/* $Id: AuthCheckThread.java 988245 2010-08-23 18:39:35Z kwright $ */ /** * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed with * this work for additional information regarding copyright ownership. * The ASF licenses this file to You under the Apache License, Version 2.0 * (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.apache.manifoldcf.authorities.system; import org.apache.manifoldcf.core.interfaces.*; import org.apache.manifoldcf.agents.interfaces.*; import org.apache.manifoldcf.authorities.interfaces.*; import org.apache.manifoldcf.authorities.system.Logging; import java.util.*; import java.lang.reflect.*; /** This thread periodically calls the cleanup method in all connected repository connectors. The ostensible purpose * is to allow the connectors to shutdown idle connections etc. */ public class AuthCheckThread extends Thread { public static final String _rcsid = "@(#)$Id: AuthCheckThread.java 988245 2010-08-23 18:39:35Z kwright $"; // Local data protected RequestQueue<AuthRequest> requestQueue; /** Constructor. */ public AuthCheckThread(String id, RequestQueue<AuthRequest> requestQueue) throws ManifoldCFException { super(); this.requestQueue = requestQueue; setName("Auth check thread "+id); setDaemon(true); } public void run() { // Create a thread context object. IThreadContext threadContext = ThreadContextFactory.make(); try { // Create an authority connection pool object. IAuthorityConnectorPool authorityConnectorPool = AuthorityConnectorPoolFactory.make(threadContext); // Loop while (true) { // Do another try/catch around everything in the loop try { if (Thread.currentThread().isInterrupted()) throw new ManifoldCFException("Interrupted",ManifoldCFException.INTERRUPTED); // Wait for a request. AuthRequest theRequest = requestQueue.getRequest(); // Try to fill the request before going back to sleep. if (Logging.authorityService.isDebugEnabled()) { Logging.authorityService.debug(" Calling connector class '"+theRequest.getAuthorityConnection().getClassName()+"'"); } AuthorizationResponse response = null; Throwable exception = null; // Grab an authorization response only if there's a user if (theRequest.getUserID() != null) { try { IAuthorityConnector connector = authorityConnectorPool.grab(theRequest.getAuthorityConnection()); // If this is null, we MUST treat this as an "unauthorized" condition!! // We signal that by setting the exception value. try { if (connector == null) exception = new ManifoldCFException("Authority connector "+theRequest.getAuthorityConnection().getClassName()+" is not registered."); else { // Get the acl for the user try { response = connector.getAuthorizationResponse(theRequest.getUserID()); } catch (ManifoldCFException e) { if (e.getErrorCode() == ManifoldCFException.INTERRUPTED) throw e; Logging.authorityService.warn("Authority error: "+e.getMessage(),e); response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID()); } } } finally { authorityConnectorPool.release(theRequest.getAuthorityConnection(),connector); } } catch (ManifoldCFException e) { if (e.getErrorCode() == ManifoldCFException.INTERRUPTED) throw e; Logging.authorityService.warn("Authority connection exception: "+e.getMessage(),e); response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID()); if (response == null) exception = e; } catch (Throwable e) { Logging.authorityService.warn("Authority connection error: "+e.getMessage(),e); response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID()); if (response == null) exception = e; } } // The request is complete theRequest.completeRequest(response,exception); // Repeat, and only go to sleep if there are no more requests. } catch (ManifoldCFException e) { if (e.getErrorCode() == ManifoldCFException.INTERRUPTED) break; // Log it, but keep the thread alive Logging.authorityService.error("Exception tossed: "+e.getMessage(),e); if (e.getErrorCode() == ManifoldCFException.SETUP_ERROR) { // Shut the whole system down! System.exit(1); } } catch (InterruptedException e) { // We're supposed to quit break; } catch (Throwable e) { // A more severe error - but stay alive Logging.authorityService.fatal("Error tossed: "+e.getMessage(),e); } } } catch (ManifoldCFException e) { // Severe error on initialization System.err.println("Authority service auth check thread could not start - shutting down"); Logging.authorityService.fatal("AuthCheckThread initialization error tossed: "+e.getMessage(),e); System.exit(-300); } } }