StatefulCheckoutRequestTemplate.h

#ifndef TENDUKE_CLIENT_EE_STATEFULCHECKOUTREQUESTTEMPLATE_H
#define TENDUKE_CLIENT_EE_STATEFULCHECKOUTREQUESTTEMPLATE_H
 
#include "../authz/LicensingRequest.h"
#include "http/Unauthorized.h"
#include "log/log.h"
#include "oidc/session/OIDCSession.h"
 
namespace tenduke { namespace ee { namespace licensing { namespace impl {
 
template<class T>
class StatefulCheckoutRequestTemplate
{
public:
    StatefulCheckoutRequestTemplate(
            std::unique_ptr<::tenduke::ee::licensing::authzapi::LicensingRequest<T>> request,
            const std::shared_ptr<::tenduke::oidc::OIDCSession> &oidc
    ) : oidc(oidc), request(std::move(request))
    {}
 
    T execute()
    {
        ::tenduke::log::debug("StatefulCheckoutRequest::execute() ensuring valid session...");
        oidc->ensureValidSession();
 
        // The response. Wrapped in pointer to workaround assignment issues to const fields
        std::unique_ptr<T> response = nullptr;
 
        try {
            ::tenduke::log::debug("StatefulCheckoutRequest::execute() ...executing the request...");
            response.reset(new T(request->execute()));
        }
        // Since 10Duke Enterprise 5.0: The backend may be configured to throw HTTP 401 when the credentials are
        // invalid or expired.
        // Note that the client does not know the backend version nor the configuration, so the old handling below
        // is retained, even though it might perform duplicate work.
        catch (const ::tenduke::http::Unauthorized &e) {
            ::tenduke::log::warning("StatefulCheckoutRequest::execute() ... got HTTP 401.");
            return reEstablishOIDCSessionAndRetry();
        }
 
        // Check if the request failed because credentials were invalid.
        // On checkout, the /authz-API does not acknowledge missing/expired/removed request-authentication credentials.
        // To detect this condition, we assume that if the request failed (all the items in the request failed),
        // we do a heartbeat to the backend. If the heartbeat fails with HTTP 401, we refresh or re-login and
        // re-try the request.
        //
        // This is the old functionality. See above for handling of the ::tenduke::http::Unauthorized.
        if (response->failed()) {
            ::tenduke::log::warning("StatefulCheckoutRequest::execute() ... failed. Doing heartbeat to check backend state...");
 
            if (oidc->heartbeat()) {
                ::tenduke::log::info("StatefulCheckoutRequest::execute() ... credentials were valid. Returning original response.");
            }
            else {
                ::tenduke::log::warning(" StatefulCheckoutRequest::execute()... credentials were defunct.");
                return reEstablishOIDCSessionAndRetry();
            }
        }
        else {
            ::tenduke::log::debug("StatefulCheckoutRequest::execute() ... succeeded");
        }
 
        return *response;
    }
 
protected:
    T reEstablishOIDCSessionAndRetry()
    {
        ::tenduke::log::info("StatefulCheckoutRequest::reEstablishOIDCSessionAndRetry() Re-estalishing OIDC session...");
        oidc->reEstablish();
 
        ::tenduke::log::info("StatefulCheckoutRequest::reEstablishOIDCSessionAndRetry() ... OIDC session re-established. Re-executing original request...");
        auto response = request->execute();
 
        ::tenduke::log::info("StatefulCheckoutRequest::reEstablishOIDCSessionAndRetry() ... ready, returning new response as-is.");
        return response;
    }
 
private:
    const std::shared_ptr<::tenduke::oidc::OIDCSession> oidc;
    const std::unique_ptr<::tenduke::ee::licensing::authzapi::LicensingRequest<T>> request;
};
 
}}}}
 
 
#endif //TENDUKE_CLIENT_EE_STATEFULCHECKOUTREQUESTTEMPLATE_H