add indexer option to specify bearer token for API calls

fixes #3398

Author: Vladimir Kotal

opengrok-indexer/src/main/java/org/opengrok/indexer/configuration/Configuration.java

@@ -304,6 +304,7 @@ public final class Configuration {
     private Set<String> disabledRepositories;
 
     private Set<String> authenticationTokens; // for non-localhost API access
+    private String indexerAuthenticationToken;
 
     /*
      * types of handling history for remote SCM repositories:
@@ -1347,6 +1348,14 @@ public void setAuthenticationTokens(Set<String> tokens) {
         this.authenticationTokens = tokens;
     }
 
+    public String getIndexerAuthenticationToken() {
+        return indexerAuthenticationToken;
+    }
+
+    public void setIndexerAuthenticationToken(String token) {
+        this.indexerAuthenticationToken = token;
+    }
+
     /**
      * Write the current configuration to a file.
      *

opengrok-indexer/src/main/java/org/opengrok/indexer/configuration/RuntimeEnvironment.java

@@ -24,6 +24,7 @@
 package org.opengrok.indexer.configuration;
 
 import static org.opengrok.indexer.configuration.Configuration.makeXMLStringAsConfiguration;
+import static org.opengrok.indexer.index.IndexerUtil.getHeaders;
 
 import java.io.File;
 import java.io.FileNotFoundException;
@@ -1418,6 +1419,7 @@ public void writeConfiguration(String host) throws IOException {
                 .path("configuration")
                 .queryParam("reindex", true)
                 .request()
+                .headers(getHeaders())
                 .put(Entity.xml(configXML));
 
         if (r.getStatusInfo().getFamily() != Response.Status.Family.SUCCESSFUL) {
@@ -1444,6 +1446,7 @@ public void signalTorefreshSearcherManagers(List<String> subFiles, String host)
                     .path("system")
                     .path("refresh")
                     .request()
+                    .headers(getHeaders())
                     .put(Entity.text(project));
 
             if (r.getStatusInfo().getFamily() != Response.Status.Family.SUCCESSFUL) {
@@ -1948,6 +1951,14 @@ private int getMessageLimit() {
         return syncReadConfiguration(Configuration::getMessageLimit);
     }
 
+    public String getIndexerAuthenticationToken() {
+        return syncReadConfiguration(Configuration::getIndexerAuthenticationToken);
+    }
+
+    public void setIndexerAuthenticationToken(String token) {
+        syncWriteConfiguration(token, Configuration::setIndexerAuthenticationToken);
+    }
+
     public Set<String> getAuthenticationTokens() {
         return Collections.unmodifiableSet(syncReadConfiguration(Configuration::getAuthenticationTokens));
     }

opengrok-indexer/src/main/java/org/opengrok/indexer/index/IndexDatabase.java

@@ -104,6 +104,8 @@
 import org.opengrok.indexer.util.TandemPath;
 import org.opengrok.indexer.web.Util;
 
+import static org.opengrok.indexer.index.IndexerUtil.getHeaders;
+
 /**
  * This class is used to create / update the index databases. Currently we use
  * one index database per project.
@@ -376,6 +378,7 @@ private void markProjectIndexed(Project project) {
                     .path(Util.URIEncode(project.getName()))
                     .path("indexed")
                     .request()
+                    .headers(getHeaders())
                     .put(Entity.text(""));
         } catch (RuntimeException e) {
             LOGGER.log(Level.WARNING, String.format("Couldn''t notify the webapp that project %s was indexed",

opengrok-indexer/src/main/java/org/opengrok/indexer/index/Indexer.java

@@ -750,6 +750,23 @@ public static String[] parseOptions(String[] argv) throws ParseException {
                     "stylesheet. The factory-setting is: \"default\".").execute(stylePath ->
                     cfg.setWebappLAF((String) stylePath));
 
+            parser.on("--token", "=string|@file_with_string",
+                    "Authorization bearer API token to use when making API calls",
+                    "to the web application").
+                    execute(optarg -> {
+                        String value = ((String) optarg).trim();
+                        if (value.startsWith("@")) {
+                            try {
+                                String token = new String(Files.readAllBytes(Path.of(value))).trim();
+                                cfg.setIndexerAuthenticationToken(token);
+                            } catch (IOException e) {
+                                die("Failed to read from " + value);
+                            }
+                        } else {
+                            cfg.setIndexerAuthenticationToken(value);
+                        }
+                    });
+
             parser.on("-T", "--threads", "=number", Integer.class,
                     "The number of threads to use for index generation, repository scan",
                     "and repository invalidation.",

opengrok-indexer/src/main/java/org/opengrok/indexer/index/IndexerUtil.java

@@ -22,19 +22,37 @@
  */
 package org.opengrok.indexer.index;
 
+import org.opengrok.indexer.configuration.RuntimeEnvironment;
+
 import javax.ws.rs.ProcessingException;
 import javax.ws.rs.WebApplicationException;
 import javax.ws.rs.client.ClientBuilder;
 import javax.ws.rs.client.Entity;
 import javax.ws.rs.client.Invocation;
 import javax.ws.rs.client.ResponseProcessingException;
+import javax.ws.rs.core.HttpHeaders;
+import javax.ws.rs.core.MultivaluedHashMap;
+import javax.ws.rs.core.MultivaluedMap;
 import javax.ws.rs.core.Response;
 
-class IndexerUtil {
+public class IndexerUtil {
 
     private IndexerUtil() {
     }
 
+    /**
+     * @return map of HTTP headers to use when making API requests to the web application
+     */
+    public static MultivaluedMap<String, Object> getHeaders() {
+        MultivaluedMap<String, Object> headers = new MultivaluedHashMap<>();
+        String token = null;
+        if ((token = RuntimeEnvironment.getInstance().getIndexerAuthenticationToken()) != null) {
+            headers.add(HttpHeaders.AUTHORIZATION, "Bearer " + token);
+        }
+
+        return headers;
+    }
+
     /**
      * Enable projects in the remote host application.
      * <p>
@@ -56,7 +74,8 @@ public static void enableProjects(final String host) throws
                                                         .path("v1")
                                                         .path("configuration")
                                                         .path("projectsEnabled")
-                                                        .request();
+                                                        .request()
+                                                        .headers(getHeaders());
         final String enabled = request.get(String.class);
         if (enabled == null || !Boolean.valueOf(enabled)) {
             final Response r = request.put(Entity.text(Boolean.TRUE.toString()));