| // Copyright 2022 The Bazel Authors. All rights reserved. |
| // |
| // Licensed under the Apache License, Version 2.0 (the "License"); |
| // you may not use this file except in compliance with the License. |
| // You may obtain a copy of the License at |
| // |
| // http://www.apache.org/licenses/LICENSE-2.0 |
| // |
| // Unless required by applicable law or agreed to in writing, software |
| // distributed under the License is distributed on an "AS IS" BASIS, |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| // See the License for the specific language governing permissions and |
| // limitations under the License. |
| |
| package com.google.devtools.build.lib.authandtls.credentialhelper; |
| |
| import com.github.benmanes.caffeine.cache.Cache; |
| import com.github.benmanes.caffeine.cache.Caffeine; |
| import com.google.common.collect.ImmutableList; |
| import com.google.common.collect.ImmutableMap; |
| import com.google.devtools.build.lib.authandtls.AuthAndTLSOptions; |
| import com.google.devtools.build.lib.runtime.BlazeModule; |
| import com.google.devtools.build.lib.runtime.CommandEnvironment; |
| import java.net.URI; |
| import java.time.Duration; |
| |
| /** A module whose sole purpose is to hold the credential cache which is shared by other modules. */ |
| public class CredentialModule extends BlazeModule { |
| private final Cache<URI, ImmutableMap<String, ImmutableList<String>>> credentialCache = |
| Caffeine.newBuilder().expireAfterWrite(Duration.ZERO).build(); |
| |
| /** Returns the credential cache. */ |
| public Cache<URI, ImmutableMap<String, ImmutableList<String>>> getCredentialCache() { |
| return credentialCache; |
| } |
| |
| @Override |
| public void beforeCommand(CommandEnvironment env) { |
| // Update the cache expiration policy according to the command options. |
| AuthAndTLSOptions authAndTlsOptions = env.getOptions().getOptions(AuthAndTLSOptions.class); |
| credentialCache |
| .policy() |
| .expireAfterWrite() |
| .get() |
| .setExpiresAfter(authAndTlsOptions.credentialHelperCacheTimeout); |
| |
| // Clear the cache on clean. |
| if (env.getCommand().name().equals("clean")) { |
| credentialCache.invalidateAll(); |
| } |
| } |
| } |