DeviceServlet.java

  1. /*
  2.  * Copyright (C) 2020-2024 by Savoir-faire Linux
  3.  *
  4.  * This program is free software; you can redistribute it and/or modify
  5.  * it under the terms of the GNU General Public License as published by
  6.  * the Free Software Foundation; either version 3 of the License, or
  7.  * (at your option) any later version.
  8.  *
  9.  * This program is distributed in the hope that it will be useful,
  10.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12.  * GNU General Public License for more details.
  13.  *
  14.  * You should have received a copy of the GNU General Public License
  15.  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  16.  */
  17. package net.jami.jams.server.servlets.api.admin.devices;

  18. import static net.jami.jams.server.Server.dataStore;

  19. import com.google.gson.Gson;

  20. import jakarta.servlet.ServletException;
  21. import jakarta.servlet.annotation.WebServlet;
  22. import jakarta.servlet.http.HttpServlet;
  23. import jakarta.servlet.http.HttpServletRequest;
  24. import jakarta.servlet.http.HttpServletResponse;

  25. import net.jami.jams.common.annotations.ScopedServletMethod;
  26. import net.jami.jams.common.objects.devices.Device;
  27. import net.jami.jams.common.objects.responses.DeviceRevocationResponse;
  28. import net.jami.jams.common.objects.user.AccessLevel;
  29. import net.jami.jams.common.serialization.adapters.GsonFactory;
  30. import net.jami.jams.server.core.workflows.RevokeDeviceFlow;

  31. import java.io.IOException;

  32. @WebServlet("/api/admin/device")
  33. public class DeviceServlet extends HttpServlet {
  34.     private final Gson gson = GsonFactory.createGson();

  35.     // Get a detailed device info.
  36.     @Override
  37.     @ScopedServletMethod(securityGroups = {AccessLevel.ADMIN})
  38.     protected void doGet(HttpServletRequest req, HttpServletResponse resp)
  39.             throws ServletException, IOException {
  40.         String username = req.getParameter("username");
  41.         String deviceId = req.getParameter("deviceId");
  42.         Device device =
  43.                 dataStore.getDeviceDao().getByDeviceIdAndOwner(deviceId, username).orElseThrow();
  44.         resp.getOutputStream().write(gson.toJson(device).getBytes());
  45.         resp.flushBuffer();
  46.     }

  47.     // Update device data.
  48.     @Override
  49.     @ScopedServletMethod(securityGroups = {AccessLevel.ADMIN})
  50.     protected void doPut(HttpServletRequest req, HttpServletResponse resp)
  51.             throws ServletException, IOException {
  52.         String username = req.getParameter("username");
  53.         String deviceId = req.getParameter("deviceId");
  54.         String deviceName = req.getParameter("deviceName");

  55.         if (dataStore.getDeviceDao().updateObject(deviceName, username, deviceId))
  56.             resp.setStatus(200);
  57.         else resp.sendError(500, "An error occurred while updating device information!");
  58.     }

  59.     // Revoke/delete/remove device.
  60.     @Override
  61.     @ScopedServletMethod(securityGroups = {AccessLevel.ADMIN})
  62.     protected void doDelete(HttpServletRequest req, HttpServletResponse resp)
  63.             throws ServletException, IOException {
  64.         String username = req.getParameter("username");
  65.         String deviceId = req.getParameter("deviceId");
  66.         DeviceRevocationResponse devResponse = RevokeDeviceFlow.revokeDevice(username, deviceId);
  67.         if (devResponse != null) {
  68.             resp.getOutputStream().write(gson.toJson(devResponse).getBytes());
  69.             resp.flushBuffer();
  70.         } else resp.sendError(500, "An error occurred while revoking device!");
  71.     }
  72. }