MARP-434 Authentication SSH & Multi connection

.github/workflows/ci.yml

@@ -33,32 +33,53 @@ jobs:
     - name: Install and start SFTP
       run: |
         sudo apt install openssh-server
+        sudo sh -c 'echo "ChallengeResponseAuthentication no" >> /etc/ssh/sshd_config'
+        sudo sh -c 'echo "PasswordAuthentication no" >> /etc/ssh/sshd_config'
+        sudo sh -c 'echo "\nMatch User usr" >> /etc/ssh/sshd_config'
+        sudo sh -c 'echo "\tPasswordAuthentication yes" >> /etc/ssh/sshd_config'
+        sudo sh -c 'echo "\nMatch User All" >> /etc/ssh/sshd_config'
+        sudo sh -c 'echo "\tPasswordAuthentication no" >> /etc/ssh/sshd_config'
         sudo systemctl enable ssh
         sudo systemctl start ssh
-
+        
     - name: Create a test user account
       run: |
         sshGroupRaw=$(getent group | grep ssh)
         sshGroup=${sshGroupRaw%:x*}
         echo "adding user to group ${sshGroup}"
         sudo useradd -s /bin/bash -d /home/usr -m -g ${sshGroup} -p $(echo pwd | openssl passwd -1 -stdin) usr
 
+        echo "adding user2ssh to group ${sshGroup}"
+        sudo useradd -s /bin/bash -d /home/usr2ssh -m -g ${sshGroup} -p $(echo pwd | openssl passwd -1 -stdin) usr2ssh
+
+        ssh-keygen -t rsa -b 4096 -N "123456" -f ~/.ssh/sftptest
+        chmod -R 700 ~/.ssh/sftptest
+        chmod 600 ~/.ssh/sftptest.pub
+
+        sudo -u usr2ssh mkdir /home/usr2ssh/.ssh/
+        sudo cat ~/.ssh/sftptest.pub >> /home/usr2ssh/.ssh/authorized_keys
+        sudo chown -R usr2ssh:${sshGroup} /home/usr2ssh/.ssh
+        sudo chmod go-w /home/usr2ssh
+        sudo chmod -R 700 /home/usr2ssh/.ssh
+        sudo chmod 600 /home/usr2ssh/.ssh/authorized_keys
+        cp ~/.ssh/sftptest ${GITHUB_WORKSPACE}/sftp-connector-test/src_test/com/axonivy/connector/sftp/test/sftptest
+
     - name: Setup Maven
       uses: stCarolas/setup-maven@v5
       with:
         maven-version: ${{ inputs.mvnVersion || '3.6.3' }}
 
     - name: Build with Maven
       run: mvn clean verify --batch-mode --fail-at-end ${{ inputs.mvnArgs }}
-
+        
     - name: Publish Unit Test Results
       uses: EnricoMi/publish-unit-test-result-action@v2
       if: always()
       with:
         junit_files: |
           */target/*-reports/*.xml
           !*/target/*-reports/failsafe-summary.xml
-
+    
     - name: Archive build artifact
       uses: actions/upload-artifact@v4
       with:

sftp-connector-demo/src/com/axonivy/connector/sftp/demo/Constants.java

@@ -0,0 +1,6 @@
+package com.axonivy.connector.sftp.demo;
+
+public class Constants {
+	public static final String DUMMY = "dummy";
+
+}

sftp-connector-demo/src_hd/com/axonivy/connector/sftp/demo/SftpClientDemo/SftpClientDemo.xhtml

@@ -31,7 +31,7 @@
 							<p:outputLabel for="fileUpload" value="File to Upload"/>
 							<p:fileUpload id="fileUpload" mode="advanced" skinSimple="true" 
 									auto="true" update="@form" process="@form" 
-									fileUploadListener="#{logic.handleFileUpload}" />
+									listener="#{logic.handleFileUpload}" />
 						</h:panelGrid>
 					</h:form>
 				</p:tab>

sftp-connector-demo/src_hd/com/axonivy/connector/sftp/demo/SftpClientDemo/SftpClientDemoData.ivyClass

@@ -1,5 +1,7 @@
 SftpClientDemoData #class
 com.axonivy.connector.sftp.demo.SftpClientDemo #namespace
+sftpName String #field
+sftpName PERSISTENT #fieldModifier
 clientHost String #field
 clientHost PERSISTENT #fieldModifier
 clientPort Number #field

sftp-connector-demo/src_hd/com/axonivy/connector/sftp/demo/SftpClientDemo/SftpClientDemoProcess.p.json

@@ -31,10 +31,13 @@
       "config" : {
         "output" : {
           "code" : [
-            "String prefix = \"com_axonivy_connector_sftp_server_\";",
-            "in.clientHost = ivy.var.variable(prefix+\"host\").value();",
-            "in.clientPort = Integer.parseInt(ivy.var.variable(prefix+\"port\").value());",
-            "in.clientUsername = ivy.var.variable(prefix+\"username\").value();"
+            "import com.axonivy.connector.sftp.service.SftpClientService;",
+            "import com.axonivy.connector.sftp.demo.Constants;",
+            "",
+            "in.sftpName = new String(Constants.DUMMY);",
+            "in.clientHost = SftpClientService.getClientHost(in.sftpName);",
+            "in.clientPort = Integer.parseInt(SftpClientService.getPort(in.sftpName));",
+            "in.clientUsername = SftpClientService.getUsername(in.sftpName);"
           ]
         }
       },
@@ -77,19 +80,22 @@
       "type" : "SubProcessCall",
       "name" : "Sftp/SftpUploadFile",
       "config" : {
-        "processCall" : "Sftp/SftpUploadFile:uploadFile(java.io.InputStream,String)",
+        "processCall" : "Sftp/SftpUploadFile:uploadFile(String,java.io.InputStream,String)",
         "output" : {
           "map" : {
             "out" : "in",
-            "out.isFileUploaded" : "result.isSuccess"
+            "out.isFileUploaded" : "result.isSuccess",
+            "out.sftpName" : "in.sftpName"
           }
         },
         "call" : {
           "params" : [
+            { "name" : "sftpName", "type" : "String" },
             { "name" : "fileToBeUploaded", "type" : "java.io.InputStream" },
             { "name" : "fileName", "type" : "String" }
           ],
           "map" : {
+            "param.sftpName" : "in.sftpName",
             "param.fileToBeUploaded" : "in.uploadedFile.getInputStream()",
             "param.fileName" : "in.uploadedFile.getFileName()"
           }
@@ -111,7 +117,7 @@
       "type" : "SubProcessCall",
       "name" : "Sftp/SftpDownloadFile",
       "config" : {
-        "processCall" : "Sftp/SftpDownloadFile:downloadFile(String)",
+        "processCall" : "Sftp/SftpDownloadFile:downloadFile(String,String)",
         "output" : {
           "map" : {
             "out" : "in",
@@ -120,9 +126,11 @@
         },
         "call" : {
           "params" : [
+            { "name" : "sftpName", "type" : "String" },
             { "name" : "remoteFileName", "type" : "String" }
           ],
           "map" : {
+            "param.sftpName" : "in.sftpName",
             "param.remoteFileName" : "in.fileToDownload.name"
           }
         }
@@ -191,7 +199,7 @@
       "type" : "SubProcessCall",
       "name" : "call list All Files",
       "config" : {
-        "processCall" : "Sftp/SftpDownloadFile:listAllFiles(String)",
+        "processCall" : "Sftp/SftpDownloadFile:listAllFiles(String,String)",
         "output" : {
           "map" : {
             "out" : "in",
@@ -200,9 +208,11 @@
         },
         "call" : {
           "params" : [
+            { "name" : "sftpName", "type" : "String" },
             { "name" : "remoteDirectory", "type" : "String" }
           ],
           "map" : {
+            "param.sftpName" : "in.sftpName",
             "param.remoteDirectory" : "\".\""
           }
         }

sftp-connector-product/README.md

@@ -53,28 +53,66 @@ Before starting the demo, please make sure to have an SSH/SFTP server on your co
 1. Open the following settings in “RebexTinySftpServer.exe.config” with a text editor and update the following values:
    ![RebexTinySftpServer.exe.config](images/RebexTinySftpServer.exe.config.png)
 
-2. Open the `configuration/variables.yaml` in your Designer and update the following global variables:
+   \* In order to test the connector with SSH key pair, put the public key file to folder `c:/sshkey`. 
 
+2. Configure one or more SFTP connectors in global variables. A SFTP connector is identified by a name and a global variable section containing access information. The following example shows connection information for a SFTP connector that should be accessible under the name local-rebex.
+Put this variable block into your project. At least `host`, `auth`, `username` and `password` must be defined.
    ```
 
    Variables:
 
      com.axonivy.connector.sftp.server:
-       # The host name to the SFTP server
-       host: 'localhost'
+       local-rebex:
+         # The host name to the SFTP server
+         host: 'localhost'
+
+         # Auth type to the SFPT server: password OR ssh
+         auth: 'password'
+
+         # The password to the SFTP server
+         password: pwd
+
+         # The port number to the SFTP server
+         port: 22
+
+         # The username to the SFTP server
+         username: 'usr'
 
-       # The password to the SFTP server
-       password: pwd
-
-       # The port number to the SFTP server
-       port: 22
+   ```
 
-       # The username to the SFTP server
-       username: 'usr'
+   Or in order to enable the connector with SSH keypair, `secret.sshkey` and `secret.sshpassphrase` must be defined:
+   ```
+
+   Variables:
 
+     com.axonivy.connector.sftp.server:
+       local-rebex:
+         # The host name to the SFTP server
+         host: 'localhost'
+
+         # Auth type to the SFPT server: password OR ssh
+         auth: 'ssh'
+
+         # The password to the SFTP server
+         password: ''
+
+         # The port number to the SFTP server
+         port: 22
+
+         # The username to the SFTP server
+         username: 'usr'
+
+         # The ssh key string to SFTP server
+         # [secret private key]
+         secret.sshkey: |
+           YOUR PRIVATE KEY CONTENT HERE
+
+         # The ssh key passphrase
+         secret.sshpassphrase: 'Your ssh key passphrase'
    ```
+   \* the private key is in pair of the public key put in step 1
 
-4. Save the changed settings.
+3. Save the changed settings.
 
 
 ### Prerequisites:

sftp-connector-test/src_test/com/axonivy/connector/sftp/test/SftpMultiConnectionTest.java

@@ -0,0 +1,53 @@
+package com.axonivy.connector.sftp.test;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Paths;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+import com.axonivy.connector.sftp.service.SftpClientService;
+
+import ch.ivyteam.ivy.bpm.engine.client.BpmClient;
+import ch.ivyteam.ivy.bpm.exec.client.IvyProcessTest;
+import ch.ivyteam.ivy.environment.Ivy;
+
+
+/**
+ * This SftpMultiConnectionTest creates 2 sFTP connections
+ */
+@IvyProcessTest(enableWebServer = true)
+public class SftpMultiConnectionTest {
+
+	private static final String PREFIX = "com.axonivy.connector.sftp.server.";
+
+	private static final String SFTP_NAME = "dummy";
+	private static final String SFTP_SSH_NAME = "dummy_ssh";
+	private static final String SFTP_SSH_NAME_VAR = SFTP_SSH_NAME + ".";
+
+	@BeforeEach
+	public void preInit() throws Exception {
+		// set-up variables for sftp connector with SSH key pair
+		Ivy.var().set(PREFIX+SFTP_SSH_NAME_VAR+"host", "localhost");
+		Ivy.var().set(PREFIX+SFTP_SSH_NAME_VAR+"username", "usr2ssh");
+		Ivy.var().set(PREFIX+SFTP_SSH_NAME_VAR+"auth", "ssh");
+		Ivy.var().set(PREFIX+SFTP_SSH_NAME_VAR+"password", "");
+		String keyString = Files.readString(Paths.get(SftpProcessSSHTest.class.getResource("sftptest").toURI()));
+		Ivy.var().set(PREFIX+SFTP_SSH_NAME_VAR+"secret.sshkey", keyString);
+		Ivy.var().set(PREFIX+SFTP_SSH_NAME_VAR+"secret.sshpassphrase", "123456");
+	}
+
+	@Test
+	public void callOpenConnection(BpmClient bpmClient) throws IOException {
+		SftpClientService sftpClient = new SftpClientService(SFTP_NAME);
+		SftpClientService sftpSSHClient = new SftpClientService(SFTP_SSH_NAME);
+
+		assertThat(sftpClient).isNotNull();
+		assertThat(sftpSSHClient).isNotNull();
+		sftpClient.close();
+		sftpSSHClient.close();
+	}
+}