RbacRoleController.java

package net.hostsharing.hsadminng.rbac.role;

import io.micrometer.core.annotation.Timed;
import io.swagger.v3.oas.annotations.security.SecurityRequirement;
import net.hostsharing.hsadminng.rbac.context.Context;
import net.hostsharing.hsadminng.mapper.StrictMapper;
import net.hostsharing.hsadminng.rbac.generated.api.v1.api.RbacRolesApi;
import net.hostsharing.hsadminng.rbac.generated.api.v1.model.RbacRoleResource;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.ResponseEntity;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.transaction.annotation.Transactional;
import org.springframework.web.bind.annotation.RestController;

import java.util.List;

import static org.apache.commons.lang3.StringUtils.isBlank;

@RestController
@PreAuthorize("isAuthenticated()")
@SecurityRequirement(name = "bearerAuth")
public class RbacRoleController implements RbacRolesApi {

    @Autowired
    private Context context;

    @Autowired
    private StrictMapper mapper;

    @Autowired
    private RbacRoleRepository rbacRoleRepository;

    @Override
    @Transactional(readOnly = true)
    @Timed("app.rbac.roles.api.getListOfRoles")
    public ResponseEntity<List<RbacRoleResource>> getListOfRoles(
            final String assumedRoles,
            final String roleIdName) {

        context.assumeRoles(assumedRoles);

        final List<RbacRoleEntity> result = isBlank(roleIdName)
                ? rbacRoleRepository.findAll()
                : rbacRoleRepository.findByRoleIdName(roleIdName);

        return ResponseEntity.ok(mapper.mapList(result, RbacRoleResource.class));
    }

}