in geronimo-connector/src/main/java/org/apache/geronimo/connector/outbound/SubjectInterceptor.java [42:90]
public void getConnection(ConnectionInfo connectionInfo) throws ResourceException {
Subject currentSubject = null;
if (!connectionInfo.isApplicationManagedSecurity()) {
try {
currentSubject = subjectSource.getSubject();
} catch (SecurityException e) {
throw new ResourceException("Can not obtain Subject for login", e);
}
if (currentSubject == null) {
throw new ResourceException("No subject for container managed security");
}
}
ManagedConnectionInfo originalManagedConnectionInfo = connectionInfo.getManagedConnectionInfo();
//No existing managed connection, get an appropriate one and return.
if (originalManagedConnectionInfo.getManagedConnection() == null) {
originalManagedConnectionInfo.setSubject(currentSubject);
next.getConnection(connectionInfo);
} else {
Subject oldSubject = originalManagedConnectionInfo.getSubject();
if (currentSubject == null ? oldSubject != null : !currentSubject.equals(oldSubject)) {
if (connectionInfo.isUnshareable()) {
throw new ApplicationServerInternalException("Unshareable resource is attempting to change security context: expected request under: " + oldSubject + ", received request under: " + currentSubject);
} else {
//existing managed connection, wrong subject: must re-associate.
//make a ConnectionInfo to process removing the handle from the old mc
ConnectionInfo returningConnectionInfo = new ConnectionInfo();
returningConnectionInfo.setManagedConnectionInfo(originalManagedConnectionInfo);
//This should decrement handle count, but not close the handle, when returnConnection is called
//I'm not sure how to test/assure this.
returningConnectionInfo.setConnectionHandle(connectionInfo.getConnectionHandle());
//make a new ManagedConnectionInfo for the mc we will ask for
ManagedConnectionInfo newManagedConnectionInfo =
new ManagedConnectionInfo(
originalManagedConnectionInfo.getManagedConnectionFactory(),
originalManagedConnectionInfo.getConnectionRequestInfo());
newManagedConnectionInfo.setSubject(currentSubject);
connectionInfo.setManagedConnectionInfo(newManagedConnectionInfo);
next.getConnection(connectionInfo);
//process the removal of the handle from the previous mc
returnConnection(returningConnectionInfo, ConnectionReturnAction.RETURN_HANDLE);
}
} else {
//otherwise, the current ManagedConnection matches the security info, we keep it.
//set up the tx context
next.getConnection(connectionInfo);
}
}
}