Merge pull request #5 from WMS-DEV/backend-add-list

Backend add domains list

Author: BartoszMiz

backend/hacknation/src/main/java/pl/wmsdev/hacknation/controller/DomainListController.java

@@ -0,0 +1,30 @@
+package pl.wmsdev.hacknation.controller;
+
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+import pl.wmsdev.hacknation.entity.DomainAddRequest;
+import pl.wmsdev.hacknation.entity.DomainEntry;
+import pl.wmsdev.hacknation.repository.DomainRepository;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/v1/domains")
+@RequiredArgsConstructor
+public class DomainListController {
+    private final DomainRepository domainRepository;
+
+    @GetMapping("")
+    public ResponseEntity<List<DomainEntry>> getGovDomains() {
+        return ResponseEntity.ok(domainRepository.findAll());
+    }
+
+    // TODO: Find a better way to seed the database
+    @PostMapping("")
+    public ResponseEntity<DomainEntry> addDomain(@RequestBody DomainAddRequest request) {
+        return ResponseEntity.ok(domainRepository.save(DomainEntry.builder()
+                .domain(request.domain())
+                .build()));
+    }
+}

backend/hacknation/src/main/java/pl/wmsdev/hacknation/entity/DomainAddRequest.java

@@ -0,0 +1,4 @@
+package pl.wmsdev.hacknation.entity;
+
+public record DomainAddRequest(String domain) {
+}

backend/hacknation/src/main/java/pl/wmsdev/hacknation/entity/DomainEntry.java

@@ -0,0 +1,21 @@
+package pl.wmsdev.hacknation.entity;
+
+import jakarta.persistence.*;
+import lombok.*;
+
+import java.util.UUID;
+
+@Entity
+@Getter
+@Setter
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class DomainEntry {
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private int id;
+
+    @Column(unique = true, nullable = false)
+    private String domain;
+}

backend/hacknation/src/main/java/pl/wmsdev/hacknation/http/CORSFilter.java

@@ -0,0 +1,38 @@
+package pl.wmsdev.hacknation.http;
+
+import jakarta.servlet.*;
+import jakarta.servlet.http.*;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.EnableWebMvc;
+
+import java.io.IOException;
+
+@Configuration
+@EnableWebMvc
+@Slf4j
+public class CORSFilter implements Filter {
+
+    @Override
+    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
+
+        if (servletResponse instanceof HttpServletResponse) {
+            HttpServletResponse response = (HttpServletResponse) servletResponse;
+            HttpServletRequest request = (HttpServletRequest) servletRequest;
+            response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin"));
+            response.setHeader("Access-Control-Allow-Credentials", "true");
+            response.setHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, PUT, OPTIONS, HEAD");
+            response.setHeader("Access-Control-Max-Age", "3600");
+            response.setHeader("Access-Control-Allow-Headers", "*");
+
+            if ("OPTIONS".equalsIgnoreCase((request.getMethod()))) {
+                response.setStatus(HttpServletResponse.SC_OK);
+            } else {
+                filterChain.doFilter(request, response);
+            }
+            log.info("Added CORS headers to response using CORSFilter");
+
+        }
+
+    }
+}

backend/hacknation/src/main/java/pl/wmsdev/hacknation/repository/DomainRepository.java

@@ -0,0 +1,14 @@
+package pl.wmsdev.hacknation.repository;
+
+import org.springframework.data.jpa.repository.JpaRepository;
+import org.springframework.stereotype.Repository;
+import pl.wmsdev.hacknation.entity.DomainEntry;
+
+import java.util.List;
+import java.util.Optional;
+import java.util.UUID;
+
+@Repository
+public interface DomainRepository extends JpaRepository<DomainEntry, UUID> {
+    Optional<DomainEntry> findByDomain(String domain);
+}

backend/hacknation/src/main/java/pl/wmsdev/hacknation/service/GovValidatorService.java

@@ -5,6 +5,7 @@
 import pl.wmsdev.hacknation.entity.CheckResponse;
 import pl.wmsdev.hacknation.entity.HashEntry;
 import pl.wmsdev.hacknation.entity.PageData;
+import pl.wmsdev.hacknation.repository.DomainRepository;
 import pl.wmsdev.hacknation.repository.HashRepository;
 import pl.wmsdev.hacknation.values.CheckResult;
 import pl.wmsdev.hacknation.values.PageValidation.*;
@@ -24,9 +25,8 @@
 @Service
 @RequiredArgsConstructor
 public class GovValidatorService {
-
-    private static final Pattern GOV_PL_PATTERN = Pattern.compile("^(?:[a-zA-Z0-9-]+\\.)*gov\\.pl$");
     private final HashRepository hashRepository;
+    private final DomainRepository domainRepository;
 
     public CheckResponse validatePage(PageData pageData) {
         UUID validationId = UUID.randomUUID();
@@ -63,13 +63,14 @@ private URL validateUrl(String url) throws MalformedUrlError {
     }
 
     private void validateTld(URL url) throws FraudulentTldError {
-        if (!GOV_PL_PATTERN.matcher(url.getHost()).matches()) {
+        var host =  url.getHost();
+        if (domainRepository.findByDomain(host).isEmpty()) {
             throw new FraudulentTldError();
         }
     }
 
     private void validateHttps(URL url) throws NoHttpsError {
-       if (url.getProtocol().equalsIgnoreCase("https")) {
+       if (!url.getProtocol().equalsIgnoreCase("https")) {
            throw new NoHttpsError();
        }
     }