41dce06804
# Description External DB support for Stirling PDF. You can now choose between the default H2 or PostgreSQL by setting the new `enableCustomDatabase` property to `true` or `false`. To enable your own custom (PostgreSQL) database: - Set `enableCustomDatabase` to `true` - Add your database url to `customDatabaseUrl` - Set your `username` and `password` Closes #2270 ## Checklist - [x] I have read the [Contribution Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md) - [x] I have performed a self-review of my own code - [x] I have attached images of the change if it is UI based - [x] I have commented my code, particularly in hard-to-understand areas - [ ] If my code has heavily changed functionality I have updated relevant docs on [Stirling-PDFs doc repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/) - [x] My changes generate no new warnings - [x] I have read the section [Add New Translation Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags) (for new translation tags only)
94 lines
3.5 KiB
Java
94 lines
3.5 KiB
Java
package stirling.software.SPDF.config.security;
|
|
|
|
import java.sql.SQLException;
|
|
import java.util.UUID;
|
|
|
|
import org.springframework.stereotype.Component;
|
|
|
|
import jakarta.annotation.PostConstruct;
|
|
import lombok.extern.slf4j.Slf4j;
|
|
import stirling.software.SPDF.config.interfaces.DatabaseInterface;
|
|
import stirling.software.SPDF.model.ApplicationProperties;
|
|
import stirling.software.SPDF.model.Role;
|
|
import stirling.software.SPDF.model.provider.UnsupportedProviderException;
|
|
|
|
@Slf4j
|
|
@Component
|
|
public class InitialSecuritySetup {
|
|
|
|
private final UserService userService;
|
|
|
|
private final ApplicationProperties applicationProperties;
|
|
|
|
private final DatabaseInterface databaseService;
|
|
|
|
public InitialSecuritySetup(
|
|
UserService userService,
|
|
ApplicationProperties applicationProperties,
|
|
DatabaseInterface databaseService) {
|
|
this.userService = userService;
|
|
this.applicationProperties = applicationProperties;
|
|
this.databaseService = databaseService;
|
|
}
|
|
|
|
@PostConstruct
|
|
public void init() {
|
|
try {
|
|
if (databaseService.hasBackup()) {
|
|
databaseService.importDatabase();
|
|
}
|
|
|
|
if (!userService.hasUsers()) {
|
|
initializeAdminUser();
|
|
}
|
|
|
|
userService.migrateOauth2ToSSO();
|
|
initializeInternalApiUser();
|
|
} catch (IllegalArgumentException | SQLException | UnsupportedProviderException e) {
|
|
log.error("Failed to initialize security setup.", e);
|
|
System.exit(1);
|
|
}
|
|
}
|
|
|
|
private void initializeAdminUser() throws SQLException, UnsupportedProviderException {
|
|
String initialUsername =
|
|
applicationProperties.getSecurity().getInitialLogin().getUsername();
|
|
String initialPassword =
|
|
applicationProperties.getSecurity().getInitialLogin().getPassword();
|
|
if (initialUsername != null
|
|
&& !initialUsername.isEmpty()
|
|
&& initialPassword != null
|
|
&& !initialPassword.isEmpty()
|
|
&& userService.findByUsernameIgnoreCase(initialUsername).isEmpty()) {
|
|
|
|
userService.saveUser(initialUsername, initialPassword, Role.ADMIN.getRoleId());
|
|
log.info("Admin user created: {}", initialUsername);
|
|
} else {
|
|
createDefaultAdminUser();
|
|
}
|
|
}
|
|
|
|
private void createDefaultAdminUser() throws SQLException, UnsupportedProviderException {
|
|
String defaultUsername = "admin";
|
|
String defaultPassword = "stirling";
|
|
|
|
if (userService.findByUsernameIgnoreCase(defaultUsername).isEmpty()) {
|
|
userService.saveUser(defaultUsername, defaultPassword, Role.ADMIN.getRoleId(), true);
|
|
log.info("Default admin user created: {}", defaultUsername);
|
|
}
|
|
}
|
|
|
|
private void initializeInternalApiUser()
|
|
throws IllegalArgumentException, SQLException, UnsupportedProviderException {
|
|
if (!userService.usernameExistsIgnoreCase(Role.INTERNAL_API_USER.getRoleId())) {
|
|
userService.saveUser(
|
|
Role.INTERNAL_API_USER.getRoleId(),
|
|
UUID.randomUUID().toString(),
|
|
Role.INTERNAL_API_USER.getRoleId());
|
|
userService.addApiKeyToUser(Role.INTERNAL_API_USER.getRoleId());
|
|
log.info("Internal API user created: {}", Role.INTERNAL_API_USER.getRoleId());
|
|
}
|
|
userService.syncCustomApiUser(applicationProperties.getSecurity().getCustomGlobalAPIKey());
|
|
}
|
|
}
|