StatefulAPIRequest.h

#ifndef TENDUKE_SE_STATEFULAPIREQUEST_H
#define TENDUKE_SE_STATEFULAPIREQUEST_H
 
#include "./APIRequest.h"
#include "http/Unauthorized.h"
#include "log/log.h"
#include "oidc/session/OIDCSession.h"
 
#include <memory>
 
namespace tenduke { namespace se {

template<class R>
class StatefulAPIRequest : public ::tenduke::se::APIRequest<R>
{
public:
    StatefulAPIRequest(
            const std::shared_ptr<::tenduke::se::APIRequest<R>> &request,
            const std::shared_ptr<::tenduke::oidc::OIDCSession> &oidc
    ) : request(request)
      , oidc(oidc)
    {}
 
public:
    R execute() override
    {
        // Sanity check: We need OIDCSession service.
        // The client can be bootstrapped without OIDCSession when using only license keys
        if (oidc == nullptr) {
            return request->execute();
        }
 
        // Check that the local OIDC session is still valid.
        // If the session has expired, this refreshes or re-logins the user
        ::tenduke::log::debug("StatefulAPIRequest::execute() ensuring valid session ...");
        oidc->ensureValidSession();
 
        ::tenduke::log::debug("StatefulAPIRequest::execute() ...executing the request ...");
 
        try {
            R response = request->execute();
            ::tenduke::log::debug("StatefulAPIRequest::execute() ... success");
 
            return response;
        }
        // The call might fail with HTTP 401 Unauthorized (for example if the admin user has invalidated the
        // OIDC session in the backend), even if we earlier thought the session was valid.
        // In that case, we re-establish the session (either with refresh or with re-login) and then
        // re-execute the request. If the request still fails with HTTP 401, then here is nothing we can do
        // automatically and the exception is thrown.
        catch (::tenduke::se::http::Unauthorized &e) {
            ::tenduke::log::warning("StatefulAPIRequest::execute() ... got HTTP 401, re-establishing OIDC-session ...");
            oidc->reEstablish();
 
            ::tenduke::log::info("StatefulAPIRequest::execute() ... OIDC session re-established. Re-executing original request ...");
            R response = request->execute();
 
            ::tenduke::log::info("StatefulAPIRequest::execute() ... success.");
 
            return response;
        }
    }
 
private:
    const std::shared_ptr<::tenduke::se::APIRequest<R>> request;
    const std::shared_ptr<::tenduke::oidc::OIDCSession> oidc;
};
 
}}
#endif //TENDUKE_SE_STATEFULAPIREQUEST_H