ppazos / cabolabs-ehrserver-groovy Goto Github PK

• basic commit
• add xml xsd validation on the client side if the commit is XML
• do JSON to XML to validate XML when the commit is JSON

those will work one time if committed directly because of duplicated ids, the test should overwrite the ids to allow multiple commits

ref https://stackoverflow.com/questions/12961570/sslpeerunverifiedexception-peer-not-authenticated

All API calls need to process a lot of possible exceptions.

1. Create a method "doRequest" that receives the request in a closure, executes the closure, checks for all the possible exceptions there, and returns the response.
2. The current methods process the response and return the correspondent object (data or error).

when committing compositions with spanish accentuation the characters appear as symbols on the EHRServer, it seems UTF-8 should be <?xml version="1.0" encoding="ISO-8859-1"?> for spanish.

retrieves the composition details in XML or JSON.

to list all the queries accessible by the user

java.lang.NullPointerException: Cannot get property 'token' on null object
at org.codehaus.groovy.runtime.NullObject.getProperty(NullObject.java:60)
at org.codehaus.groovy.runtime.InvokerHelper.getProperty(InvokerHelper.java:172)
at org.codehaus.groovy.runtime.callsite.NullCallSite.getProperty(NullCallSite.java:47)

https://github.com/ppazos/cabolabs-ehrserver-groovy/tree/master/src/com/cabolabs/cds

when an exception is thrown, result is null and should be returned to the client app so it can do something about it.

https://github.com/ppazos/cabolabs-ehrserver-groovy/blob/master/src/com/cabolabs/ehrserver/EHRServerClient.groovy#L326

Server certs change.

We need to download the server cert to be able to do HTTPS calls.

We need to download and cache the cert dynamically from time to time, or when an SSL appears (forced update).

All this should be transparent to the client.

Reading, most mention the use of a Certificate Manager, where certs can be added and updated.

Some ideas:

https://github.com/escline/InstallCert/blob/master/InstallCert.java

https://github.com/EMCECS/ssl-certificate-extractor/blob/master/src/main/java/SSLCertificateExtractor.java

https://www.codebyamir.com/blog/java-developers-guide-to-ssl-certificates

http://helpdesk.objects.com.au/java/how-do-i-programatically-extract-a-certificate-from-a-site-and-add-it-to-my-keystore

http://www.xinotes.net/notes/note/1088/

https://stackoverflow.com/questions/859111/how-can-i-use-different-certificates-on-specific-connections/859271#859271

https://stackoverflow.com/questions/10577029/how-do-i-retrieve-an-untrusted-ssl-server-certificate-in-order-to-review-and-tru

https://stackoverflow.com/questions/41986959/dynamic-ssl-keystore-certificate-selection

https://jcalcote.wordpress.com/2010/06/22/managing-a-dynamic-java-trust-store/

https://futurestud.io/tutorials/retrofit-2-how-to-trust-unsafe-ssl-certificates-self-signed-expired
https://github.com/square/okhttp/blob/master/samples/guide/src/main/java/okhttp3/recipes/CustomTrust.java
http://square.github.io/retrofit/

FULL EXAMPLE prints some basic info about the cert
https://www.mkyong.com/java/java-https-client-httpsurlconnection-example/

https://stackoverflow.com/questions/13022717/java-and-https-url-connection-without-downloading-certificate