Skip to content

The Swisscom Health Confidential Data Routing (CDR) Client

License

Notifications You must be signed in to change notification settings

swisscom/cdr-client

Repository files navigation

CDR Client

The Swisscom Health Confidential Data Routing (CDR) Client

Installation / Run the client

Improvements for the installation are planned. For now, the client is only available as a jar file with manual steps required for the installation.

Pre-Requirements:

  • Java 17 (or higher) installed

Go to the releases github page and click on the maven assets for the newest release: releases assets overview Download the jar file: release jar download Place a file named application-customer.yaml in the same directory as the jar file. The application-customer.yaml file should contain the configuration for the client. An example can be found here.

Open a terminal and navigate to the directory where the jar file is located. Run the following command to start the client (check the jar name and replace it in the command or rename the jar itself):

The -D parameters need to be placed before the "-jar cdr-client.jar".

The quotes are necessary for Windows, but not for Unix systems

java "-Dspring.profiles.active=customer" "-Dspring.config.additional-location=./application-customer.yaml" -jar cdr-client.jar

Check that no error messages are present in the terminal (or have a look at the "cdr-client.log" file that is created in the same folder as you've placed tha jar file) and that the client is running.

Configure an OS appropriate service to run the client as a background service.

API

There is no endpoint offered here.

The CDR Client is triggered by a scheduler and downloads by the given delay time the files from the CDR API. File uploads are triggered by the file system events.

Functionality

For each defined connector the CDR Client calls the defined endpoint of the CDR API.

Document Download

For each connector one file after the other is pulled. Each file is written into a temporary folder defined as 'local-folder'. The file is named after the received 'cdr-document-uuid' header that is a unique identifier created by the CDR API. After saving the file to the temporary folder, a delete request for the given 'cdr-document-uuid' is sent to the CDR API. After successfully deleting the file in the CDR API, the file is moved to the connector defined 'target-folder'.

The temporary folders need to be monitored by another tool to make sure that no files are forgotten (should only happen if the move to the destination folder is failing).

Document Upload

Document upload uses a combination of directory polling and event driven uploads. The polling process inspects the contents of every source folder at the configured interval and uploads all .xml files it finds to the CDR API. The event driven process listens for filesystem events from the same directories and uploads all .xml files as they are created. The two approaches are combined so

  • at start of the client all files that might have arrived while the client was not running are uploaded
  • folders on (remote) filesystems that do not support filesystem events can be used as source folders

If the filesystem that hosts a source folder supports filesystem events, then the polling process normally won't find any files to process and immediately goes back to sleep. If the polling process wakes up right at the moment a new file arrives, it might happen that both processes pick up the same file for processing. However, only one of the two will continue to process the file, depending on which one is first to register the file for processing.

After the file is successfully uploaded it will be deleted. If the upload failed with a response code of 4xx the file will be appended with '.error' and an additional file with the same name as the sent file, but with the extension '.log' will be created and the received response body will be saved to this file. If the upload failed with a response code of 5xx the file will be retried indefinitely, assuming the root cause is an infrastructure issue that will ultimately be resolved (and uploading another file would fail too, for the same reason). See retry-delay in the application-client.yaml file.

Local development

To test some usecases there is a docker-compose.yaml with wiremock that simulates the CDR API. Run with docker-compose down && docker-compose up --build.

If you want to work with a deployed CDR API you need to change the application-dev.yaml

Set the following spring profile to active: dev

Following environment variables need to be set:

  • cdrClient.localFolder=~/Documents/cdr/inflight
  • cdrClient.targetFolder=~/Documents/cdr/target
  • cdrClient.sourceFolder=~/Documents/cdr/source
  • CDR_B2C_TENANT_ID=some-cdr-azure-ad-tenant
  • CDR_CLIENT_ID=oauth2-client-id
  • CDR_CLIENT_SECRET=oauth2-client-secret

Application Plugin

To create scripts to run the application locally one needs to run following gradle cmd: gradlew installDist

This creates a folder build/install/cdr-client with scripts for windows and unix servers in the bin folder.

To run the application locally one can call ./build/install/cdr-client/bin/cdr-client. It is required to have a application-customer.yaml and link it by adding following command line: JVM_OPTS="-Dspring.config.additional-location=./application-customer.yaml". With a configuration that looks like this.

Running the Jar

If the provided jar should be run directly, the following command can be used: java -jar cdr-client.jar The jar can be found in build/libs.

Following environment variables need to be present (and correctly configured) so that the application can start successfully:

SPRING_CONFIG_ADDITIONAL_LOCATION={{ cdr_client_dir }}/config/application-customer.yaml"
LOGGING_FILE_NAME={{ cdr_client_dir }}/logs/cdr-client.log"

The LOGGING_FILE_NAME is just so that the log file is not auto created where the jar is run from.

See Application Plugin regarding the content of the application-customer.yaml

application-customer yaml example

client:
  local-folder: /tmp/download/in-flight # temporary folder for files that are currently downloaded from CDR API
  idp-credentials:
    tenant-id: swisscom-health-tenant-id # provided by Swisscom Health
    client-id: my-client-id # Self created through CDR UI
    client-secret: my-secret # Self created through CDR UI
  endpoint:
    host: cdr.health.swisscom.ch
  customer:
    - connector-id: 8000000000000 # provided by Swisscom Health
      content-type: application/forumdatenaustausch+xml;charset=UTF-8
      target-folder: /tmp/download/test/8000000000000
      source-folder: /tmp/upload/test/8000000000000
      mode: test
    - connector-id: 8000000000000 # provided by Swisscom Health
      content-type: application/forumdatenaustausch+xml;charset=UTF-8
      target-folder: /tmp/download/8000000000000
      source-folder: /tmp/upload/8000000000000
      mode: production

Some information can also be set as environment variables. See application-client.yaml for variable names.

If the host is not set to production, but to stg instead, then the CDR_CLIENT_SCOPE_PREFIX environment variable needs to be set to "tst.".