org.directwebremoting.dwrp.BaseCallHandler Maven / Gradle / Ivy
package org.directwebremoting.dwrp;
import java.io.IOException;
import java.io.PrintWriter;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.directwebremoting.ConversionException;
import org.directwebremoting.ScriptBuffer;
import org.directwebremoting.WebContextFactory;
import org.directwebremoting.extend.Call;
import org.directwebremoting.extend.Calls;
import org.directwebremoting.extend.ConverterManager;
import org.directwebremoting.extend.EnginePrivate;
import org.directwebremoting.extend.FormField;
import org.directwebremoting.extend.InboundContext;
import org.directwebremoting.extend.InboundVariable;
import org.directwebremoting.extend.MethodDeclaration;
import org.directwebremoting.extend.ModuleManager;
import org.directwebremoting.extend.PageNormalizer;
import org.directwebremoting.extend.ParameterProperty;
import org.directwebremoting.extend.Property;
import org.directwebremoting.extend.ProtocolConstants;
import org.directwebremoting.extend.RealScriptSession;
import org.directwebremoting.extend.RealWebContext;
import org.directwebremoting.extend.Remoter;
import org.directwebremoting.extend.Replies;
import org.directwebremoting.extend.Reply;
import org.directwebremoting.extend.ScriptBufferUtil;
import org.directwebremoting.extend.ScriptConduit;
import org.directwebremoting.extend.ScriptSessionManager;
import org.directwebremoting.extend.SimpleInputStreamFactory;
import org.directwebremoting.impl.AccessLogLevel;
import org.directwebremoting.impl.ExportUtil;
import org.directwebremoting.io.FileTransfer;
import org.directwebremoting.io.InputStreamFactory;
import org.directwebremoting.util.DebuggingPrintWriter;
import org.directwebremoting.util.LocalUtil;
/**
* A Marshaller that output plain Javascript.
* This marshaller can be tweaked to output Javascript in an HTML context.
* This class works in concert with CallScriptConduit, they should be
* considered closely related and it is important to understand what one does
* while editing the other.
* @author Joe Walker [joe at getahead dot ltd dot uk]
*/
public abstract class BaseCallHandler extends BaseDwrpHandler
{
/* (non-Javadoc)
* @see org.directwebremoting.Handler#handle(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
*/
public void handle(HttpServletRequest request, HttpServletResponse response) throws IOException
{
boolean scriptPrefixSent = false;
ScriptConduit conduit = null;
try
{
CallBatch batch = new CallBatch(request);
// Save the batch so marshallException can get at a batch id
request.setAttribute(ATTRIBUTE_BATCH, batch);
// Security checks first, once we've parsed the input
checkGetAllowed(batch);
boolean checkCsrf = false;
for (int i = 0; i < batch.getCalls().getCallCount(); i++)
{
Call call = batch.getCalls().getCall(i);
if (!ExportUtil.isUnprotectedSystemMethod(call.getScriptName(), call.getMethodName()))
{
checkCsrf = true;
break;
}
}
if (checkCsrf) {
checkNotCsrfAttack(request, batch);
}
// Various bits of the CallBatch need to be stashed away places
storeParsedRequest(request, batch);
String normalizedPage = pageNormalizer.normalizePage(batch.getPage());
RealScriptSession scriptSession = scriptSessionManager.getOrCreateScriptSession(batch.getScriptSessionId(), normalizedPage, request.getSession(false));
RealWebContext webContext = (RealWebContext) WebContextFactory.get();
webContext.initialize(normalizedPage, scriptSession);
Calls calls = marshallInbound(batch);
Replies replies = remoter.execute(calls);
// AccessLogLevel.getValue is null safe, it will always return an AccessLogLevel.
PrintWriter out;
if (debugScriptOutput || AccessLogLevel.getValue(this.accessLogLevel, debug).hierarchy() == 0)
{
// This might be considered evil - altering the program flow
// depending on the log status, however DebuggingPrintWriter is
// very thin and only about logging
DebuggingPrintWriter dpw = new DebuggingPrintWriter("", response.getWriter());
dpw.setPrefix("out(" + replies.hashCode() + "): ");
out = dpw;
}
else
{
out = response.getWriter();
}
conduit = createScriptConduit(out, batch.getInstanceId(), batch.getBatchId(), batch.getDocumentDomain());
scriptPrefixSent = true; // we can set this here as marshallOutbound will send prefix before throwing any exception
marshallOutbound(batch, replies, response, conduit, out);
if (checkCsrf) {
updateCsrfState(request, batch);
}
}
catch (Exception ex)
{
if (debug)
{
if (LocalUtil.getRootCause(ex) instanceof IOException) {
log.debug("I/O error while processing batch", ex);
} else {
log.warn("Exception while processing batch", ex);
}
}
marshallException(request, response, conduit, ex, !scriptPrefixSent);
}
}
/**
* Convert batch into calls.
* @param batch The data we've parsed from the request
* @return The function calls to make
*/
@SuppressWarnings({"ThrowableInstanceNeverThrown"})
public Calls marshallInbound(CallBatch batch)
{
Calls calls = batch.getCalls();
// Debug the environment
/*
if (log.isDebugEnabled() && calls.getCallCount() > 0)
{
// We can just use 0 because they are all shared
InboundContext inctx = batch.getInboundContexts().get(0);
StringBuffer buffer = new StringBuffer();
for (Iterator it = inctx.getInboundVariableNames(); it.hasNext();)
{
String key = it.next();
InboundVariable value = inctx.getInboundVariable(key);
if (key.startsWith(ProtocolConstants.INBOUND_CALLNUM_PREFIX) &&
key.contains(ProtocolConstants.INBOUND_CALLNUM_SUFFIX + ProtocolConstants.INBOUND_KEY_ENV))
{
buffer.append(key);
buffer.append('=');
buffer.append(value.toString());
buffer.append(", ");
}
}
if (buffer.length() > 0)
{
log.debug("Environment: " + buffer.toString());
}
}
//*/
callLoop:
for (int callNum = 0; callNum < calls.getCallCount(); callNum++)
{
Call call = calls.getCall(callNum);
try
{
InboundContext inctx = batch.getInboundContexts().get(callNum);
// Get a list of the available matching methods with the coerced
// parameters that we will use to call it if we choose to use
// that method.
// Which method are we using?
call.findMethod(moduleManager, converterManager, inctx, callNum);
MethodDeclaration method = call.getMethodDeclaration();
if (method == null)
{
log.warn("No methods to match " + call.getScriptName() + '.' + call.getMethodName());
throw new IllegalArgumentException("Missing method or missing parameter converters");
}
// We are now sure we have the set of inputs lined up. They may
// cross-reference so we do the de-referencing all in one go.
// TODO: should we do this here? - why not earlier?
// do we need to know the method before we dereference?
inctx.dereference();
// Convert all the parameters to the correct types
int destParamCount = method.getParameterTypes().length;
Object[] arguments = new Object[destParamCount];
int inboundArgIndex = 0;
for (int outboundArgIndex = 0; outboundArgIndex < destParamCount; outboundArgIndex++)
{
InboundVariable param;
if (method.isVarArgs() && outboundArgIndex + 1 == destParamCount)
{
param = inctx.createArrayWrapper(callNum, destParamCount);
}
else
{
param = inctx.getParameter(callNum, inboundArgIndex);
}
Property property = new ParameterProperty(method, outboundArgIndex);
// TODO: Having just got a property, shouldn't we call property.getPropertyType() in place of this?
Class paramType = method.getParameterTypes()[outboundArgIndex];
try
{
arguments[outboundArgIndex] = converterManager.convertInbound(paramType, param, property);
}
catch (Exception ex)
{
log.debug("Problem converting param=" + param + ", property=" + property + ", into paramType=" + paramType.getName() + ": " + ex);
throw ex;
}
// Only increment the inboundArgIndex if the parameterType of the destination method is not
// a Servlet class. // In this case the arguments value is auto-populated by DWR and a place-holder
// argument is not passed from the client.
if (!LocalUtil.isServletClass(paramType)) {
inboundArgIndex++;
}
}
call.setParameters(arguments);
}
catch (Exception ex)
{
log.debug("Marshalling exception", ex);
call.setMarshallFailure(ex);
continue callLoop;
}
}
return calls;
}
/**
* Build a CallBatch and put it in the request
* @param request Where we store the parsed data
* @param batch The parsed data to store
*/
private void storeParsedRequest(HttpServletRequest request, CallBatch batch) throws IOException
{
// Remaining parameters get put into the request for later consumption
Map paramMap = batch.getExtraParameters();
if (!paramMap.isEmpty())
{
for (Map.Entry entry : paramMap.entrySet())
{
String key = entry.getKey();
final FormField formField = entry.getValue();
Object value;
if (formField == null)
{
log.warn("Found a parameter with a null value. This is likely to be due to a URL with an & before the query parameters. Please URL encode such pages.");
throw new IllegalArgumentException("Empty input parameter. See logs for suggestions");
}
if (formField.isFile())
{
InputStreamFactory inFactory = new SimpleInputStreamFactory(formField.getInputStream());
value = new FileTransfer(formField.getName(), formField.getMimeType(), formField.getFileSize(), inFactory);
}
else
{
value = formField.getString();
}
if (key.startsWith(ProtocolConstants.INBOUND_KEY_METADATA))
{
request.setAttribute(key.substring(ProtocolConstants.INBOUND_KEY_METADATA.length()), value);
log.debug("Moved param to request: " + key + "=" + value);
}
else
{
log.debug("Ignoring parameter: " + key + "=" + value);
}
}
}
}
/* (non-Javadoc)
* @see org.directwebremoting.Marshaller#marshallOutbound(org.directwebremoting.Replies, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
*/
public void marshallOutbound(Batch batch, Replies replies, HttpServletResponse response, ScriptConduit conduit, PrintWriter out) throws Exception
{
RealScriptSession scriptSession;
try
{
scriptSession = (RealScriptSession) WebContextFactory.get().getScriptSession();
}
catch (SecurityException ex)
{
// If this is a call to System.pageUnloaded() or if something else
// has caused the ScriptSession to expire, then we shouldn't do any
// output, and just ignore the write. Officially there isn't
// anything to write to anyway.
return;
}
// Will we do passive Reverse Ajax (piggyback) ?
boolean passiveReverseAjax = false;
long nextScriptIndex = -1;
if (batch.getNextReverseAjaxIndex() != null)
{
passiveReverseAjax = true;
nextScriptIndex = batch.getNextReverseAjaxIndex();
}
// Basic setup
response.setContentType(conduit.getOutboundMimeType());
if (passiveReverseAjax)
{
scriptSession.confirmScripts(nextScriptIndex - 1);
}
// If there is a Reverse Ajax runnable for beginning of response then run it
boolean beginningRunnable = false;
RealScriptSession.Script script = null;
if (passiveReverseAjax)
{
script = scriptSession.getScript(nextScriptIndex);
if (script != null && script.getScript() instanceof Runnable) {
((Runnable) script.getScript()).run();
beginningRunnable = true;
}
}
// Send the script prefix (if any)
conduit.beginStreamAndChunk();
// Send confirmation for the runnable to client after stream prefix
if (beginningRunnable) {
conduit.sendScript(EnginePrivate.getRemoteHandleReverseAjaxScript(script.getIndex(), ""));
nextScriptIndex = script.getIndex() + 1;
}
// Reverse Ajax scripts in chunk
if (passiveReverseAjax)
{
out.println(ProtocolConstants.SCRIPT_CALL_INSERT);
while(true) {
script = scriptSession.getScript(nextScriptIndex);
if (script != null && script.getScript() instanceof String) {
conduit.sendScript(EnginePrivate.getRemoteHandleReverseAjaxScript(script.getIndex(), (String) script.getScript()));
nextScriptIndex = script.getIndex() + 1;
} else {
break;
}
}
}
// Replies
out.println(ProtocolConstants.SCRIPT_CALL_REPLY);
String batchId = replies.getCalls().getBatchId();
for (int i = 0; i < replies.getReplyCount(); i++)
{
Reply reply = replies.getReply(i);
String callId = reply.getCallId();
try
{
ScriptBuffer scriptBuf;
// The existence of a throwable indicates that something went wrong
if (reply.getThrowable() != null)
{
Throwable ex = reply.getThrowable();
scriptBuf = EnginePrivate.getRemoteHandleExceptionScript(batchId, callId, ex);
}
else
{
Object data = reply.getReply();
scriptBuf = EnginePrivate.getRemoteHandleCallbackScript(batchId, callId, data);
}
conduit.sendScript(ScriptBufferUtil.createOutput(scriptBuf, converterManager, jsonOutput));
}
catch (IOException ex)
{
// We're a bit stuck we died half way through writing so
// we can't be sure the browser can react to the failure.
// Since we can no longer do output we just log and end
log.error("--Output Error: batchId[" + batchId + "] message[" + ex.toString() + ']', ex);
}
catch (ConversionException ex)
{
ScriptBuffer scriptBuf = EnginePrivate.getRemoteHandleExceptionScript(batchId, callId, ex);
addScriptHandleExceptions(conduit, scriptBuf);
log.warn("--ConversionException: batchId=" + batchId + " class=" + ex.getConversionType().getName(), ex);
}
catch (Exception ex)
{
// This is a bit of a "this can't happen" case so I am a bit
// nervous about sending the exception to the client, but we
// want to avoid silently dying so we need to do something.
ScriptBuffer scriptBuf = EnginePrivate.getRemoteHandleExceptionScript(batchId, callId, ex);
addScriptHandleExceptions(conduit, scriptBuf);
log.error("--ConversionException: batchId=" + batchId + " message=" + ex.toString());
}
}
conduit.endStreamAndChunk();
}
/* (non-Javadoc)
* @see org.directwebremoting.extend.Marshaller#marshallException(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, java.lang.Exception)
*/
public void marshallException(HttpServletRequest request, HttpServletResponse response, ScriptConduit conduit, Exception ex, boolean sendPrefix) throws IOException
{
String batchId = null;
String instanceId = "0";
String documentDomain = null;
Batch batch = (Batch) request.getAttribute(ATTRIBUTE_BATCH);
if (batch != null)
{
batchId = batch.getBatchId();
instanceId = batch.getInstanceId();
documentDomain = batch.getDocumentDomain();
}
PrintWriter out = response.getWriter();
if (conduit == null)
{
conduit = createScriptConduit(out, instanceId, batchId, documentDomain);
}
response.setContentType(conduit.getOutboundMimeType());
if (sendPrefix)
{
conduit.beginStreamAndChunk();
}
String script = EnginePrivate.getRemoteHandleBatchExceptionScript(batchId, ex);
out.println(script);
conduit.endStreamAndChunk();
}
/**
* Marshall a Script without worrying about MarshallExceptions
* @param conduit ...
* @param script ...
* @throws IOException ...
*/
public void addScriptHandleExceptions(ScriptConduit conduit, ScriptBuffer script) throws IOException
{
try
{
conduit.sendScript(ScriptBufferUtil.createOutput(script, converterManager, jsonOutput));
}
catch (ConversionException ex)
{
log.warn("Error marshalling exception. Is the exception converter configured?", ex);
}
}
/**
* Create a suitable ScriptConduit for the transfer mode.
* @param out ...
* @param instanceId ...
* @param batchId ...
* @param documentDomain ...
* @return ScriptConduit instance
*/
protected abstract ScriptConduit createScriptConduit(PrintWriter out, String instanceId, String batchId, String documentDomain);
/* (non-Javadoc)
* @see org.directwebremoting.Marshaller#isConvertable(java.lang.Class)
*/
public boolean isConvertable(Class paramType)
{
return converterManager.isConvertable(paramType);
}
/**
* Set the debug status
* @param debug The new debug setting
*/
public void setDebug(boolean debug)
{
this.debug = debug;
}
/**
* Are we in debug mode?
*/
protected boolean debug = false;
/**
* Setter for the remoter
* @param remoter The new remoter
*/
public void setRemoter(Remoter remoter)
{
this.remoter = remoter;
}
/**
* The bean to execute remote requests and generate interfaces
*/
protected Remoter remoter = null;
/**
* Do we debug all the scripts that we output?
* @param debugScriptOutput true to debug all of the output scripts (verbose)
*/
public void setDebugScriptOutput(boolean debugScriptOutput)
{
this.debugScriptOutput = debugScriptOutput;
}
/**
* Do we debug all the scripts that we output?
*/
protected boolean debugScriptOutput = false;
/**
* @return Are we outputting in JSON mode?
*/
public boolean isJsonOutput()
{
return jsonOutput;
}
/**
* @param jsonOutput Are we outputting in JSON mode?
*/
public void setJsonOutput(boolean jsonOutput)
{
this.jsonOutput = jsonOutput;
}
/**
* Are we outputting in JSON mode?
*/
protected boolean jsonOutput = false;
/**
* When and what should we log? Options are (specified in the DWR servlet's init-params):
* 1) call (start of call + successful return values).
* 2) exception (checked) - default for debug.
* 3) runtimeexception (unchecked).
* 4) error - default for production.
* 5) off.
* @param accessLogLevel ...
*/
public void setAccessLogLevel(String accessLogLevel)
{
this.accessLogLevel = accessLogLevel;
}
/**
* When and what should we log? Options are (specified in the DWR servlet's init-params):
* 1) call (start of call + successful return values).
* 2) exception (checked) - default for debug.
* 3) runtimeexception (unchecked).
* 4) error - default for production.
* 5) off.
*/
protected String accessLogLevel = null;
/**
* Accessor for the PageNormalizer.
* @param pageNormalizer The new PageNormalizer
*/
public void setPageNormalizer(PageNormalizer pageNormalizer)
{
this.pageNormalizer = pageNormalizer;
}
/**
* How we turn pages into the canonical form.
*/
protected PageNormalizer pageNormalizer = null;
/**
* Accessor for the ScriptSessionManager that we configure
* @param scriptSessionManager ...
*/
public void setScriptSessionManager(ScriptSessionManager scriptSessionManager)
{
this.scriptSessionManager = scriptSessionManager;
}
/**
* How we handle ScriptSessions
*/
protected ScriptSessionManager scriptSessionManager = null;
/**
* Accessor for the ConverterManager that we configure
* @param converterManager ...
*/
public void setConverterManager(ConverterManager converterManager)
{
this.converterManager = converterManager;
}
/**
* How we convert parameters
*/
protected ConverterManager converterManager = null;
/**
* Accessor for the ModuleManager that we configure
* @param moduleManager ...
*/
public void setModuleManager(ModuleManager moduleManager)
{
this.moduleManager = moduleManager;
}
/**
* How we create new beans
*/
protected ModuleManager moduleManager = null;
/**
* How we stash away the results of the request parse
*/
protected static final String ATTRIBUTE_BATCH = "org.directwebremoting.dwrp.batch";
/**
* The log stream
*/
private static final Log log = LogFactory.getLog(BaseCallHandler.class);
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy