/* * Copyright 2013 Anton Tananaev (anton.tananaev@gmail.com) * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.traccar.web.server.model; import java.util.Date; import java.util.LinkedList; import java.util.List; import javax.naming.Context; import javax.naming.InitialContext; import javax.naming.NamingException; import javax.persistence.EntityManager; import javax.persistence.EntityManagerFactory; import javax.persistence.Persistence; import javax.persistence.Query; import javax.persistence.TypedQuery; import javax.servlet.ServletException; import javax.servlet.http.HttpSession; import org.traccar.web.client.model.DataService; import org.traccar.web.shared.model.ApplicationSettings; import org.traccar.web.shared.model.Device; import org.traccar.web.shared.model.Position; import org.traccar.web.shared.model.User; import com.google.gwt.user.server.rpc.RemoteServiceServlet; public class DataServiceImpl extends RemoteServiceServlet implements DataService { private static final long serialVersionUID = 1; private static final String PERSISTENCE_DATASTORE = "java:/DefaultDS"; private static final String PERSISTENCE_UNIT_DEBUG = "debug"; private static final String PERSISTENCE_UNIT_RELEASE = "release"; private static final String ATTRIBUTE_USER = "traccar.user"; private static final String ATTRIBUTE_ENTITYMANAGER = "traccar.entitymanager"; private EntityManagerFactory entityManagerFactory; @Override public void init() throws ServletException { super.init(); String persistenceUnit; try { Context context = new InitialContext(); context.lookup(PERSISTENCE_DATASTORE); persistenceUnit = PERSISTENCE_UNIT_RELEASE; } catch (NamingException e) { persistenceUnit = PERSISTENCE_UNIT_DEBUG; } entityManagerFactory = Persistence.createEntityManagerFactory(persistenceUnit); // Create Administrator account EntityManager entityManager = getServletEntityManager(); TypedQuery query = entityManager.createQuery("SELECT x FROM User x WHERE x.login = 'admin'", User.class); List results = query.getResultList(); if (results.isEmpty()) { User user = new User(); user.setLogin("admin"); user.setPassword("admin"); user.setAdmin(true); createUser(entityManager, user); } } private EntityManager servletEntityManager; private EntityManager getServletEntityManager() { if (servletEntityManager == null) { servletEntityManager = entityManagerFactory.createEntityManager(); } return servletEntityManager; } private EntityManager getSessionEntityManager() { HttpSession session = getThreadLocalRequest().getSession(); EntityManager entityManager = (EntityManager) session.getAttribute(ATTRIBUTE_ENTITYMANAGER); if (entityManager == null) { entityManager = entityManagerFactory.createEntityManager(); session.setAttribute(ATTRIBUTE_ENTITYMANAGER, entityManager); } return entityManager; } private void setSessionUser(User user) { HttpSession session = getThreadLocalRequest().getSession(); if (user != null) { session.setAttribute(ATTRIBUTE_USER, user); } else { session.removeAttribute(ATTRIBUTE_USER); } } private User getSessionUser() { HttpSession session = getThreadLocalRequest().getSession(); User user = (User) session.getAttribute(ATTRIBUTE_USER); if (user == null) { throw new IllegalStateException(); } return user; } @Override public User authenticated() throws IllegalStateException { return getSessionUser(); } @Override public User login(String login, String password) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { TypedQuery query = entityManager.createQuery( "SELECT x FROM User x WHERE x.login = :login", User.class); query.setParameter("login", login); List results = query.getResultList(); if (!results.isEmpty() && password.equals(results.get(0).getPassword())) { User user = results.get(0); setSessionUser(user); return user; } throw new IllegalStateException(); } } @Override public boolean logout() { setSessionUser(null); return true; } @Override public User register(String login, String password) { if (getApplicationSettings().getRegistrationEnabled()) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { TypedQuery query = entityManager.createQuery( "SELECT x FROM User x WHERE x.login = :login", User.class); query.setParameter("login", login); List results = query.getResultList(); if (results.isEmpty()) { User user = new User(); user.setLogin(login); user.setPassword(password); createUser(getSessionEntityManager(), user); setSessionUser(user); return user; } else { throw new IllegalStateException(); } } } else { throw new SecurityException(); } } @Override public List getUsers() { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { List users = new LinkedList(); users.addAll(entityManager.createQuery("SELECT x FROM User x", User.class).getResultList()); return users; } } @Override public User addUser(User user) { User currentUser = getSessionUser(); if (user.getLogin().isEmpty() || user.getPassword().isEmpty()) { throw new IllegalArgumentException(); } if (currentUser.getAdmin()) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { entityManager.getTransaction().begin(); try { String login = user.getLogin(); TypedQuery query = entityManager.createQuery( "SELECT x FROM User x WHERE x.login = :login", User.class); query.setParameter("login", login); List results = query.getResultList(); if (results.isEmpty()) { entityManager.persist(user); entityManager.getTransaction().commit(); return user; } else { throw new IllegalStateException(); } } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } } else { throw new SecurityException(); } } @Override public User updateUser(User user) { User currentUser = getSessionUser(); if (user.getLogin().isEmpty() || user.getPassword().isEmpty()) { throw new IllegalArgumentException(); } if (currentUser.getAdmin() || (currentUser.getId() == user.getId() && !user.getAdmin())) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { entityManager.getTransaction().begin(); try { // TODO: better solution? if (currentUser.getId() == user.getId()) { currentUser.setLogin(user.getLogin()); currentUser.setPassword(user.getPassword()); currentUser.setUserSettings(user.getUserSettings()); currentUser.setAdmin(user.getAdmin()); entityManager.merge(currentUser); user = currentUser; } else { // TODO: handle other users } entityManager.getTransaction().commit(); setSessionUser(user); return user; } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } } else { throw new SecurityException(); } } @Override public User removeUser(User user) { User currentUser = getSessionUser(); if (currentUser.getAdmin()) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { entityManager.getTransaction().begin(); try { user = entityManager.merge(user); user.getDevices().clear(); entityManager.remove(user); entityManager.getTransaction().commit(); return user; } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } } else { throw new SecurityException(); } } private void createUser(EntityManager entityManager, User user) { synchronized (entityManager) { entityManager.getTransaction().begin(); try { entityManager.persist(user); entityManager.getTransaction().commit(); } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } } @Override public List getDevices() { List devices = new LinkedList(); User user = getSessionUser(); devices.addAll(user.getDevices()); return devices; } @Override public Device addDevice(Device device) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { User user = getSessionUser(); entityManager.getTransaction().begin(); try { TypedQuery query = entityManager.createQuery("SELECT x FROM Device x WHERE x.id = :id", Device.class); query.setParameter("id", device); List results = query.getResultList(); if (results.isEmpty()) { entityManager.persist(device); user.getDevices().add(device); entityManager.getTransaction().commit(); return device; } else { throw new IllegalStateException() } } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } } @Override public Device updateDevice(Device device) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { entityManager.getTransaction().begin(); try { TypedQuery query = entityManager.createQuery("SELECT x FROM Device x WHERE x.id = :id", Device.class); query.setParameter("id", device); List results = query.getResultList(); if (results.isEmpty()) { device = entityManager.merge(device); entityManager.getTransaction().commit(); return device; } else { throw new IllegalStateException(); } } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } } @Override public Device removeDevice(Device device) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { User user = getSessionUser(); entityManager.getTransaction().begin(); try { device = entityManager.merge(device); user.getDevices().remove(device); device.setLatestPosition(null); entityManager.flush(); Query query = entityManager.createQuery("DELETE FROM Position x WHERE x.device = :device"); query.setParameter("device", device); query.executeUpdate(); entityManager.remove(device); entityManager.getTransaction().commit(); return device; } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } } @Override public List getPositions(Device device, Date from, Date to) { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { List positions = new LinkedList(); TypedQuery query = entityManager.createQuery( "SELECT x FROM Position x WHERE x.device = :device AND x.time BETWEEN :from AND :to", Position.class); query.setParameter("device", device); query.setParameter("from", from); query.setParameter("to", to); positions.addAll(query.getResultList()); return positions; } } @Override public List getLatestPositions() { EntityManager entityManager = getSessionEntityManager(); synchronized (entityManager) { List positions = new LinkedList(); User user = getSessionUser(); if (user.getDevices() != null && !user.getDevices().isEmpty()) { TypedQuery query = entityManager.createQuery( "SELECT x FROM Position x WHERE x.id IN (" + "SELECT y.latestPosition FROM Device y WHERE y IN (:devices))", Position.class); query.setParameter("devices", user.getDevices()); positions.addAll(query.getResultList()); } return positions; } } private ApplicationSettings applicationSettings; private ApplicationSettings getApplicationSettings() { if (applicationSettings == null) { EntityManager entityManager = getServletEntityManager(); synchronized (entityManager) { TypedQuery query = entityManager.createQuery("SELECT x FROM ApplicationSettings x", ApplicationSettings.class); List resultList = query.getResultList(); if (resultList == null || resultList.isEmpty()) { applicationSettings = new ApplicationSettings(); entityManager.getTransaction().begin(); try { entityManager.persist(applicationSettings); entityManager.getTransaction().commit(); } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } else { applicationSettings = resultList.get(0); } } } return applicationSettings; } @Override public ApplicationSettings updateApplicationSettings(ApplicationSettings applicationSettings) { if (applicationSettings == null) { return getApplicationSettings(); } else { EntityManager entityManager = getServletEntityManager(); synchronized (entityManager) { User user = getSessionUser(); if (user.getAdmin()) { entityManager.getTransaction().begin(); try { entityManager.merge(applicationSettings); entityManager.getTransaction().commit(); this.applicationSettings = applicationSettings; return applicationSettings; } catch (RuntimeException e) { entityManager.getTransaction().rollback(); throw e; } } else { throw new SecurityException(); } } } } }