/* $Id: AuthCheckThread.java 988245 2010-08-23 18:39:35Z kwright $ */

/**
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.manifoldcf.authorities.system;

import org.apache.manifoldcf.core.interfaces.*;
import org.apache.manifoldcf.agents.interfaces.*;
import org.apache.manifoldcf.authorities.interfaces.*;
import org.apache.manifoldcf.authorities.system.Logging;
import java.util.*;
import java.lang.reflect.*;

/** This thread periodically calls the cleanup method in all connected repository connectors.  The ostensible purpose
* is to allow the connectors to shutdown idle connections etc.
*/
public class AuthCheckThread extends Thread
{
  public static final String _rcsid = "@(#)$Id: AuthCheckThread.java 988245 2010-08-23 18:39:35Z kwright $";

  // Local data
  protected RequestQueue<AuthRequest> requestQueue;

  /** Constructor.
  */
  public AuthCheckThread(String id, RequestQueue<AuthRequest> requestQueue)
    throws ManifoldCFException
  {
    super();
    this.requestQueue = requestQueue;
    setName("Auth check thread "+id);
    setDaemon(true);
  }

  public void run()
  {
    // Create a thread context object.
    IThreadContext threadContext = ThreadContextFactory.make();
    try
    {
      // Create an authority connection pool object.
      IAuthorityConnectorPool authorityConnectorPool = AuthorityConnectorPoolFactory.make(threadContext);
      
      // Loop
      while (true)
      {
        // Do another try/catch around everything in the loop
        try
        {
          if (Thread.currentThread().isInterrupted())
            throw new ManifoldCFException("Interrupted",ManifoldCFException.INTERRUPTED);

          // Wait for a request.
          AuthRequest theRequest = requestQueue.getRequest();

          // Try to fill the request before going back to sleep.
          if (Logging.authorityService.isDebugEnabled())
          {
            Logging.authorityService.debug(" Calling connector class '"+theRequest.getAuthorityConnection().getClassName()+"'");
          }

          AuthorizationResponse response = null;
          Throwable exception = null;

          // Grab an authorization response only if there's a user
          if (theRequest.getUserID() != null)
          {
            try
            {
              IAuthorityConnector connector = authorityConnectorPool.grab(theRequest.getAuthorityConnection());
              // If this is null, we MUST treat this as an "unauthorized" condition!!
              // We signal that by setting the exception value.
              try
              {
                if (connector == null)
                  exception = new ManifoldCFException("Authority connector "+theRequest.getAuthorityConnection().getClassName()+" is not registered.");
                else
                {
                  // Get the acl for the user
                  try
                  {
                    response = connector.getAuthorizationResponse(theRequest.getUserID());
                  }
                  catch (ManifoldCFException e)
                  {
                    if (e.getErrorCode() == ManifoldCFException.INTERRUPTED)
                      throw e;
                    Logging.authorityService.warn("Authority error: "+e.getMessage(),e);
                    response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID());
                  }

                }
              }
              finally
              {
                authorityConnectorPool.release(theRequest.getAuthorityConnection(),connector);
              }
            }
            catch (ManifoldCFException e)
            {
              if (e.getErrorCode() == ManifoldCFException.INTERRUPTED)
                throw e;
              Logging.authorityService.warn("Authority connection exception: "+e.getMessage(),e);
              response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID());
              if (response == null)
                exception = e;
            }
            catch (Throwable e)
            {
              Logging.authorityService.warn("Authority connection error: "+e.getMessage(),e);
              response = AuthorityConnectorFactory.getDefaultAuthorizationResponse(threadContext,theRequest.getAuthorityConnection().getClassName(),theRequest.getUserID());
              if (response == null)
                exception = e;
            }
          }

          // The request is complete
          theRequest.completeRequest(response,exception);

          // Repeat, and only go to sleep if there are no more requests.
        }
        catch (ManifoldCFException e)
        {
          if (e.getErrorCode() == ManifoldCFException.INTERRUPTED)
            break;

          // Log it, but keep the thread alive
          Logging.authorityService.error("Exception tossed: "+e.getMessage(),e);

          if (e.getErrorCode() == ManifoldCFException.SETUP_ERROR)
          {
            // Shut the whole system down!
            System.exit(1);
          }

        }
        catch (InterruptedException e)
        {
          // We're supposed to quit
          break;
        }
        catch (Throwable e)
        {
          // A more severe error - but stay alive
          Logging.authorityService.fatal("Error tossed: "+e.getMessage(),e);
        }
      }
    }
    catch (ManifoldCFException e)
    {
      // Severe error on initialization
      System.err.println("Authority service auth check thread could not start - shutting down");
      Logging.authorityService.fatal("AuthCheckThread initialization error tossed: "+e.getMessage(),e);
      System.exit(-300);
    }
  }

}
