storm-core/src/jvm/org/apache/storm/pacemaker/codec/ThriftNettyServerCodec.java

/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.apache.storm.pacemaker.codec;

import backtype.storm.Config;
import backtype.storm.messaging.netty.ISaslServer;
import backtype.storm.messaging.netty.IServer;
import backtype.storm.messaging.netty.KerberosSaslServerHandler;
import backtype.storm.messaging.netty.SaslStormServerHandler;
import backtype.storm.messaging.netty.StormServerHandler;
import backtype.storm.security.auth.AuthUtils;
import java.io.IOException;
import java.util.ArrayList;
import java.util.Map;
import org.jboss.netty.channel.ChannelPipeline;
import org.jboss.netty.channel.ChannelPipelineFactory;
import org.jboss.netty.channel.Channels;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class ThriftNettyServerCodec {

    public static final String SASL_HANDLER = "sasl-handler";
    public static final String KERBEROS_HANDLER = "kerberos-handler";
    
    public enum AuthMethod {
        DIGEST,
        KERBEROS,
        NONE
    };
    
    private IServer server;
    private AuthMethod authMethod;
    private Map storm_conf;
    
    private static final Logger LOG = LoggerFactory
        .getLogger(ThriftNettyServerCodec.class);

    public ThriftNettyServerCodec(IServer server, Map storm_conf, AuthMethod authMethod) {
        this.server = server;
        this.authMethod = authMethod;
        this.storm_conf = storm_conf;
    }

    public ChannelPipelineFactory pipelineFactory() {
        return new ChannelPipelineFactory() {
            public ChannelPipeline getPipeline() {

                ChannelPipeline pipeline = Channels.pipeline();
                pipeline.addLast("encoder", new ThriftEncoder());
                pipeline.addLast("decoder", new ThriftDecoder());
                if(authMethod == AuthMethod.DIGEST) {
                    try {
                        LOG.debug("Adding SaslStormServerHandler to pacemaker server pipeline.");
                        pipeline.addLast(SASL_HANDLER, new SaslStormServerHandler((ISaslServer)server));
                    }
                    catch (IOException e) {
                        throw new RuntimeException(e);
                    }
                }
                else if(authMethod == AuthMethod.KERBEROS) {
                    try {
                        LOG.debug("Adding KerberosSaslServerHandler to pacemaker server pipeline.");
                        ArrayList<String> authorizedUsers = new ArrayList(1);
                        authorizedUsers.add((String)storm_conf.get(Config.NIMBUS_DAEMON_USER));
                        pipeline.addLast(KERBEROS_HANDLER, new KerberosSaslServerHandler((ISaslServer)server,
                                                                                         storm_conf,
                                                                                         AuthUtils.LOGIN_CONTEXT_PACEMAKER_SERVER,
                                                                                         authorizedUsers));
                    }
                    catch (IOException e) {
                        throw new RuntimeException(e);
                    }
                }
                else if(authMethod == AuthMethod.NONE) {
                    LOG.debug("Not authenticating any clients. AuthMethod is NONE");
                }

                pipeline.addLast("handler", new StormServerHandler(server));
                return pipeline;
            }
        };
    }
}