/*

 * Copyright (c) 2002, 2012, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package javax.management.remote.rmi;

import java.io.IOException;

import java.rmi.MarshalledObject;

import java.rmi.UnmarshalException;

import java.rmi.server.Unreferenced;

import java.security.AccessControlContext;

import java.security.AccessController;

import java.security.Permission;

import java.security.PermissionCollection;

import java.security.Permissions;

import java.security.PrivilegedAction;

import java.security.PrivilegedActionException;

import java.security.PrivilegedExceptionAction;

import java.security.ProtectionDomain;

import java.util.Arrays;

import java.util.Collections;

import java.util.Map;

import java.util.Set;

import javax.management.*;

import javax.management.remote.JMXServerErrorException;

import javax.management.remote.NotificationResult;

import javax.management.remote.TargetedNotification;

import javax.security.auth.Subject;

import sun.reflect.misc.ReflectUtil;

import static com.sun.jmx.mbeanserver.Util.cast;

import com.sun.jmx.remote.internal.ServerCommunicatorAdmin;

import com.sun.jmx.remote.internal.ServerNotifForwarder;

import com.sun.jmx.remote.security.JMXSubjectDomainCombiner;

import com.sun.jmx.remote.security.SubjectDelegator;

import com.sun.jmx.remote.util.ClassLoaderWithRepository;

import com.sun.jmx.remote.util.ClassLogger;

import com.sun.jmx.remote.util.EnvHelp;

import com.sun.jmx.remote.util.OrderClassLoaders;

/**

 * <p>Implementation of the {@link RMIConnection} interface.  User

 * code will not usually reference this class.</p>

 *

 * @since 1.5

 */

/*

 * Notice that we omit the type parameter from MarshalledObject everywhere,

 * even though it would add useful information to the documentation.  The

 * reason is that it was only added in Mustang (Java SE 6), whereas versions

 * 1.4 and 2.0 of the JMX API must be implementable on Tiger per our

 * commitments for JSR 255.

 */

public class RMIConnectionImpl implements RMIConnection, Unreferenced {

    /**

     * Constructs a new {@link RMIConnection}. This connection can be

     * used with either the JRMP or IIOP transport. This object does

     * not export itself: it is the responsibility of the caller to

     * export it appropriately (see {@link

     * RMIJRMPServerImpl#makeClient(String,Subject)} and {@link

     * RMIIIOPServerImpl#makeClient(String,Subject)}.

     *

     * @param rmiServer The RMIServerImpl object for which this

     * connection is created.  The behavior is unspecified if this

     * parameter is null.

     * @param connectionId The ID for this connection.  The behavior

     * is unspecified if this parameter is null.

     * @param defaultClassLoader The default ClassLoader to be used

     * when deserializing marshalled objects.  Can be null, to signify

     * the bootstrap class loader.

     * @param subject the authenticated subject to be used for

     * authorization.  Can be null, to signify that no subject has

     * been authenticated.

     * @param env the environment containing attributes for the new

     * <code>RMIServerImpl</code>.  Can be null, equivalent to an

     * empty map.

     */

    public RMIConnectionImpl(RMIServerImpl rmiServer,

                             String connectionId,

                             ClassLoader defaultClassLoader,

                             Subject subject,

                             Map<String,?> env) {

        if (rmiServer == null || connectionId == null)

            throw new NullPointerException("Illegal null argument");

        if (env == null)

            env = Collections.emptyMap();

        this.rmiServer = rmiServer;

        this.connectionId = connectionId;

        this.defaultClassLoader = defaultClassLoader;

        this.subjectDelegator = new SubjectDelegator();

        this.subject = subject;

        if (subject == null) {

            this.acc = null;

            this.removeCallerContext = false;

        } else {

            this.removeCallerContext =

                SubjectDelegator.checkRemoveCallerContext(subject);

            if (this.removeCallerContext) {

                this.acc =

                    JMXSubjectDomainCombiner.getDomainCombinerContext(subject);

            } else {

                this.acc =

                    JMXSubjectDomainCombiner.getContext(subject);

            }

        }

        this.mbeanServer = rmiServer.getMBeanServer();

        final ClassLoader dcl = defaultClassLoader;

        this.classLoaderWithRepository =

            AccessController.doPrivileged(

                new PrivilegedAction<ClassLoaderWithRepository>() {

                    public ClassLoaderWithRepository run() {

                        return new ClassLoaderWithRepository(

                                      mbeanServer.getClassLoaderRepository(),

                                      dcl);

                    }

                },

                withPermissions( new MBeanPermission("*", "getClassLoaderRepository"),

                                 new RuntimePermission("createClassLoader"))

            );

        this.defaultContextClassLoader =

            AccessController.doPrivileged(

                new PrivilegedAction<ClassLoader>() {

            @Override

                    public ClassLoader run() {

                        return new CombinedClassLoader(Thread.currentThread().getContextClassLoader(),

                                dcl);

                    }

                });

        serverCommunicatorAdmin = new

          RMIServerCommunicatorAdmin(EnvHelp.getServerConnectionTimeout(env));

        this.env = env;

    }

    private static AccessControlContext withPermissions(Permission ... perms){

        Permissions col = new Permissions();

        for (Permission thePerm : perms ) {

            col.add(thePerm);

        }

        final ProtectionDomain pd = new ProtectionDomain(null, col);

        return new AccessControlContext( new ProtectionDomain[] { pd });

    }

    private synchronized ServerNotifForwarder getServerNotifFwd() {

        // Lazily created when first use. Mainly when

        // addNotificationListener is first called.

        if (serverNotifForwarder == null)

            serverNotifForwarder =

                new ServerNotifForwarder(mbeanServer,

                                         env,

                                         rmiServer.getNotifBuffer(),

                                         connectionId);

        return serverNotifForwarder;

    }

    public String getConnectionId() throws IOException {

        // We should call reqIncomming() here... shouldn't we?

        return connectionId;

    }

    public void close() throws IOException {

        final boolean debug = logger.debugOn();

        final String  idstr = (debug?"["+this.toString()+"]":null);

        synchronized (this) {

            if (terminated) {

                if (debug) logger.debug("close",idstr + " already terminated.");

                return;

            }

            if (debug) logger.debug("close",idstr + " closing.");

            terminated = true;

            if (serverCommunicatorAdmin != null) {

                serverCommunicatorAdmin.terminate();

            }

            if (serverNotifForwarder != null) {

                serverNotifForwarder.terminate();

            }

        }

        rmiServer.clientClosed(this);

        if (debug) logger.debug("close",idstr + " closed.");

    }

    public void unreferenced() {

        logger.debug("unreferenced", "called");

        try {

            close();

            logger.debug("unreferenced", "done");

        } catch (IOException e) {

            logger.fine("unreferenced", e);

        }

    }

    //-------------------------------------------------------------------------

    // MBeanServerConnection Wrapper

    //-------------------------------------------------------------------------

    public ObjectInstance createMBean(String className,

                                      ObjectName name,

                                      Subject delegationSubject)

        throws

        ReflectionException,

        InstanceAlreadyExistsException,

        MBeanRegistrationException,

        MBeanException,

        NotCompliantMBeanException,

        IOException {

        try {

            final Object params[] =

                new Object[] { className, name };

            if (logger.debugOn())

                logger.debug("createMBean(String,ObjectName)",

                             "connectionId=" + connectionId +", className=" +

                             className+", name=" + name);

            return (ObjectInstance)

                doPrivilegedOperation(

                  CREATE_MBEAN,

                  params,

                  delegationSubject);

        } catch (PrivilegedActionException pe) {

            Exception e = extractException(pe);

            if (e instanceof ReflectionException)

                throw (ReflectionException) e;

            if (e instanceof InstanceAlreadyExistsException)

                throw (InstanceAlreadyExistsException) e;

            if (e instanceof MBeanRegistrationException)

                throw (MBeanRegistrationException) e;

            if (e instanceof MBeanException)

                throw (MBeanException) e;

            if (e instanceof NotCompliantMBeanException)

                throw (NotCompliantMBeanException) e;

            if (e instanceof IOException)

                throw (IOException) e;

            throw newIOException("Got unexpected server exception: " + e, e);

        }

    }

    public ObjectInstance createMBean(String className,

                                      ObjectName name,

                                      ObjectName loaderName,

                                      Subject delegationSubject)

        throws

        ReflectionException,

        InstanceAlreadyExistsException,

        MBeanRegistrationException,

        MBeanException,

        NotCompliantMBeanException,

        InstanceNotFoundException,

        IOException {

        try {

            final Object params[] =

                new Object[] { className, name, loaderName };

            if (logger.debugOn())

                logger.debug("createMBean(String,ObjectName,ObjectName)",

                      "connectionId=" + connectionId

                      +", className=" + className

                      +", name=" + name

                      +", loaderName=" + loaderName);

            return (ObjectInstance)

                doPrivilegedOperation(

                  CREATE_MBEAN_LOADER,

                  params,

                  delegationSubject);

        } catch (PrivilegedActionException pe) {

            Exception e = extractException(pe);

            if (e instanceof ReflectionException)

                throw (ReflectionException) e;

            if (e instanceof InstanceAlreadyExistsException)

                throw (InstanceAlreadyExistsException) e;

            if (e instanceof MBeanRegistrationException)

                throw (MBeanRegistrationException) e;

            if (e instanceof MBeanException)

                throw (MBeanException) e;

            if (e instanceof NotCompliantMBeanException)

                throw (NotCompliantMBeanException) e;

            if (e instanceof InstanceNotFoundException)

                throw (InstanceNotFoundException) e;

            if (e instanceof IOException)

                throw (IOException) e;

            throw newIOException("Got unexpected server exception: " + e, e);

        }

    }

    @SuppressWarnings("rawtypes")  // MarshalledObject

    public ObjectInstance createMBean(String className,

                                      ObjectName name,

                                      MarshalledObject params,

                                      String signature[],

                                      Subject delegationSubject)

        throws

        ReflectionException,

        InstanceAlreadyExistsException,

        MBeanRegistrationException,

        MBeanException,

        NotCompliantMBeanException,

        IOException {

        final Object[] values;

        final boolean debug = logger.debugOn();

        if (debug) logger.debug(

                  "createMBean(String,ObjectName,Object[],String[])",

                  "connectionId=" + connectionId

                  +", unwrapping parameters using classLoaderWithRepository.");

        values =

            nullIsEmpty(unwrap(params, classLoaderWithRepository, Object[].class));

        try {

            final Object params2[] =

                new Object[] { className, name, values,

                               nullIsEmpty(signature) };

            if (debug)

               logger.debug("createMBean(String,ObjectName,Object[],String[])",

                             "connectionId=" + connectionId

                             +", className=" + className

                             +", name=" + name

                             +", params=" + objects(values)

                             +", signature=" + strings(signature));

            return (ObjectInstance)

                doPrivilegedOperation(

                  CREATE_MBEAN_PARAMS,

                  params2,

                  delegationSubject);

        } catch (PrivilegedActionException pe) {

            Exception e = extractException(pe);

            if (e instanceof ReflectionException)

                throw (ReflectionException) e;

            if (e instanceof InstanceAlreadyExistsException)

                throw (InstanceAlreadyExistsException) e;

            if (e instanceof MBeanRegistrationException)

                throw (MBeanRegistrationException) e;

            if (e instanceof MBeanException)

                throw (MBeanException) e;

            if (e instanceof NotCompliantMBeanException)

                throw (NotCompliantMBeanException) e;

            if (e instanceof IOException)

                throw (IOException) e;

            throw newIOException("Got unexpected server exception: " + e, e);

        }

    }

    @SuppressWarnings("rawtypes")  // MarshalledObject

    public ObjectInstance createMBean(String className,

                                 ObjectName name,

                                 ObjectName loaderName,

                                 MarshalledObject params,

                                 String signature[],

                                 Subject delegationSubject)

        throws

        ReflectionException,

        InstanceAlreadyExistsException,

        MBeanRegistrationException,

        MBeanException,

        NotCompliantMBeanException,

        InstanceNotFoundException,

        IOException {

        final Object[] values;

        final boolean debug = logger.debugOn();

        if (debug) logger.debug(

                 "createMBean(String,ObjectName,ObjectName,Object[],String[])",

                 "connectionId=" + connectionId

                 +", unwrapping params with MBean extended ClassLoader.");

        values = nullIsEmpty(unwrap(params,

                                    getClassLoader(loaderName),

                                    defaultClassLoader,

                                    Object[].class));

        try {

            final Object params2[] =

               new Object[] { className, name, loaderName, values,

                              nullIsEmpty(signature) };

           if (debug) logger.debug(

                 "createMBean(String,ObjectName,ObjectName,Object[],String[])",

                 "connectionId=" + connectionId

                 +", className=" + className

                 +", name=" + name

                 +", loaderName=" + loaderName

                 +", params=" + objects(values)

                 +", signature=" + strings(signature));

            return (ObjectInstance)

                doPrivilegedOperation(

                  CREATE_MBEAN_LOADER_PARAMS,

                  params2,

                  delegationSubject);

        } catch (PrivilegedActionException pe) {

            Exception e = extractException(pe);

            if (e instanceof ReflectionException)

                throw (ReflectionException) e;

            if (e instanceof InstanceAlreadyExistsException)

                throw (InstanceAlreadyExistsException) e;

            if (e instanceof MBeanRegistrationException)

                throw (MBeanRegistrationException) e;

            if (e instanceof MBeanException)

                throw (MBeanException) e;

            if (e instanceof NotCompliantMBeanException)

                throw (NotCompliantMBeanException) e;

            if (e instanceof InstanceNotFoundException)

                throw (InstanceNotFoundException) e;

            if (e instanceof IOException)

                throw (IOException) e;

            throw newIOException("Got unexpected server exception: " + e, e);

        }

    }

    public void unregisterMBean(ObjectName name, Subject delegationSubject)

        throws

        InstanceNotFoundException,

        MBeanRegistrationException,

        IOException {

        try {

            final Object params[] = new Object[] { name };

            if (logger.debugOn()) logger.debug("unregisterMBean",

                 "connectionId=" + connectionId

                 +", name="+name);

            doPrivilegedOperation(

              UNREGISTER_MBEAN,

              params,

              delegationSubject);

        } catch (PrivilegedActionException pe) {

            Exception e = extractException(pe);

            if (e instanceof InstanceNotFoundException)

                throw (InstanceNotFoundException) e;

            if (e instanceof MBeanRegistrationException)

                throw (MBeanRegistrationException) e;

            if (e instanceof IOException)

                throw (IOException) e;

            throw newIOException("Got unexpected server exception: " + e, e);

        }

    }

    public ObjectInstance getObjectInstance(ObjectName name,

                                            Subject delegationSubject)

        throws

        InstanceNotFoundException,

        IOException {

        checkNonNull("ObjectName", name);

        try {

            final Object params[] = new Object[] { name };

            if (logger.debugOn()) logger.debug("getObjectInstance",

                 "connectionId=" + connectionId

                 +", name="+name);

            return (ObjectInstance)

                doPrivilegedOperation(

                  GET_OBJECT_INSTANCE,

                  params,

                  delegationSubject);

        } catch (PrivilegedActionException pe) {

            Exception e = extractException(pe);

            if (e instanceof InstanceNotFoundException)

                throw (InstanceNotFoundException) e;

            if (e instanceof IOException)

                throw (IOException) e;

            throw newIOException("Got unexpected server exception: " + e, e);

        }

    }

    @SuppressWarnings("rawtypes")  // MarshalledObject

    public Set<ObjectInstance>

        queryMBeans(ObjectName name,

                    MarshalledObject query,

                    Subject delegationSubject)

        throws IOException {

        final QueryExp queryValue;

        final boolean debug=logger.debugOn();

        if (debug) logger.debug("queryMBeans",