org.dcache.srm.request.HashtableRequestCredentialStorage.java Source code

Introduction

Here is the source code for org.dcache.srm.request.HashtableRequestCredentialStorage.java

Source

/*
COPYRIGHT STATUS:
  Dec 1st 2001, Fermi National Accelerator Laboratory (FNAL) documents and
  software are sponsored by the U.S. Department of Energy under Contract No.
  DE-AC02-76CH03000. Therefore, the U.S. Government retains a  world-wide
  non-exclusive, royalty-free license to publish or reproduce these documents
  and software for U.S. Government purposes.  All documents and software
  available from this server are protected under the U.S. and Foreign
  Copyright Laws, and FNAL reserves all rights.
    
    
 Distribution of the software available from this server is free of
 charge subject to the user following the terms of the Fermitools
 Software Legal Information.
    
 Redistribution and/or modification of the software shall be accompanied
 by the Fermitools Software Legal Information  (including the copyright
 notice).
    
 The user is asked to feed back problems, benefits, and/or suggestions
 about the software to the Fermilab Software Providers.
    
    
 Neither the name of Fermilab, the  URA, nor the names of the contributors
 may be used to endorse or promote products derived from this software
 without specific prior written permission.
    
    
    
  DISCLAIMER OF LIABILITY (BSD):
    
  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  "AS IS" AND ANY EXPRESS OR IMPLIED  WARRANTIES, INCLUDING, BUT NOT
  LIMITED TO, THE IMPLIED  WARRANTIES OF MERCHANTABILITY AND FITNESS
  FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL FERMILAB,
  OR THE URA, OR THE U.S. DEPARTMENT of ENERGY, OR CONTRIBUTORS BE LIABLE
  FOR  ANY  DIRECT, INDIRECT,  INCIDENTAL, SPECIAL, EXEMPLARY, OR
  CONSEQUENTIAL DAMAGES  (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
  OF SUBSTITUTE  GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY  OF
  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT  OF THE USE OF THIS
  SOFTWARE, EVEN IF ADVISED OF THE  POSSIBILITY OF SUCH DAMAGE.
    
    
  Liabilities of the Government:
    
  This software is provided by URA, independent from its Prime Contract
  with the U.S. Department of Energy. URA is acting independently from
  the Government and in its own private capacity and is not acting on
  behalf of the U.S. Government, nor as its contractor nor its agent.
  Correspondingly, it is understood and agreed that the U.S. Government
  has no connection to this software and in no manner whatsoever shall
  be liable for nor assume any responsibility or obligation for any claim,
  cost, or damages arising out of or resulting from the use of the software
  available from this server.
    
    
  Export Control:
    
  All documents and software available from this server are subject to U.S.
  export control laws.  Anyone downloading information from this server is
  obligated to secure any necessary Government licenses before exporting
  documents or software obtained from this server.
 */

package org.dcache.srm.request;

import com.google.common.base.Objects;
import com.google.common.base.Predicate;
import com.google.common.collect.Iterables;

import java.util.Map;
import java.util.concurrent.ConcurrentHashMap;
import java.util.regex.Pattern;

import org.dcache.util.SqlGlob;

/**
 * A simple in-memory credential store.
 */
public class HashtableRequestCredentialStorage implements RequestCredentialStorage {
    private final Map<Long, RequestCredential> store = new ConcurrentHashMap<>();

    @Override
    public RequestCredential searchRequestCredential(SqlGlob nameGlob, SqlGlob roleGlob) {
        Pattern name = nameGlob.toGlob().toPattern();
        Pattern role = roleGlob != null ? roleGlob.toGlob().toPattern() : null;
        long bestRemainingLifetime = 0;
        RequestCredential bestCredential = null;

        for (RequestCredential credential : store.values()) {
            if (!name.matcher(credential.getCredentialName()).matches()
                    || (role == null && credential.getRole() != null)
                    || (role != null && !role.matcher(credential.getRole()).matches())) {
                continue;
            }

            long remainingLifetime = credential.getDelegatedCredentialRemainingLifetime();

            if (remainingLifetime > bestRemainingLifetime) {
                bestCredential = credential;
                bestRemainingLifetime = remainingLifetime;
            }
        }

        return bestCredential;
    }

    /**
     * Predicate for matching a specified name and role.
     */
    private class IsMatching implements Predicate<RequestCredential> {
        final String name;
        final String role;

        public IsMatching(String name, String role) {
            this.name = name;
            this.role = role;
        }

        @Override
        public boolean apply(RequestCredential credential) {
            String credName = credential.getCredentialName();
            String credRole = credential.getRole();
            return credName.equals(name) && Objects.equal(role, credRole);
        }
    }

    private Predicate<RequestCredential> isMatching(String name, String role) {
        return new IsMatching(name, role);
    }

    @Override
    public RequestCredential getRequestCredential(Long requestCredentialId) {
        return store.get(requestCredentialId);
    }

    @Override
    public void saveRequestCredential(RequestCredential requestCredential) {
        store.put(requestCredential.getId(), requestCredential);
    }

    @Override
    public RequestCredential getRequestCredential(String name, String role) {
        return Iterables.find(store.values(), isMatching(name, role), null);
    }

    @Override
    public RequestCredential getRequestCredential(String name) {
        return Iterables.find(store.values(), c -> c.getCredentialName().equals(name), null);
    }

    @Override
    public boolean hasRequestCredential(String name, String role) {
        return getRequestCredential(name, role) != null;
    }

    @Override
    public boolean deleteRequestCredential(String name, String role) {
        return Iterables.removeIf(store.values(), isMatching(name, role));
    }
}