Examples with PIPResourceFinder org.wso2.carbon.identity.entitlement.pip.PIPResourceFinder used on opensource projects

Example 1 with PIPResourceFinder

use of org.wso2.carbon.identity.entitlement.pip.PIPResourceFinder in project carbon-identity-framework by wso2.

the class CarbonResourceFinder method findChildResources.

@Override
public ResourceFinderResult findChildResources(AttributeValue parentResourceId, EvaluationCtx context) {
    ResourceFinderResult resourceFinderResult = null;
    Set<AttributeValue> resources = null;
    String dataType = parentResourceId.getType().toString();
    for (PIPResourceFinder finder : resourceFinders) {
        try {
            Set<String> resourceNames = null;
            if (isResourceCachingEnabled && !finder.overrideDefaultCache()) {
                IdentityCacheKey cacheKey = null;
                String key = PDPConstants.RESOURCE_CHILDREN + parentResourceId.encode() + domToString(context.getRequestRoot());
                cacheKey = new IdentityCacheKey(tenantId, key);
                IdentityCacheEntry cacheEntry = (IdentityCacheEntry) resourceCache.getValueFromCache(cacheKey);
                if (cacheEntry != null) {
                    String cacheEntryString = cacheEntry.getCacheEntry();
                    String[] attributes = cacheEntryString.split(PDPConstants.ATTRIBUTE_SEPARATOR);
                    if (attributes != null && attributes.length > 0) {
                        List<String> list = Arrays.asList(attributes);
                        resourceNames = new HashSet<String>(list);
                    }
                    if (log.isDebugEnabled()) {
                        log.debug("Carbon Resource Cache Hit");
                    }
                } else {
                    resourceNames = finder.findChildResources(parentResourceId.encode(), context);
                    if (log.isDebugEnabled()) {
                        log.debug("Carbon Resource Cache Miss");
                    }
                    String cacheEntryString = "";
                    if (resourceNames != null && resourceNames.size() > 0) {
                        for (String attribute : resourceNames) {
                            if (cacheEntryString.equals("")) {
                                cacheEntryString = attribute;
                            } else {
                                cacheEntryString = cacheEntryString + PDPConstants.ATTRIBUTE_SEPARATOR + attribute;
                            }
                        }
                    }
                    cacheEntry = new IdentityCacheEntry(cacheEntryString);
                    resourceCache.addToCache(cacheKey, cacheEntry);
                }
            } else {
                resourceNames = finder.findChildResources(parentResourceId.encode(), context);
            }
            if (resourceNames != null && !resourceNames.isEmpty()) {
                resources = new HashSet<AttributeValue>();
                for (String resourceName : resourceNames) {
                    resources.add(EntitlementUtil.getAttributeValue(resourceName, dataType));
                }
            }
        } catch (EntitlementException e) {
            log.error("Error while finding child resources", e);
        } catch (TransformerException e) {
            log.error("Error while finding child resources", e);
        } catch (Exception e) {
            log.error("Error while finding child resources", e);
        }
    }
    if (resources != null) {
        resourceFinderResult = new ResourceFinderResult(resources);
    } else {
        resourceFinderResult = new ResourceFinderResult();
    }
    return resourceFinderResult;
}

Example 2 with PIPResourceFinder

use of org.wso2.carbon.identity.entitlement.pip.PIPResourceFinder in project carbon-identity-framework by wso2.

the class CarbonResourceFinder method findDescendantResources.

@Override
public ResourceFinderResult findDescendantResources(AttributeValue parentResourceId, EvaluationCtx context) {
    ResourceFinderResult resourceFinderResult = null;
    Set<AttributeValue> resources = null;
    String dataType = parentResourceId.getType().toString();
    for (PIPResourceFinder finder : resourceFinders) {
        try {
            Set<String> resourceNames = null;
            if (isResourceCachingEnabled && !finder.overrideDefaultCache()) {
                IdentityCacheKey cacheKey = null;
                String key = PDPConstants.RESOURCE_DESCENDANTS + parentResourceId.encode() + domToString(context.getRequestRoot());
                cacheKey = new IdentityCacheKey(tenantId, key);
                IdentityCacheEntry cacheEntry = (IdentityCacheEntry) resourceCache.getValueFromCache(cacheKey);
                if (cacheEntry != null) {
                    String[] values = cacheEntry.getCacheEntryArray();
                    resourceNames = new HashSet<String>(Arrays.asList(values));
                    if (log.isDebugEnabled()) {
                        log.debug("Carbon Resource Cache Hit");
                    }
                }
                if (resourceNames != null) {
                    resourceNames = finder.findDescendantResources(parentResourceId.encode(), context);
                    if (log.isDebugEnabled()) {
                        log.debug("Carbon Resource Cache Miss");
                    }
                    cacheEntry = new IdentityCacheEntry(resourceNames.toArray(new String[resourceNames.size()]));
                    resourceCache.addToCache(cacheKey, cacheEntry);
                }
            } else {
                resourceNames = finder.findDescendantResources(parentResourceId.encode(), context);
            }
            if (resourceNames != null && !resourceNames.isEmpty()) {
                resources = new HashSet<AttributeValue>();
                for (String resourceName : resourceNames) {
                    resources.add(EntitlementUtil.getAttributeValue(resourceName, dataType));
                }
            }
        } catch (EntitlementException e) {
            log.error("Error while finding descendant resources", e);
        } catch (TransformerException e) {
            log.error("Error while finding descendant resources", e);
        } catch (Exception e) {
            log.error("Error while finding descendant resources", e);
        }
    }
    if (resources != null) {
        resourceFinderResult = new ResourceFinderResult(resources);
    } else {
        resourceFinderResult = new ResourceFinderResult();
    }
    return resourceFinderResult;
}

Example 3 with PIPResourceFinder

use of org.wso2.carbon.identity.entitlement.pip.PIPResourceFinder in project carbon-identity-framework by wso2.

the class EntitlementExtensionBuilder method populateResourceFinders.

/**
 * @param properties
 * @param holder
 * @throws Exception
 */
private void populateResourceFinders(Properties properties, EntitlementConfigHolder holder) throws Exception {
    int i = 1;
    PIPResourceFinder resource = null;
    while (properties.getProperty("PIP.ResourceFinders.Finder." + i) != null) {
        String className = properties.getProperty("PIP.ResourceFinders.Finder." + i++);
        Class clazz = Thread.currentThread().getContextClassLoader().loadClass(className);
        resource = (PIPResourceFinder) clazz.newInstance();
        int j = 1;
        Properties resourceProps = new Properties();
        while (properties.getProperty(className + "." + j) != null) {
            String[] props = properties.getProperty(className + "." + j++).split(",");
            resourceProps.put(props[0], props[1]);
        }
        resource.init(resourceProps);
        holder.addResourceFinders(resource, resourceProps);
    }
}

Example 4 with PIPResourceFinder

use of org.wso2.carbon.identity.entitlement.pip.PIPResourceFinder in project carbon-identity-framework by wso2.

the class EntitlementAdminService method refreshResourceFinder.

/**
 * Refreshes the supported resource id of a given resource finder module
 *
 * @param resourceFinder Canonical name of the resource finder class.
 * @throws EntitlementException throws if fails to  refresh
 */
public void refreshResourceFinder(String resourceFinder) throws EntitlementException {
    Map<PIPResourceFinder, Properties> resourceFinders = EntitlementServiceComponent.getEntitlementConfig().getResourceFinders();
    if (resourceFinder != null && resourceFinders != null && !resourceFinders.isEmpty()) {
        for (Map.Entry<PIPResourceFinder, Properties> entry : resourceFinders.entrySet()) {
            if (resourceFinder.equals(entry.getKey().getClass().getName()) || resourceFinder.equals(entry.getKey().getModuleName())) {
                try {
                    entry.getKey().init(entry.getValue());
                    entry.getKey().clearCache();
                    CarbonAttributeFinder carbonAttributeFinder = EntitlementEngine.getInstance().getCarbonAttributeFinder();
                    carbonAttributeFinder.init();
                } catch (Exception e) {
                    throw new EntitlementException("Error while refreshing attribute finder - " + resourceFinder);
                }
                break;
            }
        }
    }
}

Example 5 with PIPResourceFinder

use of org.wso2.carbon.identity.entitlement.pip.PIPResourceFinder in project carbon-identity-framework by wso2.

the class EntitlementAdminService method clearCarbonResourceCache.

/**
 * Clears the carbon resource cache
 *
 * @throws EntitlementException throws
 */
public void clearCarbonResourceCache() throws EntitlementException {
    CarbonResourceFinder finder = EntitlementEngine.getInstance().getCarbonResourceFinder();
    if (finder != null) {
        finder.clearAttributeCache();
        // we need invalidate decision cache as well.
        clearDecisionCache();
    } else {
        throw new EntitlementException("Can not clear attribute cache - Carbon Attribute Finder " + "is not initialized");
    }
    Map<PIPResourceFinder, Properties> resourceConfigs = EntitlementServiceComponent.getEntitlementConfig().getResourceFinders();
    if (resourceConfigs != null && !resourceConfigs.isEmpty()) {
        Set<PIPResourceFinder> resourceFinders = resourceConfigs.keySet();
        for (PIPResourceFinder pipResourceFinder : resourceFinders) {
            pipResourceFinder.clearCache();
        }
    }
}