content: /*
   * Licensed to the Apache Software Foundation (ASF) under one or more
   * contributor license agreements.  See the NOTICE file distributed with
   * this work for additional information regarding copyright ownership.
   * The ASF licenses this file to You under the Apache License, Version 2.0
   * (the "License"); you may not use this file except in compliance with
   * the License.  You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.apache.camel.quarkus.component.cxf.soap.ssl.it;
  
  import java.util.Map;
  
  import io.quarkus.runtime.LaunchMode;
  import jakarta.enterprise.context.ApplicationScoped;
  import jakarta.enterprise.inject.Produces;
  import jakarta.inject.Inject;
  import jakarta.inject.Named;
  import org.apache.camel.CamelContext;
  import org.apache.camel.Processor;
  import org.apache.camel.SSLContextParametersAware;
  import org.apache.camel.builder.RouteBuilder;
  import org.apache.camel.component.cxf.jaxws.CxfEndpoint;
  import org.apache.camel.support.jsse.KeyStoreParameters;
  import org.apache.camel.support.jsse.SSLContextParameters;
  import org.apache.camel.support.jsse.TrustManagersParameters;
  import org.apache.cxf.ext.logging.LoggingFeature;
  import org.apache.cxf.transport.https.httpclient.DefaultHostnameVerifier;
  import org.eclipse.microprofile.config.Config;
  import org.eclipse.microprofile.config.ConfigProvider;
  
  @ApplicationScoped
  public class CxfSoapSslRoutes extends RouteBuilder {
  
      @Inject
      @Named("loggingFeatureSsl")
      LoggingFeature loggingFeature;
  
      @Inject
      CamelContext camelContext;
  
      @Inject
      @Named("rightSslContext")
      SSLContextParameters correctSslContext;
  
      @Inject
      @Named("wrongSslContext")
      SSLContextParameters wrongSslContext;
  
      @Override
      public void configure() {
  
          from("direct:sslInvoker")
                  .process(exchange -> {
                      Map<String, Object> headers = exchange.getIn().getHeaders();
                      headers.put("address", getServerUrl() + "/soapservice/Ssl/RouterPort");
  
                      String global = exchange.getIn().getHeader("global", String.class);
                      String trust = exchange.getIn().getHeader("trust", String.class);
  
                      if ("notrust".equals(trust)) {
                          camelContext.setSSLContextParameters(null);
                          //router endpoint does not contain ssl configuration, therefore can be used for notrust test case
                          headers.put("endpoint", "soapSslRouter");
                      } else if ("true".equals(global)) {
                          camelContext.setSSLContextParameters("true".equals(trust) ? correctSslContext : wrongSslContext);
                          headers.put("endpoint", "soapSslGlobal");
                      } else {
                          camelContext.setSSLContextParameters(null);
                          headers.put("endpoint", "soapSslLocal" + ("true".equals(trust) ? "Correct" : "Wrong"));
                      }
                      ((SSLContextParametersAware) camelContext.getComponent("cxf"))
                              .setUseGlobalSslContextParameters(Boolean.parseBoolean(global));
                  })
                  .toD("cxf:bean:${header.endpoint}?address=${header.address}");
  
          from("cxf:bean:soapSslRouterConsumer")
                  .process("responseProcessor");
  
      }
  
      @Produces
      @ApplicationScoped
      @Named("soapSslLocalCorrect")
      CxfEndpoint soapSslLocalCorrect(DefaultHostnameVerifier defaultHostnameVerifier) {
          final CxfEndpoint result = new CxfEndpoint();
          result.getFeatures().add(loggingFeature);
          result.setServiceClass(GreeterService.class);
          result.setAddress("/Ssl/RouterPort");
          result.setSslContextParameters(correctSslContext);
          result.setHostnameVerifier(defaultHostnameVerifier);
          return result;
      }
  
      @Produces
      @ApplicationScoped
      @Named("soapSslLocalWrong")
      CxfEndpoint soapSslLocalWrong(DefaultHostnameVerifier defaultHostnameVerifier) {
          final CxfEndpoint result = new CxfEndpoint();
          result.getFeatures().add(loggingFeature);
          result.setServiceClass(GreeterService.class);
          result.setAddress("/Ssl/RouterPort");
          result.setSslContextParameters(wrongSslContext);
          result.setHostnameVerifier(defaultHostnameVerifier);
          return result;
      }
  
      @Produces
      @ApplicationScoped
      @Named("soapSslGlobal")
      CxfEndpoint soapSslGlobal() {
          final CxfEndpoint result = new CxfEndpoint();
          result.getFeatures().add(loggingFeature);
          result.setServiceClass(GreeterService.class);
          result.setAddress("/Ssl/RouterPort");
          return result;
      }
  
      @Produces
      @ApplicationScoped
      @Named("soapSslRouter")
      CxfEndpoint soapSslRouter() {
          final CxfEndpoint result = new CxfEndpoint();
          result.getFeatures().add(loggingFeature);
          result.setServiceClass(GreeterService.class);
          result.setAddress("/Ssl/RouterPort");
          return result;
      }
  
      @Produces
      @ApplicationScoped
      @Named("soapSslRouterConsumer")
      CxfEndpoint soapSslRouterConsumer() {
          return soapSslRouter();
      }
  
      @Produces
      @ApplicationScoped
      @Named
      GreeterService greeterService() {
          return new GreeterImpl();
      }
  
      @Produces
      @ApplicationScoped
      @Named("loggingFeatureSsl")
      public LoggingFeature loggingFeature() {
          final LoggingFeature result = new LoggingFeature();
          result.setPrettyLogging(true);
          return result;
      }
  
      @ApplicationScoped
      @Named("responseProcessor")
      Processor responseProcessor(GreeterService greeterService) {
  
          return exchange -> {
              String resp = greeterService.greetMe(exchange.getIn().getBody(String.class));
              exchange.getIn().setBody(resp);
          };
      }
  
      private static String getServerUrl() {
          Config config = ConfigProvider.getConfig();
          final int port = LaunchMode.current().equals(LaunchMode.TEST)
                  ? config.getValue("quarkus.http.test-ssl-port", Integer.class)
                  : config.getValue("quarkus.http.ssl-port", Integer.class);
          return String.format("https://localhost:%d", port);
      }
  
      @Produces
      @ApplicationScoped
      @Named("rightSslContext")
      SSLContextParameters rightSslContext() {
          SSLContextParameters sslContext = new SSLContextParameters();
          TrustManagersParameters trustManager = new TrustManagersParameters();
          KeyStoreParameters keyStore = new KeyStoreParameters();
          keyStore.setType("PKCS12");
          keyStore.setPassword("password");
          keyStore.setResource("truststore-client.jks");
          trustManager.setKeyStore(keyStore);
          sslContext.setTrustManagers(trustManager);
          return sslContext;
      }
  
      @Produces
      @ApplicationScoped
      @Named("wrongSslContext")
      SSLContextParameters wrongSslContext() {
          SSLContextParameters sslContext = new SSLContextParameters();
          TrustManagersParameters trustManager = new TrustManagersParameters();
          KeyStoreParameters keyStore = new KeyStoreParameters();
          keyStore.setType("PKCS12");
          keyStore.setPassword("password");
          keyStore.setResource("truststore-wrong.jks");
          trustManager.setKeyStore(keyStore);
          sslContext.setTrustManagers(trustManager);
          return sslContext;
      }
  
      @Produces
      @ApplicationScoped
      @Named("defaultHostnameVerifier")
      DefaultHostnameVerifier defaultHostnameVerifier() {
          return new DefaultHostnameVerifier();
      }
  
  }
  