[NAE-2241] Anonymous access refactor

application-engine/pom.xml

@@ -544,6 +544,16 @@
             <artifactId>jackson-module-jsonSchema</artifactId>
             <version>${jackson.version}</version>
         </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.datatype</groupId>
+            <artifactId>jackson-datatype-jsr310</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.datatype</groupId>
+            <artifactId>jackson-datatype-jdk8</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
         <dependency>
             <groupId>io.minio</groupId>
             <artifactId>minio</artifactId>

application-engine/src/main/java/com/netgrif/application/engine/auth/service/AuthorizationService.java

@@ -1,6 +1,9 @@
 package com.netgrif.application.engine.auth.service;
 
 import com.netgrif.application.engine.auth.service.interfaces.IAuthorizationService;
+
+import java.util.Arrays;
+
 import com.netgrif.application.engine.objects.auth.domain.LoggedUser;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
@@ -18,4 +21,12 @@ public boolean hasAuthority(String authority) {
         LoggedUser loggedUser = userService.getLoggedUserFromContext();
         return loggedUser.getAuthoritySet().stream().anyMatch(it -> it.getAuthority().equals(authority));
     }
+
+    @Override
+    public boolean hasAnyAuthority(String... authority) {
+        // TODO: impersonation
+//        LoggedUser loggedUser = userService.getLoggedUserFromContext().getSelfOrImpersonated();
+        LoggedUser loggedUser = userService.getLoggedUserFromContext();
+        return loggedUser.getAuthoritySet().stream().anyMatch(it -> Arrays.stream(authority).anyMatch(a -> it.getAuthority().equals(a)));
+    }
 }

application-engine/src/main/java/com/netgrif/application/engine/auth/service/interfaces/IAuthorizationService.java

@@ -2,4 +2,6 @@
 
 public interface IAuthorizationService {
     boolean hasAuthority(String authority);
+
+    boolean hasAnyAuthority(String... authority);
 }

application-engine/src/main/java/com/netgrif/application/engine/auth/web/AuthenticationController.java

@@ -2,6 +2,7 @@
 
 import com.netgrif.application.engine.objects.auth.domain.AbstractUser;
 import com.netgrif.application.engine.configuration.properties.SecurityConfigurationProperties;
+import com.netgrif.application.engine.objects.auth.domain.ActorTransformer;
 import com.netgrif.application.engine.workflow.web.responsebodies.MessageResource;
 import com.netgrif.application.engine.objects.auth.domain.LoggedUser;
 import com.netgrif.application.engine.auth.service.InvalidUserTokenException;
@@ -131,8 +132,8 @@ public MessageResource verifyToken(@RequestBody String token) {
 
     @Operation(summary = "Verify validity of an authentication token")
     @GetMapping(value = "/verify", produces = MediaTypes.HAL_JSON_VALUE)
-    public MessageResource verifyAuthToken(Authentication auth) {
-        LoggedUser loggedUser = (LoggedUser) auth.getPrincipal();
+    public MessageResource verifyAuthToken() {
+        LoggedUser loggedUser = ActorTransformer.toLoggedUser(userService.getLoggedUser());
         return MessageResource.successMessage("Auth Token successfully verified, for user [" + loggedUser.getId() + "] " + loggedUser.getName());
     }
 

application-engine/src/main/java/com/netgrif/application/engine/auth/web/UserController.java

@@ -1,4 +1,4 @@
-package com.netgrif.application.engine.auth.web;
+ package com.netgrif.application.engine.auth.web;
 
 import com.netgrif.application.engine.adapter.spring.common.web.responsebodies.ResponseMessage;
 import com.netgrif.application.engine.adapter.spring.petrinet.service.ProcessRoleService;
@@ -8,10 +8,7 @@
 import com.netgrif.application.engine.auth.web.requestbodies.UserSearchRequestBody;
 import com.netgrif.application.engine.auth.web.responsebodies.PreferencesResource;
 import com.netgrif.application.engine.auth.web.responsebodies.User;
-import com.netgrif.application.engine.objects.auth.domain.AbstractUser;
-import com.netgrif.application.engine.objects.auth.domain.Authority;
-import com.netgrif.application.engine.objects.auth.domain.LoggedUser;
-import com.netgrif.application.engine.objects.auth.domain.Realm;
+import com.netgrif.application.engine.objects.auth.domain.*;
 import com.netgrif.application.engine.objects.preferences.Preferences;
 import com.netgrif.application.engine.objects.workflow.domain.ProcessResourceId;
 import io.swagger.v3.oas.annotations.Operation;
@@ -30,6 +27,7 @@
 import org.springframework.http.ResponseEntity;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.web.bind.annotation.*;
 
 import java.util.*;
@@ -112,10 +110,10 @@ public ResponseEntity<Page<User>> getAllUsers(@PathVariable String realmId, Page
     })
     @GetMapping(value = "/me", produces = MediaType.APPLICATION_JSON_VALUE)
     public ResponseEntity<User> getLoggedUser(Authentication auth, Locale locale) {
-        LoggedUser loggedUser = (LoggedUser) auth.getPrincipal();
+        LoggedUser loggedUser = resolveAuthenticationToken(auth);
         AbstractUser user;
         try {
-            user = userService.findById(loggedUser.getStringId(), loggedUser.getRealmId());
+            user = resolveLoggedUser(loggedUser);
             if (user == null) {
                 return ResponseEntity
                         .status(HttpStatus.UNAUTHORIZED).build();
@@ -294,11 +292,14 @@ public ResponseEntity<ResponseMessage> assignAuthorityToUser(@PathVariable("real
     })
     @GetMapping(value = "/preferences", produces = MediaType.APPLICATION_JSON_VALUE)
     public ResponseEntity<PreferencesResource> preferences(Authentication auth) {
-        String userId = ((LoggedUser) auth.getPrincipal()).getStringId();
-        Preferences preferences = preferencesService.get(userId);
+        LoggedUser loggedUser = resolveAuthenticationToken(auth);
+        if (loggedUser == null) {
+            return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build();
+        }
+        Preferences preferences = preferencesService.get(loggedUser.getStringId());
 
         if (preferences == null) {
-            preferences = new com.netgrif.application.engine.adapter.spring.preferences.Preferences(userId);
+            preferences = new com.netgrif.application.engine.adapter.spring.preferences.Preferences(loggedUser.getStringId());
         }
         PreferencesResource preferencesResource = PreferencesResource.withPreferences(preferences);
 
@@ -337,4 +338,25 @@ private boolean realmExists(String realmId) {
         Optional<Realm> realm = realmService.getRealmById(realmId);
         return realm.isPresent();
     }
+
+    private LoggedUser resolveAuthenticationToken(Authentication auth) {
+        if (auth != null) {
+            return (LoggedUser) auth.getPrincipal();
+        }
+        auth = SecurityContextHolder.getContext().getAuthentication();
+        if (auth != null) {
+            return (LoggedUser) auth.getPrincipal();
+        }
+        return null;
+    }
+
+    private AbstractUser resolveLoggedUser(LoggedUser loggedUser) {
+        if (loggedUser == null) {
+            return null;
+        }
+        if (loggedUser.isAnonymous()) {
+            return ActorTransformer.toUser(loggedUser);
+        }
+        return userService.findById(loggedUser.getStringId(), loggedUser.getRealmId());
+    }
 }

application-engine/src/main/java/com/netgrif/application/engine/configuration/LoggedUserConfiguration.java

@@ -1,15 +1,20 @@
 package com.netgrif.application.engine.configuration;
 
-import com.netgrif.application.engine.auth.service.DefaultLoggedUserFactory;
 import com.netgrif.application.engine.objects.auth.domain.ActorTransformer;
 import jakarta.annotation.PostConstruct;
+import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Configuration;
 
 @Configuration
+@RequiredArgsConstructor
 public class LoggedUserConfiguration {
 
+    private final ActorTransformer.LoggedUserFactory loggedUserFactory;
+    private final ActorTransformer.UserFactory userFactory;
+
     @PostConstruct
     public void initializeLoggedUserFactory() {
-        ActorTransformer.setLoggedUserFactory(new DefaultLoggedUserFactory());
+        ActorTransformer.setLoggedUserFactory(loggedUserFactory);
+        ActorTransformer.setUserFactory(userFactory);
     }
 }