[NAE-2241] Anonymous access refactor

Dockerfile

@@ -2,7 +2,7 @@
 
 FROM eclipse-temurin:21-jre
 
-ARG VERSION="7.0.3"
+ARG VERSION="7.1.0"
 
 LABEL authors="Netgrif <devops@netgrif.com>" \
       org.opencontainers.image.authors="NETGRIF <devops@netgrif.com>" \

Dockerfile.multi-stage

@@ -31,7 +31,7 @@ RUN mvn -B -e -DskipTests -P docker-build clean install
 # prepare runtime
 FROM eclipse-temurin:21-jre-jammy
 
-ARG VERSION="7.0.3"
+ARG VERSION="7.1.0"
 
 LABEL authors="Netgrif <devops@netgrif.com>" \
       org.opencontainers.image.authors="NETGRIF <devops@netgrif.com>" \

application-engine/pom.xml

@@ -6,7 +6,7 @@
     <parent>
         <groupId>com.netgrif</groupId>
         <artifactId>application-engine-parent</artifactId>
-        <version>7.0.3</version>
+        <version>7.1.0</version>
     </parent>
 
     <artifactId>application-engine</artifactId>

application-engine/src/main/java/com/netgrif/application/engine/auth/service/AuthorizationService.java

@@ -1,6 +1,10 @@
 package com.netgrif.application.engine.auth.service;
 
 import com.netgrif.application.engine.auth.service.interfaces.IAuthorizationService;
+
+import java.util.Arrays;
+import java.util.Set;
+
 import com.netgrif.application.engine.objects.auth.domain.LoggedUser;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
@@ -18,4 +22,13 @@
         LoggedUser loggedUser = userService.getLoggedUserFromContext();
         return loggedUser.getAuthoritySet().stream().anyMatch(it -> it.getAuthority().equals(authority));
     }
+
+    @Override
+    public boolean hasAnyAuthority(String... authority) {
+        // TODO: impersonation
+//        LoggedUser loggedUser = userService.getLoggedUserFromContext().getSelfOrImpersonated();
+        LoggedUser loggedUser = userService.getLoggedUserFromContext();
+        Set<String> authoritySet = Set.of(authority);
+        return loggedUser.getAuthoritySet().stream().anyMatch(it -> authoritySet.contains(it.getAuthority()));
+    }
 }

application-engine/src/main/java/com/netgrif/application/engine/auth/service/interfaces/IAuthorizationService.java

@@ -2,4 +2,6 @@
 
 public interface IAuthorizationService {
     boolean hasAuthority(String authority);
+
+    boolean hasAnyAuthority(String... authority);
 }

application-engine/src/main/java/com/netgrif/application/engine/auth/web/AuthenticationController.java

@@ -2,6 +2,7 @@
 
 import com.netgrif.application.engine.objects.auth.domain.AbstractUser;
 import com.netgrif.application.engine.configuration.properties.SecurityConfigurationProperties;
+import com.netgrif.application.engine.objects.auth.domain.ActorTransformer;
 import com.netgrif.application.engine.security.service.ISecurityContextService;
 import com.netgrif.application.engine.workflow.web.responsebodies.MessageResource;
 import com.netgrif.application.engine.objects.auth.domain.LoggedUser;
@@ -131,8 +132,8 @@ public MessageResource verifyToken(@RequestBody String token) {
 
     @Operation(summary = "Verify validity of an authentication token")
     @GetMapping(value = "/verify", produces = MediaTypes.HAL_JSON_VALUE)
-    public MessageResource verifyAuthToken(Authentication auth) {
-        LoggedUser loggedUser = (LoggedUser) auth.getPrincipal();
+    public MessageResource verifyAuthToken() {
+        LoggedUser loggedUser = ActorTransformer.toLoggedUser(userService.getLoggedUser());
         return MessageResource.successMessage("Auth Token successfully verified, for user [" + loggedUser.getId() + "] " + loggedUser.getName());
     }
 

application-engine/src/main/java/com/netgrif/application/engine/auth/web/UserController.java

@@ -1,4 +1,4 @@
-package com.netgrif.application.engine.auth.web;
+ package com.netgrif.application.engine.auth.web;
 
 import com.netgrif.application.engine.adapter.spring.common.web.responsebodies.ResponseMessage;
 import com.netgrif.application.engine.adapter.spring.petrinet.service.ProcessRoleService;
@@ -8,10 +8,7 @@
 import com.netgrif.application.engine.auth.web.requestbodies.UserSearchRequestBody;
 import com.netgrif.application.engine.auth.web.responsebodies.PreferencesResource;
 import com.netgrif.application.engine.auth.web.responsebodies.User;
-import com.netgrif.application.engine.objects.auth.domain.AbstractUser;
-import com.netgrif.application.engine.objects.auth.domain.Authority;
-import com.netgrif.application.engine.objects.auth.domain.LoggedUser;
-import com.netgrif.application.engine.objects.auth.domain.Realm;
+import com.netgrif.application.engine.objects.auth.domain.*;
 import com.netgrif.application.engine.objects.preferences.Preferences;
 import com.netgrif.application.engine.objects.workflow.domain.ProcessResourceId;
 import io.swagger.v3.oas.annotations.Operation;
@@ -30,6 +27,7 @@
 import org.springframework.http.ResponseEntity;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
 import org.springframework.web.bind.annotation.*;
 
 import java.util.*;
@@ -113,10 +111,10 @@ public ResponseEntity<Page<User>> getAllUsers(@PathVariable String realmId, Page
     })
     @GetMapping(value = "/me", produces = MediaType.APPLICATION_JSON_VALUE)
     public ResponseEntity<User> getLoggedUser(Authentication auth, Locale locale) {
-        LoggedUser loggedUser = (LoggedUser) auth.getPrincipal();
+        LoggedUser loggedUser = resolveAuthenticationToken(auth);
         AbstractUser user;
         try {
-            user = userService.findById(loggedUser.getStringId(), loggedUser.getRealmId());
+            user = resolveLoggedUser(loggedUser);
             if (user == null) {
                 return ResponseEntity
                         .status(HttpStatus.UNAUTHORIZED).build();
@@ -296,11 +294,14 @@ public ResponseEntity<ResponseMessage> assignAuthorityToUser(@PathVariable("real
     })
     @GetMapping(value = "/preferences", produces = MediaType.APPLICATION_JSON_VALUE)
     public ResponseEntity<PreferencesResource> preferences(Authentication auth) {
-        String userId = ((LoggedUser) auth.getPrincipal()).getStringId();
-        Preferences preferences = preferencesService.get(userId);
+        LoggedUser loggedUser = resolveAuthenticationToken(auth);
+        if (loggedUser == null) {
+            return ResponseEntity.status(HttpStatus.UNAUTHORIZED).build();
+        }
+        Preferences preferences = preferencesService.get(loggedUser.getStringId());
 
         if (preferences == null) {
-            preferences = new com.netgrif.application.engine.adapter.spring.preferences.Preferences(userId);
+            preferences = new com.netgrif.application.engine.adapter.spring.preferences.Preferences(loggedUser.getStringId());
         }
         PreferencesResource preferencesResource = PreferencesResource.withPreferences(preferences);
 
@@ -339,4 +340,25 @@ private boolean realmExists(String realmId) {
         Optional<Realm> realm = realmService.getRealmById(realmId);
         return realm.isPresent();
     }
+
+    private LoggedUser resolveAuthenticationToken(Authentication auth) {
+        if (auth != null) {
+            return (LoggedUser) auth.getPrincipal();
+        }
+        auth = SecurityContextHolder.getContext().getAuthentication();
+        if (auth != null) {
+            return (LoggedUser) auth.getPrincipal();
+        }
+        return null;
+    }
+
+    private AbstractUser resolveLoggedUser(LoggedUser loggedUser) {
+        if (loggedUser == null) {
+            return null;
+        }
+        if (loggedUser.isAnonymous()) {
+            return ActorTransformer.toUser(loggedUser);
+        }
+        return userService.findById(loggedUser.getStringId(), loggedUser.getRealmId());
+    }
 }