Stir shaken crt inheritance (#1710)

* customer auth stir shaken certificate inheritance

Author: dmitry-sinina

app/admin/equipment/gateways.rb

@@ -331,6 +331,8 @@ def resource_params
                           scope: -> { Routing::Numberlist.order(:name) },
                           path: '/numberlists/search'
 
+  filter :stir_shaken_crt, as: :select, input_html: { class: 'chosen' }
+
   form do |f|
     f.semantic_errors *f.object.errors.attribute_names
 
@@ -529,7 +531,7 @@ def resource_params
         f.inputs 'STIR/SHAKEN' do
           f.input :stir_shaken_mode_id, as: :select, include_blank: false,
                                         collection: Gateway::STIR_SHAKEN_MODES.invert
-          f.input :stir_shaken_crt, as: :select
+          f.input :stir_shaken_crt, as: :select, input_html: { class: 'chosen' }
         end
       end
     end

app/admin/import/import_customers_auths.rb

@@ -89,5 +89,6 @@ def resource_params
 
     column :tag_action
     column :tag_action_value
+    column :stir_shaken_crt, &:stir_shaken_crt_name
   end
 end

app/admin/routing/customers_auths.rb

@@ -67,7 +67,8 @@
                  :ss_src_rewrite_rule,
                  :ss_src_rewrite_result,
                  :ss_dst_rewrite_rule,
-                 :ss_dst_rewrite_result
+                 :ss_dst_rewrite_result,
+                 [:stir_shaken_crt_name, proc { |row| row.stir_shaken_crt.try(:name) }]
 
   acts_as_import resource_class: Importing::CustomersAuth, skip_columns: [:tag_action_value]
 
@@ -96,6 +97,7 @@
                 :cnam_database_id, :src_numberlist_use_diversion, :rewrite_ss_status_id,
                 :ss_mode_id, :ss_invalid_identity_action_id, :ss_no_identity_action_id,
                 :ss_src_rewrite_rule, :ss_src_rewrite_result, :ss_dst_rewrite_rule, :ss_dst_rewrite_result,
+                :stir_shaken_crt_id,
                 tag_action_value: []
   # , :enable_redirect, :redirect_method, :redirect_to
 
@@ -262,6 +264,8 @@ def update
                           scope: -> { Routing::Numberlist.order(:name) },
                           path: '/numberlists/search'
 
+  filter :stir_shaken_crt, as: :select, input_html: { class: 'chosen' }
+
   form do |f|
     f.semantic_errors *f.object.errors.attribute_names
     tabs do
@@ -425,6 +429,7 @@ def update
           f.input :ss_src_rewrite_result
           f.input :ss_dst_rewrite_rule
           f.input :ss_dst_rewrite_result
+          f.input :stir_shaken_crt, as: :select, input_html: { class: 'chosen' }
         end
       end
     end
@@ -536,6 +541,7 @@ def update
           row :ss_src_rewrite_result
           row :ss_dst_rewrite_rule
           row :ss_dst_rewrite_result
+          row :stir_shaken_crt
         end
       end
     end

app/models/customers_auth.rb

@@ -72,6 +72,7 @@
 #  ss_invalid_identity_action_id    :integer(2)       default(0), not null
 #  ss_mode_id                       :integer(2)       default(0), not null
 #  ss_no_identity_action_id         :integer(2)       default(0), not null
+#  stir_shaken_crt_id               :integer(2)
 #  tag_action_id                    :integer(2)
 #  transport_protocol_id            :integer(2)
 #
@@ -244,6 +245,7 @@ module CONST
   belongs_to :lua_script, class_name: 'System::LuaScript', foreign_key: :lua_script_id, optional: true
 
   belongs_to :cnam_database, class_name: 'Cnam::Database', foreign_key: :cnam_database_id, optional: true
+  belongs_to :stir_shaken_crt, class_name: 'Equipment::StirShaken::SigningCertificate', foreign_key: :stir_shaken_crt_id, optional: :true
 
   array_belongs_to :tag_action_values, class_name: 'Routing::RoutingTag', foreign_key: :tag_action_value
 

app/models/customers_auth_normalized.rb

@@ -73,6 +73,7 @@
 #  ss_invalid_identity_action_id    :integer(2)       default(0), not null
 #  ss_mode_id                       :integer(2)       default(0), not null
 #  ss_no_identity_action_id         :integer(2)       default(0), not null
+#  stir_shaken_crt_id               :integer(2)
 #  tag_action_id                    :integer(2)
 #  transport_protocol_id            :integer(2)
 #

app/models/equipment/stir_shaken/signing_certificate.rb

@@ -14,6 +14,9 @@
 class Equipment::StirShaken::SigningCertificate < ApplicationRecord
   self.table_name = 'class4.stir_shaken_signing_certificates'
 
+  has_many :customers_auths, foreign_key: :stir_shaken_crt_id, dependent: :restrict_with_error
+  has_many :gateways, foreign_key: :stir_shaken_crt_id, dependent: :restrict_with_error
+
   validates :name, :certificate, :key, :x5u, presence: true
 
   include Yeti::StateUpdater

app/models/importing/customers_auth.rb

@@ -60,6 +60,7 @@
 #  src_prefix                       :string
 #  src_rewrite_result               :string
 #  src_rewrite_rule                 :string
+#  stir_shaken_crt_name             :string
 #  tag_action_name                  :string
 #  tag_action_value                 :integer(2)       default([]), not null, is an Array
 #  tag_action_value_names           :string
@@ -87,6 +88,7 @@
 #  src_name_field_id                :integer(2)
 #  src_number_field_id              :integer(2)
 #  src_numberlist_id                :integer(4)
+#  stir_shaken_crt_id               :integer(2)
 #  tag_action_id                    :integer(2)
 #  transport_protocol_id            :integer(2)
 #
@@ -108,6 +110,7 @@ class Importing::CustomersAuth < Importing::Base
   belongs_to :radius_accounting_profile, class_name: '::Equipment::Radius::AccountingProfile', foreign_key: :radius_accounting_profile_id, optional: true
   belongs_to :tag_action, class_name: 'Routing::TagAction', optional: true
   belongs_to :lua_script, class_name: 'System::LuaScript', foreign_key: :lua_script_id, optional: true
+  belongs_to :stir_shaken_crt, class_name: 'Equipment::StirShaken::SigningCertificate', foreign_key: :stir_shaken_crt_id, optional: :true
 
   self.import_attributes = %w[
     enabled
@@ -158,6 +161,7 @@ class Importing::CustomersAuth < Importing::Base
     tag_action_id
     tag_action_value
     lua_script_id
+    stir_shaken_crt_id
   ]
 
   import_for ::CustomersAuth

config/locales/en.yml

@@ -109,6 +109,7 @@ en:
         radius_accounting_profile: "RADIUS accounting profile for LegA(Origination)"
         ss_src_rewrite_rule: 'Rewrite rule to adapt SRC number before STIR/SHAKEN Identity validation'
         ss_dst_rewrite_rule: 'Rewrite rule to adapt DST number before STIR/SHAKEN Identity validation'
+        stir_shaken_crt: 'Redefine certificate for signature. If null - vendor gw certificate will be used'
       destination:
         reverse_billing: "If enabled, customer account balance is raised"
       routing_routing_plan: