| | | 1 | | using Microsoft.Extensions.Logging; |
| | | 2 | | using System.Runtime.CompilerServices; |
| | | 3 | | using System.Text.Json; |
| | | 4 | | using System.Text.Json.Serialization.Metadata; |
| | | 5 | | |
| | | 6 | | namespace AsyncResponse.Channels.MongoDB; |
| | | 7 | | |
| | | 8 | | /// <summary> |
| | | 9 | | /// MongoDB implementation of <see cref="IRecoveryStateStore"/> and |
| | | 10 | | /// <see cref="IRecoveryStateScanner"/>. Entries live in a TTL-indexed collection, so MongoDB itself |
| | | 11 | | /// reaps expired registrations. |
| | | 12 | | /// </summary> |
| | 383 | 13 | | internal sealed class MongoDbRecoveryStateStore( |
| | 383 | 14 | | MongoDbChannelStore _store, |
| | 383 | 15 | | ILogger<MongoDbRecoveryStateStore> _logger) : IRecoveryStateStore, IRecoveryStateScanner |
| | | 16 | | { |
| | | 17 | | /// <inheritdoc /> |
| | | 18 | | public async Task SaveAsync(string correlationId, RecoveryState state, TimeSpan ttl, CancellationToken cancellationT |
| | | 19 | | { |
| | 393 | 20 | | ArgumentException.ThrowIfNullOrWhiteSpace(correlationId); |
| | 393 | 21 | | ArgumentNullException.ThrowIfNull(state); |
| | 393 | 22 | | if (ttl <= TimeSpan.Zero) |
| | 2 | 23 | | throw new ArgumentOutOfRangeException(nameof(ttl), "TTL must be greater than zero."); |
| | 391 | 24 | | if (!string.Equals(state.CorrelationId, correlationId, StringComparison.Ordinal)) |
| | 4 | 25 | | throw new ArgumentException("The recovery-state correlation id must match the store key.", nameof(state)); |
| | 387 | 26 | | if (state.SchemaVersion != RecoveryStateSchema.Current) |
| | 2 | 27 | | throw new ArgumentException("The recovery state must use the current schema version.", nameof(state)); |
| | | 28 | | |
| | 385 | 29 | | cancellationToken.ThrowIfCancellationRequested(); |
| | 385 | 30 | | if (state.RegistrationId == Guid.Empty) |
| | 3 | 31 | | state.RegistrationId = Guid.NewGuid(); |
| | | 32 | | |
| | 385 | 33 | | await _store.SaveRecoveryStateAsync(correlationId, state, ttl, cancellationToken).ConfigureAwait(false); |
| | 385 | 34 | | } |
| | | 35 | | |
| | | 36 | | /// <inheritdoc /> |
| | | 37 | | public async Task<IReadOnlyList<RecoveryState>> GetAllAsync(string correlationId, CancellationToken cancellationToke |
| | | 38 | | { |
| | 33 | 39 | | ArgumentException.ThrowIfNullOrWhiteSpace(correlationId); |
| | 33 | 40 | | cancellationToken.ThrowIfCancellationRequested(); |
| | | 41 | | |
| | 33 | 42 | | var jsonStates = await _store.LoadRecoveryStatesAsync(correlationId, cancellationToken).ConfigureAwait(false); |
| | 33 | 43 | | return DeserializeStates(jsonStates, correlationId); |
| | 31 | 44 | | } |
| | | 45 | | |
| | | 46 | | /// <inheritdoc /> |
| | | 47 | | public Task<bool> TryDeleteAsync(string correlationId, Guid registrationId, CancellationToken cancellationToken = de |
| | | 48 | | { |
| | 387 | 49 | | ArgumentException.ThrowIfNullOrWhiteSpace(correlationId); |
| | 387 | 50 | | if (registrationId == Guid.Empty) |
| | 2 | 51 | | throw new ArgumentException("Registration id cannot be empty.", nameof(registrationId)); |
| | 385 | 52 | | cancellationToken.ThrowIfCancellationRequested(); |
| | 385 | 53 | | return _store.DeleteRecoveryStateAsync(correlationId, registrationId, cancellationToken); |
| | | 54 | | } |
| | | 55 | | |
| | | 56 | | /// <inheritdoc /> |
| | | 57 | | public async IAsyncEnumerable<RecoveryState> ScanAsync([EnumeratorCancellation] CancellationToken cancellationToken |
| | | 58 | | { |
| | 4 | 59 | | await foreach (var json in _store.ScanRecoveryStateJsonAsync(cancellationToken).ConfigureAwait(false)) |
| | | 60 | | { |
| | 1 | 61 | | var ignored = 0; |
| | 1 | 62 | | var state = DeserializeState(json, correlationId: null, ref ignored); |
| | 1 | 63 | | if (state is not null) |
| | 1 | 64 | | yield return state; |
| | | 65 | | } |
| | 1 | 66 | | } |
| | | 67 | | |
| | | 68 | | private IReadOnlyList<RecoveryState> DeserializeStates(IReadOnlyList<string> jsonStates, string correlationId) |
| | | 69 | | { |
| | 33 | 70 | | if (jsonStates.Count == 0) |
| | 15 | 71 | | return []; |
| | | 72 | | |
| | 18 | 73 | | var states = new List<RecoveryState>(jsonStates.Count); |
| | 18 | 74 | | var unreadable = 0; |
| | 72 | 75 | | foreach (var json in jsonStates) |
| | | 76 | | { |
| | 18 | 77 | | var state = DeserializeState(json, correlationId, ref unreadable); |
| | 18 | 78 | | if (state is not null) |
| | 16 | 79 | | states.Add(state); |
| | | 80 | | } |
| | | 81 | | |
| | | 82 | | // Rows existed and none of them survived materialization. Returning an empty list here told |
| | | 83 | | // the dispatcher "no recovery callback was ever armed", which it answers by acknowledging |
| | | 84 | | // the response — so a corrupt or newer-schema registration silently consumed a terminal |
| | | 85 | | // response its callback never saw. Fail instead, and let redelivery reach a build that can |
| | | 86 | | // read it. A PARTIALLY readable batch deliberately does not throw: see |
| | | 87 | | // RecoveryStateUnreadableException. |
| | | 88 | | // Only rows this build could not INTERPRET count. A row rejected for belonging to another |
| | | 89 | | // correlation id is perfectly readable — it surfaced because a legacy case-insensitive |
| | | 90 | | // collation matched the wrong key, and refusing it is the ordinal re-check doing its job. |
| | | 91 | | // For the id actually asked about, that is absence, not corruption, and absence must stay |
| | | 92 | | // an empty list. |
| | 18 | 93 | | if (states.Count == 0 && unreadable > 0) |
| | 2 | 94 | | throw new RecoveryStateUnreadableException(correlationId, unreadable); |
| | | 95 | | |
| | 16 | 96 | | return states; |
| | | 97 | | } |
| | | 98 | | |
| | | 99 | | /// <summary>The registration's metadata off the library's resolver — case-sensitive matching, as before.</summary> |
| | 3 | 100 | | private static readonly JsonTypeInfo<RecoveryState> _stateTypeInfo = |
| | 3 | 101 | | AsyncResponseJson.GetTypeInfo<RecoveryState>(AsyncResponseJson.Default); |
| | | 102 | | |
| | | 103 | | private RecoveryState? DeserializeState(string json, string? correlationId, ref int unreadable) |
| | | 104 | | { |
| | | 105 | | try |
| | | 106 | | { |
| | | 107 | | // Through JsonSafety, not the raw reader: the exception logged below is the body-free |
| | | 108 | | // rebuild (size and position). The reader's own appends `Path: $.Context['<key>']` |
| | | 109 | | // built from the stored registration's context keys — tenant and auth baggage — which |
| | | 110 | | // the warning then carried into the application log. |
| | 37 | 111 | | var state = JsonSafety.SafeDeserialize(json, _stateTypeInfo); |
| | 30 | 112 | | if (state is null) |
| | | 113 | | { |
| | 2 | 114 | | unreadable++; |
| | 2 | 115 | | return null; |
| | | 116 | | } |
| | | 117 | | |
| | 28 | 118 | | if (state.RegistrationId == Guid.Empty || string.IsNullOrWhiteSpace(state.CorrelationId)) |
| | | 119 | | { |
| | 4 | 120 | | _logger.LogWarning( |
| | 4 | 121 | | "MongoDB recovery state for correlationId {CorrelationId} has an incomplete identity; rejecting it." |
| | 4 | 122 | | correlationId ?? state.CorrelationId); |
| | 4 | 123 | | unreadable++; |
| | 4 | 124 | | return null; |
| | | 125 | | } |
| | | 126 | | |
| | 24 | 127 | | if (!RecoveryStateSchema.IsReadable(state.SchemaVersion)) |
| | | 128 | | { |
| | 1 | 129 | | _logger.LogWarning( |
| | 1 | 130 | | "MongoDB recovery state for correlationId {CorrelationId} has unsupported schema version {SchemaVers |
| | 1 | 131 | | correlationId ?? state.CorrelationId, |
| | 1 | 132 | | state.SchemaVersion, |
| | 1 | 133 | | RecoveryStateSchema.Current); |
| | 1 | 134 | | unreadable++; |
| | 1 | 135 | | return null; |
| | | 136 | | } |
| | | 137 | | |
| | 23 | 138 | | if (!string.IsNullOrWhiteSpace(correlationId) |
| | 23 | 139 | | && !string.Equals(state.CorrelationId, correlationId, StringComparison.Ordinal)) |
| | | 140 | | { |
| | 4 | 141 | | _logger.LogWarning( |
| | 4 | 142 | | "MongoDB recovery state has correlationId {StoredCorrelationId}, expected {CorrelationId}; rejecting |
| | 4 | 143 | | state.CorrelationId, correlationId); |
| | 4 | 144 | | return null; |
| | | 145 | | } |
| | | 146 | | |
| | 19 | 147 | | return state; |
| | | 148 | | } |
| | 7 | 149 | | catch (Exception ex) when (ex is JsonException or InvalidDataException) |
| | | 150 | | { |
| | 7 | 151 | | _logger.LogWarning(ex, "Unreadable MongoDB recovery state for correlationId {CorrelationId}; skipping.", cor |
| | 7 | 152 | | unreadable++; |
| | 7 | 153 | | return null; |
| | | 154 | | } |
| | 37 | 155 | | } |
| | | 156 | | } |