com.contrastsecurity.sdk

Class ContrastSDK

java.lang.Object

com.contrastsecurity.sdk.ContrastSDK

public class ContrastSDK
extends Object

Entry point for using the Contrast REST API. Make an instance of this class and call methods. Easy!

Field Summary

Fields

Modifier and Type	Field and Description
static int	DEFAULT_CONNECTION_TIMEOUT Default connection timeout.
static int	DEFAULT_READ_TIMEOUT Default read timeout.

Constructor Summary

Constructors

Constructor and Description
ContrastSDK()
ContrastSDK(String user, String serviceKey, String apiKey) Create a ContrastSDK object to use the Contrast V3 API
ContrastSDK(String user, String serviceKey, String apiKey, String restApiURL) Create a ContrastSDK object to use the Contrast V3 API
ContrastSDK(String user, String serviceKey, String apiKey, String restApiURL, Proxy proxy) Create a ContrastSDK object to use the Contrast V3 API through a Proxy.

Method Summary

Modifier and Type	Method and Description
byte[]	getAgent(AgentType type, String organizationId) Download a contrast.jar agent associated with this account.
byte[]	getAgent(AgentType type, String organizationId, String profileName) Download a contrast.jar agent associated with this account.
Applications	getApplication(String organizationId, String appId) Get summary information about a single app without expandValues.
Applications	getApplication(String organizationId, String appId, EnumSet<FilterForm.ApplicationExpandValues> expandValues) Get summary information about a single app.
Applications	getApplications(String organizationId) Get the list of applications being monitored by Contrast.
Applications	getApplicationsNames(String organizationId)
AssessLicenseOverview	getAssessLicensing(String organizationId) Get all Assess Licensing for an Organizations.
Coverage	getCoverage(String organizationId, String appId) Return coverage data about the monitored Contrast application.
Libraries	getLibraries(String organizationId, String appId)
Libraries	getLibraries(String organizationId, String appId, EnumSet<FilterForm.LibrariesExpandValues> expandValues) Return the libraries of the monitored Contrast application.
LibraryScores	getLibraryScores(String organizationId) Return the library Scores for an Organization.
LibraryStats	getLibraryStats(String organizationId) Return the library Stats for an Organization.
Users	getOrganizationUsers(String organizationId) Get all users for an organization.
Organizations	getProfileDefaultOrganizations() Get the default organization for the user profile.
Organizations	getProfileOrganizations() Get all organizations for the user profile.
Rules	getRules(String organizationId) Get the rules for an organization
Servers	getServers(String organizationId, ServerFilterForm filterForm) Return the servers of the monitored Contrast application.
Servers	getServersWithFilter(String organizationId, ServerFilterForm filterForm) Return the servers of the monitored Contrast application.
Traces	getTraceFilterByRule(String organizationId, String appId, List<String> ruleNames) Deprecated.
TraceListing	getTraceFilters(String organizationId, String appId) Get the filters for the traces in the application.
Traces	getTraces(String organizationId, String appId, TraceFilterForm form) Get the vulnerabilities in the application whose ID is passed in.
Traces	getTracesInOrg(String organizationId, TraceFilterForm form) Get the vulnerabilities in the organization whose ID is passed in.
Traces	getTracesWithFilter(String organizationId, String appId, TraceFilterType traceFilterType, TraceFilterKeycode keycode, TraceFilterForm form) Get the vulnerabilities in the application whose ID is passed in with a filter.
VulnerabilityTrend	getYearlyVulnTrend(String organizationId) Get all Vulnerability Trend for an Organizations.
HttpURLConnection	makeConnection(String url, String method)
InputStream	makeRequest(HttpMethod method, String path)
void	setConnectionTimeout(int timeout) Sets a custom connection timeout for all SDK requests.
void	setReadTimeout(int timeout) Set a custom read timeout for all SDK requests.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_CONNECTION_TIMEOUT

public static final int DEFAULT_CONNECTION_TIMEOUT

Default connection timeout. If connection timeout its set to this value, custom timeout will be ignored and requests will take the default value that its usually assigned to them.

See Also:

Constant Field Values

DEFAULT_READ_TIMEOUT

public static final int DEFAULT_READ_TIMEOUT

Default read timeout. If read timeout its set to this value, custom timeout will be ignored and requests will take default value that its usually assigned to them.

See Also:

Constant Field Values

Constructor Detail

ContrastSDK

public ContrastSDK()

ContrastSDK

public ContrastSDK(String user,
                   String serviceKey,
                   String apiKey,
                   String restApiURL)
            throws IllegalArgumentException

Create a ContrastSDK object to use the Contrast V3 API

Parameters:

user - Username (e.g., joe@acme.com)

serviceKey - User service key

apiKey - API Key

restApiURL - the base Contrast API URL

Throws:

IllegalArgumentException - if the API URL is malformed

ContrastSDK

public ContrastSDK(String user,
                   String serviceKey,
                   String apiKey,
                   String restApiURL,
                   Proxy proxy)
            throws IllegalArgumentException

Create a ContrastSDK object to use the Contrast V3 API through a Proxy.

Parameters:

user - Username (e.g., joe@acme.com)

serviceKey - User service key

apiKey - API Key

restApiURL - the base Contrast API URL

proxy - Proxy to use

Throws:

IllegalArgumentException - if the API URL is malformed

ContrastSDK

public ContrastSDK(String user,
                   String serviceKey,
                   String apiKey)

Create a ContrastSDK object to use the Contrast V3 API

This will use the default api url which is https://app.contrastsecurity.com/Contrast/api

Parameters:

user - Username (e.g., joe@acme.com)

serviceKey - User service key

apiKey - API Key

Method Detail

getAssessLicensing

public AssessLicenseOverview getAssessLicensing(String organizationId)
                                         throws IOException,
                                                UnauthorizedException

Get all Assess Licensing for an Organizations.

Parameters:

organizationId - the ID of the organization

Returns:

AssessLicenseOverview with Assess Licensing for an Oeg.

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getYearlyVulnTrend

public VulnerabilityTrend getYearlyVulnTrend(String organizationId)
                                      throws IOException,
                                             UnauthorizedException

Get all Vulnerability Trend for an Organizations.

Parameters:

organizationId - the ID of the organization

Returns:

VulnerabilityTrend with the yearly Vulnerability Trend for an Oeg.

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getProfileOrganizations

public Organizations getProfileOrganizations()
                                      throws IOException,
                                             UnauthorizedException

Get all organizations for the user profile.

Returns:

Organization objects with a list of disabled and valid organizations for the user.

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getOrganizationUsers

public Users getOrganizationUsers(String organizationId)
                           throws IOException,
                                  UnauthorizedException

Get all users for an organization.

Parameters:

organizationId - the ID of the organization

Returns:

A List of User Objects.

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getProfileDefaultOrganizations

public Organizations getProfileDefaultOrganizations()
                                             throws IOException,
                                                    UnauthorizedException

Get the default organization for the user profile.

Returns:

Organization object with the default Organizaiton.

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getApplication

public Applications getApplication(String organizationId,
                                   String appId)
                            throws IOException,
                                   UnauthorizedException

Get summary information about a single app without expandValues.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

Returns:

Applications object that contains one Application; wrapper

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getApplication

public Applications getApplication(String organizationId,
                                   String appId,
                                   EnumSet<FilterForm.ApplicationExpandValues> expandValues)
                            throws IOException,
                                   UnauthorizedException

Get summary information about a single app.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

expandValues - Expand values to filter on

Returns:

Applications object that contains one Application; wrapper

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getApplications

public Applications getApplications(String organizationId)
                             throws UnauthorizedException,
                                    IOException

Get the list of applications being monitored by Contrast.

Parameters:

organizationId - the ID of the organization

Returns:

Applications object that contains the list of Application's

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getApplicationsNames

public Applications getApplicationsNames(String organizationId)
                                  throws UnauthorizedException,
                                         IOException

Throws:

UnauthorizedException

IOException

getCoverage

public Coverage getCoverage(String organizationId,
                            String appId)
                     throws IOException,
                            UnauthorizedException

Return coverage data about the monitored Contrast application.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

Returns:

Coverage object for the given app

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getLibraries

public Libraries getLibraries(String organizationId,
                              String appId)
                       throws IOException,
                              UnauthorizedException

Throws:

IOException

UnauthorizedException

getLibraries

public Libraries getLibraries(String organizationId,
                              String appId,
                              EnumSet<FilterForm.LibrariesExpandValues> expandValues)
                       throws IOException,
                              UnauthorizedException

Return the libraries of the monitored Contrast application.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

expandValues - Query params to add more info to response

Returns:

Libraries object that contains the list of Library objects

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getLibraryScores

public LibraryScores getLibraryScores(String organizationId)
                               throws IOException,
                                      UnauthorizedException

Return the library Scores for an Organization.

Parameters:

organizationId - the ID of the organization

Returns:

LibraryScores object that contains the Library scores for an Org

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getLibraryStats

public LibraryStats getLibraryStats(String organizationId)
                             throws IOException,
                                    UnauthorizedException

Return the library Stats for an Organization.

Parameters:

organizationId - the ID of the organization

Returns:

LibraryScores object that contains the Library stats for an Org

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getServers

public Servers getServers(String organizationId,
                          ServerFilterForm filterForm)
                   throws IOException,
                          UnauthorizedException

Return the servers of the monitored Contrast application.

Parameters:

organizationId - the ID of the organization

filterForm - FilterForm query parameters

Returns:

Servers object that contains the list of Library objects

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getServersWithFilter

public Servers getServersWithFilter(String organizationId,
                                    ServerFilterForm filterForm)
                             throws IOException,
                                    UnauthorizedException

Return the servers of the monitored Contrast application.

Parameters:

organizationId - the ID of the organization

filterForm - FilterForm query parameters

Returns:

Servers object that contains the list of Library objects

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getTraces

public Traces getTraces(String organizationId,
                        String appId,
                        TraceFilterForm form)
                 throws IOException,
                        UnauthorizedException

Get the vulnerabilities in the application whose ID is passed in.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

form - FilterForm query parameters

Returns:

Traces object that contains the list of Trace's

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getTracesInOrg

public Traces getTracesInOrg(String organizationId,
                             TraceFilterForm form)
                      throws IOException,
                             UnauthorizedException

Get the vulnerabilities in the organization whose ID is passed in.

Parameters:

organizationId - the ID of the organization

form - FilterForm query parameters

Returns:

Traces object that contains the list of Trace's

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getTraceFilters

public TraceListing getTraceFilters(String organizationId,
                                    String appId)
                             throws IOException,
                                    UnauthorizedException

Get the filters for the traces in the application.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

Returns:

TraceListing object that contains the trace filters for the application

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getTracesWithFilter

public Traces getTracesWithFilter(String organizationId,
                                  String appId,
                                  TraceFilterType traceFilterType,
                                  TraceFilterKeycode keycode,
                                  TraceFilterForm form)
                           throws IOException,
                                  UnauthorizedException

Get the vulnerabilities in the application whose ID is passed in with a filter.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

traceFilterType - filter type

keycode - id or key to filter on

form - FilterForm query parameters

Returns:

Traces object that contains the list of Trace's

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getTraceFilterByRule

@Deprecated
public Traces getTraceFilterByRule(String organizationId,
                                               String appId,
                                               List<String> ruleNames)
                                        throws IOException,
                                               UnauthorizedException

Deprecated.

Get the vulnerabilities in the application by the rule.

Parameters:

organizationId - the ID of the organization

appId - the ID of the application

ruleNames - FilterForm query parameters

Returns:

Traces object that contains the list of Trace's

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getRules

public Rules getRules(String organizationId)
               throws IOException,
                      UnauthorizedException

Get the rules for an organization

Parameters:

organizationId - the ID of the organization

Returns:

Traces object that contains the list of Trace's

Throws:

UnauthorizedException - if the Contrast account failed to authorize

IOException - if there was a communication problem

getAgent

public byte[] getAgent(AgentType type,
                       String organizationId,
                       String profileName)
                throws IOException,
                       UnauthorizedException

Download a contrast.jar agent associated with this account. The user should save this byte array to a file named 'contrast.jar'. This signature takes a parameter which contains the name of the saved engine profile to download.

Parameters:

type - the type of agent you want to download; Java, Java 1.5, .NET, or Node

profileName - the name of the saved engine profile to download,

organizationId - the ID of the organization,

Returns:

a byte[] array of the contrast.jar file contents, which the user should convert to a new File

Throws:

IOException - if there was a communication problem

UnauthorizedException - if authentication fails

getAgent

public byte[] getAgent(AgentType type,
                       String organizationId)
                throws IOException,
                       UnauthorizedException

Download a contrast.jar agent associated with this account. The user should save this byte array to a file named 'contrast.jar'. This signature takes a parameter which contains the name of the saved engine profile to download.

This uses 'default' as the profile name.

Parameters:

type - the type of agent you want to download; Java, Java 1.5, .NET, or Node

organizationId - the ID of the organization,

Returns:

a byte[] array of the contrast.jar file contents, which the user should convert to a new File

Throws:

IOException - if there was a communication problem

UnauthorizedException - if authentication fails

makeRequest

public InputStream makeRequest(HttpMethod method,
                               String path)
                        throws IOException,
                               UnauthorizedException

Throws:

IOException

UnauthorizedException

makeConnection

public HttpURLConnection makeConnection(String url,
                                        String method)
                                 throws IOException

Throws:

IOException

setConnectionTimeout

public void setConnectionTimeout(int timeout)

Sets a custom connection timeout for all SDK requests. This value must be set before a call to makeConnection is done.

Parameters:

timeout - Timeout value in milliseconds.

setReadTimeout

public void setReadTimeout(int timeout)

Set a custom read timeout for all SDK requests. This value must be set before calling makeConnection method in order to take effect.

Parameters:

timeout - TImeout value in milliseconds