001/*
002 * (C) Copyright 2012-2014 Nuxeo SA (http://nuxeo.com/) and others.
003 *
004 * Licensed under the Apache License, Version 2.0 (the "License");
005 * you may not use this file except in compliance with the License.
006 * You may obtain a copy of the License at
007 *
008 *     http://www.apache.org/licenses/LICENSE-2.0
009 *
010 * Unless required by applicable law or agreed to in writing, software
011 * distributed under the License is distributed on an "AS IS" BASIS,
012 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013 * See the License for the specific language governing permissions and
014 * limitations under the License.
015 *
016 * Contributors:
017 *      Vladimir Pasquier <vpasquier@nuxeo.com>
018 *      Mickael Vachette <mv@nuxeo.com>
019 *      Estelle Giuly <egiuly@nuxeo.com>
020 */
021package org.nuxeo.ecm.platform.signature.core.operations;
022
023import org.nuxeo.ecm.automation.OperationContext;
024import org.nuxeo.ecm.automation.OperationException;
025import org.nuxeo.ecm.automation.core.Constants;
026import org.nuxeo.ecm.automation.core.annotations.Context;
027import org.nuxeo.ecm.automation.core.annotations.Operation;
028import org.nuxeo.ecm.automation.core.annotations.OperationMethod;
029import org.nuxeo.ecm.automation.core.annotations.Param;
030import org.nuxeo.ecm.core.api.Blob;
031import org.nuxeo.ecm.core.api.DocumentModel;
032import org.nuxeo.ecm.core.api.NuxeoPrincipal;
033import org.nuxeo.ecm.platform.signature.api.sign.SignatureService;
034import org.nuxeo.ecm.platform.usermanager.UserManager;
035
036@Operation(id = SignPDF.ID, category = Constants.CAT_SERVICES, label = "Sign PDF", description = "Applies a digital signature to the"
037        + " input PDF.")
038public class SignPDF {
039
040    public static final String ID = "Services.SignPDF";
041
042    @Context
043    protected OperationContext ctx;
044
045    @Context
046    protected UserManager userManager;
047
048    @Context
049    protected SignatureService signatureService;
050
051    @Param(name = "username", required = true, description = "The user ID for" + " signing PDF document.")
052    protected String username;
053
054    @Param(name = "password", required = true, description = "Certificate " + "password.")
055    protected String password;
056
057    @Param(name = "reason", required = true, description = "Signature reason.")
058    protected String reason;
059
060    @Param(name = "document", required = false, description = "Document reference.")
061    protected DocumentModel doc = null;
062
063    @OperationMethod
064    public Blob run(Blob blob) throws OperationException {
065        if (!(ctx.getPrincipal() instanceof NuxeoPrincipal)
066                || !((NuxeoPrincipal) ctx.getPrincipal()).isAdministrator()) {
067            throw new OperationException("Not allowed. You must be administrator to use this operation");
068        }
069        DocumentModel user = userManager.getUserModel(username);
070        return signatureService.signPDF(blob, doc, user, password, reason);
071    }
072}