From b7686611db841e88b2c57f4ad68cfbfc2726fd8b Mon Sep 17 00:00:00 2001
From: EmVal <emanuele.valentini@nttdata.com>
Date: Tue, 24 Sep 2024 11:29:00 +0200
Subject: [PATCH] Fix sonar FileUtilities permissions

---
 .../service/model/utils/FileUtilities.java    | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/src/main/java/it/gov/pagopa/atmlayer/service/model/utils/FileUtilities.java b/src/main/java/it/gov/pagopa/atmlayer/service/model/utils/FileUtilities.java
index c3e297da..c8580930 100644
--- a/src/main/java/it/gov/pagopa/atmlayer/service/model/utils/FileUtilities.java
+++ b/src/main/java/it/gov/pagopa/atmlayer/service/model/utils/FileUtilities.java
@@ -25,6 +25,7 @@
 import java.security.NoSuchAlgorithmException;
 import java.util.Base64;
 import java.util.EnumSet;
+import java.util.Set;
 
 import static it.gov.pagopa.atmlayer.service.model.enumeration.AppErrorCodeEnum.BPMN_FILE_DOES_NOT_HAVE_DEFINITION_KEY;
 import static it.gov.pagopa.atmlayer.service.model.enumeration.AppErrorCodeEnum.CANNOT_EXTRACT_FILE_DEFINITION_KEY;
@@ -99,12 +100,23 @@ public static String toHexString(byte[] hash) {
 
     public static File fromStringToFile(String fileBase64) {
         try {
+
+            fileBase64 = fileBase64.replace('-', '+').replace('_', '/');
+
             byte[] decodedBytes = Base64.getDecoder().decode(fileBase64);
+
             Path tempDir = Files.createTempDirectory("multipleUpload");
+
+            setPermissions(tempDir);
+
             File tempFile = File.createTempFile("tempfile", ".tmp", tempDir.toFile());
+
             try (FileOutputStream fos = new FileOutputStream(tempFile)) {
                 fos.write(decodedBytes);
             }
+
+            tempFile.deleteOnExit();
+
             return tempFile;
         } catch (IllegalArgumentException e) {
             log.error("Errore nella decodifica del Base64: " + e.getMessage());
@@ -115,6 +127,16 @@ public static File fromStringToFile(String fileBase64) {
         }
     }
 
+    private static void setPermissions(Path tempDir) throws IOException {
+        try {
+            Set<PosixFilePermission> perms = EnumSet.of(PosixFilePermission.OWNER_READ,
+                    PosixFilePermission.OWNER_WRITE,
+                    PosixFilePermission.OWNER_EXECUTE);
+            Files.setPosixFilePermissions(tempDir, perms);
+        } catch (UnsupportedOperationException e) {
+            log.warn("Posix file permissions are not supported on this system.");
+        }
+    }
 
 
 }