ReaderRestView.java 4.62 KB
/*
 * Copyright Codecrew Ry
 * 
 * All rights reserved.
 * 
 * This license applies to any software containing a notice placed by the 
 * copyright holder. Such software is herein referred to as the Software. 
 * This license covers modification, distribution and use of the Software. 
 * 
 * Any distribution and use in source and binary forms, with or without 
 * modification is not permitted without explicit written permission from the 
 * copyright owner. 
 * 
 * A non-exclusive royalty-free right is granted to the copyright owner of the 
 * Software to use, modify and distribute all modifications to the Software in 
 * future versions of the Software. 
 * 
 */
package fi.codecrew.moya.rest;

import java.util.List;

import javax.ejb.EJB;
import javax.enterprise.context.RequestScoped;
import javax.ws.rs.*;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.Response;
import javax.ws.rs.core.Response.ResponseBuilder;
import javax.ws.rs.core.Response.Status;

import fi.codecrew.moya.beans.ReaderBeanLocal;
import fi.codecrew.moya.beans.UserBeanLocal;
import fi.codecrew.moya.model.EventUser;
import fi.codecrew.moya.model.ReaderEvent;
import fi.codecrew.moya.rest.pojo.reader.v1.ReaderEventRestRoot;
import fi.codecrew.moya.rest.pojo.reader.v1.ReaderRestRoot;
import fi.codecrew.moya.rest.pojo.userinfo.v1.UserPermissionRestPojo;

@RequestScoped
@Path("/reader")
@Consumes({ MediaType.APPLICATION_JSON, MediaType.APPLICATION_XML })
@Produces({ MediaType.APPLICATION_JSON + "; charset=UTF-8" })
public class ReaderRestView {

	@EJB
	private ReaderBeanLocal readerbean;

	@EJB
	private UserBeanLocal userbean;

	@GET
	@Path("/List")
	public ReaderRestRoot getReaderList() {
		return new ReaderRestRoot(PojoUtils.parseReaders(readerbean.getReaders()));
	}

	/**
	 * Returns events after the designated eventid. If eventid == 0 return last
	 * 20, eventid < 0 return all
	 */
	@GET
	@Path("/readerevents/{readerId}/{eventId}")
	public ReaderEventRestRoot getReaderevents(@PathParam("readerId") Integer readerId, @PathParam("eventId") Integer eventId) {
		List<ReaderEvent> events = null;
		if (eventId != null && eventId > 0) {
			events = readerbean.getReaderEventsAfterEvent(readerId, eventId);
		} else {
			int count = 20;
			if (eventId == null || eventId == 0)
				count = 0;
			events = readerbean.getReaderEvents(readerId, count);
		}

		return new ReaderEventRestRoot(PojoUtils.parseReaderEvents(events));
	}

	@GET
	@Path("/createevent/{reader}/{code}/{hash}")
	public Response createReaderEvent(@PathParam("reader") String readerName, @PathParam("code") String readerCode, @PathParam("hash") String hash) {
		readerbean.checkCode(readerName, readerCode);

		return Response.ok().build();
	}


	@POST
	@Path("/createevent/{reader}/{code}")
	public Response createReaderEvent(@PathParam("reader") String readerName, @PathParam("code") String readerCode) {
		ReaderEvent readerEvent = readerbean.checkCode(readerName, readerCode);

		return Response.ok(PojoUtils.initReaderEventRestPojo(readerEvent)).build();
	}

	@GET
	@Path("/LastEventusers")
	public ReaderEventRestRoot getLastEventusers()
	{
		return new ReaderEventRestRoot(PojoUtils.parseReaderEvents(readerbean.getLastReaderEvents()));
	}

	//	@GET
	//	@Path("/RfidEvent/{reader}/{tagId}")
	//	public void createRfidEvent(@PathParam("reader") String reader, @PathParam("tagId") String tagId) {
	//
	//	}

	// Created for skynett port stuff. -  Tuomari ( Does user have permission to enter the event. )
	@GET
	@Path("/EventRole/{reader}/{tagId}/{roleid}")
	public Response isTaguserInRole(
			@PathParam("reader") String reader,
			@PathParam("tagId") String tag,
			@PathParam("roleid") Integer roleId
			) {
		ReaderEvent ret = readerbean.checkCode(reader, tag);
		ResponseBuilder builder = null;
		if (roleId == null || roleId.equals(0)) {
			builder = Response.status(Status.BAD_REQUEST);
			builder.entity("role ID is required!");
			builder.type(MediaType.TEXT_PLAIN);

		}
		if (builder == null) {
			if (ret == null || ret.getPrintedCard() == null) {
				builder = Response.status(Status.NOT_ACCEPTABLE);
				builder.entity("No card found for uid.");
				builder.type(MediaType.TEXT_PLAIN);
			} else {
				EventUser user = ret.getPrintedCard().getUser();
				boolean found = userbean.isUserInRole(user, roleId);
				if (found) {
					builder = Response.status(Status.OK);
				} else {
					builder = Response.status(Status.FORBIDDEN);
				}
				builder.entity(new UserPermissionRestPojo(PojoUtils.initEventUserRestPojo(user), found));

			}
		}

		return builder.build();
	}

	//
	//	@GET
	//	@Path("/EventCard/{reader}/{cardid}")
	//	public void eventCard(@PathParam("reader") String reader, @PathParam("cardid") String cardId) {
	//
	//	}

}