/* $Id: AuthCheckThread.java 988245 2010-08-23 18:39:35Z kwright $ */
/**
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.manifoldcf.authorities.system;
import org.apache.manifoldcf.core.interfaces.*;
import org.apache.manifoldcf.agents.interfaces.*;
import org.apache.manifoldcf.authorities.interfaces.*;
import org.apache.manifoldcf.authorities.system.Logging;
import java.util.*;
import java.lang.reflect.*;
/** This thread periodically calls the cleanup method in all connected repository connectors. The ostensible purpose
* is to allow the connectors to shutdown idle connections etc.
*/
public class AuthCheckThread extends Thread
{
public static final String _rcsid = "@(#)$Id: AuthCheckThread.java 988245 2010-08-23 18:39:35Z kwright $";
// Local data
protected RequestQueue<AuthRequest> requestQueue;
/** Constructor.
*/
public AuthCheckThread(String id, RequestQueue<AuthRequest> requestQueue)
throws ManifoldCFException
{
super();
this.requestQueue = requestQueue;
setName("Auth check thread "+id);
setDaemon(true);
}
public void run()
{
// Create a thread context object.
IThreadContext threadContext = ThreadContextFactory.make();
try
{
// Create an authority connection pool object.
IAuthorityConnectorPool authorityConnectorPool = AuthorityConnectorPoolFactory.make(threadContext);
// Loop
while (true)
{
// Do another try/catch around everything in the loop
try
{
if (Thread.currentThread().isInterrupted())
throw new ManifoldCFException("Interrupted",ManifoldCFException.INTERRUPTED);
// Wait for a request.
AuthRequest theRequest = requestQueue.getRequest();
// Try to fill the request before going back to sleep.
if (Logging.authorityService.isDebugEnabled())
{
Logging.authorityService.debug(" Calling connector class '"+theRequest.getAuthorityConnection().getClassName()+"'");
}
AuthorizationResponse response = null;
Throwable exception = null;
// Grab an authorization response only if there's a user
if (theRequest.getUserID() != null)
{
try
{
IAuthorityConnector connector = authorityConnectorPool.grab(theRequest.getAuthorityConnection());
// If this is null, we MUST treat this as an "unauthorized" condition!!
// We signal that by setting the exception value.
try
{
if (connector == null)
exception = new ManifoldCFException("Authority connector "+theRequest.getAuthorityConnection().getClassName()+" is not registered.");
else
{
// Get the acl for the user
try
{
response = connector.getAuthorizationResponse(theRequest.getUserID());
}
catch (ManifoldCFException e)
{
if (e.getErrorCode() == ManifoldCFException.INTERRUPTED)
throw e;
Logging.authorityService.warn("Authority error: "+e.getMessage(),e);
response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID());
}
}
}
finally
{
authorityConnectorPool.release(theRequest.getAuthorityConnection(),connector);
}
}
catch (ManifoldCFException e)
{
if (e.getErrorCode() == ManifoldCFException.INTERRUPTED)
throw e;
Logging.authorityService.warn("Authority connection exception: "+e.getMessage(),e);
response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID());
if (response == null)
exception = e;
}
catch (Throwable e)
{
Logging.authorityService.warn("Authority connection error: "+e.getMessage(),e);
response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID());
if (response == null)
exception = e;
}
}
// The request is complete
theRequest.completeRequest(response,exception);
// Repeat, and only go to sleep if there are no more requests.
}
catch (ManifoldCFException e)
{
if (e.getErrorCode() == ManifoldCFException.INTERRUPTED)
break;
// Log it, but keep the thread alive
Logging.authorityService.error("Exception tossed: "+e.getMessage(),e);
if (e.getErrorCode() == ManifoldCFException.SETUP_ERROR)
{
// Shut the whole system down!
System.exit(1);
}
}
catch (InterruptedException e)
{
// We're supposed to quit
break;
}
catch (Throwable e)
{
// A more severe error - but stay alive
Logging.authorityService.fatal("Error tossed: "+e.getMessage(),e);
}
}
}
catch (ManifoldCFException e)
{
// Severe error on initialization
System.err.println("Authority service auth check thread could not start - shutting down");
Logging.authorityService.fatal("AuthCheckThread initialization error tossed: "+e.getMessage(),e);
System.exit(-300);
}
}
}