feat: P4ADEV-1781 add API to get decrypted api-key of broker

.gitignore

@@ -3,6 +3,7 @@ HELP.md
 !**/src/test/**/target/
 
 #**/src/main/resources/application-local*.properties
+/src/main/resources/local-*.env
 
 ### STS ###
 .apt_generated

build.gradle.kts

@@ -94,6 +94,37 @@ openApi {
   outputFileName.set("generated.openapi.json")
 }
 
+configure<SourceSetContainer> {
+  named("main") {
+    java.srcDir("$projectDir/build/generated/src/main/java")
+  }
+}
+
+tasks.compileJava {
+  dependsOn("openApiGenerateOrganization")
+}
+
 springBoot {
 	mainClass.value("it.gov.pagopa.pu.organization.OrganizationApplication")
 }
+
+tasks.register<org.openapitools.generator.gradle.plugin.tasks.GenerateTask>("openApiGenerateOrganization") {
+  group = "openapi"
+  description = "description"
+
+  generatorName.set("spring")
+  inputSpec.set("$rootDir/openapi/p4pa-organization.openapi.json")
+  outputDir.set("$projectDir/build/generated")
+  apiPackage.set("it.gov.pagopa.pu.organization.controller.generated")
+  modelPackage.set("it.gov.pagopa.pu.organization.dto.generated")
+  configOptions.set(mapOf(
+    "dateLibrary" to "java8",
+    "requestMappingMode" to "api_interface",
+    "useSpringBoot3" to "true",
+    "interfaceOnly" to "true",
+    "useTags" to "true",
+    "generateConstructorWithAllArgs" to "false",
+    "generatedConstructorWithRequiredArgs" to "false",
+    "additionalModelTypeAnnotations" to "@lombok.Data @lombok.Builder @lombok.AllArgsConstructor"
+  ))
+}

openapi/generated.openapi.json

@@ -11,6 +11,12 @@
       "description": "Generated server url"
     }
   ],
+  "tags": [
+    {
+      "name": "Broker",
+      "description": "the Broker API"
+    }
+  ],
   "paths": {
     "/brokers": {
       "get": {
@@ -653,6 +659,73 @@
           }
         }
       }
+    },
+    "/brokers/apiKey/{brokerId}": {
+      "get": {
+        "tags": [
+          "Broker"
+        ],
+        "summary": "Retrieve decrypted API keys for a broker",
+        "operationId": "getBrokerApiKeys",
+        "parameters": [
+          {
+            "name": "brokerId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "integer",
+              "format": "int64"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              },
+              "application/hal+json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not Found",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              },
+              "application/hal+json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal Server Error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              },
+              "application/hal+json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              }
+            }
+          }
+        }
+      }
     }
   },
   "components": {
@@ -946,6 +1019,28 @@
           }
         }
       },
+      "PagedModelEntityModelBroker": {
+        "type": "object",
+        "properties": {
+          "_embedded": {
+            "type": "object",
+            "properties": {
+              "broker": {
+                "type": "array",
+                "items": {
+                  "$ref": "#/components/schemas/EntityModelBroker"
+                }
+              }
+            }
+          },
+          "_links": {
+            "$ref": "#/components/schemas/Links"
+          },
+          "page": {
+            "$ref": "#/components/schemas/PageMetadata"
+          }
+        }
+      },
       "PersonalisationFe": {
         "type": "object",
         "properties": {
@@ -972,28 +1067,6 @@
           }
         }
       },
-      "PagedModelEntityModelBroker": {
-        "type": "object",
-        "properties": {
-          "_embedded": {
-            "type": "object",
-            "properties": {
-              "broker": {
-                "type": "array",
-                "items": {
-                  "$ref": "#/components/schemas/EntityModelBroker"
-                }
-              }
-            }
-          },
-          "_links": {
-            "$ref": "#/components/schemas/Links"
-          },
-          "page": {
-            "$ref": "#/components/schemas/PageMetadata"
-          }
-        }
-      },
       "BrokerRequestBody": {
         "type": "object",
         "properties": {
@@ -1154,6 +1227,20 @@
           }
         }
       },
+      "BrokerApiKeys": {
+        "type": "object",
+        "properties": {
+          "syncKey": {
+            "type": "string"
+          },
+          "acaKey": {
+            "type": "string"
+          },
+          "gpdKey": {
+            "type": "string"
+          }
+        }
+      },
       "Link": {
         "type": "object",
         "properties": {

openapi/p4pa-organization.openapi.json

@@ -0,0 +1,86 @@
+{
+  "openapi": "3.0.1",
+  "info": {
+    "title": "p4pa-organization",
+    "description": "Api and Models",
+    "version": "0.0.1"
+  },
+  "servers": [
+    {
+      "url": "http://localhost:8080",
+      "description": "Generated server url"
+    }
+  ],
+  "paths": {
+    "/brokers/apiKey/{brokerId}": {
+      "get": {
+        "tags": [
+          "Broker"
+        ],
+        "summary": "Retrieve decrypted API keys for a broker",
+        "operationId": "getBrokerApiKeys",
+        "parameters": [
+          {
+            "name": "brokerId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "integer",
+              "format": "int64"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Not Found",
+            "content": {
+              "application/hal+json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Internal Server Error",
+            "content": {
+              "application/hal+json": {
+                "schema": {
+                  "$ref": "#/components/schemas/BrokerApiKeys"
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "schemas": {
+      "BrokerApiKeys": {
+        "type": "object",
+        "properties": {
+          "syncKey": {
+            "type": "string"
+          },
+          "acaKey": {
+            "type": "string"
+          },
+          "gpdKey": {
+            "type": "string"
+          }
+        }
+      }
+    }
+  }
+}

src/main/java/it/gov/pagopa/pu/organization/controller/BrokerController.java

@@ -0,0 +1,25 @@
+package it.gov.pagopa.pu.organization.controller;
+
+import it.gov.pagopa.pu.organization.controller.generated.BrokerApi;
+import it.gov.pagopa.pu.organization.dto.generated.BrokerApiKeys;
+import it.gov.pagopa.pu.organization.service.BrokerService;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@Slf4j
+public class BrokerController implements BrokerApi {
+
+  private final BrokerService brokerService;
+
+  public BrokerController(BrokerService brokerService){
+    this.brokerService = brokerService;
+  }
+
+  @Override
+  public ResponseEntity<BrokerApiKeys> getBrokerApiKeys(Long brokerId) {
+    return ResponseEntity.ofNullable(brokerService.getBrokerApiKeys(brokerId));
+  }
+
+}

src/main/java/it/gov/pagopa/pu/organization/model/Broker.java

@@ -11,6 +11,7 @@
 import jakarta.persistence.SequenceGenerator;
 import java.io.Serializable;
 import lombok.AllArgsConstructor;
+import lombok.Builder;
 import lombok.Data;
 import lombok.NoArgsConstructor;
 import org.hibernate.annotations.JdbcTypeCode;
@@ -19,6 +20,7 @@
 @Entity(name = "broker")
 @AllArgsConstructor
 @NoArgsConstructor
+@Builder
 @Data
 public class Broker implements Serializable {
   @Id

src/main/java/it/gov/pagopa/pu/organization/service/BrokerService.java

@@ -0,0 +1,56 @@
+package it.gov.pagopa.pu.organization.service;
+
+import it.gov.pagopa.pu.organization.dto.generated.BrokerApiKeys;
+import it.gov.pagopa.pu.organization.model.Broker;
+import it.gov.pagopa.pu.organization.repository.BrokerRepository;
+import it.gov.pagopa.pu.organization.util.AESUtils;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.http.HttpStatus;
+import org.springframework.stereotype.Service;
+import org.springframework.web.client.HttpServerErrorException;
+
+import java.util.Collections;
+import java.util.HashMap;
+import java.util.Map;
+
+@Service("brokerService")
+@Slf4j
+public class BrokerService {
+
+  private final String brokerEncryptPassword;
+  private final BrokerRepository brokerRepository;
+
+  public BrokerService(
+    @Value("${app.brokerEncryptPassword}") String brokerEncryptPassword,
+    BrokerRepository brokerRepository) {
+    this.brokerEncryptPassword = brokerEncryptPassword;
+    this.brokerRepository = brokerRepository;
+  }
+
+  private final Map<byte[], String> apiKeyDecryptMap = Collections.synchronizedMap(new HashMap<>());
+
+  public BrokerApiKeys getBrokerApiKeys(Long brokerId){
+    Broker broker = brokerRepository.findById(brokerId).orElseThrow(() -> new HttpServerErrorException(HttpStatus.NOT_FOUND));
+
+    return BrokerApiKeys.builder()
+      .syncKey(decryptKey(broker.getSyncKey()))
+      .acaKey(decryptKey(broker.getAcaKey()))
+      .gpdKey(decryptKey(broker.getGpdKey()))
+      .build();
+  }
+
+  public String decryptKey(byte[] encryptedKey){
+    if(encryptedKey==null || encryptedKey.length==0) {
+      log.debug("null or empty api-key");
+      return null;
+    }
+    String decrypted = apiKeyDecryptMap.computeIfAbsent(encryptedKey, c -> {
+      log.debug("invoking AESUtils to decrypt api-key");
+      return AESUtils.decrypt(brokerEncryptPassword,c);
+    });
+    log.debug("decrypted api-key: {}", StringUtils.abbreviateMiddle(decrypted, "..", 8));
+    return decrypted;
+  }
+}