org.gluu.oxtrust.ldap.service.MetadataValidationTimer クラス

org.gluu.oxtrust.ldap.service.MetadataValidationTimer 連携図

公開メンバ関数
void	init ()
void	initTimer ()
void	processMetadataValidationTimerEvent (@Observes @Scheduled MetadataValidationEvent metadataValidationEvent)
void	queue (String fileName)
boolean	isQueued (String gluuSAMLspMetaDataFN)

非公開メンバ関数
void	procesMetadataValidation ()
void	regenerateConfigurationFiles ()
boolean	validateMetadata (String shib3IdpTempmetadataFolder, String shib3IdpMetadataFolder)

非公開変数類
Logger	log
Event< TimerEvent >	timerEvent
AppConfiguration	appConfiguration
TrustService	trustService
Shibboleth3ConfService	shibboleth3ConfService
AtomicBoolean	isActive
LinkedBlockingQueue< String >	metadataUpdates

静的非公開変数類
static final int	DEFAULT_INTERVAL = 60

詳解

著者

�Oleksiy Tataryn�

Yuriy Mochan

関数詳解

init()

void org.gluu.oxtrust.ldap.service.MetadataValidationTimer.init ( )

inline

                           {
                this.isActive = new AtomicBoolean(true);
                try {
                        this.metadataUpdates = new LinkedBlockingQueue<String>();
                } finally {
                        this.isActive.set(false);
                }
        }

initTimer()

void org.gluu.oxtrust.ldap.service.MetadataValidationTimer.initTimer ( )

inline

                                {
                log.debug("Initializing Metadata Validation Timer");

                final int delay = 30;
                final int interval = DEFAULT_INTERVAL;

                timerEvent.fire(new TimerEvent(new TimerSchedule(delay, interval), new MetadataValidationEvent(),
                                Scheduled.Literal.INSTANCE));
        }

isQueued()

boolean org.gluu.oxtrust.ldap.service.MetadataValidationTimer.isQueued ( String  gluuSAMLspMetaDataFN )

inline

                                                             {
                synchronized (metadataUpdates) {
                        for (String filename : metadataUpdates) {
                                if (filename.contains(gluuSAMLspMetaDataFN)) {
                                        return true;
                                }
                        }
                        return false;
                }
        }

procesMetadataValidation()

void org.gluu.oxtrust.ldap.service.MetadataValidationTimer.procesMetadataValidation ( )

inlineprivate

                                                {
                log.debug("Starting metadata validation");
                boolean result = validateMetadata(appConfiguration.getShibboleth3IdpRootDir() + File.separator
                                + Shibboleth3ConfService.SHIB3_IDP_TEMPMETADATA_FOLDER + File.separator, appConfiguration
                                .getShibboleth3IdpRootDir() + File.separator + Shibboleth3ConfService.SHIB3_IDP_METADATA_FOLDER + File.separator);
                log.debug("Metadata validation finished with result: '{}'", result);
                
                if (result) {
                        regenerateConfigurationFiles();
                }
        }

processMetadataValidationTimerEvent()

void org.gluu.oxtrust.ldap.service.MetadataValidationTimer.processMetadataValidationTimerEvent ( @Observes @Scheduled MetadataValidationEvent  metadataValidationEvent )

inline

                                                                                                                              {
                if (this.isActive.get()) {
                        return;
                }

                if (!this.isActive.compareAndSet(false, true)) {
                        return;
                }

                try {
                        procesMetadataValidation();
                } catch (Throwable ex) {
                        log.error("Exception happened while reloading application configuration", ex);
                } finally {
                        this.isActive.set(false);
                }
        }

queue()

void org.gluu.oxtrust.ldap.service.MetadataValidationTimer.queue ( String  fileName )

inline

                                           {
                synchronized (metadataUpdates) {
                        metadataUpdates.add(fileName);
                }
        }

regenerateConfigurationFiles()

void org.gluu.oxtrust.ldap.service.MetadataValidationTimer.regenerateConfigurationFiles ( )

inlineprivate

                                                    {
                boolean createConfig = appConfiguration.isConfigGeneration();
                log.info("IDP config generation is set to " + createConfig);
                
                if (createConfig) {
                        List<GluuSAMLTrustRelationship> trustRelationships = trustService.getAllActiveTrustRelationships();
                        shibboleth3ConfService.generateConfigurationFiles(trustRelationships);

                        log.info("IDP config generation files finished. TR count: '{}'", trustRelationships.size());
                }

        }

validateMetadata()

boolean org.gluu.oxtrust.ldap.service.MetadataValidationTimer.validateMetadata ( String  shib3IdpTempmetadataFolder, String  shib3IdpMetadataFolder  )

inlineprivate

引数

shib3IdpTempmetadataFolder
shib3IdpMetadataFolder

                                                                                                           {
                boolean result = false;
                log.trace("Starting metadata validation process.");

                String metadataFN = null;
                synchronized (metadataUpdates) {
                        if (!metadataUpdates.isEmpty()) {
                                metadataFN = metadataUpdates.poll();
                        }
                }

                synchronized (this) {
                        if (StringHelper.isNotEmpty(metadataFN)) {
                                File metadata = new File(shib3IdpTempmetadataFolder + metadataFN);
                                File target = new File(shib3IdpMetadataFolder + metadataFN.replaceAll(".{4}\\..{4}$", ""));
                                GluuSAMLTrustRelationship tr = trustService.getTrustByUnpunctuatedInum(
                                                metadataFN.split("-" + Shibboleth3ConfService.SHIB3_IDP_SP_METADATA_FILE)[0]);
                                if (tr == null) {
                                        metadataUpdates.add(metadataFN);
                                        return false;
                                }
                                tr.setValidationStatus(GluuValidationStatus.VALIDATION);
                                trustService.updateTrustRelationship(tr);

                                GluuErrorHandler errorHandler = null;
                                List<String> validationLog = null;
                                try {
                                        errorHandler = shibboleth3ConfService.validateMetadata(new FileInputStream(metadata));
                                } catch (Exception e) {
                                        tr.setValidationStatus(GluuValidationStatus.VALIDATION_FAILED);
                                        tr.setStatus(GluuStatus.INACTIVE);
                                        validationLog = new ArrayList<String>();
                                        validationLog.add(e.getMessage());
                                        log.warn("Validation of " + tr.getInum() + " failed: " + e.getMessage() );
                                        tr.setValidationLog(validationLog);
                                        trustService.updateTrustRelationship(tr);

                                        return false;
                                }
                                if (errorHandler.isValid()) {
                                        tr.setValidationLog(errorHandler.getLog());
                                        tr.setValidationStatus(GluuValidationStatus.VALIDATION_SUCCESS);
                                        if (((!target.exists()) || target.delete()) && (!metadata.renameTo(target))) {
                                                log.error("Failed to move metadata file to location:" + target.getAbsolutePath());
                                                tr.setStatus(GluuStatus.INACTIVE);
                                        } else {
                                                tr.setSpMetaDataFN(target.getName());
                                        }
                                        boolean federation = shibboleth3ConfService.isFederation(tr);
                                        tr.setFederation(federation);
                                        String idpMetadataFolder = appConfiguration.getShibboleth3IdpRootDir() + File.separator
                                                        + Shibboleth3ConfService.SHIB3_IDP_METADATA_FOLDER + File.separator;
                                        File metadataFile = new File(idpMetadataFolder + tr.getSpMetaDataFN());
                                        
                                        
                                        List<String> entityIdList = SAMLMetadataParser.getEntityIdFromMetadataFile(metadataFile);
                                        Set<String> entityIdSet = new TreeSet<String>();
                                        Set<String> duplicatesSet = new TreeSet<String>(); 
                                        if(entityIdList != null && ! entityIdList.isEmpty()){

                                                for (String entityId : entityIdList) {
                                                        if (!entityIdSet.add(entityId)) {
                                                                duplicatesSet.add(entityId);
                                                        }
                                                }
                                        }

                                        
                                        if(! duplicatesSet.isEmpty()){
                                                validationLog = tr.getValidationLog();
                                                if(validationLog != null){
                                                        validationLog = new LinkedList<String>(validationLog);
                                                }else{
                                                        validationLog = new LinkedList<String>();
                                                }
                                                validationLog.add("This metadata contains multiple instances of entityId: " + Arrays.toString(duplicatesSet.toArray()));
                                        }
                                        tr.setValidationLog(validationLog);
                                        tr.setGluuEntityId(entityIdSet);
                                        tr.setStatus(GluuStatus.ACTIVE);

                                        trustService.updateTrustRelationship(tr);
                                        result = true;
                                } else if(appConfiguration.isIgnoreValidation() || errorHandler.isInternalError()){
                                        tr.setValidationLog(new ArrayList<String>(new HashSet<String>(errorHandler.getLog())));
                                        tr.setValidationStatus(GluuValidationStatus.VALIDATION_FAILED);
                                        if( (( ! target.exists() ) ||  target.delete()) && ( ! metadata.renameTo(target) )){
                                                log.error("Failed to move metadata file to location:" + target.getAbsolutePath());
                                                tr.setStatus(GluuStatus.INACTIVE);
                                        }else{
                                                tr.setSpMetaDataFN(target.getName());
                                        }
                                        boolean federation = shibboleth3ConfService.isFederation(tr);
                                        tr.setFederation(federation);
                                        String idpMetadataFolder = appConfiguration.getShibboleth3IdpRootDir() + File.separator + Shibboleth3ConfService.SHIB3_IDP_METADATA_FOLDER + File.separator;
                                        File metadataFile = new File(idpMetadataFolder + tr.getSpMetaDataFN());
                                        
                                        List<String> entityIdList = SAMLMetadataParser.getEntityIdFromMetadataFile(metadataFile);
                                        Set<String> duplicatesSet = new TreeSet<String>(); 
                                        Set<String> entityIdSet = new TreeSet<String>();

                                        for (String entityId : entityIdList) {
                                                if (!entityIdSet.add(entityId)) {
                                                        duplicatesSet.add(entityId);
                                                }
                                        }
                                        
                                        tr.setGluuEntityId(entityIdSet);
                                        tr.setStatus(GluuStatus.ACTIVE);        
                                        validationLog = tr.getValidationLog();
                                        if(! duplicatesSet.isEmpty()){
                                                validationLog.add("This metadata contains multiple instances of entityId: " + Arrays.toString(duplicatesSet.toArray()));
                                        }
                                        
                                        if (errorHandler.isInternalError()) {
                                            validationLog = tr.getValidationLog();
                                            
                                            validationLog.add("Warning: cannot validate metadata. Check internet connetion ans www.w3.org availability.");
                                            
                                            // update log with warning
                                            for (String warningLogMessage : errorHandler.getLog()) 
                                                validationLog.add("Warning: " + warningLogMessage);
                                        }
                                        
                                        trustService.updateTrustRelationship(tr);
                                        result = true;
                                } else {
                                        tr.setValidationLog(new ArrayList<String>(new HashSet<String>(errorHandler.getLog())));
                                        tr.setValidationStatus(GluuValidationStatus.VALIDATION_FAILED);
                                        tr.setStatus(GluuStatus.INACTIVE);
                                        trustService.updateTrustRelationship(tr);
                                }
                        }
                }

                return result;
        }

メンバ詳解

appConfiguration

AppConfiguration org.gluu.oxtrust.ldap.service.MetadataValidationTimer.appConfiguration

private

DEFAULT_INTERVAL

final int org.gluu.oxtrust.ldap.service.MetadataValidationTimer.DEFAULT_INTERVAL = 60

staticprivate

isActive

AtomicBoolean org.gluu.oxtrust.ldap.service.MetadataValidationTimer.isActive

private

log

Logger org.gluu.oxtrust.ldap.service.MetadataValidationTimer.log

private

metadataUpdates

LinkedBlockingQueue<String> org.gluu.oxtrust.ldap.service.MetadataValidationTimer.metadataUpdates

private

shibboleth3ConfService

Shibboleth3ConfService org.gluu.oxtrust.ldap.service.MetadataValidationTimer.shibboleth3ConfService

private

timerEvent

Event<TimerEvent> org.gluu.oxtrust.ldap.service.MetadataValidationTimer.timerEvent

private

trustService

TrustService org.gluu.oxtrust.ldap.service.MetadataValidationTimer.trustService

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxTrust/server/src/main/java/org/gluu/oxtrust/ldap/service/MetadataValidationTimer.java