Module - Override a filter in custom module

A mechanism for dynamic registry and composing of filters has been developed in the application for searching the data in IdM (identities, roles, tree structure components, etc.). A new filter can be registered for existing REST services in any module.

The aim of this tutorial is show the way, how to override some actual filter behavior. We chosen filter on identity's username, which is represented by username parameter in search (url parameter). This filter is implemented in core module and search all identities, which have the same username as given parameter value (equals). We want to override this filter ⇒ we want to search all identities with username, which contain given parameter value (like).

Source codes for this tutorial can be found in the example module

• You need to install CzechIdM 7.5.0 (and higher). We have CzechIdM installed for this tutorial on server http://localhost:8080/idm-backend.
• Create identity to call tests with curl, which will have permission to read identities. We are using demo admin:admin identity.
• Create test identity with username test12345. This identity will be used in next step for testing.

At start, we will search identity by username - we will see, how core filter works. Just core filter is implemented now, so command:

 $curl -u admin:admin http://localhost:8080/idm-backend/api/v1/identities?username=test12345
 

returns our prepared test identity, but command

 $curl -u admin:admin http://localhost:8080/idm-backend/api/v1/identities?username=test1234 

returns nothing (if we don't have identity with username test1234 created:)).

We'll create new filter in our module, which search all identities with username, which contains given parameter value (like).

@Component("exampleUsernameIdentityFilter")
@Description("Filter by identity's username - search as \"like\" in username - case insensitive")
public class UsernameIdentityFilter extends AbstractFilterBuilder<IdmIdentity, IdmIdentityFilter> {
 
	@Autowired
	public UsernameIdentityFilter(IdmIdentityRepository repository) {
		super(repository);
	}
 
	@Override
	public String getName() {
		return IdmIdentityFilter.PARAMETER_USERNAME;
	}
 
	@Override
	public Predicate getPredicate(Root<IdmIdentity> root, CriteriaQuery<?> query, CriteriaBuilder builder, IdmIdentityFilter filter) {
		if (filter.getUsername() == null) {
			return null;
		}
		return builder.like(builder.lower(root.get(IdmIdentity_.username)), "%" + filter.getUsername() + "%");
	}
 
	@Override
	public int getOrder() {
		// 0 => default, we don't want to override filter as default, but is possible when order is less than 0. 
		return 10;
	}
}

New filter is registered to search identities (see FilterBuilder template), when parameter IdmIdentityFilter.PARAMETER_USERNAME is given in search parameters. Filter behavior is implemented in getPredicate method. Method getOrder says, which filter will be used as default. For example, if we want to add new filter and we want to make him default without any additional configuration, then we'll return value e.g. -10. Then this filter will be used, when application starts as default (⇒ order before core filters), respectively before all filters with order greater than -10.

We added new filter with order 10, so default filter is still used, because all core filters has order 0 (the smallest order wins - see @Ordered). That is what we wants in the most ways. We don't want to change default behavior, but we want to be able to configure, which filter is used explicitly ⇒ choose one implementation.

So, we can go to the application configuration page (or to application.property file) and set property value:

idm.sec.core.filter.IdmIdentity.username.impl=exampleUsernameIdentityFilter

Read more about filter configuration.

We execute test commands again:

$curl -u admin:admin http://localhost:8080/idm-backend/api/v1/identities?username=test12345
$curl -u admin:admin http://localhost:8080/idm-backend/api/v1/identities?username=test1234 

@Transactional
public class UsernameIdentityFilterTest extends AbstractIntegrationTest {
 
	@Autowired
	private UsernameIdentityFilter usernameIdentityFilter;
 
	@Test
	public void testFilteringFound() {
		String username = getHelper().createName();
		IdmIdentityDto identityOne = getHelper().createIdentity(username);
		IdmIdentityDto identityTwo = getHelper().createIdentity(getHelper().createName() + username + getHelper().createName());
		IdmIdentityDto identityThree = getHelper().createIdentity(getHelper().createName() + username + getHelper().createName());
 
		IdmIdentityFilter filter = new IdmIdentityFilter();
		filter.setUsername(username);
		List<IdmIdentity> identities = usernameIdentityFilter.find(filter, null).getContent();
 
		assertEquals(3, identities.size());
 
		IdmIdentity identity = identities.stream().filter(ident -> ident.getId().equals(identityOne.getId())).findFirst().get();
		assertNotNull(identity);
 
		identity = identities.stream().filter(ident -> ident.getId().equals(identityTwo.getId())).findFirst().get();
		assertNotNull(identity);
 
		identity = identities.stream().filter(ident -> ident.getId().equals(identityThree.getId())).findFirst().get();
		assertNotNull(identity);
	}
 
	@Test
	public void testFilteringNotFound() {
		String username = "usernameValue" + System.currentTimeMillis();
		getHelper().createIdentity(username);
		getHelper().createIdentity("123" + username + getHelper().createName());
		getHelper().createIdentity(getHelper().createName() + username + getHelper().createName());
 
		IdmIdentityFilter filter = new IdmIdentityFilter();
		filter.setUsername("username1Value"); // value is different than variable username
		List<IdmIdentity> identities = usernameIdentityFilter.find(filter, null).getContent();
 
		assertEquals(0, identities.size());
	}
}