org.gluu.oxtrust.ldap.service.EntityIDMonitoringService クラス

org.gluu.oxtrust.ldap.service.EntityIDMonitoringService 連携図

公開メンバ関数
void	initTimer ()
void	processMetadataValidationTimerEvent ( @Observes @Scheduled EntityIdMonitoringEvent entityIdMonitoringEvent)
void	process ()

非公開変数類
Logger	log
Event< TimerEvent >	timerEvent
AppConfiguration	appConfiguration
ServiceUtil	serviceUtil
TrustService	trustService
AtomicBoolean	isActive

静的非公開変数類
static final String	ENTITY_ID_VANISHED_MESSAGE = "Invalidated because parent federation does not contain this entityId any more."
static final int	DEFAULT_INTERVAL = 2 * 60

詳解

著者

otataryn

関数詳解

initTimer()

void org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.initTimer ( )

inline

                                {
                log.debug("Initializing EntityId Monitoring Timer");
                this.isActive = new AtomicBoolean(false);

                final int delay = 30;
                final int interval = DEFAULT_INTERVAL;

                timerEvent.fire(new TimerEvent(new TimerSchedule(delay, interval), new EntityIdMonitoringEvent(),
                                Scheduled.Literal.INSTANCE));
        }

process()

void org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.process ( )

inline

                              {
                log.trace("Starting entityId monitoring process.");
                log.trace("EVENT_METADATA_ENTITY_ID_UPDATE Starting");
                for (GluuSAMLTrustRelationship tr : trustService.getAllTrustRelationships()) {
                        log.trace("Evaluating TR " + tr.getDn());
                        boolean meatadataAvailable = tr.getSpMetaDataFN() != null && StringHelper.isNotEmpty(tr.getSpMetaDataFN());
                        log.trace("meatadataAvailable:" + meatadataAvailable);
                        boolean correctType = trustService.getTrustContainerFederation(tr) == null;
                        log.trace("correctType:" + correctType);
                        boolean isValidated = GluuValidationStatus.VALIDATION_SUCCESS.equals(tr.getValidationStatus());
                        log.trace("isValidated:" + isValidated);
                        if (meatadataAvailable && correctType && isValidated) {
                                String idpMetadataFolder = appConfiguration.getShibboleth3IdpRootDir() + File.separator
                                                + Shibboleth3ConfService.SHIB3_IDP_METADATA_FOLDER + File.separator;
                                File metadataFile = new File(idpMetadataFolder + tr.getSpMetaDataFN());
                                List<String> entityIds = SAMLMetadataParser.getEntityIdFromMetadataFile(metadataFile);

                                log.trace("entityIds from metadata: " + serviceUtil.iterableToString(entityIds));
                                Set<String> entityIdSet = new TreeSet<String>();

                                if (entityIds != null && !entityIds.isEmpty()) {
                                        Set<String> duplicatesSet = new TreeSet<String>();
                                        for (String entityId : entityIds) {
                                                if (!entityIdSet.add(entityId)) {
                                                        duplicatesSet.add(entityId);
                                                }
                                        }
                                }

                                log.trace("unique entityIds: " + serviceUtil.iterableToString(entityIdSet));
                                Collection<String> disjunction = CollectionUtils.disjunction(entityIdSet, tr.getGluuEntityId());
                                log.trace("entityIds disjunction: " + serviceUtil.iterableToString(disjunction));

                                if (!disjunction.isEmpty()) {
                                        log.trace("entityIds disjunction is not empty. Somthing has changed. Processing further.");
                                        tr.setGluuEntityId(entityIdSet);
                                        if (tr.isFederation()) {
                                                List<GluuSAMLTrustRelationship> parts = trustService.getDeconstructedTrustRelationships(tr);
                                                for (GluuSAMLTrustRelationship part : parts) {
                                                        log.trace("Processing TR part: " + part.getDn());
                                                        boolean isActive = part.getStatus() != null && GluuStatus.ACTIVE.equals(part.getStatus());
                                                        log.trace("isActive:" + isActive);
                                                        boolean entityIdPresent = entityIdSet != null && entityIdSet.contains(part.getEntityId());
                                                        log.trace("entityIdPresent:" + entityIdPresent);
                                                        boolean previouslyDisabled = part.getValidationLog() != null && part.getValidationLog()
                                                                        .contains(ENTITY_ID_VANISHED_MESSAGE + " : " + part.getEntityId());
                                                        log.trace("previouslyDisabled:" + previouslyDisabled);
                                                        if (isActive && !entityIdPresent) {
                                                                log.trace("no entityId found for part : " + part.getDn());
                                                                part.setStatus(GluuStatus.INACTIVE);
                                                                List<String> log = new ArrayList<String>();
                                                                log.add(ENTITY_ID_VANISHED_MESSAGE + " : " + part.getEntityId());
                                                                part.setValidationLog(log);
                                                                trustService.updateTrustRelationship(part);
                                                        }
                                                        if (entityIdPresent && previouslyDisabled) {
                                                                log.trace("entityId found for part : " + part.getDn());
                                                                part.setStatus(GluuStatus.ACTIVE);
                                                                List<String> log = part.getValidationLog();
                                                                List<String> updatedLog = new ArrayList<String>(log);
                                                                updatedLog.remove(ENTITY_ID_VANISHED_MESSAGE + " : " + part.getEntityId());
                                                                if (updatedLog.isEmpty()) {
                                                                        updatedLog = null;
                                                                }
                                                                part.setValidationLog(updatedLog);
                                                                trustService.updateTrustRelationship(part);
                                                        }
                                                }
                                        }

                                        trustService.updateTrustRelationship(tr);
                                }
                        }
                }
        }

processMetadataValidationTimerEvent()

void org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.processMetadataValidationTimerEvent ( @Observes @Scheduled EntityIdMonitoringEvent  entityIdMonitoringEvent )

inline

                                                                                              {
                if (this.isActive.get()) {
                        return;
                }

                if (!this.isActive.compareAndSet(false, true)) {
                        return;
                }

                try {
                        process();
                } catch (Throwable ex) {
                        log.error("Exception happened while monitoring EntityId", ex);
                } finally {
                        this.isActive.set(false);
                }
        }

メンバ詳解

appConfiguration

AppConfiguration org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.appConfiguration

private

DEFAULT_INTERVAL

final int org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.DEFAULT_INTERVAL = 2 * 60

staticprivate

ENTITY_ID_VANISHED_MESSAGE

final String org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.ENTITY_ID_VANISHED_MESSAGE = "Invalidated because parent federation does not contain this entityId any more."

staticprivate

isActive

AtomicBoolean org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.isActive

private

log

Logger org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.log

private

serviceUtil

ServiceUtil org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.serviceUtil

private

timerEvent

Event<TimerEvent> org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.timerEvent

private

trustService

TrustService org.gluu.oxtrust.ldap.service.EntityIDMonitoringService.trustService

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxTrust/server/src/main/java/org/gluu/oxtrust/ldap/service/EntityIDMonitoringService.java