[JBoss JIRA] (ISPN-8736) REST endpoint authorization
by Tristan Tarrant (JIRA)
Tristan Tarrant created ISPN-8736:
-------------------------------------
Summary: REST endpoint authorization
Key: ISPN-8736
URL: https://issues.jboss.org/browse/ISPN-8736
Project: Infinispan
Issue Type: Enhancement
Components: REST, Security, Server
Reporter: Tristan Tarrant
Assignee: Tristan Tarrant
The REST endpoint does not apply authorization checks. We need to:
- integrate with the ServerAuthenticationProvider as used by the Hot Rod endpoint so that we can use security callbacks and retrieve a fully populated subject (including groups)
- add SecurityActions within the rest code
- Return 403 forbidden where needed
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
6 years, 11 months
[JBoss JIRA] (ISPN-8732) ClusteredLockSplitBrainTest hangs
by Katia Aresti (JIRA)
[ https://issues.jboss.org/browse/ISPN-8732?page=com.atlassian.jira.plugin.... ]
Katia Aresti updated ISPN-8732:
-------------------------------
Status: Resolved (was: Pull Request Sent)
Resolution: Done
> ClusteredLockSplitBrainTest hangs
> ---------------------------------
>
> Key: ISPN-8732
> URL: https://issues.jboss.org/browse/ISPN-8732
> Project: Infinispan
> Issue Type: Bug
> Components: Test Suite - Core
> Affects Versions: 9.2.0.CR1
> Reporter: Gustavo Fernandes
> Assignee: Gustavo Fernandes
>
> {noformat}
> "testng-ClusteredLockSplitBrainTest[DIST_SYNC]" #13 prio=5 os_prio=0 tid=0x00007f24d46c4ca0 nid=0x1f9d waiting on condition [0x00007f24a87f0000]
> java.lang.Thread.State: WAITING (parking)
> at sun.misc.Unsafe.park(Native Method)
> - parking to wait for <0x00000000ff4209f8> (a java.util.concurrent.CompletableFuture$Signaller)
> at java.util.concurrent.locks.LockSupport.park(LockSupport.java:175)
> at java.util.concurrent.CompletableFuture$Signaller.block(CompletableFuture.java:1693)
> at java.util.concurrent.ForkJoinPool.managedBlock(ForkJoinPool.java:3323)
> at java.util.concurrent.CompletableFuture.waitingGet(CompletableFuture.java:1729)
> at java.util.concurrent.CompletableFuture.get(CompletableFuture.java:1895)
> at org.infinispan.functional.FunctionalTestUtils.await(FunctionalTestUtils.java:42)
> at org.infinispan.lock.ClusteredLockSplitBrainTest.assertFailureFromMinorityPartition(ClusteredLockSplitBrainTest.java:170)
> at org.infinispan.lock.ClusteredLockSplitBrainTest.testAutoReleaseIfLockIsAcquiredFromAMinorityPartition(ClusteredLockSplitBrainTest.java:165)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
6 years, 11 months
[JBoss JIRA] (ISPN-8729) Use async operations in Hot Rod server
by Gustavo Fernandes (JIRA)
[ https://issues.jboss.org/browse/ISPN-8729?page=com.atlassian.jira.plugin.... ]
Gustavo Fernandes commented on ISPN-8729:
-----------------------------------------
I'll check, thanks!
> Use async operations in Hot Rod server
> --------------------------------------
>
> Key: ISPN-8729
> URL: https://issues.jboss.org/browse/ISPN-8729
> Project: Infinispan
> Issue Type: Enhancement
> Components: Server
> Affects Versions: 9.2.0.CR1
> Reporter: Radim Vansa
> Assignee: Radim Vansa
>
> The server should avoid context switches by starting commands directly from event loop instead of handing them off to another executor. This requires ISPN-8336 to make the async chain completely non-blocking.
> Along with the overhaul we should structure cache/counter/multimap operations nicely.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
6 years, 11 months
[JBoss JIRA] (ISPN-8729) Use async operations in Hot Rod server
by Radim Vansa (JIRA)
[ https://issues.jboss.org/browse/ISPN-8729?page=com.atlassian.jira.plugin.... ]
Radim Vansa commented on ISPN-8729:
-----------------------------------
[~gustavonalle] Ooops, indexing... seems I need to do a configuration check.
Checkout the PR please: I've left some of the 'operations' to keep the executor, including listener registration. Task execution already returns a CF so I've assumed that it is non-blocking.
> Use async operations in Hot Rod server
> --------------------------------------
>
> Key: ISPN-8729
> URL: https://issues.jboss.org/browse/ISPN-8729
> Project: Infinispan
> Issue Type: Enhancement
> Components: Server
> Affects Versions: 9.2.0.CR1
> Reporter: Radim Vansa
> Assignee: Radim Vansa
>
> The server should avoid context switches by starting commands directly from event loop instead of handing them off to another executor. This requires ISPN-8336 to make the async chain completely non-blocking.
> Along with the overhaul we should structure cache/counter/multimap operations nicely.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
6 years, 11 months
[JBoss JIRA] (ISPN-8729) Use async operations in Hot Rod server
by Gustavo Fernandes (JIRA)
[ https://issues.jboss.org/browse/ISPN-8729?page=com.atlassian.jira.plugin.... ]
Gustavo Fernandes commented on ISPN-8729:
-----------------------------------------
Sorry, by "command" I meant to write "operation", a specific Hot Rod request that can potentially block, for example, a script/task execution, or a listener registration with includeState=true or a listener configured with sync=true. Also, when indexing is enabled, unfortunately it can block on simple write commands since the machinery behind indexing is provided by Hibernate Search which in turn relies on Lucene, both which can block. Granted, indexing can be configured as async, but by default is it not.
> Use async operations in Hot Rod server
> --------------------------------------
>
> Key: ISPN-8729
> URL: https://issues.jboss.org/browse/ISPN-8729
> Project: Infinispan
> Issue Type: Enhancement
> Components: Server
> Affects Versions: 9.2.0.CR1
> Reporter: Radim Vansa
> Assignee: Radim Vansa
>
> The server should avoid context switches by starting commands directly from event loop instead of handing them off to another executor. This requires ISPN-8336 to make the async chain completely non-blocking.
> Along with the overhaul we should structure cache/counter/multimap operations nicely.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
6 years, 11 months
[JBoss JIRA] (ISPN-8729) Use async operations in Hot Rod server
by Radim Vansa (JIRA)
[ https://issues.jboss.org/browse/ISPN-8729?page=com.atlassian.jira.plugin.... ]
Radim Vansa commented on ISPN-8729:
-----------------------------------
It should not block by design, be it used from server or from application. Such behaviour would be a bug in given component: is your question about making sure such situation is detected (in testsuite)?
Actually right now it can block when running out of credits in JGroups: 4.0.4 already provides a [non-blocking variant|http://belaban.blogspot.cz/2017/06/non-blocking-jgroups.html] but this is not used in our configuration yet - I should probably add that to the PR (as a separate commit).
> Use async operations in Hot Rod server
> --------------------------------------
>
> Key: ISPN-8729
> URL: https://issues.jboss.org/browse/ISPN-8729
> Project: Infinispan
> Issue Type: Enhancement
> Components: Server
> Affects Versions: 9.2.0.CR1
> Reporter: Radim Vansa
> Assignee: Radim Vansa
>
> The server should avoid context switches by starting commands directly from event loop instead of handing them off to another executor. This requires ISPN-8336 to make the async chain completely non-blocking.
> Along with the overhaul we should structure cache/counter/multimap operations nicely.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
6 years, 11 months