diff options
Diffstat (limited to 'controller-server/src/main/java')
9 files changed, 318 insertions, 39 deletions
diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/ApplicationController.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/ApplicationController.java index 7e284a8aef5..902c1803b6b 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/ApplicationController.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/ApplicationController.java @@ -670,7 +670,7 @@ public class ApplicationController { } } - private Optional<CloudAccount> decideCloudAccountOf(DeploymentId deployment, DeploymentSpec spec) { + public Optional<CloudAccount> decideCloudAccountOf(DeploymentId deployment, DeploymentSpec spec) { ZoneId zoneId = deployment.zoneId(); Optional<CloudAccount> requestedAccount = spec.instance(deployment.applicationId().instance()) .flatMap(instanceSpec -> instanceSpec.cloudAccount(zoneId.environment(), diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/Controller.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/Controller.java index af56666c6eb..22ce4db10e5 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/Controller.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/Controller.java @@ -86,6 +86,7 @@ public class Controller extends AbstractComponent { private final NotificationsDb notificationsDb; private final SupportAccessControl supportAccessControl; private final Notifier notifier; + private final MailVerifier mailVerifier; /** * Creates a controller @@ -126,6 +127,7 @@ public class Controller extends AbstractComponent { notifier = new Notifier(curator, serviceRegistry.zoneRegistry(), serviceRegistry.mailer(), flagSource); notificationsDb = new NotificationsDb(this); supportAccessControl = new SupportAccessControl(this); + mailVerifier = new MailVerifier(tenantController, serviceRegistry.mailer(), curator, clock); // Record the version of this controller curator().writeControllerVersion(this.hostname(), serviceRegistry.controllerVersion()); @@ -339,4 +341,8 @@ public class Controller extends AbstractComponent { public Notifier notifier() { return notifier; } + + public MailVerifier mailVerifier() { + return mailVerifier; + } } diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/MailVerifier.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/MailVerifier.java new file mode 100644 index 00000000000..a7f3a3ca3b2 --- /dev/null +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/MailVerifier.java @@ -0,0 +1,116 @@ +// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root. +package com.yahoo.vespa.hosted.controller; + +import com.yahoo.config.provision.TenantName; +import com.yahoo.vespa.hosted.controller.api.integration.organization.Mailer; +import com.yahoo.vespa.hosted.controller.persistence.CuratorDb; +import com.yahoo.vespa.hosted.controller.tenant.CloudTenant; +import com.yahoo.vespa.hosted.controller.tenant.Tenant; +import com.yahoo.vespa.hosted.controller.tenant.TenantContacts; +import com.yahoo.vespa.hosted.controller.tenant.TenantInfo; +import com.yahoo.vespa.hosted.controller.tenant.PendingMailVerification; + +import java.time.Clock; +import java.time.Duration; +import java.util.Optional; +import java.util.UUID; + + +/** + * @author olaa + */ +public class MailVerifier { + + private final TenantController tenantController; + private final Mailer mailer; + private final CuratorDb curatorDb; + private final Clock clock; + private static final Duration VERIFICATION_DEADLINE = Duration.ofDays(7); + + public MailVerifier(TenantController tenantController, Mailer mailer, CuratorDb curatorDb, Clock clock) { + this.tenantController = tenantController; + this.mailer = mailer; + this.curatorDb = curatorDb; + this.clock = clock; + } + + public PendingMailVerification sendMailVerification(TenantName tenantName, String email, PendingMailVerification.MailType mailType) { + if (!email.contains("@")) { + throw new IllegalArgumentException("Invalid email address"); + } + + var verificationCode = UUID.randomUUID().toString(); + var verificationDeadline = clock.instant().plus(VERIFICATION_DEADLINE); + var pendingMailVerification = new PendingMailVerification(tenantName, email, verificationCode, verificationDeadline, mailType); + writePendingVerification(pendingMailVerification); + mailer.sendVerificationMail(pendingMailVerification); + return pendingMailVerification; + } + + public Optional<PendingMailVerification> resendMailVerification(TenantName tenantName, String email, PendingMailVerification.MailType mailType) { + var oldPendingVerification = curatorDb.listPendingMailVerifications() + .stream() + .filter(pendingMailVerification -> + pendingMailVerification.getMailAddress().equals(email) && + pendingMailVerification.getMailType().equals(mailType) && + pendingMailVerification.getTenantName().equals(tenantName) + ).findFirst(); + + if (oldPendingVerification.isEmpty()) + return Optional.empty(); + + try (var lock = curatorDb.lockPendingMailVerification(oldPendingVerification.get().getVerificationCode())) { + curatorDb.deletePendingMailVerification(oldPendingVerification.get()); + } + + return Optional.of(sendMailVerification(tenantName, email, mailType)); + } + + public boolean verifyMail(String verificationCode) { + return curatorDb.getPendingMailVerification(verificationCode) + .filter(pendingMailVerification -> pendingMailVerification.getVerificationDeadline().isAfter(clock.instant())) + .map(pendingMailVerification -> { + var tenant = requireCloudTenant(pendingMailVerification.getTenantName()); + var oldTenantInfo = tenant.info(); + var updatedTenantInfo = switch (pendingMailVerification.getMailType()) { + case NOTIFICATIONS -> withTenantContacts(oldTenantInfo, pendingMailVerification); + case TENANT_CONTACT -> oldTenantInfo.withContact(oldTenantInfo.contact() + .withEmail(oldTenantInfo.contact().email().withVerification(true))); + }; + + tenantController.lockOrThrow(tenant.name(), LockedTenant.Cloud.class, lockedTenant -> { + lockedTenant = lockedTenant.withInfo(updatedTenantInfo); + tenantController.store(lockedTenant); + }); + + try (var lock = curatorDb.lockPendingMailVerification(pendingMailVerification.getVerificationCode())) { + curatorDb.deletePendingMailVerification(pendingMailVerification); + } + return true; + }).orElse(false); + } + + private TenantInfo withTenantContacts(TenantInfo oldInfo, PendingMailVerification pendingMailVerification) { + var newContacts = oldInfo.contacts().ofType(TenantContacts.EmailContact.class) + .stream() + .map(contact -> { + if (pendingMailVerification.getMailAddress().equals(contact.email().getEmailAddress())) + return contact.withEmail(contact.email().withVerification(true)); + return contact; + }).toList(); + return oldInfo.withContacts(new TenantContacts(newContacts)); + } + + private void writePendingVerification(PendingMailVerification pendingMailVerification) { + try (var lock = curatorDb.lockPendingMailVerification(pendingMailVerification.getVerificationCode())) { + curatorDb.writePendingMailVerification(pendingMailVerification); + } + } + + private CloudTenant requireCloudTenant(TenantName tenantName) { + return tenantController.get(tenantName) + .filter(tenant -> tenant.type() == Tenant.Type.cloud) + .map(CloudTenant.class::cast) + .orElseThrow(() -> new IllegalStateException("Mail verification is only applicable for cloud tenants")); + } +} diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/notification/Notifier.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/notification/Notifier.java index f2c9d55b2a2..1074649ca7a 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/notification/Notifier.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/notification/Notifier.java @@ -110,7 +110,10 @@ public class Notifier { private void dispatch(Notification notification, Collection<TenantContacts.EmailContact> contacts) { try { var content = formatter.format(notification); - mailer.send(mailOf(content, contacts.stream().map(c -> c.email()).collect(Collectors.toList()))); + mailer.send(mailOf(content, contacts.stream() + .filter(c -> c.email().isVerified()) + .map(c -> c.email().getEmailAddress()) + .collect(Collectors.toList()))); } catch (MailerException e) { log.log(Level.SEVERE, "Failed sending email", e); } catch (MissingOptionalException e) { diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/CuratorDb.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/CuratorDb.java index 0e8f1648765..d582937cb0b 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/CuratorDb.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/CuratorDb.java @@ -34,6 +34,7 @@ import com.yahoo.vespa.hosted.controller.routing.RoutingPolicy; import com.yahoo.vespa.hosted.controller.routing.RoutingStatus; import com.yahoo.vespa.hosted.controller.routing.ZoneRoutingPolicy; import com.yahoo.vespa.hosted.controller.support.access.SupportAccess; +import com.yahoo.vespa.hosted.controller.tenant.PendingMailVerification; import com.yahoo.vespa.hosted.controller.tenant.Tenant; import com.yahoo.vespa.hosted.controller.versions.OsVersionStatus; import com.yahoo.vespa.hosted.controller.versions.OsVersionTarget; @@ -94,6 +95,7 @@ public class CuratorDb { private static final Path changeRequestsRoot = root.append("changeRequests"); private static final Path notificationsRoot = root.append("notifications"); private static final Path supportAccessRoot = root.append("supportAccess"); + private static final Path mailVerificationRoot = root.append("mailVerification"); private final NodeVersionSerializer nodeVersionSerializer = new NodeVersionSerializer(); private final VersionStatusSerializer versionStatusSerializer = new VersionStatusSerializer(nodeVersionSerializer); @@ -231,6 +233,10 @@ public class CuratorDb { return curator.lock(lockRoot.append("deploymentRetriggerQueue"), defaultLockTimeout); } + public Mutex lockPendingMailVerification(String verificationCode) { + return curator.lock(lockRoot.append("pendingMailVerification").append(verificationCode), defaultLockTimeout); + } + // -------------- Helpers ------------------------------------------ /** Try locking with a low timeout, meaning it is OK to fail lock acquisition. @@ -655,6 +661,28 @@ public class CuratorDb { curator.set(deploymentRetriggerPath(), asJson(retriggerEntrySerializer.toSlime(retriggerEntries))); } + // -------------- Pending mail verification ------------------------------- + + public Optional<PendingMailVerification> getPendingMailVerification(String verificationCode) { + return readSlime(mailVerificationPath(verificationCode)).map(MailVerificationSerializer::fromSlime); + } + + public List<PendingMailVerification> listPendingMailVerifications() { + return curator.getChildren(mailVerificationRoot) + .stream() + .map(this::getPendingMailVerification) + .flatMap(Optional::stream) + .collect(Collectors.toList()); + } + + public void writePendingMailVerification(PendingMailVerification pendingMailVerification) { + curator.set(mailVerificationPath(pendingMailVerification.getVerificationCode()), asJson(MailVerificationSerializer.toSlime(pendingMailVerification))); + } + + public void deletePendingMailVerification(PendingMailVerification pendingMailVerification) { + curator.delete(mailVerificationPath(pendingMailVerification.getVerificationCode())); + } + // -------------- Paths --------------------------------------------------- private static Path upgradesPerMinutePath() { @@ -755,4 +783,8 @@ public class CuratorDb { return root.append("deploymentRetriggerQueue"); } + private static Path mailVerificationPath(String verificationCode) { + return mailVerificationRoot.append(verificationCode); + } + } diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/MailVerificationSerializer.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/MailVerificationSerializer.java new file mode 100644 index 00000000000..6910d5c21c0 --- /dev/null +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/MailVerificationSerializer.java @@ -0,0 +1,53 @@ +// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root. +package com.yahoo.vespa.hosted.controller.persistence; + +import com.yahoo.config.provision.TenantName; +import com.yahoo.slime.Cursor; +import com.yahoo.slime.Inspector; +import com.yahoo.slime.Slime; +import com.yahoo.vespa.hosted.controller.tenant.PendingMailVerification; + +import java.time.Instant; + +/** + * @author olaa + */ +public class MailVerificationSerializer { + + private static final String tenantField = "tenant"; + private static final String audiencesField = "audiences"; + private static final String emailField = "email"; + private static final String emailTypeField = "emailType"; + private static final String emailVerificationCodeField = "emailVerificationCode"; + private static final String emailVerificationDeadlineField = "emailVerificationDeadline"; + private static final String rolesField = "roles"; + + public static Slime toSlime(PendingMailVerification pendingMailVerification) { + var slime = new Slime(); + var object = slime.setObject(); + toSlime(pendingMailVerification, object); + return slime; + } + + public static void toSlime(PendingMailVerification pendingMailVerification, Cursor object) { + object.setString(tenantField, pendingMailVerification.getTenantName().value()); + object.setString(emailVerificationCodeField, pendingMailVerification.getVerificationCode()); + object.setString(emailField, pendingMailVerification.getMailAddress()); + object.setLong(emailVerificationDeadlineField, pendingMailVerification.getVerificationDeadline().toEpochMilli()); + object.setString(emailTypeField, pendingMailVerification.getMailType().name()); + } + + public static PendingMailVerification fromSlime(Slime slime) { + return fromSlime(slime.get()); + } + + public static PendingMailVerification fromSlime(Inspector inspector) { + var tenant = TenantName.from(inspector.field(tenantField).asString()); + var address = inspector.field(emailField).asString(); + var verificationCode = inspector.field(emailVerificationCodeField).asString(); + var deadline = Instant.ofEpochMilli(inspector.field(emailVerificationDeadlineField).asLong()); + var type = PendingMailVerification.MailType.valueOf(inspector.field(emailTypeField).asString()); + return new PendingMailVerification(tenant, address, verificationCode, deadline, type); + } + +} diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/TenantSerializer.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/TenantSerializer.java index fc7cafe4c89..b6d0155b6ab 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/TenantSerializer.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/persistence/TenantSerializer.java @@ -21,6 +21,7 @@ import com.yahoo.vespa.hosted.controller.tenant.ArchiveAccess; import com.yahoo.vespa.hosted.controller.tenant.AthenzTenant; import com.yahoo.vespa.hosted.controller.tenant.CloudTenant; import com.yahoo.vespa.hosted.controller.tenant.DeletedTenant; +import com.yahoo.vespa.hosted.controller.tenant.Email; import com.yahoo.vespa.hosted.controller.tenant.LastLoginInfo; import com.yahoo.vespa.hosted.controller.tenant.Tenant; import com.yahoo.vespa.hosted.controller.tenant.TenantAddress; @@ -234,7 +235,7 @@ public class TenantSerializer { .withWebsite(infoObject.field("website").asString()) .withContact(TenantContact.from( infoObject.field("contactName").asString(), - infoObject.field("contactEmail").asString())) + new Email(infoObject.field("contactEmail").asString(), asBoolOrTrue(infoObject.field("contactEmailVerified"))))) .withAddress(tenantInfoAddressFromSlime(infoObject.field("address"))) .withBilling(tenantInfoBillingContactFromSlime(infoObject.field("billingContact"))) .withContacts(tenantContactsFrom(infoObject.field("contacts"))); @@ -253,7 +254,7 @@ public class TenantSerializer { return TenantBilling.empty() .withContact(TenantContact.from( billingObject.field("name").asString(), - billingObject.field("email").asString(), + new Email(billingObject.field("email").asString(), true), billingObject.field("phone").asString())) .withAddress(tenantInfoAddressFromSlime(billingObject.field("address"))); } @@ -283,7 +284,8 @@ public class TenantSerializer { infoCursor.setString("email", info.email()); infoCursor.setString("website", info.website()); infoCursor.setString("contactName", info.contact().name()); - infoCursor.setString("contactEmail", info.contact().email()); + infoCursor.setString("contactEmail", info.contact().email().getEmailAddress()); + infoCursor.setBool("contactEmailVerified", info.contact().email().isVerified()); toSlime(info.address(), infoCursor); toSlime(info.billingContact(), infoCursor); toSlime(info.contacts(), infoCursor); @@ -305,7 +307,7 @@ public class TenantSerializer { Cursor addressCursor = parentCursor.setObject("billingContact"); addressCursor.setString("name", billingContact.contact().name()); - addressCursor.setString("email", billingContact.contact().email()); + addressCursor.setString("email", billingContact.contact().email().getEmailAddress()); addressCursor.setString("phone", billingContact.contact().phone()); toSlime(billingContact.address(), addressCursor); } @@ -386,7 +388,8 @@ public class TenantSerializer { switch (contact.type()) { case EMAIL: var email = (TenantContacts.EmailContact) contact; - data.setString("email", email.email()); + data.setString("email", email.email().getEmailAddress()); + data.setBool("emailVerified", email.email().isVerified()); return; default: throw new IllegalArgumentException("Serialization for contact type not implemented: " + contact.type()); @@ -401,7 +404,8 @@ public class TenantSerializer { .collect(Collectors.toUnmodifiableList()); switch (type) { case EMAIL: - return new TenantContacts.EmailContact(audiences, inspector.field("data").field("email").asString()); + var isVerified = asBoolOrTrue(inspector.field("data").field("emailVerified")); + return new TenantContacts.EmailContact(audiences, new Email(inspector.field("data").field("email").asString(), isVerified)); default: throw new IllegalArgumentException("Serialization for contact type not implemented: " + type); } @@ -460,4 +464,8 @@ public class TenantSerializer { } } + private boolean asBoolOrTrue(Inspector inspector) { + return !inspector.valid() || inspector.asBool(); + } + } diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/application/ApplicationApiHandler.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/application/ApplicationApiHandler.java index 35483309cae..23f945e02be 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/application/ApplicationApiHandler.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/application/ApplicationApiHandler.java @@ -111,7 +111,9 @@ import com.yahoo.vespa.hosted.controller.tenant.ArchiveAccess; import com.yahoo.vespa.hosted.controller.tenant.AthenzTenant; import com.yahoo.vespa.hosted.controller.tenant.CloudTenant; import com.yahoo.vespa.hosted.controller.tenant.DeletedTenant; +import com.yahoo.vespa.hosted.controller.tenant.Email; import com.yahoo.vespa.hosted.controller.tenant.LastLoginInfo; +import com.yahoo.vespa.hosted.controller.tenant.PendingMailVerification; import com.yahoo.vespa.hosted.controller.tenant.Tenant; import com.yahoo.vespa.hosted.controller.tenant.TenantAddress; import com.yahoo.vespa.hosted.controller.tenant.TenantBilling; @@ -301,6 +303,7 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { if (path.matches("/application/v4/tenant/{tenant}/info/profile")) return withCloudTenant(path.get("tenant"), request, this::putTenantInfoProfile); if (path.matches("/application/v4/tenant/{tenant}/info/billing")) return withCloudTenant(path.get("tenant"), request, this::putTenantInfoBilling); if (path.matches("/application/v4/tenant/{tenant}/info/contacts")) return withCloudTenant(path.get("tenant"), request, this::putTenantInfoContacts); + if (path.matches("/application/v4/tenant/{tenant}/info/resend-mail-verification")) return withCloudTenant(path.get("tenant"), request, this::resendEmailVerification); if (path.matches("/application/v4/tenant/{tenant}/archive-access")) return allowAwsArchiveAccess(path.get("tenant"), request); // TODO(enygaard, 2022-05-25) Remove when no longer used by console if (path.matches("/application/v4/tenant/{tenant}/archive-access/aws")) return allowAwsArchiveAccess(path.get("tenant"), request); if (path.matches("/application/v4/tenant/{tenant}/archive-access/gcp")) return allowGcpArchiveAccess(path.get("tenant"), request); @@ -522,7 +525,8 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { infoCursor.setString("email", info.email()); infoCursor.setString("website", info.website()); infoCursor.setString("contactName", info.contact().name()); - infoCursor.setString("contactEmail", info.contact().email()); + infoCursor.setString("contactEmail", info.contact().email().getEmailAddress()); + infoCursor.setBool("contactEmailVerified", info.contact().email().isVerified()); toSlime(info.address(), infoCursor); toSlime(info.billingContact(), infoCursor); toSlime(info.contacts(), infoCursor); @@ -539,7 +543,8 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { if (!info.isEmpty()) { var contact = root.setObject("contact"); contact.setString("name", info.contact().name()); - contact.setString("email", info.contact().email()); + contact.setString("email", info.contact().email().getEmailAddress()); + contact.setBool("emailVerified", info.contact().email().isVerified()); var tenant = root.setObject("tenant"); tenant.setString("company", info.name()); @@ -560,9 +565,17 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { private SlimeJsonResponse putTenantInfoProfile(CloudTenant cloudTenant, Inspector inspector) { var info = cloudTenant.info(); + var mergedEmail = optional("email", inspector.field("contact")) + .filter(address -> !address.equals(info.contact().email().getEmailAddress())) + .map(address -> { + controller.mailVerifier().sendMailVerification(cloudTenant.name(), address, PendingMailVerification.MailType.TENANT_CONTACT); + return new Email(address, false); + }) + .orElse(info.contact().email()); + var mergedContact = TenantContact.empty() .withName(getString(inspector.field("contact").field("name"), info.contact().name())) - .withEmail(getString(inspector.field("contact").field("email"), info.contact().email())); + .withEmail(mergedEmail); var mergedAddress = updateTenantInfoAddress(inspector.field("address"), info.address()); @@ -592,7 +605,7 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { var contact = root.setObject("contact"); contact.setString("name", billingContact.contact().name()); - contact.setString("email", billingContact.contact().email()); + contact.setString("email", billingContact.contact().email().getEmailAddress()); contact.setString("phone", billingContact.contact().phone()); toSlime(billingContact.address(), root); // will create "address" on the parent @@ -606,7 +619,7 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { var contact = info.billingContact().contact(); var address = info.billingContact().address(); - var mergedContact = updateTenantInfoContact(inspector.field("contact"), contact); + var mergedContact = updateTenantInfoContact(inspector.field("contact"), cloudTenant.name(), contact, false); var mergedAddress = updateTenantInfoAddress(inspector.field("address"), info.billingContact().address()); var mergedBilling = info.billingContact() @@ -633,7 +646,7 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { private SlimeJsonResponse putTenantInfoContacts(CloudTenant cloudTenant, Inspector inspector) { var mergedInfo = cloudTenant.info() - .withContacts(updateTenantInfoContacts(inspector.field("contacts"), cloudTenant.info().contacts())); + .withContacts(updateTenantInfoContacts(inspector.field("contacts"), cloudTenant.name(), cloudTenant.info().contacts())); // Store changes controller.tenants().lockOrThrow(cloudTenant.name(), LockedTenant.Cloud.class, lockedTenant -> { @@ -649,10 +662,10 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { if (mergedInfo.contact().name().isBlank()) { throw new IllegalArgumentException("'contactName' cannot be empty"); } - if (mergedInfo.contact().email().isBlank()) { + if (mergedInfo.contact().email().getEmailAddress().isBlank()) { throw new IllegalArgumentException("'contactEmail' cannot be empty"); } - if (! mergedInfo.contact().email().contains("@")) { + if (! mergedInfo.contact().email().getEmailAddress().contains("@")) { // email address validation is notoriously hard - we should probably just try to send a // verification email to this address. checking for @ is a simple best-effort. throw new IllegalArgumentException("'contactEmail' needs to be an email address"); @@ -682,7 +695,7 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { Cursor addressCursor = parentCursor.setObject("billingContact"); addressCursor.setString("name", billingContact.contact().name()); - addressCursor.setString("email", billingContact.contact().email()); + addressCursor.setString("email", billingContact.contact().email().getEmailAddress()); addressCursor.setString("phone", billingContact.contact().phone()); toSlime(billingContact.address(), addressCursor); } @@ -696,7 +709,8 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { switch (contact.type()) { case EMAIL: var email = (TenantContacts.EmailContact) contact; - contactCursor.setString("email", email.email()); + contactCursor.setString("email", email.email().getEmailAddress()); + contactCursor.setBool("emailVerified", email.email().isVerified()); return; default: throw new IllegalArgumentException("Serialization for contact type not implemented: " + contact.type()); @@ -737,9 +751,17 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { // Merge info from request with the existing info Inspector insp = toSlime(request.getData()).get(); + var mergedEmail = optional("contactEmail", insp) + .filter(address -> !address.equals(oldInfo.contact().email().getEmailAddress())) + .map(address -> { + controller.mailVerifier().sendMailVerification(tenant.name(), address, PendingMailVerification.MailType.TENANT_CONTACT); + return new Email(address, false); + }) + .orElse(oldInfo.contact().email()); + TenantContact mergedContact = TenantContact.empty() .withName(getString(insp.field("contactName"), oldInfo.contact().name())) - .withEmail(getString(insp.field("contactEmail"), oldInfo.contact().email())); + .withEmail(mergedEmail); TenantInfo mergedInfo = TenantInfo.empty() .withName(getString(insp.field("name"), oldInfo.name())) @@ -747,8 +769,8 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { .withWebsite(getString(insp.field("website"), oldInfo.website())) .withContact(mergedContact) .withAddress(updateTenantInfoAddress(insp.field("address"), oldInfo.address())) - .withBilling(updateTenantInfoBillingContact(insp.field("billingContact"), oldInfo.billingContact())) - .withContacts(updateTenantInfoContacts(insp.field("contacts"), oldInfo.contacts())); + .withBilling(updateTenantInfoBillingContact(insp.field("billingContact"), tenant.name(), oldInfo.billingContact())) + .withContacts(updateTenantInfoContacts(insp.field("contacts"), tenant.name(), oldInfo.contacts())); validateMergedTenantInfo(mergedInfo); @@ -782,32 +804,34 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { throw new IllegalArgumentException("All address fields must be set"); } - private TenantContact updateTenantInfoContact(Inspector insp, TenantContact oldContact) { + private TenantContact updateTenantInfoContact(Inspector insp, TenantName tenantName, TenantContact oldContact, boolean isBillingContact) { if (!insp.valid()) return oldContact; - String email = getString(insp.field("email"), oldContact.email()); - - if (!email.isBlank() && !email.contains("@")) { - // email address validation is notoriously hard - we should probably just try to send a - // verification email to this address. checking for @ is a simple best-effort. - throw new IllegalArgumentException("'email' needs to be an email address"); - } + var mergedEmail = optional("email", insp) + .filter(address -> !address.equals(oldContact.email().getEmailAddress())) + .map(address -> { + if (isBillingContact) + return new Email(address, true); + controller.mailVerifier().sendMailVerification(tenantName, address, PendingMailVerification.MailType.TENANT_CONTACT); + return new Email(address, false); + }) + .orElse(oldContact.email()); return TenantContact.empty() .withName(getString(insp.field("name"), oldContact.name())) - .withEmail(getString(insp.field("email"), oldContact.email())) + .withEmail(mergedEmail) .withPhone(getString(insp.field("phone"), oldContact.phone())); } - private TenantBilling updateTenantInfoBillingContact(Inspector insp, TenantBilling oldContact) { + private TenantBilling updateTenantInfoBillingContact(Inspector insp, TenantName tenantName, TenantBilling oldContact) { if (!insp.valid()) return oldContact; return TenantBilling.empty() - .withContact(updateTenantInfoContact(insp, oldContact.contact())) + .withContact(updateTenantInfoContact(insp, tenantName, oldContact.contact(), true)) .withAddress(updateTenantInfoAddress(insp.field("address"), oldContact.address())); } - private TenantContacts updateTenantInfoContacts(Inspector insp, TenantContacts oldContacts) { + private TenantContacts updateTenantInfoContacts(Inspector insp, TenantName tenantName, TenantContacts oldContacts) { if (!insp.valid()) return oldContacts; List<TenantContacts.EmailContact> contacts = SlimeUtils.entriesStream(insp).map(inspector -> { @@ -816,11 +840,16 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { .map(audience -> fromAudience(audience.asString())) .toList(); - if (!email.contains("@")) { - throw new IllegalArgumentException("'email' needs to be an email address"); - } - - return new TenantContacts.EmailContact(audiences, email); + // If contact exists, update audience. Otherwise, create new unverified contact + return oldContacts.ofType(TenantContacts.EmailContact.class) + .stream() + .filter(contact -> contact.email().getEmailAddress().equals(email)) + .findAny() + .map(emailContact -> new TenantContacts.EmailContact(audiences, emailContact.email())) + .orElseGet(() -> { + controller.mailVerifier().sendMailVerification(tenantName, email, PendingMailVerification.MailType.NOTIFICATIONS); + return new TenantContacts.EmailContact(audiences, new Email(email, false)); + }); }).toList(); return new TenantContacts(contacts); @@ -1499,6 +1528,21 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { return new MessageResponse(type.jobName() + " for " + id + " resumed"); } + private SlimeJsonResponse resendEmailVerification(CloudTenant tenant, Inspector inspector) { + var mail = mandatory("mail", inspector).asString(); + var type = mandatory("mailType", inspector).asString(); + + var mailType = switch (type) { + case "contact" -> PendingMailVerification.MailType.TENANT_CONTACT; + case "notifications" -> PendingMailVerification.MailType.NOTIFICATIONS; + default -> throw new IllegalArgumentException("Unknown mail type " + type); + }; + + var pendingVerification = controller.mailVerifier().resendMailVerification(tenant.name(), mail, mailType); + return pendingVerification.isPresent() ? new MessageResponse("Re-sent verification mail to " + mail) : + ErrorResponse.notFoundError("No pending mail verification found for " + mail); + } + private void toSlime(Cursor object, Application application, HttpRequest request) { object.setString("tenant", application.id().tenant().value()); object.setString("application", application.id().application().value()); @@ -1814,6 +1858,12 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { application.projectId().ifPresent(i -> response.setString("screwdriverId", String.valueOf(i))); + controller.applications().decideCloudAccountOf(deploymentId, application.deploymentSpec()).ifPresent(cloudAccount -> { + Cursor enclave = response.setObject("enclave"); + enclave.setString("cloudAccount", cloudAccount.value()); + enclave.setString("athensDomain", controller.zoneRegistry().cloudAccountAthenzDomain(cloudAccount).value()); + }); + var instance = application.instances().get(deploymentId.applicationId().instance()); if (instance != null) { if (!instance.rotations().isEmpty() && deployment.zone().environment() == Environment.prod) @@ -2006,7 +2056,7 @@ public class ApplicationApiHandler extends AuditLoggingRequestHandler { User user = getAttribute(request, User.ATTRIBUTE_NAME, User.class); TenantInfo info = controller.tenants().require(tenant, CloudTenant.class) .info() - .withContact(TenantContact.from(user.name(), user.email())); + .withContact(TenantContact.from(user.name(), new Email(user.email(), true))); // Store changes controller.tenants().lockOrThrow(tenant, LockedTenant.Cloud.class, lockedTenant -> { lockedTenant = lockedTenant.withInfo(info); diff --git a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/user/UserApiHandler.java b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/user/UserApiHandler.java index 3491ef4ab03..7a8ef1d4ee6 100644 --- a/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/user/UserApiHandler.java +++ b/controller-server/src/main/java/com/yahoo/vespa/hosted/controller/restapi/user/UserApiHandler.java @@ -112,6 +112,7 @@ public class UserApiHandler extends ThreadedHttpRequestHandler { private HttpResponse handlePOST(Path path, HttpRequest request) { if (path.matches("/user/v1/tenant/{tenant}")) return addTenantRoleMember(path.get("tenant"), request); + if (path.matches("/user/v1/email/verify")) return verifyEmail(request); return ErrorResponse.notFoundError(Text.format("No '%s' handler at '%s'", request.getMethod(), request.getUri().getPath())); @@ -311,6 +312,16 @@ public class UserApiHandler extends ThreadedHttpRequestHandler { return new MessageResponse(user + " is now a member of " + roles.stream().map(Role::toString).collect(Collectors.joining(", "))); } + private HttpResponse verifyEmail(HttpRequest request) { + var inspector = bodyInspector(request); + var verificationCode = require("verificationCode", Inspector::asString, inspector); + var verified = controller.mailVerifier().verifyMail(verificationCode); + + if (verified) + return new MessageResponse("Email with verification code " + verificationCode + " has been verified"); + return ErrorResponse.notFoundError("No pending email verification with code " + verificationCode + " found"); + } + private HttpResponse removeTenantRoleMember(String tenantName, HttpRequest request) { Inspector requestObject = bodyInspector(request); var tenant = TenantName.from(tenantName); |