WebGoat/src/main/java/org/owasp/webgoat/container/DatabaseConfiguration.java

package org.owasp.webgoat.container;

import java.util.Map;
import java.util.function.Function;
import javax.sql.DataSource;
import lombok.RequiredArgsConstructor;
import lombok.extern.slf4j.Slf4j;
import org.flywaydb.core.Flyway;
import org.owasp.webgoat.container.service.RestartLessonService;
import org.springframework.boot.autoconfigure.jdbc.DataSourceProperties;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Primary;
import org.springframework.jdbc.datasource.DriverManagerDataSource;

@Configuration
@RequiredArgsConstructor
@Slf4j
public class DatabaseConfiguration {

  private final DataSourceProperties properties;

  @Bean
  @Primary
  public DataSource dataSource() {
    DriverManagerDataSource dataSource = new DriverManagerDataSource();
    dataSource.setDriverClassName(properties.getDriverClassName());
    dataSource.setUrl(properties.getUrl());
    dataSource.setUsername(properties.getUsername());
    dataSource.setPassword(properties.getPassword());
    return dataSource;
  }

  /**
   * Define 2 Flyway instances, 1 for WebGoat itself which it uses for internal storage like users
   * and 1 for lesson specific tables we use. This way we clean the data in the lesson database
   * quite easily see {@link RestartLessonService#restartLesson()} for how we clean the lesson
   * related tables.
   */
  @Bean(initMethod = "migrate")
  public Flyway flyWayContainer() {
    return Flyway.configure()
        .configuration(Map.of("driver", properties.getDriverClassName()))
        .dataSource(dataSource())
        .schemas("container")
        .locations("db/container")
        .load();
  }

  @Bean
  public Function<String, Flyway> flywayLessons() {
    return schema ->
        Flyway.configure()
            .configuration(Map.of("driver", properties.getDriverClassName()))
            .schemas(schema)
            .cleanDisabled(false)
            .dataSource(dataSource())
            .locations("lessons")
            .load();
  }

  @Bean
  public LessonDataSource lessonDataSource() {
    return new LessonDataSource(dataSource());
  }
}