Merge pull request #11 from aiman-mumtaz/issue-ai-sec

Add AI Risk Assesment Logic

Author: aiman-mumtaz

backend/pom.xml

@@ -47,10 +47,10 @@
             <scope>runtime</scope>
         </dependency>
 
-        <!-- <dependency>
+        <dependency>
             <groupId>org.springframework.ai</groupId>
             <artifactId>spring-ai-openai-spring-boot-starter</artifactId>
-        </dependency> -->
+        </dependency>
 
         <dependency>
             <groupId>org.springframework.boot</groupId>
@@ -59,7 +59,7 @@
         </dependency>
     </dependencies>
 
-    <!-- <dependencyManagement>
+    <dependencyManagement>
         <dependencies>
             <dependency>
                 <groupId>org.springframework.ai</groupId>
@@ -69,7 +69,7 @@
                 <scope>import</scope>
             </dependency>
         </dependencies>
-    </dependencyManagement> -->
+    </dependencyManagement>
 
 	<build>
 		<plugins>

backend/src/main/java/com/aiman/api/controller/NafathController.java

@@ -41,23 +41,21 @@ public class NafathController {
 
     @PostMapping("/initiate")
     public ResponseEntity<?> initiate(@RequestBody InitiateRequest req, HttpServletRequest request) {
-        // 1. Context Collection
+
         String ip = request.getRemoteAddr();
         String ua = request.getHeader("User-Agent");
 
-        // 2. AI Risk Assessment (The "Gatekeeper")
         var risk = riskService.analyze(req.nationalId(), ip, ua);
 
         if ("BLOCK".equals(risk.status()) || risk.score() > 0.85) {
             return ResponseEntity.status(HttpStatus.FORBIDDEN)
                     .body(Map.of("error", "Security Block", "reason", risk.reason()));
         }
 
-        // 3. Only if safe, proceed to business logic
         NafathRequest nafath = nafathService.initiateNafathRequest(req.nationalId());
         return ResponseEntity.ok(Map.of("nafath", nafath, "aiInsight", risk));
     }
-    // 2. Poll for status
+
     @GetMapping("/status/{id}")
     public ResponseEntity<?> poll (@PathVariable String id) {
         // String status = nafathService.checkStatus(id);
@@ -74,8 +72,7 @@ public ResponseEntity<?> poll (@PathVariable String id) {
                 .body("Invalid ID format. Please provide a valid UUID.");
         }
     }
-    
-    // 3. Mock simulate the user clicking "Approve" in the Nafath App
+
     @PatchMapping("/simulate-approval/{id}")
     public void simulateApproval(@PathVariable UUID id, @RequestBody Map<String, String> body){
         nafathService.simulateApproval(id, body.get("status"));

backend/src/main/java/com/aiman/api/service/RiskAssessmentService.java

@@ -1,45 +1,45 @@
 package com.aiman.api.service;
 
-// import org.springframework.ai.chat.client.ChatClient;
+import org.springframework.ai.chat.client.ChatClient;
 import org.springframework.stereotype.Service;
 import java.time.LocalDateTime;
 import java.util.Map;
 @Service
 public class RiskAssessmentService {
 
-    // private final ChatClient chatClient;
+    private final ChatClient chatClient;
 
-    // public RiskAssessmentService(ChatClient.Builder builder) {
-    //     this.chatClient = builder.build();
-    // }
+    public RiskAssessmentService(ChatClient.Builder builder) {
+        this.chatClient = builder.build();
+    }
 
     public AssessmentResult analyze(String nationalId, String ip, String userAgent) {
-    //     String userPromptTemplate = """
-    //         Evaluate the security risk of this Saudi Nafath login attempt:
-    //         - National ID: {id}
-    //         - Origin IP: {ip}
-    //         - Device: {ua}
-    //         - Time: {time}
+        String userPromptTemplate = """
+            Evaluate the security risk of this Saudi Nafath login attempt:
+            - National ID: {id}
+            - Origin IP: {ip}
+            - Device: {ua}
+            - Time: {time}
             
-    //         Return JSON only: { "score": 0.0-1.0, "status": "SAFE|CAUTION|BLOCK", "reason": "string" }
-    //         """;
-
-    //     return chatClient.prompt()
-    //             .user(u -> u.text(userPromptTemplate)
-    //                         .params(Map.of(
-    //                             "id", nationalId,
-    //                             "ip", ip,
-    //                             "ua", userAgent,
-    //                             "time", LocalDateTime.now().toString()
-    //                         )))
-    //             .call()
-    //             .entity(AssessmentResult.class);
-    
-    // Mock Assesment begin
-        double score = Math.random();
-        String status = (score > 0.9) ? "BLOCK" : "SAFE";
-        return new AssessmentResult(score, status, "Mocked AI Assessment for testing");
-    // Mock Assesment end
+            Return JSON only: { "score": 0.0-1.0, "status": "SAFE|CAUTION|BLOCK", "reason": "string" }
+            """;
+
+        return chatClient.prompt()
+                .user(u -> u.text(userPromptTemplate)
+                            .params(Map.of(
+                                "id", nationalId,
+                                "ip", ip,
+                                "ua", userAgent,
+                                "time", LocalDateTime.now().toString()
+                            )))
+                .call()
+                .entity(AssessmentResult.class);
+
+    // // Mock Assesment begin
+    //     double score = Math.random();
+    //     String status = (score > 0.9) ? "BLOCK" : "SAFE";
+    //     return new AssessmentResult(score, status, "Mocked AI Assessment for testing");
+    // // Mock Assesment end
 
     }