blob: a896106ffdfb49870f888eca233cd8d8ce7e2b6f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
package com.yahoo.container.jdisc.athenz.impl;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.RequestBuilder;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClientBuilder;
import org.apache.http.util.EntityUtils;
import org.eclipse.jetty.http.HttpStatus;
import java.io.IOException;
import java.net.URI;
/**
* @author mortent
*/
public class ServiceProviderApi {
private final URI providerUri;
public ServiceProviderApi(String providerAddress) {
providerUri = URI.create(String.format("https://%s:8443/athenz/v1/provider", providerAddress));
}
/**
* Get signed identity document from config server
*/
public String getSignedIdentityDocument() {
// TODO Use client side auth to establish trusted secure channel
try (CloseableHttpClient httpClient = HttpClientBuilder.create().build()) {
CloseableHttpResponse idDocResponse = httpClient.execute(RequestBuilder.get().setUri(providerUri + "/identity-document").build());
if (HttpStatus.isSuccess(idDocResponse.getStatusLine().getStatusCode())) {
return EntityUtils.toString(idDocResponse.getEntity());
} else {
// make sure we have retried a few times (AND logged) before giving up
throw new RuntimeException("Failed to initialize Athenz instance provider");
}
} catch (IOException e) {
throw new RuntimeException("Failed getting signed identity document", e);
}
}
}
|