VEBT-777 - Add API's to connect to four DGIB endpoints for VYE

.rubocop_todo.yml

@@ -315,6 +315,7 @@ Lint/MissingSuper:
     - 'modules/va_notify/lib/va_notify/service.rb'
     - 'modules/vaos/app/services/vaos/session_service.rb'
     - 'modules/veteran/app/models/veteran/user.rb'
+    - 'modules/vye/lib/dgib/service.rb'
 
 # Offense count: 5
 Lint/NoReturnInBeginEndBlocks:

app/policies/vye_policy.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+VyePolicy = Struct.new(:user, :user_info) do
+  def access?
+    return true if user.present?
+
+    false
+  end
+
+  alias_method :claimant_lookup?, :access?
+end

config/initializers/breakers.rb

@@ -6,6 +6,10 @@
 require 'central_mail/configuration'
 require 'debt_management_center/debts_configuration'
 require 'decision_review/configuration'
+require 'dgib/claimant_lookup/configuration'
+require 'dgib/claimant_status/configuration'
+require 'dgib/verification_record/configuration'
+require 'dgib/verify_claimant/configuration'
 require 'evss/claims_service'
 require 'evss/common_service'
 require 'evss/dependents/configuration'
@@ -77,6 +81,11 @@
     SearchTypeahead::Configuration.instance.breakers_service,
     SearchClickTracking::Configuration.instance.breakers_service,
     VAOS::Configuration.instance.breakers_service,
+    Vye::DGIB::ClaimantLookup::Configuration.instance.breakers_service,
+    Vye::DGIB::ClaimantStatus::Configuration.instance.breakers_service,
+    Vye::DGIB::Configuration.instance.breakers_service,
+    Vye::DGIB::VerificationRecord::Configuration.instance.breakers_service,
+    Vye::DGIB::VerifyClaimant::Configuration.instance.breakers_service,
     IAMSSOeOAuth::Configuration.instance.breakers_service,
     CovidVaccine::V0::VetextConfiguration.instance.breakers_service,
     VEText::Configuration.instance.breakers_service,

config/settings.yml

@@ -1443,10 +1443,21 @@ genisis:
   pass: bogus
 
 # Settings for connecting AFS Veteran Services
+# For locahost we can use the existing certs as long as we don't call out
 dgi:
+  # add med_api here? Will need to reach out to that team
   jwt:
-    public_key_path: modules/meb_api/spec/fixtures/dgi_public_test.pem
-    private_key_path: modules/meb_api/spec/fixtures/dgi_private_test.pem
+    public_key_path: ""
+    private_key_path: ""
+  vye:
+    jwt:
+      # May not need the public path
+      public_key_path: ""
+      private_key_path: ""
+      public_ica11_rca2_key_path: ""
+    vets:
+      url: ""
+      mock: false
   vets:
     url: "https://jenkins.ld.afsp.io:32512/vets-service/v1/" # Docker setup for microservice
     mock: false

modules/vye/app/controllers/vye/v1/dgib_verifications_controller.rb

@@ -0,0 +1,101 @@
+# frozen_string_literal: true
+
+require 'dgib/claimant_lookup/service'
+require 'dgib/claimant_status/service'
+require 'dgib/verification_record/service'
+require 'dgib/verify_claimant/service'
+
+module Vye
+  module Vye::V1
+    class Vye::V1::DgibVerificationsController < Vye::V1::ApplicationController
+      before_action { authorize :vye, :access? }
+
+      def verification_record
+        head :forbidden unless authorize(user_info, policy_class: VyePolicy)
+
+        response = verification_service.get_verification_record(params[:claimant_id])
+        serializer = Vye::ClaimantVerificationSerializer
+        process_response(response, serializer)
+      end
+
+      def verify_claimant
+        head :forbidden unless authorize(user_info, policy_class: VyePolicy)
+
+        response = verify_claimant_service.verify_claimant(
+          params[:claimant_id],
+          params[:verified_period_begin_date],
+          params[:verified_period_end_date],
+          params[:verified_through_date],
+          params[:verification_method],
+          params.dig(:app_communication, :response_type)
+        )
+
+        serializer = Vye::VerifyClaimantSerializer
+        process_response(response, serializer)
+      end
+
+      # the serializer for this endpoint is the same as for verify_claimant
+      def claimant_status
+        head :forbidden unless authorize(user_info, policy_class: VyePolicy)
+
+        response = claimant_status_service.get_claimant_status(params[:claimant_id])
+        serializer = Vye::VerifyClaimantSerializer
+        process_response(response, serializer)
+      end
+
+      def claimant_lookup
+        head :forbidden unless authorize(user_info, policy_class: VyePolicy)
+
+        response = claimant_lookup_service.claimant_lookup(current_user.ssn)
+        serializer = Vye::ClaimantLookupSerializer
+        process_response(response, serializer)
+      end
+
+      private
+
+      # Vye Services related stuff
+      def claimant_lookup_service
+        Vye::DGIB::ClaimantLookup::Service.new(@current_user)
+      end
+
+      def claimant_status_service
+        Vye::DGIB::ClaimantStatus::Service.new(@current_user)
+      end
+
+      def verification_service
+        Vye::DGIB::VerificationRecord::Service.new(@current_user)
+      end
+
+      def verify_claimant_service
+        Vye::DGIB::VerifyClaimant::Service.new(@current_user)
+      end
+
+      def process_response(response, serializer)
+        Rails.logger.debug { "Processing response with status: #{response&.status}" }
+        case response.status
+        when 200
+          Rails.logger.debug 'Rendering JSON response'
+          render json: serializer.new(response).to_json
+        when 204
+          Rails.logger.debug 'Sending no content'
+          head :no_content
+        when 403
+          Rails.logger.debug 'Sending forbidden'
+          head :forbidden
+        when 404
+          Rails.logger.debug 'Sending not found'
+          head :not_found
+        when 422
+          Rails.logger.debug 'Sending unprocessable entity'
+          head :unprocessable_entity
+        when nil
+          Rails.logger.debug 'No response from server'
+        else
+          Rails.logger.debug 'Sending internal server error'
+          head :internal_server_error
+        end
+      end
+      # End Vye Services
+    end
+  end
+end

modules/vye/app/serializers/vye/claimant_lookup_serializer.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+module Vye
+  class ClaimantLookupSerializer < Vye::VyeSerializer
+    def serializable_hash
+      {
+        claimant_id: @resource&.claimant_id
+      }
+    end
+  end
+end

modules/vye/app/serializers/vye/claimant_verification_serializer.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Vye
+  class ClaimantVerificationSerializer < Vye::VyeSerializer
+    def serializable_hash
+      {
+        claimant_id: @resource&.claimant_id,
+        delimiting_date: @resource&.delimiting_date,
+        enrollment_verifications: @resource&.enrollment_verifications,
+        verified_details: @resource&.verified_details,
+        payment_on_hold: @resource&.payment_on_hold
+      }
+    end
+  end
+end

modules/vye/app/serializers/vye/verification_serializer.rb

@@ -12,13 +12,13 @@ def to_json(*)
 
     def serializable_hash
       {
-        award_id: @resource.award_id,
-        act_begin: @resource.act_begin,
-        act_end: @resource.act_end,
-        transact_date: @resource.transact_date,
-        monthly_rate: @resource.monthly_rate,
-        number_hours: @resource.number_hours,
-        source_ind: @resource.source_ind
+        award_id: @resource&.award_id,
+        act_begin: @resource&.act_begin,
+        act_end: @resource&.act_end,
+        transact_date: @resource&.transact_date,
+        monthly_rate: @resource&.monthly_rate,
+        number_hours: @resource&.number_hours,
+        source_ind: @resource&.source_ind
       }
     end
   end

modules/vye/app/serializers/vye/verify_claimant_serializer.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+module Vye
+  class VerifyClaimantSerializer < Vye::VyeSerializer
+    def serializable_hash
+      {
+        claimant_id: @resource&.claimant_id,
+        delimiting_date: @resource&.delimiting_date,
+        verified_details: @resource&.verified_details,
+        payment_on_hold: @resource&.payment_on_hold
+      }
+    end
+  end
+end

modules/vye/app/serializers/vye/vye_serializer.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+module Vye
+  class VyeSerializer
+    attr_reader :resource
+
+    def initialize(resource)
+      @resource = resource
+    end
+
+    def to_json(*)
+      Oj.dump(serializable_hash, mode: :compat, time_format: :ruby)
+    end
+
+    def status
+      @resource&.status
+    end
+  end
+end

modules/vye/config/initializers/dgib_requires.rb

@@ -0,0 +1,8 @@
+# frozen_string_literal: true
+
+# Zeitwerk was giving me fits until I added this.
+# It's a little ugly, but it works.
+require Rails.root.join('modules', 'vye', 'lib', 'dgib', 'claimant_lookup', 'service')
+require Rails.root.join('modules', 'vye', 'lib', 'dgib', 'claimant_status', 'service')
+require Rails.root.join('modules', 'vye', 'lib', 'dgib', 'verification_record', 'service')
+require Rails.root.join('modules', 'vye', 'lib', 'dgib', 'verify_claimant', 'service')

modules/vye/config/routes.rb

@@ -6,5 +6,10 @@
     resource :verifications, only: [:create], path: '/verify'
     resource :address_changes, only: [:create], path: '/address'
     resource :direct_deposit_changes, only: [:create], path: '/bank_info'
+
+    post 'dgib_verifications/verification_record', to: 'dgib_verifications#verification_record'
+    post 'dgib_verifications/verify_claimant', to: 'dgib_verifications#verify_claimant'
+    post 'dgib_verifications/claimant_status', to: 'dgib_verifications#claimant_status'
+    get 'dgib_verifications/claimant_lookup', to: 'dgib_verifications#claimant_lookup'
   end
 end

modules/vye/lib/dgib/authentication_token_service.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+module Vye
+  module DGIB
+    class AuthenticationTokenService
+      ALGORITHM_TYPE = 'RS256'
+      E = 'AQAB'
+      TYP = 'JWT'
+      KID = 'vye'
+      USE = 'sig'
+      SIGNING_KEY = Settings.dgi.vye.jwt.private_key_path
+      RSA_PRIVATE = OpenSSL::PKey::RSA.new(File.read(SIGNING_KEY)) if File.exist?(SIGNING_KEY)
+
+      def self.call
+        payload = {
+          exp: Time.now.to_i + (5 * 60), # JWT expiration time (5 minutes)
+          nbf: Time.now.to_i,
+          realm_access: {
+            roles: ['VYE']
+          }
+        }
+
+        header_fields = { kid: KID, typ: TYP }
+
+        JWT.encode payload, RSA_PRIVATE, ALGORITHM_TYPE, header_fields
+      end
+    end
+  end
+end

modules/vye/lib/dgib/claimant_lookup/configuration.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'dgib/configuration'
+
+module Vye
+  module DGIB
+    module ClaimantLookup
+      class Configuration < Vye::DGIB::Configuration
+        def service_name
+          'DGIB/ClaimantLookup'
+        end
+      end
+    end
+  end
+end

modules/vye/lib/dgib/claimant_lookup/response.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+require 'dgib/response'
+
+module Vye
+  module DGIB
+    module ClaimantLookup
+      class Response < Vye::DGIB::Response
+        attribute :claimant_id, Integer
+
+        def initialize(status, response = nil)
+          attributes = { claimant_id: response.body['claimant_id'] }
+
+          super(status, attributes)
+        end
+      end
+    end
+  end
+end

modules/vye/lib/dgib/claimant_lookup/service.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require 'common/client/base'
+require 'dgib/authentication_token_service'
+require 'dgib/service'
+require 'dgib/claimant_lookup/configuration'
+require 'dgib/claimant_lookup/response'
+
+module Vye
+  module DGIB
+    module ClaimantLookup
+      class Service < Vye::DGIB::Service
+        configuration Vye::DGIB::ClaimantLookup::Configuration
+        STATSD_KEY_PREFIX = 'api.dgi.claimant_lookup_service'
+
+        def claimant_lookup(ssn)
+          params = ActionController::Parameters.new({ ssn: })
+          with_monitoring do
+            headers = request_headers
+            options = { timeout: 60 }
+            response = perform(:post, end_point, camelize_keys_for_java_service(params).to_json, headers, options)
+            Vye::DGIB::ClaimantLookup::Response.new(response.status, response)
+          end
+        end
+
+        private
+
+        def end_point
+          'dgi/vye/claimantLookup'
+        end
+
+        def json
+          nil
+        end
+
+        def request_headers
+          { Authorization: "Bearer #{DGIB::AuthenticationTokenService.call}" }
+        end
+      end
+    end
+  end
+end

modules/vye/lib/dgib/claimant_status/configuration.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+require 'dgib/configuration'
+
+module Vye
+  module DGIB
+    module ClaimantStatus
+      class Configuration < Vye::DGIB::Configuration
+        def service_name
+          'DGIB/ClaimantStatus'
+        end
+      end
+    end
+  end
+end