {

    Function function = new Function();
    ErrorCode code = new ErrorCode();
    int ldapError;
    SQL sql;
    ResultSet result;
    String req;
    String reqBody;
    int i;
    int timeout = 30;
    boolean finished = false;

    public SAS() throws ClassNotFoundException, SQLException, InstantiationException, IllegalAccessException {
        this.sql = (new SQL());
    }
    
    
    /**
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code>
     * methods.
     *
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     * @throws java.sql.SQLException
     * @throws java.lang.InstantiationException
     * @throws java.lang.IllegalAccessException
     * @throws java.lang.ClassNotFoundException
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException, SQLException, InstantiationException, IllegalAccessException, ClassNotFoundException {
        response.setContentType("application/json;charset=UTF-8");
        
        
    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /**
     * Handles the HTTP <code>GET</code> method.
     *
     * @param request servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
            response.setContentType("application/json;charset=UTF-8");
            
            JSONObject json = new JSONObject();
            json.put("result", 900);
            json.put("resultText", code.getCodeText(900));
            try (PrintWriter out = response.getWriter()) {
                out.println(json);
            } 
            
    }
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
            response.setContentType("application/json;charset=UTF-8");
            
            
            
        try {
            reqBody = function.getBody(request.getReader());
            HashMap json = function.defragJSON(reqBody);
            LDAP ldap = new LDAP((String) json.get("username"), (String) json.get("password"));
            String requestId = (String) json.get("requestId");
            String answer;
            req = requestId;
            
            
            
            
            System.out.println("============= "+req+" ============= << SAS");
        System.out.print(json);
        System.out.println("********************************************************");
            
            switch((String) json.get("function")) {
                case "authenticate":
                    sql.threadUpdate(requestId, "birth", null);
                    System.out.println("##### SAS >> AUTHENTICATE");
                    String tmpBody;
                    JSONObject tmpJSON = new JSONObject();
                        tmpJSON.put("function", "authenticate");
                        tmpJSON.put("requestId", requestId);
                        tmpJSON.put("username", (String) json.get("username"));
                        tmpJSON.put("password", (String) json.get("password"));
                    tmpBody = tmpJSON.toJSONString();

                    HashMap jsonAnswer = function.defragJSON(function.makeRequest("POST", function.getURL("APS"), tmpBody));
                    if(jsonAnswer.get("result").equals("0")) {
                        if(jsonAnswer.containsKey("serviceType")) {
                            System.out.println("SENDING PUSH NOTIFICATION");
                            String[] info = {
                                            "deviceId",
                                            "serviceNumber",
                                            "serviceType",
                                            "notificationId",
                                            "apiKey"};
                            HashMap userInfo = ldap.getUserInfo(info);
                            
                            JSONObject exData = new JSONObject();
                            exData.put("requestId", requestId);
                            
                            JSONObject data = new JSONObject();
                            data.put("data", exData);
                            data.put("to", userInfo.get("notificationId"));
                                                      
                            answer = function.makeRequest("POST", function.getURL(jsonAnswer.get("serviceType").toString()), data.toJSONString());
                            
                            sql.threadUpdate(requestId, "request", answer);
                            timeout = 30;
                            finished = false;
                            for(i = 1; i<=timeout; i++) {
                                result = sql.stmt.executeQuery("SELECT `state`, `data` FROM `thread` WHERE `threadId`='"+requestId+"'");
                                if(result.first()) {
                                    if(result.getString("state").equals("reply")) {
                                        if(result.getString("data") == null || result.getString("data").equals("") || result.getString("data").equals("null")) {
                                            outputResult(response, 601, requestId, null, true);
                                            finished = true;
                                            break;
                                        } else {
                                            HashMap sqlResult = function.defragJSON(result.getString("data"));
                                            if(sqlResult.get("confirmation").equals("approved")) {
                                                outputResult(response, 0, requestId, function.defragJSON(result.getString("data")), false);
                                            }
                                            else {
                                                outputResult(response, 1, requestId, function.defragJSON(result.getString("data")), false);
                                            }
                                            sql.threadUpdate(requestId, "done", "{\"result\":0}");
                                            finished = true;
                                            break;
                                        }
                                    }
                                    else {
                                        System.out.println("WAITING "+i+" SECONDS");
                                        Thread.sleep(1000);
                                    }
                                }
                                else {
                                    outputResult(response, 602, requestId, null, true);
                                    break;
                                }
                                result = null;
                            }
                            System.out.println("WAITED "+i+" SECONDS");
                            if(i >= timeout) {
                                outputResult(response, 950, requestId, null, true);
                            }
                            
                        } else {
                            outputResult(response, 2, requestId, null, false);
                            System.out.println("SENDING EMAIL");
                            tmpJSON = new JSONObject();
                                tmpJSON.put("function", "sendmail");
                                tmpJSON.put("requestId", requestId);
                                tmpJSON.put("username", (String) json.get("username"));
                                tmpJSON.put("password", (String) json.get("password"));
                                tmpJSON.put("subject", "Enrollment for TFA");
                                tmpJSON.put("text", "Dear Employee,<br><br>"
                                    + "In order to login to our VPN server you need to download our app to verify your connection request.<br><br>"
                                    + "For Android:<br><ol>"
                                    + "<li>Download and install our app at: "+function.getURL("PLAYSTORE")+"</li>"
                                    + "<li>Start it: <a href='"+function.getURL("APP")+"?rid="+req+"&rcd="+function.genRegCode(json.get("username").toString())+"'>CLICK HERE</li></ol>"
                                    + "We currently don't support iPhone. Sorry for the inconvience.<br><br>"
                                    + "Your registration code is: <b>"+function.genRegCode(json.get("username").toString())+"</b>.<br><br>"
                                    + "Regards,<br>"
                                    + "The IT Security department");
                            tmpBody = tmpJSON.toJSONString();
                            jsonAnswer = function.defragJSON(function.makeRequest("POST", function.getURL("APS"), tmpBody));
                            System.out.println(jsonAnswer);
                            if(jsonAnswer.get("result").equals("0")) {
                                    String state;
                                    String data;
                                    
                                    timeout = 300;
                                    finished = false;
                                    for(i=1; i<=300; i++) {
                                        result = sql.stmt.executeQuery("SELECT state,data FROM thread WHERE threadId='"+requestId+"'");
                                        if(result.first()) {
                                            state = result.getString("state");
                                            data = result.getString("data");
                                            if(state.equals("request")) {
                                                System.out.println("Got response");
                                                sql.threadUpdate(requestId, "reply", function.makeRequest("POST", function.getURL("APS"), data));
                                                finished = true;
                                                return;
                                            } else {
                                                System.out.println("WAITING "+i+" SECONDS");
                                                Thread.sleep(1000);
                                            }
                                            
                                        } else {
                                            outputResult(response, 602, requestId, null, true);
                                            finished = true;
                                            return;
                                        }
                                    }
                                    System.out.println("WAITED "+i+" SECONDS");
                                    if(i >= timeout) {
                                        outputResult(response, 950, requestId, null, true);
                                    }
                            } else {
                                outputResult(response, (int) jsonAnswer.get("result"), requestId, null, true);
                                
                            }
                        }
                    } else {
                        outputResult(response, Integer.parseInt((String)jsonAnswer.get("result")), requestId, null, true);
                    }
                    
                    break;
                case "register":
                    System.out.println("##### SAS >> REGISTER");
                    if((ldapError = ldap.userCheck()) == 0) {
                        String username = json.get("username").toString();
                        String regCode = json.get("registerCode").toString();
                        if(username != null && regCode != null) {
                            if(function.checkRegCode(regCode, username)) {
                                System.out.println("REGCODE PASSED");
                                sql.threadUpdate(req, "request", reqBody);
                                String state;
                                HashMap data;
                                
                                timeout = 5;
                                finished = false;
                                for(i=1; i<=5; i++) {
                                    System.out.println("LOOP STARTED");
                                        result = sql.stmt.executeQuery("SELECT state,data FROM thread WHERE threadId='"+requestId+"'");
                                        if(result.first()) {
                                            System.out.println("GOT SQL");
                                            state = result.getString("state");
                                            System.out.println(state);
                                            if(state.equals("reply")) {
                                                System.out.println("Got final response");
                                                data = function.defragJSON(result.getString("data"));
                                                outputResult(response, Integer.parseInt(data.get("result").toString()), requestId, null, true);
                                                System.out.println("OUTPUT");
                                                finished = true;
                                                return;
                                            } else {
                                                System.out.println("REG WAITING "+i+" SECONDS");
                                                Thread.sleep(1000);
                                            }
                                            
                                        } else {
                                            outputResult(response, 602, requestId, null, true);
                                        }
                                    }
                                if(i >= timeout) {
                                    outputResult(response, 950, requestId, null, true);
                                }
                            }
                            else {
                                outputResult(response, 5, requestId, null, true);
                            }
                        }
                        else {
                            outputResult(response, 560, requestId, null, true);
                        }
                    } else {
                        outputResult(response, ldapError, requestId, null, true);
                    }
                    break;
                case "unregister":
                    if((ldapError = ldap.userCheck()) == 0) {
                        String username = json.get("username").toString();
                        String regCode = json.get("registerCode").toString();
                        if(username != null && regCode != null) {
                            if(function.checkRegCode(regCode, username)) {
                                System.out.println("SEND TO APS");
                                function.makeRequest("POST", function.getURL("APS"), reqBody);
                                outputResult(response, 0, requestId, null, true);
                            }
                        }
                        
                    }
                    break;
                case "confirm":
                    System.out.println("##### SAS >> CONFIRM");
                    sql.threadUpdate(requestId, "reply", reqBody);
                    String state;
                    HashMap data;
                    
                    timeout = 5;
                    finished = false;
                    for(i=1; i<=timeout; i++){
                        result = sql.stmt.executeQuery("SELECT state,data FROM thread WHERE threadId='"+requestId+"'");
                        if(result.first()) {
                            System.out.println("GOT SQL");
                            state = result.getString("state");
                            System.out.println(state);
                            if(state.equals("done")) {
                                System.out.println("Got final response");
                                data = function.defragJSON(result.getString("data"));
                                System.out.println(data);
                                outputResult(response, Integer.parseInt(data.get("result").toString()), requestId, null, true);
                                System.out.println("OUTPUT");
                                return;
                            } else {
                                System.out.println("REG WAITING "+i+" SECONDS");
                                Thread.sleep(1000);
                            }
                                            
                        } else {
                            outputResult(response, 602, requestId, null, true);
                        }
                    }
                    if(i >= timeout) {
                        outputResult(response, 950, requestId, null, true);
                    }
                    
                    
                    outputResult(response, 0, requestId, null, false);
                    break;
                case "clean":
                    sql.clean();
                    outputResult(response, 0, requestId, null, false);
                    break;
                default:
                    outputResult(response, 555, requestId, null, true);
            }
        
            
            
        } catch (ParseException | NamingException | SQLException | ClassNotFoundException | InterruptedException ex) {
            Logger.getLogger(SAS.class.getName()).log(Level.SEVERE, null, ex);
        }
        
    }
    private void outputResult(HttpServletResponse response, int errorCode, String requestId, HashMap extra, boolean terminate) throws IOException, SQLException, ClassNotFoundException {
        JSONObject array = new JSONObject();
        
        array.put("result", errorCode);
        array.put("resultText", code.getCodeText(errorCode));
        array.put("requestId", requestId);
        
        if(extra != null) {
            if(extra.containsKey("confirmation")) {
                array.put("confirmation", extra.get("confirmation"));
            } else {
                JSONObject userinfo = new JSONObject();
                extra.forEach((k, v) -> userinfo.put(k, v));
                array.put("userInfo", userinfo);  
            }
        }
        System.out.println("============= "+req+" ============= >> SAS");
        System.out.print(array);
        System.out.println("********************************************************");
        if(terminate) {
            sql.threadUpdate(requestId, "terminate", null);
        }
         try (PrintWriter out = response.getWriter()) {
            out.println(array);
        } 
    }
}