MDS/openide
1
0
Fork 0
mirror of https://gitflic.ru/project/openide/openide.git synced 2026-09-27 10:03:11 +07:00
Code Issues Packages Projects Releases Wiki Activity

[platform] less convoluted cache built-in web server token cache (IJ-CR-157731)

Browse Source 
GitOrigin-RevId: 17f7557c9b3270b177cf5dd0051c94f90867965f
This commit is contained in:
Roman Shevchenko
2025-03-18 15:18:16 +00:00
committed by intellij-monorepo-bot
parent f348f0ecb1
commit aff90a04d1
1 changed files with 6 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
platform/built-in-server/src/org/jetbrains/builtInWebServer/BuiltInWebServerAuth.kt
+6 -15
View File
@@ -1,4 +1,4 @@
// Copyright 2000-2024 JetBrains s.r.o. and contributors. Use of this source code is governed by the Apache 2.0 license.
// Copyright 2000-2025 JetBrains s.r.o. and contributors. Use of this source code is governed by the Apache 2.0 license.
package org.jetbrains.builtInWebServer
import com.github.benmanes.caffeine.cache.Caffeine
@@ -55,19 +55,10 @@ class BuiltInWebServerAuth {
}
// expire after access because we reuse tokens
private val tokens = Caffeine.newBuilder().expireAfterAccess(1, TimeUnit.MINUTES).build<String, Boolean>()
private val TOKEN_KEY = object : Any() { }
private val tokens = Caffeine.newBuilder().expireAfterAccess(1, TimeUnit.MINUTES).build<Any, String>()
fun acquireToken(): String {
var token = tokens.asMap().keys.firstOrNull()
if (token == null) {
token = DigestUtil.randomToken()
tokens.put(token, true)
} else {
// Update token's access time
tokens.getIfPresent(token)
}
return token
}
fun acquireToken(): String = tokens.get(TOKEN_KEY) { DigestUtil.randomToken() }
internal fun validateToken(request: HttpRequest): HttpHeaders? {
if (BuiltInServerOptions.getInstance().allowUnsignedRequests) {
@@ -103,7 +94,7 @@ class BuiltInWebServerAuth {
?: QueryStringDecoder(request.uri()).parameters()[TOKEN_PARAM_NAME]?.firstOrNull()
?: request.referrer?.let { QueryStringDecoder(it).parameters()[TOKEN_PARAM_NAME]?.firstOrNull() }
// we don't invalidate the token, allowing making further requests with it (required for `DocumentationComponent`)
return token != null && tokens.getIfPresent(token) != null
// we renew the token, allowing making further requests with it (required for `DocumentationComponent`)
return token != null && tokens.getIfPresent(TOKEN_KEY) == token
}
}